Privacy Policy

Information We Collect

Information provided by you

You may provide personal information when requesting information, completing a survey, asking a question, contacting support, providing feedback, communicating by email or telephone, or becoming a customer. Depending on the interaction, we may collect:

• Name and title
• Phone number and email address
• Mailing address and time zone
• Account credentials and security responses
• Billing and payment information
• IP address
• Feedback, testimonials, comments and notes
• Customer-support inquiries

Customer-controlled data

As a service provider, DeCroux stores and processes data directed by its customers (“Customer-Controlled Data”). SpamScrutiny customers configure domain MX records to route email through the filtering service. Customers' ability to control stored and processed data is governed by the capabilities of their subscribed service, the applicable terms and relevant law.

Website visitor information

Our web servers may automatically record an IP address, browser and operating-system information, general geographic location, pages visited, referring website, visit date and time, visit duration and other information supplied by the browser. If you later provide identifying information, an IP address may connect that information with website activity.

How We Use Information

Personal information is used consistently with the context in which it was collected unless you clearly consent to another use.

Providing services

We use customer information to provide and support services, bill for service, communicate operating information, notify customers of service issues, improve the service and explain related offerings.

Customer communications

We may contact customers about billing, service issues, operational notices and new offerings. Customers can manage optional communications through available account controls or request assistance at privacy@spamscrutiny.com. Some essential service communications can only be stopped by ending the service relationship.

Prospective-customer communications

If you request information, we may follow up about our offerings. You may opt out through an unsubscribe mechanism, by replying to a message, by telling a caller you are no longer interested or by contacting privacy@spamscrutiny.com. Allow up to two business days for removal from contact lists.

Customer-Controlled Data

Customer-Controlled Data is used only according to customer instructions, subscribed-service capabilities and applicable terms. Upon request, DeCroux can provide a data-processing addendum addressing EU data-protection requirements. We apply the addendum's data-protection principles when acting as a processor, whether or not a customer elects to sign it.

Analysis and service improvement

Website activity may be used to measure advertising effectiveness, improve device and browser compatibility, detect and block malicious access, understand traffic and maintain appropriate capacity.

Cookies and third-party tracking

• Cookies. When allowed by your browser, cookies may remember preferences, referral information and sign-in status. Some portions of our websites and services may require cookies.
• Third-party analytics. We may use service providers to understand website visits. These providers may use cookies but are authorized to use collected information only to provide analytics and improve our business.

When We Disclose Information

DeCroux does not disclose personal information to third parties except in the following circumstances:

• Legal or safety reasons: when required by law, needed to protect rights, investigate fraud, respond to lawful government requests or protect personal or public safety.
• Merger or acquisition: when information must transfer to a successor that will remain bound by this policy for information collected before the transaction.
• Service providers: agents that need limited information to perform services for us and are required to provide appropriate protection.

Service providers may include PCI-compliant payment processors, customer-support providers, email and backup providers, secure colocation facilities and outsourced hosting providers.

Updating or Deleting Personal Information

Customers may be able to update information through their account controls. For information that cannot be managed there, contact privacy@spamscrutiny.com. We may deny requests when information must be retained for accounting or legal purposes, when a request is disproportionate to the privacy risk, when another person's rights would be affected or when identity cannot be confirmed.

Approved requests are normally handled within three business days and no later than 30 days. Information removed from live systems may remain in backups. When a customer is the data controller and DeCroux is only the processor, the request may be forwarded to that customer.

Data Security

We use reasonable safeguards against unauthorized access, including TLS encryption during transmission, hardware and software firewalls, and continuing employee training.

Protection of Children

Our websites and services are directed to people who are at least 13 years old. We do not knowingly collect personal information from children under 13.

Third-Party Websites

Our websites may link to independent third-party sites. Those sites maintain their own privacy practices, and we are not responsible for their content or activities.

California

The published policy states that the California Consumer Privacy Act does not apply to the current size and scale of DeCroux's operations. Nevertheless, DeCroux endeavors to honor reasonable requests consistent with the CCPA and its privacy principles.

International Data Transfers

European Union

When DeCroux processes Customer-Controlled Data protected by EU data-protection law outside a country recognized as providing adequate protection, DeCroux relies on applicable Standard Contractual Clauses. A data-processing addendum containing those clauses is available upon request.

United Kingdom

For protected data originating in the United Kingdom and processed in a country without an adequacy decision, DeCroux relies on contractual safeguards recognized under UK data-protection law. An appropriate data-processing addendum is available upon request.

Other countries

DeCroux intends to follow applicable data-protection requirements as they become relevant. Where no specific policy has been adopted, data is protected consistently with principles applied in the United States, European Union and United Kingdom.

Changes to This Policy

This policy may change from time to time. The effective date will be updated when changes are made. Continued use of our websites or services constitutes consent to the current policy.

Questions or Concerns

Email: privacy@spamscrutiny.com

Telephone: 1-855-800-3770

EU GDPR Representative

The published policy identifies the following representative for matters involving Article 27 of the EU GDPR:

art-27-rep-isparks@rickert.law

UK GDPR Representative

The published policy identifies the following representative for matters involving Article 27 of the UK GDPR:

art-27-rep-isparks@rickert-services.uk