When signing up for or using Timely you are entrusting Timely with the protection and sensitivity of your information, and that of your customers. This is a responsibility we take very seriously. This document is intended to outline what we collect, how we store it, what we do with it, and what your rights are as it relates to that data.
User Information, being personal information relating to our Users and (where applicable) their businesses. We collect this information so that we can provide our Services to those Users. For the purposes of GDPR in the European Union, we are the ‘data controller’ of this User Information and we collect and store it for the purposes of providing our Services to Users and maintaining records and contact details relating to those Services and Users. This policy sets out how Timely process your information as a User.
Any of the information we collect from you may be used in one of the following ways:
We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information.
All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our Payment gateway providers database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential.
Timely sends billing information, product information, Service updates and Service notifications to you via email. Our emails will contain clear and obvious instructions describing how you can choose to be removed from any mailing list not essential to the Service. Timely will remove you at your request.
Timely works with a number of third parties and partners who help us provide the Timely service to our Users. Examples include hosting services, accounting services, business intelligence platforms, email and SMS partners, customer relationship management services, customer support platforms and more. In order to supply the Timely service Timely may send them Personal Data for storage or processing. Timely has taken steps to ensure that each partner or third party involved treats the Personal Data in accordance with the privacy laws and legislation of our Users’ jurisdictions.
We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety.
Non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Other than stated above, we do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.
We will retain your information and your client’s information for as long as necessary for us to provide you a service, to comply with our legal obligations and to fulfil any business need we may have.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
To quickly and efficiently resolve customer support issues related to your account, you consent to us logging into your account from time-to-time. If you do not wish us to access your account, then you may notify us in writing.
To bring you Services, we operate globally. In order to do so, your personal information may be transferred to, and processed in countries other than the country you live in, outside of your home country, including to Australia, New Zealand, United Kingdom and the United States. These countries may have laws different to what you’re used to. Rest assured, where we disclose Personal Data to a third party in another country, we put safeguards in place to ensure your Personal Data remains protected.
Specifically, Timely hosts data with Microsoft Azure in the United States and in Australia. This means that your personal information will be transferred to the US or to Australia. The servers on which personal information is stored are kept in a controlled and secure environment.
European Economic Area (EEA) users: This means that your information may be transferred outside of the EEA. Where your personal information is transferred outside the EEA, it will only be transferred to countries that have been deemed to provide adequate protection for EEA information (like New Zealand and Australia), or to a third party where we have approved transfer mechanisms in place to protect your personal information – i.e., by entering into the European Commission’s Standard Contractual Clauses, or by ensuring the entity is Privacy Shield certified (for transfers to US based third parties).
Australian users: The third parties we share data with do not control, and are not permitted to access or use your Personal Data, except for the limited purpose it was provided. This means that, for the purposes of Australian privacy legislation and Australian users, Timely does not disclose Personal Data to third parties located overseas
Deactivating your account
If you wish to deactivate your Timely account, you may do so by logging into your Timely account and following these instructions.
Your European Privacy Rights
In addition to the rights listed above, if you are in the EEA you also have rights to:
For more information about your European Privacy Rights, please see our GDPR help guide.
If you’re not happy with how we are processing your personal information, you have the right to complain to your local information protection authority. Your local data protection authority will be able to give you more information on how to submit a complaint.
You can request to exercise these rights by emailing [email protected]. We will process your request within 30 days of receiving your request. Note that we may require proof of identification before we process your request.
Our Services are not directed to children, and you may not use our Services if you are under the age of 18. You must also be old enough to consent to the processing of your Personal Data in your country (in some countries we may allow your parent or guardian to do so on your behalf).
P.O. Box 13112