The following explains what personal data is collected by SurScan, Inc. ("SurScan") and how it is used. This includes information provided on a SurScan Website ("Website"), and information collected from third-parties and other sources associated with SurScan's services such as employment, tenant, or occupational health screening.
For a discussion of how SurScan handles personal information sent or obtained from outside of the United States, view the section on see the section labeled SurScan EU-U.S., SWISS-U.S., AND UK EXTENSION OF DATA PRIVACY FRAMEWORK PRIVACY POLICY. SurScan has a separate a privacy policy statement that applies to personal information pertaining to an identified or identifiable individual that is received by SurScan from: (i) the European Union ("EU"), United Kingdom ("UK"), and/or Switzerland, called the EU-U.S., SWISS-U.S., AND UK EXTENSION OF DATA PRIVACY FRAMEWORK PRIVACY POLICY.
The use of SurScan Websites indicates your agreement to SurScan's privacy policy. SurScan may revise this online privacy policy from time to time. If SurScan makes any material changes, SurScan will notify you by posting a prominent announcement on this Website. If SurScan is going to use your personally identifiable information ("PII") in a manner different from that stated at the time of collection, SurScan will notify you via email if an email address has been provided and is available. You will have a choice as to whether or not to allow SurScan to use your information in such a different manner.
SurScan is committed to the responsible use of information and protecting individual privacy rights. SurScan strives to provide services to mitigate risk, facilitate more informed decisions, and make the world safer, in ways that protect consumer privacy.
SurScan aspires to protect consumer privacy through the design of its processes, by credentialing, monitoring, and/or auditing its clients as appropriate, and through other information security safeguards. SurScan also strives to promote transparency through appropriate opportunities for consumer choice, access, and correction with respect to personal information about the consumer.
To request information or receive help with data protection issues, contact SurScan's Data Protection Advocate at:
Email: info@surscan.com
Phone: +1-972-633-1388
Please carefully read SurScan's privacy policy to understand how SurScan will treat the information you provide while visiting our Websites. As previously stated, this policy may change from time to time. Please check the policy each time you use a SurScan Website for the most current information. This policy only applies to SurScan and its affiliated entities. SurScan's Websites are not intended for children and SurScan does not knowingly collect any information about children. Nevertheless, SurScan is committed to complying with applicable laws and requirements, such as the United States' Children's Online Privacy Protection Act ("COPPA").
SurScan also applies this privacy policy in the offline context in those limited cases where SurScan requires a consumer to provide his/her PII in order for the consumer to order an information product by mail or telephone.
SurScan's Websites may contain links to unrelated third-party websites. SurScan assumes no responsibility for the content or the privacy policies and practices on those websites. SurScan encourages all users to read the privacy statements of those sites; their privacy practices may differ from those of SurScan.
SurScan is a leading provider of web technology services for healthcare education. SurScan offers clients a comprehensive portfolio of products, services and tools to help them make informed decisions in a timely manner. SurScan recognizes that it has an obligation to protect the privacy and confidentiality of PII that it may obtain about individuals through SurScan's Websites. Safeguarding the privacy of information SurScan may receive on its Websites is a top priority for SurScan, its clients and consumers.
SurScan follows the below privacy principles when you visit its Websites. In general, you can visit a SurScan Website on the World Wide Web without telling SurScan who you are or revealing any information about yourself. SurScan Web servers automatically collect the domain names, not the e-mail addresses, of visitors. This information is used to measure the number of visits, average time spent on the site, pages viewed and similar information. SurScan uses this information to measure the use of its Website and to develop ideas to improve the content of its Website.
This Website only collects PII from you if you choose to provide this information to SurScan. PII collected with your consent may include name, mailing address, e-mail address, telephone number, date of birth, credit card number, social security number, driver's license number, user name and password, any response you provide to survey questions, information relating to any orders you place, or any inquires you may make through our web site. Also, SurScan may request this type of information if you place an order by mail or telephone.
"Cookies" are small pieces of information that are stored by your browser on your computer's hard drive. This site uses first and third-party cookies, however personally identifiable information is not collected through the use of cookies. Cookies allow SurScan to store your User ID during your visit to keep track of reports you have ordered or any updates to those reports. Cookies also help SurScan detects potential fraud or misuse of its system.
While most browsers are set to accept cookies by default, you can set yours to refuse cookies or to alert you before accepting them. Your browser manufacturer has information on changing the default setting for your specific browser. However, be aware that if you do not accept cookies from our Websites, you will not be able to use some of the features of the Websites, such as those for ordering reports.
SurScan Websites also collect non-personally-identifiable information. For example, as you browse this Website, SurScan may collect information about your visit, but not about you personally. Via web server logs, for example, SurScan may monitor statistics such as: the number of people that visit its Website, which page(s) are visited on its Website, from which domain visitors come (e.g., google.com, msn.com, etc.), and which browsers people use to visit this Website (e.g., Google Chrome, Microsoft Internet Explorer, etc.). This Website may use an outsourcing program to assist SurScan in analyzing this data to better tailor SurScan Website.
The information collected by our Websites is used only for responding to your inquiries and otherwise corresponding with you, for processing transactions you request, maintaining your account (if you have one), and for the administration, review and/or improving the content of SurScan Websites. SurScan does not share, sell, rent or trade PII with third-parties for their promotional/marketing purposes.
SurScan may contact you in response to your comments or inquiries, as part of the maintenance of your account with us (if you have one), or in order to complete a transaction that you requested.
SurScan may also contact you to inform you of other products or services SurScan believes may be of interest to you, but SurScan always offer you an opportunity to opt not to receive such communications.
If you decide that you do not want to receive further e-mails regarding your inquiry from SurScan, you can e-mail SurScan's Data Privacy Office at info@surscan.com with a request that SurScan does not continue to e-mail you. SurScan does not use outside data sources to enrich marketing data obtained online.
SurScan website users have the option to request that SurScan not use information previously provided, correct information previously provided, or remove information previously provided to SurScan. Individuals who would like to correct or suppress information provided to SurScan should contact the SurScan Consumer Advocacy Group at info@surscan.com. The inquiries should include the individual's name, address, and other relevant contact information (phone number, email address), as well as the nature of the request. Except as required by law, SurScan is free to deny such requests. If SurScan decides to grant such a request, it will use all reasonable efforts to honor such requests as soon as practicable.
SurScan may disclose information you provide to SurScan to third-parties in order to complete a transaction that you requested. For example, it may be necessary to disclose information you provide about yourself or third-parties in order to obtain the information product you requested. SurScan may engage third-parties in processing services requested by customers, such as screening for employment, tenant, and occupational health. SurScan enters into service agreements with these third-parties and requires that the companies acting on SurScan's behalf abide by SurScan privacy policy and institute safeguards to protect the confidentiality of your information.
Finally, please note that SurScan may disclose personal information when required by law or in the good faith belief that such action is necessary in order to conform with the law or to comply with a legal process.
As an information service company, SurScan understands the importance of comprehensive data. SurScan will provide you (whether you are a consumer or a client) with access to PII you provide through our Websites for as long as SurScan maintains that information in a readily accessible format. Similarly, SurScan permits and encourages you to correct inaccuracies in the information submitted to SurScan through this Website.
If you wish to access information held on you by SurScan or request the correction of information you feel is incomprehensive, please use the mechanisms provided by the Website, or send an e-mail to info@surscan.com. The access and correction provisions of this online privacy policy only apply to PII collected from you through SurScan Websites. Individuals that are interested in information about how to access and/or request the correction of personal information SurScan maintains about them for potential inclusion in information products and services can contact info@surscan.com.
SurScan takes steps to protect against the loss, misuse, or unauthorized alteration of PII collected through this Website and otherwise subject to this policy. SurScan recognizes the importance of security for all PII collected on its Website. Once SurScan receives PII, SurScan takes steps to protect its security on its systems. In the event SurScan requests or transmits sensitive information, such as credit card information or Social Security Numbers through this Website, SurScan uses industry standard, secure socket layer (SSL) encryption.
SurScan limits access to PII to those employees or service providers who need access in order to carry out their job responsibilities.
When SurScan disposes of PII collected through our Websites, SurScan uses procedures to dispose of personal information by means such as shredding documents and erasure of electronic media that information cannot be practicably read or reconstructed.
A number of services offered by SurScan are Consumer Reports ("Consumer Reports"), as the term is defined under the federal Fair Credit Reporting Act ("FCRA"), and when providing Consumer Reports to its Clients, SurScan acts as a Consumer Reporting Agency ("CRA") as the term is defined under the FCRA, operating in accordance with the requirements of the FCRA. The FCRA establishes the following principles for all CRAs:
Privacy: Information about you may only be furnished to third-parties that have a permissible purpose to request such information. In general, these deal with credit, employment, insurance, rental or banking transactions initiated by you, or where the object is to make a firm offer to you. CRAs must credential their clients to make certain that they have a permissible purpose to receive the requested information.
Access: Consumers may receive a copy of information the CRA maintains about them. Such reports can be obtained nationally free of charge once per 12 months, twice in some states, or for a reasonable fee for additional disclosures. Please contact SurScan at info@surscan.com or call +1-972-633-1388 if you need more information.
Accuracy: CRAs must follow reasonable procedures to assure accuracy of the information they maintain and/or furnish. When you obtain a copy of your information, you have a right to dispute and have the information reinvestigated and corrected in the CRAs database.
Fairness: Information is obtained from various sources including public records sources. However, certain information over a specified time period may not be reported.
Accountability: The Federal Trade Commission is in charge with overseeing the operations of CRAs that provide consumer reports for employment and residential screening purposes and enforcing the FCRA requirements.
When SurScan provides Consumer Reports on U.S. residents, it is subject to the FCRA and operates within FCRA framework. If you would like to obtain a report about the information SurScan maintains about you, please call +1-972-633-1388 or email info@surscan.com.
For credit reports from the credit bureaus, please visit: https://www.annualcreditreport.com/cra/index.jsp.
Privacy Notice: Preparation and Processing of Investigative Consumer Reports This notice is provided to California residents. Under California law, an "investigative consumer report" is a consumer report containing information on a consumer's character, general reputation, personal characteristics, or mode of living. SurScan may provide investigative consumer reports about individuals and in such case, it provides them to business for employment screening, resident screening, and similar purposes.
Personal Information Disclosure: United States or Overseas In connection with its preparation and processing of consumer reports and investigative consumer reports, SurScan may transfer personal information about you to SurScan authorized service providers and affiliates outside the United States and its territories. In such case, the transfer will be conducted in accordance with all applicable laws and regulations.
To obtain additional information about the privacy practices and policies of SurScan in connection with its preparation and processing of consumer reports, please contact: info@surscan.com. For additional information about privacy or consumer reporting, visit the following websites:
SurScan may transfer your personally identifiable information to other countries outside of your home country, including to the United States ("U.S."), by whatever means is determined to be appropriate in order to perform a background check that you authorized. Your information may also be processed and stored in other countries where SurScan's service providers are located. Your information may be subject to U.S. or other laws for disclosure and may be accessible to foreign law enforcement, national security agencies, or courts. Note that the laws regarding personal information in some of the jurisdictions involved may be different or less stringent than the laws of the country in which you reside. Please be aware that SurScan may be required to disclose an individual's personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.
SurScan utilizes a variety of methods to transfer personal information across country borders. This can include consent, contractual methods, and/or regulatory authority certifications. SurScan maintains appropriate contracts in place with service providers who may view your personal information. In the case of EU, UK, and/or Swiss Personal Data, SurScan abides by the EU-U.S. Data Privacy Framework, Switzerland-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework (collectively referred to as "DPF").
SurScan complies with the EU-U.S. Data Privacy Framework program (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. SurScan has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles), with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. SurScan has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework program Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program.
SurScan also complies, where applicable, with U.S. law. In the event of a conflict between this DPF Privacy Statement and other applicable laws, SurScan will comply with its obligations under the applicable law. SurScan processes EU, UK, and Swiss Personal Data at the request of clients and other third-parties, and with the written consent of the data subject, for investigative, verification, employment, and residential screening related purposes. This includes but is not limited to, identifying information about the data subject, employment and educational history, credit and insolvency reports, driving records, court records, criminal history checks, and other checks contracted by SurScan's client or by the data subject themselves. SurScan uses this information to fulfill background screening requests by customers, which may be employers, other background screening companies, housing providers, and the data subject. SurScan's client is required to have obtained the prior written consent from the data subject for this collection. SurScan maintains written agreements for services with its clients. SurScan's compliance with these Frameworks applies to personal information pertaining to an identified or identifiable individual that is received by SurScan from the European Union, United Kingdom, and/or Switzerland, or other personal information that SurScan acquires pursuant to its performance of services for its clients, agents, or other third-parties to which SurScan has contractually agreed to apply this privacy policy. This Policy does not apply to data collected and used by SurScan which is not EU, UK, and/or Swiss related. If you have questions regarding our DPF Policy, contact: SurScan at +1-972-633-1388 or email info@surscan.com.
The scope of this Notice covers consumer report data that SurScan has obtained on behalf of employers and other businesses by manually or electronically contacting the appropriate sources of the data (court records, references, licensing bureaus, etc.). SurScan also performs services related to corporate litigation and investigative services as requested by SurScan clients.
Information about how SurScan collects and uses EU, UK, and Swiss Personal Data also follows below.
SurScan gathers consumer and other data which it provides to employers or their agents (such as recruiters or staffing firms) for use in making employment-related decisions, such as who to hire, retain, promote, or re-assign. SurScan also gathers consumer and other data which it provides to entities including landlords. Note that SurScan does not engage in any of the decision-making activities for any data subjects. Below is an illustrative list of common ways in which employers use the data provided by this service:
SurScan customers who are processing EU, UK, and Swiss Personal Data are contractually required to provide a legally compliant Notice to their data subjects, prior to submitting screening requests to SurScan.
More information regarding the nature and scope of SurScan's data processing is available by contacting SurScan in writing or by e-mail at the addresses listed on the Contact Us page or by writing to the contact listed in this Privacy Policy.
The information obtained by SurScan is only used for the original purpose to which the data subject has consented, unless a new consent is obtained. A data subject may request SurScan stop the processing of data they had previously consented to by contacting SurScan directly. In such case, SurScan will make every attempt to stop the processing as quickly as possible.
SurScan may engage agents to perform functions on our behalf, in order to provide services requested by customers or data subjects. SurScan enters into service agreements with these agents and requires that the companies acting on SurScan's behalf abide by the SurScan privacy policy and institute safeguards to protect the confidentiality of your information. In cases of onward transfer to agents of data of EU, UK, or Swiss individuals received pursuant to the DPF, SurScan is potentially liable.
SurScan may disclose EU, UK, or Swiss Personal Data to clients, or their agents who enter into a written agreement with SurScan, in which the client agrees to comply with the FCRA, if applicable. These SurScan customers are contractually required to provide a legally compliant Notice to their data subjects prior to submitting screening requests to SurScan.
SurScan takes reasonable procedures to protect EU, UK, and Swiss Personal Data from loss, misuse and unauthorized access, disclosure, alteration, and destruction.
The information obtained by SurScan is only used for the original purpose to which the data subject has consented or the legal grounds for processing allow this access, unless a new consent is obtained or another legal ground for processing has been met. SurScan processes EU, UK, and Swiss Personal Data in ways that are compatible with the purposes for which it has been collected (as identified in the Notice section above) or subsequently authorized by the individual. To the extent necessary for those purposes, SurScan takes reasonable steps to ensure that EU, UK, and Swiss Personal Data collected are comprehensive, complete, current, and reliable for their intended use.
A data subject, whose information is or was processed by SurScan under the DPF, has the right to access all personal data collected and maintained about him or her by contacting SurScan directly at info@surscan.com. SurScan affords the data subject a reasonable opportunity to correct, amend, or delete information that is incomprehensive or incomplete, except where the burden or expense of providing access would be disproportionate to the risks to the individual's privacy, or where the rights of persons other than the individual would be violated. In cases where the information is subject to the Fair Credit Reporting Act ("FCRA"), SurScan complies with the FCRA's requirements regarding access and correction rights of data subject.
SurScan reserves the right to engage in reasonable efforts to confirm the identity of the individual requesting their personal data. This is done to ensure the information is provided only to the subject of the data. If we are unable to provide the individual with access to his or her EU, UK, or Swiss Personal Data or to correct the data, we will notify the individual. To request information relating to his or her personal data, or to request processing be