Kroll Ontrack | Home

Privacy Policy

Suspect a Data Breach?

  • Call the Data Breach Hotline:
    1-877-300-6816 (24/7 access)

Contact Us

Learn More

HITECH Hotline
A solution for healthcare data breach response.

Learn more

Additional Resources

Red Flags Rule Training demo

Subscribe to our Data Security Newsletter

Receive our privacy awareness training

Privacy Notice

Last Revision Date: January 25, 2012

This website is administered by Kroll Cyber Security, Inc. and its affiliate, Kroll Information Assurance, Inc. (collectively “Kroll”).   Kroll recognizes the importance of protecting your privacy. The following Privacy Notice (“Privacy Notice”) provides important information about your privacy in connection with your use of Kroll’s website. It describes what information Kroll collects, how Kroll collects that information and how Kroll stores, uses, transfers, and discloses (collectively “Uses”) the collected information. Your continued use of this website constitutes your agreement with this Privacy Notice and any subsequent updates.   This Privacy Notice is subject to Kroll’s Website Terms of Use (“TOU”) located at http://www.krollcybersecurity.com/terms-and-conditions.aspx

Subsidiary, Affiliate, Partner and Third-Party Websites

This Privacy Notice applies to this website only. To the extent that this website permits you to link to or otherwise access the websites of Kroll’s subsidiaries, affiliates, partners, or other third-parties, separate privacy policies may apply to those linked websites. Those separate privacy policies may contain terms different than those contained in this Privacy Notice, and your access to and use of such linked websites are not governed by this Privacy Notice.  Kroll expressly disclaims any and all responsibility for your access to and use of such linked websites, as well as for any use of the information that you may provide, or any information that may be collected about you at such linked websites.

Purpose of Collection of Personal Information

While visiting the Kroll website you may be asked to voluntarily provide personal information in order to accomplish the purpose of your visit. For example, if you visit the Careers section of the website to explore employment opportunities, you may be asked to provide your email address, residence, education, work experience, and other similar information.

Information Collected from Cookies and Other Technologies

Kroll’s website, online services, applications, email messages, and advertisements, if any, may use “cookies” and other technologies such as pixel tags and web beacons to collect information about you (pixel tags and web beacons, also known as clear GIFs, action tags or web tags, are referred to in this Privacy Notice collectively as “Other Technologies”). A cookie is a small data file stored on your computer’s hard drive and accessed by your web browser. Where used, a cookie can associate the identification numbers built into the cookie with information about you that you may have provided to Kroll. This association allows Kroll to recognize your computer when you visit our website. Other Technologies can be used to tell where on the website you have visited, count how many users visited certain web pages within the website, and measure the effectiveness of advertisements, if any, and web searches.  Your web browser settings can affect the amount of information transmitted.
Like many websites, this website also automatically collects some tracking information and stores that tracking information in an anonymous, aggregated and non-personal format. This tracking information includes Internet Protocol (IP) addresses, browser type and language, Internet Service Provider (ISP) information, operating system used, date and time stamps and click stream data. This tracking information is used to understand and analyze trends, to administer the website, and to learn about user behavior on the site. However, Kroll may use IP addresses to help identify you when Kroll feels, in its sole discretion, that it is necessary to enforce compliance with this Privacy Notice, to protect its services, website, systems, information, employees, business partners, subsidiaries, affiliates, users, customers or others, or when required by law or for law enforcement purposes.

Disclosure of Personal Information to Third Parties

Kroll will not share personal information collected from you with third parties for purposes other than those in support of Kroll’s operations and as necessary to facilitate the purpose for which you provided it.  In some cases Kroll may share the information with its affiliated companies or with third party service providers retained by Kroll to provide services on its behalf. These affiliated companies or third party service providers will use your information only to accomplish the purposes for which the information was collected.  Any onward transfer of Personal Information of European Union or Swiss residents is pursuant to the Safe Harbor Privacy Frameworks, discussed later in this Privacy Notice.

Your Personal Information may also be shared under the following circumstances: (i) if Kroll is required to do so by law enforcement authorities or government agencies; and (ii) in connection with investigations or other efforts to prevent illegal activities or pertaining to public safety.

Kroll may disclose and transfer your personal information during a merger or during the divestiture of company assets. However, we will require the acquiring organization to agree to protect the privacy of your personal information consistent with this Privacy Notice.

Integrity, Protection and Retention of Your Personal Information

While Kroll endeavors to protect your personal information, we cannot warrant the security of any personal information, and ultimately you provide your personal information to us at your own risk. Kroll uses industry standard efforts and security practices to safeguard your personal information, and uses commercially reasonable efforts to employ security measures designed to protect your personal information from access by unauthorized persons.   Some of those measures include, but may not be limited to, encryption, firewalls and use of Secure Socket Layers (SSL).  Kroll retains your personal information for the period necessary to fulfill the purpose for which it was collected, as outlined previously in this Privacy Notice, unless a longer retention period is mandated or permitted by law.

Access to Personal Information

There may be times that you wish to access your personal information.  Kroll makes good faith efforts to provide you with access to your personal information so you can instruct us to correct or update the personal information if it is inaccurate, or delete your personal information if Kroll is not required to retain it by law or for a legitimate business purpose.  To receive a copy of your personal information, or to provide instructions to us on what you want corrected or updated, send us an e-mail at: information@kroll.com.

Opting Out: How You Control the Use of Your Personal Information

In the event you decide that you want to opt out from Kroll’s use of your personal information that you previously provided to Kroll, you may opt out of our use of your personal information by notifying Kroll by email at: information@kroll.com

European Union & Swiss Users: United States Department of Commerce Safe Harbor Certification

Kroll is self-certified with the United States Department of Commerce (DOC) as compliant with the European Union (EU) and Swiss Safe Harbor Privacy Frameworks. We abide by the privacy principles set forth by the DOC regarding the collection, use, transmission, and retention of Personal Information of residents of the EU and Switzerland. These privacy principles can be found at http://www.export.gov/safeharbor/eg_main_018236.asp. We have a mechanism for you to access, correct, or update your personal information, as described above. If there is an unresolved dispute as to the collection, use, transmission or retention of your personal information, we have designated the American Arbitration Society ww.adr.org as our independent resource mechanism to resolve these disputes. You may contact the American Arbitration Society by one of the following means:

Mail:  1633 Broadway, 10th Floor, New York, New York 10019
Phone:  1-800-778-7879 (Toll-Free)/ or 1-212-716-5800
Fax: 1-212-716-5905

Children

Kroll does not knowingly collect information from children under the age of 13 and does not target its websites to children under 13. Kroll encourages parents and guardians to take an active role in their children’s online activities and interests.

Changes to this Privacy Notice and Notification to You

Kroll reserves the right, in its sole discretion, to make changes to this Privacy Notice. When changes are made to the Privacy Notice, the “Last Revision Date” field at the top of the Privacy Notice will be updated accordingly. Changes to the Privacy Notice become effective upon posting and updating the “Last Revision Date”. Kroll encourages you to periodically review the Privacy Notice to be informed of any changes.

Questions and Comments

If you have any questions, comments, or suggestions on how we can make this website more useful, please contact us at information@kroll.com or by mail to:
Kroll Cyber Security & Information Assurance
100 Centerview Drive, Suite 300
Nashville, TN 37214