Privacy Policy

1. Introduction and Scope

1. Purpose of this Privacy Policy: This policy describes how FreeleeGo (referred to as "we," "us," or "our") collects, uses, processes, stores, and protects the personal data of all users, including Clients, Employers, Freelancers, and website visitors ("you").

2. Definitions: "Personal Data" is any information that relates to an identified or identifiable natural person. "Services" refer to the offerings and platform provided by FreeleeGo.

3. Scope of the Policy: This policy applies to our website (www.freeleego.com), all associated services, applications, and communications.

4. Overview of Protection: We are committed to protecting your privacy and implementing robust security measures to safeguard your personal data.

5. Transparency Statement: We strive for complete transparency regarding our data handling practices.

6. Legal Compliance: We aim for compliance with major global privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA), depending on the user's location.

7. User Consent Requirement: We collect personal data primarily based on your explicit consent or as necessary for the performance of a contract, and we provide mechanisms for consent withdrawal.

8. Policy Version and Update Date: This section will clearly state the policy version and the last update date for easy reference.

9. Contact: We provide a dedicated contact point for all privacy concerns (see Section 14).

10. Accessibility Statement: This policy is designed to be clear, accessible, and easily readable.

2. Data We Collect

11. Information Provided Directly: Personal identification and contact details such as name, email address, phone number, and physical address.

12. Account Registration Details: Username, secure hashed password, profile information, and preferred language settings.

13. Payment and Billing Information: Financial data required for processing transactions, including bank account details, credit card information (processed securely via third-party providers), and tax identification numbers.

14. Communication Records: A record of correspondence (emails, chat logs, support tickets) with us regarding the use of our Services.

15. Portfolio Submission Data (Freelancers): Professional data submitted by freelancers, including CVs/resumes, portfolio links, skills, and work history.

16. Device Information: Data automatically collected about your device, such as IP address, operating system, browser type, and device identifiers.

17. Cookies and Tracking Data: Information collected via cookies and similar technologies (see Section 7).

18. Usage Data: Details about how you use our Services, including pages viewed, features accessed, and time spent on the site.

19. Geolocation Data (if enabled): Approximate or precise location data, but only if explicitly enabled by your device or browser settings.

20. Social Media Login or Third-Party Account Data: If you link third-party accounts (e.g., Google or LinkedIn) for login, we collect the necessary profile information permitted by those providers.

3. Sensitive Information

21. No Intentional Collection: We do not intentionally or actively collect Sensitive Personal Data (such as race, religion, health information, or criminal history).

22. Voluntary Disclosure: Any sensitive information you choose to provide voluntarily (e.g., within a CV or profile bio) is collected on the basis of your explicit consent.

23. Encryption Standards: We apply high-level encryption standards and additional safeguards for any data fields that could potentially hold sensitive information.

24. Storage and Deletion Policy: Sensitive data, if collected, is subject to a strict storage duration and deletion policy.

25. Protection for Minors' Data: Our Services are not directed to individuals under 18 years of age. If we discover data belonging to minors, it will be immediately deleted (see Section 11).

4. How We Use Your Data

26. To Provide and Maintain Our Services: Managing your account, enabling platform functionality, and ensuring service availability.

27. To Personalize Your User Experience: Tailoring content and service recommendations based on your preferences and usage patterns.

28. To Process Transactions and Send Invoices: Executing payments, managing financial records, and sending related invoices and payment notifications.

29. To Communicate Updates, Offers, or Service Improvements: Notifying you about changes to the platform or relevant promotional content (where consent is given).

30. To Respond to Inquiries or Support Tickets: Handling customer service requests and resolving technical issues.

31. To Monitor and Improve Website Performance: Conducting internal analysis of site traffic and performance.

32. To Detect, Prevent, and Address Fraud: Monitoring for fraudulent or abusive activity to protect our community.

33. To Enforce Legal Terms and Prevent Abuse: Upholding our Terms and Conditions and other legal agreements.

34. To Analyze Traffic and Engagement for SEO Improvement: Using aggregated, non-identifiable data to optimize our content and visibility.

35. For Marketing (With Consent): Sending targeted marketing communications only when you have provided explicit, verifiable consent (see Section 10).

5. Data Retention

36. Duration: Data is stored only for as long as is necessary to fulfill the purposes for which it was collected or to comply with legal, accounting, or reporting requirements.

37. User Account Data: Retained until a deletion request is received, subject to a short wind-down period for legal compliance.

38. Financial Data: Retained for the statutory period required by tax and accounting laws in the relevant jurisdiction.

39. Communication Logs: Retained for a limited period to facilitate ongoing support and document dispute resolution.

40. Regular Review: We conduct regular reviews and implement automated processes for the anonymization or secure deletion of data that is no longer required.

6. Data Sharing & Disclosure

41. No Sale of Personal Information: We never sell your personal information.

42. Sharing with Trusted Service Providers: Data is shared with third-party vendors (e.g., cloud providers, payment processors, analytics tools) who assist us in operating our Services.

43. Third-Party Access Limitation: Third-party access is strictly limited to the data necessary for them to perform their contracted services.

44. Confidentiality Agreements: All vendors are legally bound by confidentiality agreements and data processing clauses that meet legal standards.

45. Disclosure for Legal Obligations: We may disclose data when legally required by governmental authorities or court orders.

46. Transfer During Mergers or Acquisitions: In the event of a merger, sale, or acquisition, personal data may be transferred to the new entity, subject to a prior notification to users.

47. Sharing within Our Agency Team: Data is shared within FreeleeGo's team on a "need-to-know" basis for effective project coordination and support.

48. No Unauthorized Sharing with Advertisers: We do not share personally identifiable data with advertisers without explicit user consent.

49. International Data Transfers: Any international transfers of data are secured by recognized legal mechanisms, such as Standard Contractual Clauses (SCCs).

50. Data Shared with Analytics Tools: Data shared with analytics providers is typically anonymized or pseudonymized to protect identity.

7. Cookies & Tracking

51. Explanation of Cookies: Cookies are small text files placed on your device to collect standard internet log information and visitor behavior information.

52. Types of Cookies Used: We use necessary (session), preference, analytical, and marketing cookies.

53. Purpose: Cookies are used for improving user experience (UX), remembering preferences, and analyzing website traffic.

54. Cookie Consent Banner: We deploy a Cookie Consent Management Platform (CMP) banner to obtain and manage your consent.

55. User Ability to Disable Cookies: You can adjust your browser settings to refuse the setting of all or some cookies.

56. Impact of Disabling Cookies: Disabling cookies may affect the functionality of the website and certain features.

57. Third-Party Tracking Technologies: We may use third-party tracking (e.g., Google Analytics, social media pixels) to measure engagement, subject to your consent.

58. Cookie Expiration Timeframes: The duration for which cookies are stored is clearly defined.

59. Browser "Do Not Track" Signals: We aim to respect Global Privacy Control (GPC) or similar "Do Not Track" signals where legally required or technically feasible.

60. Periodic Cookie Audits: We regularly audit our website's use of cookies and update our policy accordingly.

8. Data Security

61. Encryption in Transit: Data is protected during transmission using SSL/TLS encryption protocols.

62. Secure Password Storage: Passwords are never stored in plain text but are secured using industry-standard hashing techniques.

63. Firewall and Intrusion Detection: We maintain secure network architecture, including firewalls and intrusion detection systems.

64. Regular Vulnerability Testing: Security systems are subjected to regular testing and assessment.

65. Restricted Employee Access: Access to personal data is limited to authorized personnel with a legitimate business need.

66. Multi-Factor Authentication: Multi-factor authentication (MFA) is mandatory for internal administrative access.

67. Secure Backup and Disaster Recovery: We implement secure backup and robust disaster recovery plans.

68. Physical Security: Our hosting service providers adhere to strict physical security standards for their servers.

69. Monitoring: Systems are continually monitored for unauthorized access attempts.

70. Annual Security Audit: We commit to conducting or commissioning an annual security audit of our data protection measures.

9. User Rights

71. Right to Access: You have the right to request access to the personal data we hold about you.

72. Right to Correct: You may request that we correct any inaccurate or incomplete personal data.

73. Right to Delete (Erasure): You have the right to request the deletion of your personal data ("right to be forgotten"), subject to our legal obligations.

74. Right to Restrict Processing: You may request that we limit the ways we use your personal data in certain circumstances.

75. Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.

76. Right to Object: You can object to the processing of your personal data for direct marketing purposes or certain other processing activities.

77. Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

78. Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority/regulator in your jurisdiction.

79. Process for Submitting Rights Requests: We provide a clear Data Subject Access Request (DSAR) process for submitting rights requests (see Section 14).

80. Response Timeframe: We commit to responding to all valid privacy requests within the legally required timeframe (e.g., 30 days under GDPR/CCPA).

10. Email & Marketing Preferences

81. User Opt-In: We require a clear opt-in mechanism for all non-essential newsletters or marketing campaigns.

82. Unsubscribe Option: Every marketing email will contain an easily accessible and clear unsubscribe link.

83. Email Tracking Transparency: We are transparent about the use of standard tracking pixels or technologies within emails to measure engagement.

84. Frequency of Messages: We manage the frequency of marketing messages to respect your inbox.

85. Transactional Emails Excluded: Essential service announcements and invoices (transactional emails) are excluded from marketing opt-out requests.

86. Third-Party Marketing Partnerships: Any use of your data for third-party marketing will be explicitly disclosed and require separate consent.

87. No Spam Policy: We adhere to a strict anti-spam policy.

88. Email Storage Security: Contact lists are stored securely and protected by access controls.

89. Clear Unsubscribe Link: A clear and functional unsubscribe link is included in every marketing email.

90. Privacy of Contact Lists: We do not rent or sell our contact lists to third parties for independent marketing purposes.

11. Children’s Privacy

91. Not Directed to Children: Our Services are not directed to individuals under the age of 13.

92. No Knowing Collection: We do not knowingly collect Personal Data from children under 13.

93. Immediate Deletion: If we learn we have inadvertently collected data from a child under 13, we will take immediate steps to delete that information.

94. Parental Consent: For any future youth-related services, verifiable parental consent will be required.

95. Education: We encourage parents and legal guardians to monitor their children's internet use.

12. International Users

96. Cross-Border Data Transfer: We explain that data may be stored or processed in countries outside the user's home country.

97. Legal Safeguards for EU/UK Users (GDPR): Data transfers from the EU/UK are protected by Standard Contractual Clauses (SCCs) or other approved mechanisms.

98. Compliance with Canadian and US Standards: We commit to complying with data protection standards like PIPEDA and CCPA when processing the data of residents in those regions.

99. Country-Specific Privacy Adjustments: We make necessary adjustments to our data processing activities to align with country-specific regulations.

100. Regional Contact Information: We provide regional contact information where required for users abroad.

13. Policy Updates

101. Notification Before Major Changes: Users will be notified of any material changes to this policy prior to the change becoming effective.

102. Date of Last Update: The date of the last update is clearly visible.

103. Archived Versions: Archived versions of previous policies are available upon request.

104. Continuous Improvement Commitment: We are committed to the continuous improvement of our privacy practices.

105. Periodic Check: Users are encouraged to check the policy periodically for updates.

14. Contact & Feedback

106. Dedicated Email: A specific email address for privacy inquiries (e.g., privacy@freeleego.com).

107. Postal Address: Our postal address for legal notices or formal data requests.

108. Form Submission: An online form option for quick data requests.

109. Average Response Time: A commitment to a reasonable response time for inquiries.

110. User Feedback Mechanism: A channel for users to provide feedback on their data handling experience.

111. Escalation Process: A clear process for escalating unresolved privacy issues to a higher authority within the agency.

15. Additional Clauses

112. Data Protection Officer (DPO) Contact: If required by law or voluntarily appointed, the contact information for our DPO.

113. Privacy Training for Employees: A commitment to regular privacy and security training for all team members.

114. Privacy Impact Assessment (PIA): Our process for conducting PIAs before launching new features that involve significant data processing.

115. Use of Pseudonymization: Explanation of how we use pseudonymization for non-essential data used in analytics.

116. AI Data Processing Explanation: If applicable, details on how AI tools are used, and that they are vetted for data handling compliance.

117. No Algorithmic Profiling Without Consent: A promise not to engage in automated decision-making or profiling that results in significant legal effects on you without your explicit consent.

118. Social Media Plugin Data Handling: Specifics on how data is handled when using social media plugins on our site.

119. Cloud Storage Provider Transparency: Naming our primary cloud storage provider and stating their commitment to security.

120. Handling Data Breaches: Our commitment and procedure for notifying affected individuals and supervisory authorities in the event of a data breach.

121. Record of Processing Activities: Our commitment to maintaining a legally required record of all data processing activities.

122. Legal Jurisdiction of Policy Enforcement: The specific jurisdiction where legal action related to this policy may be pursued.

123. Third-Party Dispute Resolution: Availability of an independent third-party channel for dispute resolution.

124. Language and Translation Disclaimers: Stating that the English version of this policy is the authoritative document.

125. Termination and Survival of Clauses: Clauses like Confidentiality, Indemnification, and Financial Obligations survive the termination of your account or the service agreement.