GDPR

regpack has always been committed to data security as well as your privacy and your users privacy i am sure you have received many “we are updating our privacy policy,” notices in your inbox due to the new eu regulation, aka gdpr, which goes into effect on may 25th since regpack holds personal identifying information and financial information, we are updating a lot more than just our privacy policy so please read this post carefully what is the gdpr? gdpr is a new eu regulation that intends to strengthen and unify data protection and protect everyone’s fundamental right to privacy and protection of their personal data to that end, we have made some updates to our security and data processes in order to ensure full compliance with gdpr please note that these changes are in place for all regpack clients, not just european clients while compliance isn’t required for organizations who are not based in the eu and don’t have users in the eu, we believe these updates benefit everyone and we can all enjoy extra data protections for our businesses furthermore, if you have information of only one eu citizen then the gdpr rules apply to you since many times it is not possible to know all citizenship of your users we are applying the rules to all organizations using regpack below is a short summary of the changes we’ve made updated privacy and cookie policy we’ve updated our privacy policy and cookie policy, which you can review https //www regpacks com/privacy policy/ the updates to these policies lay out more clearly how regpack uses data we receive as well as your relationship with regpack nothing major has changed, we still think the data is yours, we have never and will never sell your personal data, or your user’s personal data actually, we will never use your data or your user’s data for anything at all finally, data security and protection is our highest priority like it has always been the new privacy policy outlines this in more detail we’ve also created a privacy policy for all regpack systems that will explain to your users what type of information is collected and how it is used we encourage you to review this and include your own privacy policy on your website as well we always recommend consulting with a legal representative to ensure your legal bases are covered you can view this updated end user privacy policy https //www regpacks com/end user privacy policy/ regpack security page our security page is updated with our security protocols and how we encrypt data to protect sensitive personal information you can view that https //www regpacks com/regpack security/ data deletion tool in compliance with gdpr, any user can request their data be deleted from your systems this must be done within 1 month of their request, free of charge we are rolling out a tool in the coming weeks that will allow you to purge a user’s data upon request of that user please note that once data is deleted, you cannot retrieve the information and it is lost forever please be careful when using this tool please note that further to the gdpr requirement of only holding data you need, if you cancel your regpack account, all data including all user data, will be purged immediately upon confirmation of cancellation data processing agreement your action is required in the coming days all regpack account owners will be asked to sign 2 documents data processing agreement this document lays out the data protection measures regpack has taken and what data protection measures you are required to take service agreement this is the same service agreement you received when onboarding it has been updated with additional language regarding data security we must have these agreements signed in order for your account to remain active once signed, you can view the agreements at any time under settings → bill for further reference regpack employee access according to gdpr regulation, data should only be exposed to individuals that are allowed to view it to that end, regpack will be updating it’s internal permissions and regpack employees will be limited to the scope and type of data they have access to this includes, but is not limited to, the inability to export any type of report, viewing user data without consent and other secure measures admin account security further to the gdpr requirement that data is exposed only to people that need to see it, regpack will be enhancing its admin login security measures to make sure that your account is always safe and that no data can get into the wrong hands in the coming days, the system will be updated to include an advanced algorithm for possible account security threats if a potential security issue is detected, you will need to approve your access to the system by issuing a code that will be sent to your admin email this 2 step verification will happen every time the algorithm detects a possible problem please note that when activated, the algorithm might ask you to complete the action regardless of a possible threat just to calibrate itself according to your usage patterns please note that if the algorithm detects a repeated threat to your admin account, it will lock it down for manual investigation this is done to protect you and your user’s data