Duck Creek Technologies
LLC PRIVACY NOTICE

Effective Date:  July 2, 2018

Duck Creek Technologies LLC and its affiliates (collectively, “[Duck Creek]”, “we”, “our”) respect your privacy. This Privacy Notice describes the types of personal data we collect from our customers and visitors to our website, how we use the personal data, and with whom we share it. We also describe the rights you may have and how you can contact us about our privacy practices. For the purpose of this Privacy Notice, Personal Data means any information relating to an identified or identifiable natural person.

Duck Creek is responsible for the collection and use of your personal data for the purposes described in this Privacy Notice and its contact details can be found in the “How to Contact Us” section below.

I.        Personal Data We Collect

Personal data that you provide directly to us on www. duckcreek.com (the “website”) will be apparent from the context in which you provide it, in particular:

  • If you fill out a “Contact Us” form on our website, you will provide your name, your company name, your job title and your email address];
  • If you sign up to our website’s mailing list or newsletter to receive offers, webinars and updates from us, you will provide your email address;

Each form on our website varies in the information required and collected. In most cases, an asterisk (*) indicates the required information on a form. You may choose to provide additional information within fields that are not required.

If you are a customer, you will typically provide your name, job title, and email address to be able to communicate with us about the products and services we offer.

In addition, you may choose to submit information to us via several other methods, including: (i) in response to marketing or other communications, (ii) through social media, (iii) by signing up for a product or service, (iv) through participation in an offer, program or promotion, or (v) in connection with an actual or potential business relationship with us.

If you contact us via email, you will generally provide your email address, name, job title and any other information you choose to include in the body of your email. If you contact us by phone, we will collect the phone number you used to call Duck Creek.

II.        How We Use the Personal Data We Collect

We use Personal Data that we collect to respond to your enquiry, ask a question, contact you about your request or other reasons related to offering and improving our services.  We use the Personal Data for these purposes because we have a legitimate business interest in providing services to our customers and other interested individuals that is not overridden by your interests, rights and freedoms to protect personal data about you.  In addition, we also use the Personal Data you provide to us for the following legitimate business purposes:

  • Operate, evaluate, and improve our business;
  • Develop new products and solutions;
  • ·Perform market research;
  • Advertise and market our products and solutions;
  • Determine the effectiveness of our advertising and marketing;
  • Analyze our products and services and our website;
  • Improve our security and administer our website.

Where required by applicable law, we will obtain your consent to send you marketing communications about our products and services, offers and promotions, and invite you to events and surveys. We also target potential customers with our products and services in accordance with applicable law.

Where we have a contract with you, we process your Personal Data as necessary to perform our contractual relationship with you, provide our products and services and manage our customer relationship.

We may also use the Personal Data we collect to protect us against and prevent fraud, claims, and other liabilities and to comply with or enforce applicable legal requirements, industry standards, and our policies and terms.  We use Personal Data for these purposes when it is necessary to protect, exercise or defend our legal rights, or when we are required to do so by a law that applies to us.

III.        Information That We Collect Automatically

A.    Information collected on our website

We may collect information about your use of our website, such as the time and duration of your visit, search query terms you enter through the website, services and solutions you viewed and how you interact with content offered through our website.

We may also collect technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through our website (including date and time), page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs).

Our website uses cookies to function effectively. You can learn more about our use of cookies and how you can control your cookie settings by visiting our Cookie Notice.

B.    Interest-Based Advertising

Information about your visit to our website is being collected by automated means for use in providing advertising about products and services tailored to your individual interests. You may see certain ads on other sites because we participate in advertising networks administered by third-party vendors. These networks track your online activities over time by collecting information through automated means, including through the use of third-party advertising cookies. The networks use this information to show you advertisements that are tailored to your individual interests. The information our ad network vendors collect includes information about your visit to our website, such as the pages you have viewed. This process also helps us track the effectiveness of our marketing efforts.  You can learn more about this activity and how you can control your cookie settings by visiting our Cookie Notice.

IV.          How We Share Personal Data

We do not sell or otherwise disclose Personal Data that you provide to us or that we collect on our website, except as described in this Privacy Notice.

We may share personal data with service providers that perform services on our behalf such as IT service providers, payment service providers, marketing providers, analytics providers, hosting providers, and our advisers.  All service providers have entered into legally binding agreements requiring them to use Personal Data only as necessary to perform services on our behalf and to implement appropriate data security and confidentiality obligations, in accordance with applicable law.

In addition, we may disclose Personal Data about you (i) if we are required or permitted to do so by law or legal process, for example, due to a court order or a request from a law enforcement agency, (ii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (iii) in connection with an investigation of suspected or actual fraudulent or other illegal activity, and (iv) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).

V.        Data Transfers

We may transfer the Personal Data that we collect about you to recipients in countries other than the country in which the Personal Data originally was collected. Those countries may not have the same data protection laws as the country in which you initially provided the Personal Data. When we transfer your Personal Data to recipients in other countries, we will protect that Personal Data as described in this Privacy Notice.

Your Personal Data will be stored in the United States and your Personal Data may be transferred to or accessed by Duck Creek and its affiliates in the United States for administration purposes. We will comply with applicable legal requirements by providing adequate protection for the transfer of Personal Data to data recipients in countries outside of the European Economic Area. To the extent that these data recipients are in countries that have not been recognized by the European Commission as providing an adequate level of data protection, we ensure that appropriate safeguards aimed at ensuring such a level of data protection are in place, including by entering into the European Commission’s EU Standard Contractual Clauses with the data recipients, or ensuring that the data recipient has certified to the EU-U.S. Privacy Shield Framework, or has implemented Binding Corporate Rules. To obtain a copy of the safeguards we have put in place, please contact us as indicated below.

VI.          How We Protect Personal Data

Duck Creek maintains technical and organizational safeguards to ensure an appropriate level of security and confidentiality for your personal data, in accordance with our policies and applicable legislation.

VII.        Retention of Personal Data

We will keep your Personal Data for the time period necessary to achieve the purposes outlined in this Privacy Notice, taking into account applicable statute of limitation periods and records retention requirements under applicable law.

VIII.       Your Rights

Subject to applicable law, you have the right to request access to and rectification of the Personal Data we maintain about you, or to request the restriction of the processing of your Personal Data or to object to that processing on grounds relating to your situation.

You can tell us at any time not to send you marketing communications by e-mail by clicking on the unsubscribe link within the marketing e-mails you receive from us.

In addition, you may have the right to request erasure of your personal data from Duck Creek’s systems in certain circumstances provided by applicable law.  Subject to applicable law, where technically feasible, upon written request and verifiable identification, we will provide you with a copy of your EEA personal data in a structured, commonly used, machine readable format.  To exercise these rights, please contact Duck Creek as indicated below. You may lodge a complaint with a data protection authority if you are not satisfied with our response.

IX.   Third Party Links

Our website may contain links to other third party sites that are not operated by us, such as Facebook, Instagram, Twitter and YouTube. These linked sites are not under our control and as such, we are not responsible for the privacy practices or the content of any linked sites. If you choose to use any third party sites, any personal data collected by the third party’s site will be controlled by the Privacy Notice of that third party. We strongly recommend that you take the time to review the privacy policies of any third parties to which you provide information.

X.   Updates To Our Privacy Notice

This Privacy Notice may be updated periodically at our discretion to reflect changes in our privacy practices or relevant laws. We will make any changes to this Privacy Notice by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This Privacy Notice is effective from the date specified in the ‘Effective Date’ section at the top of this page.

XI.   How to Contact Us

If you have questions about how Duck Creek handles your Personal Data or would like to exercise your rights, please reach out by emailing or writing to us at:

Duck Creek Technologies LLC 22 Boston Wharf Road
Boston, MA 02210 USA

Email: DPO@duckcreek.com

Ben Dulieu,  Chief Information Security Officer
22 Boston Wharf Road
Boston, MA 02210 USA