HRCI Complaint & Disciplinary Policy HRCI Complaint & Disciplinary Form
Code of Ethical and Professional Responsibility
Effective as of April 6, 2021
PII is information that can identify a specific individual, such as, without limitation, a name, address, phone number or email address.
Why Does HRCI Collect PII?
HRCI collects PII so that it may customize your experience when you use the Services, it may improve the products that it offers to you, and that it may make you aware of information about HRCI and its products.
What PII Does HRCI Collect?
Specific examples of the types of PII HRCI may collect through the Services include:
Contact Information: HRCI may request or require contact information, such as your name, address, phone number, facsimile number, email address and date of birth when you seek access to some of the Services, register for certification or recertification examinations (“HR Certification”), and/or use the Services to make payments to HRCI or purchase HRCI Services (including, without limitation, examination preparation materials, accessories, and HR Certification applications).
Demographic Information: HRCI may collect and compile demographic data (e.g., general employment or military information such as duration of employment or service, organization, service branch, title, rank and position) when you use the Services.
Transactional Information: HRCI may create and maintain a database of aggregated information about transactions that occur when you use the Services (e.g., tool or feature (and related database) utilization, registration information, and activity, navigation or content selection data).
Financial Information: HRCI may use credit card account information you provide to facilitate payments to HRCI or purchase HRCI Services (including, without limitation, examination preparation materials, accessories and HR Certification applications).
Usage Information: HRCI may collect usage information, including but not limited to the Internet Protocol (IP) addresses from all users of the Services, as well as the date and time of access and the Services accessed. HRCI may also catalog your log-in information and the type of computer, device, browser or operating system used by the user.
Location Information: The Services and/or mobile applications utilized to access the Services on a cell phone may collect certain additional information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, available storage space, connection type (e.g. WiFi vs. cellular) and information about the way you use the application. We may also use GPS technology (or other similar technology) to determine your current location. If you do not want us to have your location information, you should turn off the location services for the mobile application and/or mobile web browser that you use to access the Services located in your account settings or in your mobile phone settings and/or within the mobile application.
Cookies are generally pieces of information, which HRCI uses for record-keeping purposes and which the Services may transfer to us and/or your computer’s Web-browser for storage on our server(s) or your computer’s hard drive.
Cookies enable HRCI to manage and/or customize your experience using the Services, including available advertisements. Cookies also make navigating the Services in a browser easier by automatically performing certain functions, such as saving your personal preferences and by providing targeted content.
How Does HRCI Use that PII?
As detailed below, HRCI uses PII to operate the Services and to provide and/or enhance certain of its features, tools and functionality. HRCI also uses PII to provide and improve the quality of the programs, solutions and services HRCI may offer or make available.
HRCI may use your contact information in connection with the provision of its services, software solutions and content and to enable you to participate in any HR Certifications, events, programs and/or offerings available through the Services, including to:
- facilitate registration or recertification for a particular HR Certification, event, program or service,
- advertise its HR Certifications, events, programs or services,
- create a personalized experience for you when using the Services,
- provide you with news and information,
- contact you regarding a survey,
- participate in volunteer activities including test development or committee activities
- assist with security or fraud prevention or response measures, and
- to get in touch with you with respect to transactions related to the Services, including material changes in HRCI’s policies and agreements.
HRCI may (i) supplement the contact information collected from you while using the Services with information about you obtained from other sources, such as, without limitation, from HRCI’s advertisers and business partners.
HRCI may (ii) engage in cross-border transfers of PII to provide or enhance our ability to provide or advertise our HR Certifications, programs, events, services, or software solutions and/or the programs, events, services, or software solutions of others, and (iii) to otherwise tailor the Services.
HRCI also may share, license, and/or sell your contact information with or to third parties including, without limitation, HRCI’s agents, contractors, vendors, advertisers or business partners, to:
- provide or improve our HR Certifications, programs, events, services, or software solutions,
- allow for online registration for HR Certifications, programs, events, or services, the online provision of software applications, and/or
- facilitate other internal business purposes.
HRCI may use demographic information for marketing, administrative, management, and monitoring purposes both to continue to provide or improve the Services and to provide or improve any software solutions, programs, HR Certifications, events or services HRCI may offer.
In addition, HRCI may share, license, and/or sell survey results and aggregated demographic data collected through the Services with or to third parties, including, without limitation, its affiliates, advertisers, business partners, the general public, the news media, and the U.S. Government and state governments, not only as may be required by law, but also for advertising purposes, for release to third parties, and/or to participate in government programs and initiatives. No survey results or aggregated demographic data provided by HRCI to third parties will identify any particular user.
HRCI may use transactional information for marketing, administrative, and support purposes in order to provide or improve any software solutions, programs, HR Certifications, events or services HRCI may offer.
In addition, HRCI may also share, license, and/or sell such transactional data for such purposes on an aggregated basis (which will not identify any particular user) with or to third parties, including, without limitation, advertisers or business partners.
HRCI may use, collect, and pass credit card or online payment information to third parties to process payments for the Services and anything available for purchase on the Website, including, without limitation, examination preparation materials, accessories, and HR Certification applications. HRCI does not store credit card information on the Website but may store unique tokens provided by third parties.
HRCI may use usage information, such as your IP address, device idea, device type, connection type, browser and/or location, to help diagnose problems with our servers, analyze usage trends, track user movements on the Website, and to otherwise manage and monitor the Services.
Other Transfers of PII
Information You Make Available to Others
By using the Website or Services, submitting public queries, or making public comments in parts of the Website where that is possible, you may elect to make certain of your PII available to others, such as your name or username, and you may voluntarily enter and make available comments and other content that includes additional PII. Such publicly posted information may be accessed by users who use the Website or Services and may be accessed by commercial search engines such as Google, Yahoo!, and Bing, to the extent that such engines are permitted to access the Website or Services.
From time to time, we may establish a business relationship with other businesses that we believe to be trustworthy and have privacy practices consistent with ours (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, accounting, data analytics and data storage and management, assessment-related activities, Internet-based platforms, and marketing and promotions. HRCI Service Providers include but are not limited to Microsoft, the provider of customer account and relationship management applications; Credly, the provider of HRCI digital badges; Pearson VUE, the provider of certification examination registration, scheduling, administration and delivery services for HRCI; Rosterfy, the Internet-based platform that HRCI uses to engage with HRCI volunteers; Thought Industries, the Internet-based platform that HRCI uses to host virtual learning products; and Naylor, the Internet-based platform that HRCI uses to host the HRCI career center. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your Personal Information from unauthorized access, use, or disclosure. Service Providers are prohibited from using PII other than as specified by HRCI.
If HRCI goes through a business transaction, such as a bankruptcy event, merger, investment transaction, or acquisition by another entity involving the sale of all or a portion of its assets, the PII collected and retained by HRCI may be among the assets transferred or reviewed.
Investigation and Legal Action
HRCI may also disclose PII when legally required to do so in accordance with subpoenas, government requests or regulations, or legal proceedings. HRCI may also disclose PII to protect against misuse or unauthorized use of the Services or as is otherwise required to limit legal liability, protect or defend our rights, property, or interests, or protect the safety, rights or property of other end users or customers.
How Does HRCI Protect PII?
As is appropriate for the nature of PII collected and stored by HRCI, the Services are protected by industry standard security measures or safeguards to minimize the risk of loss, misuse and alteration of the PII under HRCI’s control. With respect to any stored PII, HRCI will also use commercially reasonable efforts to preserve such PII in its original form to the extent possible and as consistent with any processing that is directed by you or necessary for HRCI to provide the Services. HRCI may store PII for a period no longer than necessary for the purpose of operating its business.
Although HRCI has endeavored to ensure the Services are secure and reliable, the confidentiality or integrity of any communication, data, or material transmitted via the Internet or stored with HRCI cannot be 100% guaranteed. Accordingly, you should consider carefully whether you want to submit PII via the Internet.
What About “Opting-Out” of Data Collection and Use?
The collection, use, and sharing of your PII may be necessary for HRCI to provide certain features, programs, events, resources and services made available as part of the Services, and to operate and/or improve the Services. For example, all users who register for an event, program or seminar, or purchase resources from HRCI on the Website must agree to HRCI’s use and collection of PII.
Under other circumstances, however, you may decide on your own whether you will provide your PII or opt-out of doing so. For example, if HRCI conducts a survey on the Website, you do not have to participate unless you agree to do so.
You also may opt-out of certain HRCI business practices in which your PII may be used. Specifically, users may opt-out of including the use of their PII for inclusion in:
- user postal mailings,
- email communications sent by HRCI,
- facsimile communications sent by HRCI, and
- certain sharing arrangements with HRCI’s business partners.
California Residents: Companies that collect PII from California residents and disclose such information to third parties (including affiliated entities) for marketing purposes must, in response to a request by a consumer, either (1) provide a list detailing the categories of information shared and the entities to which such information was provided, or (2) provide a mechanism by which a consumer may opt-out of having his or her information shared with third parties.
HRCI has elected the second option, and you may request that your PII not be shared with third parties by sending your request, including your full name, email address and postal address, to HRCI, Attn. Privacy, 1015 15th Street NW, Washington DC 20005.
California residents are also entitled to know that they may file grievances and complaints with California Department of Consumer Affairs, 400 R Street, Suite 1080, Sacramento, CA 95814; or by phone at 916-445-1254 or 800-952-5210; or by email to firstname.lastname@example.org.
What About Correcting, Deleting, or Updating Information?
At any time, you may go to the Website and access your account (using your username and password) to correct, modify or delete the information stored in connection with your user profile.
Moreover, when you cease to use HRCI’s services or no longer wish to be included in HRCI database, you may contact HRCI at email@example.com to request to have your information removed from the HRCI database.
If HRCI receives such a request or change, HRCI may require you to confirm or verify any change to your record. Please note, however, that the collection and uses of certain PII is necessary to provide all or part of the Services and you will not be able to delete such necessary information after you have entered into a contract with HRCI to provide you with services that require such information. In other instances, if you request the deletion of PII, it may render a particular HRCI solution or service in accessible to you or inoperable.
What About Residents of the European Economic Area and the United Kingdom?
Information about the General Data Protection Regulation (GDPR) can be found here. GDPR outlines subject access rights of individuals in relation to their personal data. If you are a resident of the European Economic Area or the United Kingdom and would like to exercise any of Your rights under GDPR, Your rights and the actions you can take are summarized below.
Right to Access: You can access most of the data we have about you through your account. You can request a complete report on what personal information we have about you.
Right to Rectification: We strive to keep records and all data accurate. If you would like to modify an inaccurate record of Your personal data, in most cases you can edit the data yourself through your account. However, if you are unable to make a correction yourself, you can request that we make the correction for you.
Right to Data Portability: You can request a copy of your personal data to be transferred to a new system or platform.
Right to Object: You can object to our processing of your personal data in certain limited circumstances that are not related to our provision of the Services.
Right to Restrict Use: You can request that we restrict the processing of your personal data in certain limited circumstances that are not related to our provision of the Services.
Right to Erasure: You can request that we delete your personal data in certain extremely limited circumstances that are not related to our provision of the Services.
All GDPR subject access rights requests must be sent via email to firstname.lastname@example.org and include the specific details for your request and the basis for making the request. We will respond to all valid subject access rights requests within 30 calendar days of receiving the request; however, it may take longer to fulfill your request. If you are unsatisfied with how we handle your request, you can find the contact information for your local data protection authority here.
What About Children?
HRCI cares about the safety of children on its Website and encourages parents and guardians to monitor their children’s use of the internet.
Although the Website is suitable for a general audience, the Website is intended for use only by users who are over 18 years of age. Accordingly, HRCI does not knowingly solicit PII from children or send them requests for personal information.
If you become aware that a child has provided PII to HRCI, please contact HRCI immediately so that such PII may be deleted and that HRCI may discontinue any further services provided to such child.
What About External or Third-Party Web Websites?
What About Governing Law?
The use of PII also is subject to the data protection and privacy laws of countries in which the user or the PII is located.
What About Cross-Border Transfers?
The Services and the servers that host the Services are located in the United States. Backup servers for the Services and associated PII may be located in other countries. Any information you provide will be transferred to the United States. By visiting and using the Services and submitting PII, you authorize this transfer of your PII to the United States and to other countries.
What About Any Other Questions?