Privacy Policy (EU and USA) | Ubiquity Global Services

Privacy Policy

This Privacy Policy describes how Ubiquity Global Services, Inc., and its affiliates (collectively, “Ubiquity”) collect, use, and share personal data of employees, prospective employees, prospective clients, and clients of customers of Ubiquity and Ubiquity’s subsidiaries and affiliates around the world, including within the US, EU, and UK. This Privacy Policy does not apply to data concerning employees or individuals protected under the Philippine Data Privacy Act of 2012. Our Philippine affiliate, Ubiquity Global Services Philippines Inc., has its own regional Privacy Policy.


EU-U.S. Data Privacy Framework Commitments

Ubiquity complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Ubiquity has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles, UK Extension Principles, and Swiss-U.S. DPF Principles with regard to the processing of personal data received from the European Union, the United Kingdom, and Switzerland. In the event of any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, UK Extension Principles, or Swiss-U.S. DPF Principles, the applicable Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov.


U.S. Entities Adhering to DPF Principles

The following U.S. entities of Ubiquity adhere to the EU-U.S. DPF Principles, UK Extension Principles, and Swiss-U.S. DPF Principles:

  • Ubiquity Global Services, Inc.
  • Ubiquity Global Services US, Inc.

These entities are covered by Ubiquity’s DPF submission.



Employees

Types of Employee Data We Collect

The types of Personal Data that Ubiquity collects include the following:

  • Personal information, including name, address, telephone number, email address, date of birth, gender, national identification number, social insurance number or other tax identification number, and bank account information.
  • Employment related information, including job title, office location, work contact information, email address, department, supervisor, job responsibilities, accounting information, compensation information (including, but not necessarily limited to, base salary information, commissions, or bonuses and severance), pension information, benefit eligibility and elections, employment history, job application, interview evaluation, key dates (e.g., hire, rehire, service, termination, next review), incentive data (e.g., ratings and payment amounts), and performance information. Ubiquity also may receive Personal Data regarding an employee’s spouse, family members, or other dependents for emergency contact purposes. In addition, Ubiquity may receive Personal Data that is “sensitive” in a few instances. In particular, where permitted by applicable law, Ubiquity may receive information regarding criminal records and health or medical data for purposes of insurance claims resolution, payment of claims, and insurance underwriting purposes.


Use and Processing of Employee Personal Data

In addition to the other specific uses discussed in this Privacy Policy, Ubiquity uses employee Personal Data to perform its contracts with employees, to comply with legal obligations, and for its legitimate business purposes. Among other things, information may be used for the following specific purposes:

  • Annual compensation risk assessment;
  • Maintenance of employee directory and global email system;
  • Performance management;
  • Coordination of annual succession planning and talent management review;
  • Internal audits;
  • Record-keeping and internal reporting;
  • Maintenance of corporate insurance programs;
  • Compensation, including administration and analysis;
  • Payroll processing;
  • Pension plan administration;
  • Succession planning;
  • Benefits and personnel administration; and
  • Monitoring and enforcing compliance with company policies and procedures.


Sharing of Employee Personal Data

In addition to the specific situations discussed elsewhere in this Privacy Policy, Ubiquity may disclose employee Personal Data in the following situations:

  1. Affiliates and Acquisitions. Ubiquity may share your Personal Data with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires Ubiquity, or its assets, Personal Data may be transferred as part of that transaction.
  2. Other Disclosures with Your Consent. Ubiquity may share Personal Data with third parties where the individual as provided consent.
  3. Other Disclosures without Your Consent. Ubiquity may disclose employee personal data to comply with legal obligations, such as subpoenas, warrants, or court orders, or lawful requests by public authorities, including national security or law enforcement purposes. Ubiquity may also disclose Personal Data to establish or defend legal claims, to investigate fraud, or protect the safety of individuals or property.
  4. Service Providers. Ubiquity may share Personal Data with service providers that support payroll, human resources functions, technical infrastructure, and business operations. These providers are contractually obligated to safeguard Personal Data and use it for authorized purposes.



Prospective employees

Ubiquity will maintain the information you share with us for a period not to exceed one (1) year, unless otherwise required or permitted by applicable law.



Non-employee individuals

Types of Non-Employee Individual Data We Collect

The types of non-employee individual Personal Data that Ubiquity collects may include the following:

  • Name, address, telephone number, email address, date of birth, gender, national identification number, and social insurance number or tax identification number.


Use and Processing of Non-Employee Individual Data

Ubiquity uses and otherwise processes non-employee individual Personal Data based upon the consent of data subjects to perform contractual obligations with those individuals, to comply with legal requirements, and for its legitimate business interests. Among other things, information may be used for the following specific purposes:

  • Providing call center and other outsourced services to its customers;
  • Backing up data;
  • Internal audits;
  • Record-keeping and internal reporting;
  • Employment application processing;
  • Identification of website visitors;
  • Conducting analytics;
  • Monitoring and enforcing compliance with company policies and procedures; and
  • To provide information concerning products or services that may be of interest to our business client or prospective business clients.


Sharing of Non-Employee Individual Data

In addition to the specific situations discussed elsewhere in this Privacy Policy, Ubiquity may disclose non-employee individual Personal Data in the following situations:

  1. Affiliates and Acquisitions. Ubiquity may share your Personal Data with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires Ubiquity, or its assets, Ubiquity may also share your Personal Data with that company.
  2. Other Disclosures with Your Consent. Ubiquity may ask if you would like us to share your Personal Data with other unaffiliated third parties who are not described elsewhere in this Privacy Policy.
  3. Other Disclosures without Your Consent. Ubiquity may disclose Personal Data in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. This may include disclosing your information as part of a lawful request by a public authority in a country different from your residence. Such authorities may request your information for the purpose of national security. Ubiquity may also share Personal Data in order to establish or exercise our rights, to defend against a legal claim, to investigate, to prevent, or to take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies.
  4. Service Providers. Ubiquity may share Personal Data with service providers. Among other things service providers may help us to administer our services, conduct analytics, and aid customer request fulfilment.


Use of Artificial Intelligence for Transcription and Monitoring

At Ubiquity, we strive to enhance the quality and efficiency of our customer support services. To support these goals, we may use Artificial Intelligence (AI) technologies to transcribe and analyze call recordings and live chat interactions. This technology allows us to improve service quality, facilitate training, and monitor compliance with company standards.

Use of AI technologies is subject to applicable legal, contractual, and client-specific requirements.


How We Use AI for Transcription and Monitoring

  • Data Collected: AI may capture and transcribe voice data from customer calls and text data from live chat interactions. This data may include personal information shared by the customer during the conversation.
  • Purpose of Data Processing: The primary purposes for AI transcription are to monitor the quality of our customer service, support training initiatives, and ensure compliance with our policies. Transcribed data is analyzed to help us identify trends, improve service delivery, and resolve issues efficiently.
  • Access and Sharing: Transcribed content is accessible only to authorized personnel involved in training, quality assurance, and compliance functions. We do not share transcribed data with unauthorized third parties, except as required by law.
  • Data Security: Ubiquity takes rigorous measures to secure all transcribed and analyzed data. This includes encryption, access controls, and ongoing security audits to protect personal information processed by AI.
  • Opt-Out Option: Where applicable, we provide customers the option to opt-out of having their interactions processed by AI. However, opting out may affect the quality of certain services we provide.



General terms

Sale of Personal Data

Ubiquity does not sell your Personal Data.


Cookies

Ubiquity may, with your consent, use cookies and similar tracking technologies to assist in your usage of the website by delivering tailored content to you, collect anonymous statistics, and maintain log-in sessions;


Cross Site Tracking

We may, with your consent, allow third parties’ collection of Personal Data over time and across different websites, including our own.


Data Security and Integrity

Ubiquity maintains reasonable security measures to safeguard Personal Data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Ubiquity also maintains reasonable procedures to help ensure that such data is reliable for its intended use and is accurate, complete, and current. In the event we are required by law to inform you of any unauthorized access to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.


Cross Border Data Transfers

Ubiquity operates globally and may transfer Personal Data across its offices, affiliates, and service providers in multiple countries for the purposes described in this Privacy Policy.


Appropriate safeguards are implemented and maintained in accordance with applicable data protection laws to ensure that Personal Data remains protected when transferred across jurisdictions.


For Personal Data originating from the European Economic Area (EEA), United Kingdom, or Switzerland, Ubiquity relies on recognized transfer mechanisms, including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms, as applicable.


Ubiquity remains responsible for the processing of Personal Data it receives under the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, including onward transfers to third parties acting as agents on its behalf, in accordance with the DPF Principles.


Children’s Privacy Statement

To help ensure the safety and privacy of children, we comply with the Children’s Online Privacy Protection Act of 1998. We do not knowingly allow children under the age of 13 to publicly post or otherwise distribute personally identifiable contact information through our website. The website is not intended to solicit information of any kind from children under 13, and we have designed it to block our knowing acceptance of information from children under 13 whenever age-related information is requested.


Links to Other Websites

We may provide links to other websites for your convenience and information. These websites operate independently from our Site and are not under our control. These websites may have their own privacy notices in place, which we strongly suggest you review if you visit any linked websites. We are not responsible for the content of these websites, any products or services that may be offered through these websites, or any other use of these websites. You acknowledge that, by accessing or using our Site, you agree to be bound by all of the terms and conditions of use pertaining to our Site and contained in the Terms of Use (available at www.ubiquity.com), including this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Site.


Security of Information

We believe that keeping Personally Identifiable Information (“PII”) secure is one of our most significant responsibilities. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your PII, you acknowledge that: (a) there are security and privacy limitations of the Internet which are beyond our control; (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through our Site cannot be guaranteed; and (c) any such information and data may be viewed or tampered with in transit by a third party.



Your Data Rights

Individuals may have the ability to access, review, and update their own Personal Data in accordance with applicable law.


Making a Request

Employees should transmit requests for access to their own Employee Personal Data, in writing (an email message using a work email address is acceptable), to the Human Resources department and/or to the Ubiquity Privacy Contact identified below. All other individuals should transmit requests for access to their own Individual Data to the Ubiquity Privacy Contact identified below.


Corrections and Modifications

If an individual is aware of changes or inaccuracies in his or her Personal Data, that individual is responsible for informing the Ubiquity Privacy Contact (or, in the case of Ubiquity employees, the local Human Resources department) of such changes so that the Personal Data may be updated or corrected.


Retention

Ubiquity retains Personal Data for the period necessary to fulfil the business purposes outlined in this Privacy Policy and according to our retention policies. We shall only keep your personal data for as long as is reasonably necessary taking into consideration the purposes outlined above or to comply with legal, accounting, or reporting requirements under applicable law(s).


To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process the personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. For more information on where and how long your Personal Data is stored, contact the Ubiquity Privacy Contact.


Deletion

Ubiquity may delete your data if it believes that the data is incomplete, inaccurate, or that our continued use and storage are contrary to our obligations to other individuals or third parties. When we delete Personal Data, it will be removed from our active database, but it may remain in archives where it is not practical or possible to be deleted. In addition, we may retain your Personal Data as needed to comply with our legal obligations, resolve disputes, and/or enforce any of our agreements.


You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. All requests must be directed to the Ubiquity Privacy Contact below. Please note, deletion requests should: (i) Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and (ii) Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. Please note we will be limited in our ability to respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Once we receive and confirm your verifiable consumer request, we will proceed with deleting your personal information from our records, unless an exception applies.


Objection

Ubiquity relies on the processing of Personal Data that you have provided. If you revoke your consent for the processing of Personal Data then we may no longer be able to provide you services. In some cases, Ubiquity may limit or deny your request to revoke consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity.


California Privacy Rights

The California Consumer Protection Act (the “CCPA”) provides California residents with specific rights regarding their personal information. Details on the categories of personal information we collect, how we use that information, and the sources from which we collect information is contained throughout this Privacy Policy. Residents have the right to request that Ubiquity disclose certain information about our collection of your information, how we use your personal information, and to delete your personal information that Ubiquity may hold in certain circumstances. Should you exercise any of your rights, Ubiquity will not discriminate against you in any way. Ubiquity does not sell your personal information, however if you are a California resident and would like to make such a request, please reach out directly to our Ubiquity Privacy Contact using the contact information below.


Note that only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request. We cannot respond to your request if we cannot verify your identity and confirm the personal information relates to you.



Complaints

If you have a concern, question, or request about your privacy, please reach out directly to our Ubiquity Privacy Contact, Data Protection Officer using the contact information below. In all instances, you have the right to make a complaint at any time to your local authority, however we would appreciate the chance to address with your concerns and encourage you to contact us directly.


In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Ubiquity commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data in reliance on these frameworks.


Email: compliance@ubiquity.com

Mail: Ubiquity Global Services, Inc.

568 Broadway, STE 601, New York, NY 10012


Alternative Dispute Resolution Provider

Ubiquity commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com for more information or to file a complaint. The services of JAMS are provided at no cost to you.


Regulatory Oversight and Enforcement

Ubiquity Global Services, Inc. and its U.S. affiliates participating in the EU-U.S. Data Privacy Framework (DPF) are subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).


Binding Arbitration

Under certain conditions, individuals may, as a mechanism of last resort, invoke binding arbitration to resolve complaints regarding Ubiquity’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.


Ubiquity is obligated to arbitrate claims and follow the terms set forth in Annex I of the DPF Principles, provided that the individual has submitted the required notice to Ubiquity and complied with the procedures and conditions outlined in Annex I of the Principles.


Binding arbitration may only be invoked after other dispute resolution mechanisms have been exhausted, including:

  • Direct engagement with Ubiquity
  • Use of the independent dispute resolution mechanism (JAMS)
  • Cooperation with applicable data protection authorities



Contacting Ubiquity

Ubiquity Privacy Contact

Ubiquity has appointed an internal Data Protection Officer (DPO) for you to contact if you have any questions or concerns about our personal data policies or practices. The DPO can be contacted via email or postal mail as follows:


Email: compliance@ubiquity.com

Mail: Ubiquity Global Services, Inc.

Attn: Data Protection Officer

568 Broadway, STE 601

New York, NY 10012


If you are subject to the UK General Data Protection Regulation (GDPR), Ubiquity has appointed Ubiquity Global Services UK Ltd. as its UK GDPR representative in the UK pursuant to Article 27 of the UK GDPR. You can contact our UK DPO regarding matters pertaining to the UK GDPR by sending an email to compliance@ubiquity.com or by writing to Ubiquity Global Services UK Ltd., 25 Wilton Road, Victoria, London SW1V 1LW, United Kingdom.


CHANGES TO THIS PRIVACY POLICY

We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, we will either provide you with notice of the change or the policy that was in place at the time that you submitted personal information to us will govern the information that you provided.


This Privacy Policy applies only to the information that we collect on our Site and not to any information that we collect through other methods or sources, including sites owned or operated by our affiliates, vendors, or partners. Please note that when you link from our Site to other websites, this Privacy Policy no longer applies.


This Ubiquity Privacy Policy was last updated, effective February 2026.