Privacy for Contractors and Workers

Effective date: [date]

This notice explains what PraxysEHS LLC ("PraxysEHS," "we," "us") collects about contractor companies and their workers in PraxysEHS CM, how it's used, and the choices you have.

Two roles, depending on the information.

• Your contractor account (your company details, your worker list, and the cards and certificates you keep there): we hold this to provide the service to you, and this notice describes how.
• Records at a customer's sites (your sign-ins and sign-outs, inductions, card checks, escorts and headcounts there): we handle these on that customer's behalf and follow its instructions. The customer controls them. For questions about them, contact the customer; we'll help it respond.

What we collect

• About your company: name, address, contacts, and your certificate of insurance with its end date.
• About each worker: name, cell phone number (used to find them at lobby tablets), email if given, preferred language, and the training cards they or you upload, with the issuer and dates.
• At a customer's site: sign-in and sign-out times, the site and job, induction results and which version was shown, signatures for in-person briefings, escort records, headcount check-offs, and answers to the sign-out question about whether anything happened that day. That answer can include that someone was hurt.
• Badge photos, only if the customer's site takes them. A plain photo for the badge, never used to recognize faces, and deleted on the site's schedule (30 or 90 days).
• Technical information: like our main Privacy Policy, such as sign-in sessions and security records.

How we use it

• To run PraxysEHS CM: sending links, checking people in at lobby tablets, reminding people before cards run out, and showing customers what you've shared with them.
• To keep the service secure and working.

What we never do: sell or rent your information, list you in a directory, use it for advertising, or use photos to recognize faces.

Who we share it with

• Customers you work for, only what you share with them or what's created at their sites.
• Our service providers for hosting and email, who may use it only to provide their services to us. [List providers.]
• When the law requires it, or to protect people's safety.
• A buyer, if PraxysEHS is sold or merged, under the same promises.

How long we keep it

• Your contractor account: while it's open. When you close it, we delete it within [90] days.
• Records at a customer's sites: as long as that customer keeps them, usually at least five years, then deleted.
• Badge photos: 30 or 90 days, as the site sets.
• Backups: deleted information stays in backups for up to 90 days.

Where it's stored

With Cloudflare in eastern North America. Cloudflare's network may process requests in other locations to deliver the service quickly and securely.

Your choices and rights

• See, correct or delete. Contact us at support@praxysehs.com. A worker can ask about their own information directly. If it's part of a customer's records, we'll pass the request to that customer.
• Emails. Every reminder email has a way to turn reminders off.
• State privacy rights. Depending on where you live, you may have rights to know, access, correct or delete your personal information. We'll honor requests as your state's law requires, and won't treat you differently for making one.

Children

PraxysEHS CM is for businesses and isn't directed at children under 16. [Confirm how workers aged 16 or 17 are handled.]

Changes and contact

We'll post updates here with a new effective date, and tell contractor account owners before material changes. Questions: PraxysEHS LLC · support@praxysehs.com