Privacy Statement

Effective Date: June 1, 2020
Last Updated: Oct 14, 2025

SoftSolutions Inc., doing business as Flex-Metrics (“Flex-Metrics,” “we,” “our,” or “us”), is committed to protecting the privacy and confidentiality of personal information we collect. This Privacy Policy describes (a) what information we collect, (b) how we use and share it, (c) how we protect it, (d) your rights and choices, and (e) other relevant information. By using our websites, services, or otherwise providing us personal information, you consent to the practices described in this Privacy Policy.

This website and our services are not intended for children under 13 years of age, and we do not knowingly collect information from children under 13.

1. Scope; Governing Laws & Cross-Border Transfers

1. This Privacy Policy covers personal information collected via this website and in connection with our services, unless a different agreement with a customer expressly supersedes it.

2. Applicable Laws. Depending on where you are located and where we operate, one or more data protection laws may apply (e.g. the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (as modified by the California Privacy Rights Act) (“CCPA/CPRA”), the Virginia Consumer Data Protection Act (VCDPA), etc.). We aim to comply with applicable laws to the extent we process personal information subject to them.

3. EU-U.S. / Swiss-U.S. Data Transfer Framework.

   • The EU–U.S. Privacy Shield was invalidated. The new EU–U.S. Data Privacy Framework is now the primary approved mechanism for transatlantic data transfers.

   • We rely on this (or other legal mechanisms such as Standard Contractual Clauses) to lawfully transfer personal data from the EEA/Switzerland to the U.S.

   • In case of any inconsistency between this Policy and the applicable data transfer framework, the framework’s obligations will govern.

4. If data protection authorities or law require it, we may process or transfer data in accordance with local requirements.

2. Definitions (Revised / Expanded)

• Personal Information / Personal Data: Information that identifies or is reasonably capable of identifying a natural person (directly or indirectly). This includes name, email, phone number, IP address, device identifiers, and more (see Section 4).

• Sensitive Personal Data / Sensitive Data: Categories requiring heightened protections under applicable laws (e.g. racial or ethnic origin, health, precise geolocation, biometric data). We generally do not collect such data, and if we do, we will treat it under stricter safeguards.

• Anonymous or De-identified Information: Data that cannot reasonably be used to re-identify a person.

• Controller / Processor: Where required by law, we define whether Flex-Metrics is a “data controller” (deciding purposes and means) or a “processor” (processing on behalf of others) with respect to specific data flows.

3. What Information We Collect

(a) Voluntarily Provided Information

We collect personal information you provide through:

• Contact forms, feedback, surveys, chats, or service request forms

• Account registration, service subscriptions, or job applications

• Email or other correspondence

• Referral, partner, or affiliate programs

• Billing, payment, or financial transactions

• Third-party providers (e.g. integration partners, identity verification, analytics providers)

(b) Automated and Technical Information

We and our third-party service providers may automatically collect:

• Device & browser data: IP address, browser type and version, operating system, device identifiers

• Usage and analytics data: pages visited, referral/exit pages, time stamps, click path, session duration

• Cookies and similar technologies: see Section 5

• Log data and system data: system events, performance metrics, crash logs

(c) From Third Parties

We may receive personal information from third parties (e.g. data enrichment services, partners, affiliates, public sources). We require that such third parties have lawful bases for providing the data to us.

4. Legal Bases for Processing (Where Applicable)

When required (e.g. under GDPR), we process personal data based on one or more of the following lawful bases:

• Consent (you agree to it)

• Performance of a contract or to take steps before entering a contract

• Compliance with a legal obligation

• Legitimate interests (except where overridden by your rights)

• Vital interests (rare use)

We document which basis applies to each processing purpose.

5. Cookies, Tracking & Similar Technologies

1. Cookies and similar technologies (e.g. local storage, web beacons) may be used to recognize your device, remember preferences, analyze usage, or for advertising.

2. We categorize cookies into:

   • Strictly necessary (essential for the website to function)

   • Preferences / functional

   • Performance / analytics

   • Advertising / targeting

3. We will (or do) provide a cookie consent banner or mechanism to allow you to accept or decline non-essential cookies (e.g. analytics, advertising). Simply Good Work+1

4. You can control or delete cookies via your browser settings (though some site features may not function properly if you disable cookies).

5. We may use third-party tracking services (e.g. Google Analytics) under strict conditions (e.g. anonymizing IP addresses). You can opt out (e.g. via browser settings or via links provided by those services).

6. How We Use Information

We may use personal information for purposes including, but not limited to:

• Providing, maintaining, and improving our services

• Responding to inquiries, requests, or support issues

• Processing transactions, payments, or billing

• Communication, including service updates, newsletters, marketing (where permitted)

• Personalization, recommendations, and analytics

• Fraud prevention, security, and debugging

• Compliance with legal obligations and enforcement of rights

• Integration with partner or third-party services

• Hiring, recruitment, or human resources processing

We limit use of personal information to purposes compatible with the original collection or as otherwise disclosed to you.

We do not use or access the data you transmit using our services for unrelated purposes (unless permitted in an agreement).

7. Sharing & Disclosure of Information

We may share personal information with:

• Our service providers, partners, agents, subcontractors acting on our behalf (under contractual obligations to protect data)

• Analytics or advertising partners (only with your consent where required)

• In the context of mergers, acquisitions, or asset transfers (with notice or with consent as required)

• Law enforcement, regulators, or as required by subpoena, court order, or other legal process

• To protect rights, property, or safety

We will require that recipient third parties maintain security and confidentiality, and only use personal information consistent with this Privacy Policy.

We do not sell your personal information except where you expressly authorize it or where required under applicable law. (In jurisdictions like California, we provide a “Do Not Sell My Personal Information” link under CPRA/CCPA.)

8. Your Rights & Choices

Depending on your location and applicable law, you may have rights including:

• Right to access or obtain a copy of your personal data

• Right to correct or update inaccuracies

• Right to delete or request removal of your personal data (“right to be forgotten”)

• Right to restrict or object to further processing

• Right to data portability (obtain a machine-readable copy)

• Right to opt out of sale or sharing (if applicable)

• Right to withdraw consent at any time (without affecting earlier processing)

• Right to lodge a complaint with a supervisory authority

To exercise these rights, contact us at the contact details below. We will undergo identity verification before fulfilling request (where required). We may reject requests that are manifestly unfounded, excessive, or would violate legal obligations.

We will respond to your requests within the timeframes required by applicable laws.

You can also opt out of promotional emails by following the “unsubscribe” link or contacting us. It may take up to 10 business days to process opt-out requests.

9. Security & Retention

1. We implement reasonable administrative, technical, and physical safeguards (e.g. encryption, access controls, regular audits) to protect personal information from unauthorized access, disclosure, alteration, or destruction.

2. However, no system is completely secure, and we cannot guarantee absolute security.

3. We retain personal data only as long as necessary to fulfill the purposes described (or as required by law). We delete or anonymize data when no longer needed.

4. In case of a data breach, we will follow applicable legal obligations (e.g. notifying affected individuals and regulators within required timeframes).

10. International Transfers & Cross-Border Considerations

Because our operations are global, we may transfer personal information to locations outside your country (e.g. U.S., EEA). When we do, we ensure appropriate safeguards (e.g. data transfer agreements, EU Standard Contractual Clauses, Data Privacy Framework participation, or other legal bases).

11. Updates & Changes to This Policy

We may update this Privacy Policy periodically (e.g. to reflect changes in law or business practices). The “Last Updated” date will reflect the change.

For material changes affecting data collected prior to the update, we will notify you via email or by posting a notice on our website. You will have the opportunity to accept or decline the new terms (as required by law).

We retain prior versions of this policy for audit traceability.

12. Contact & Dispute Resolution

If you have questions, concerns or believe we have not honored this Policy, please contact:

Email: support@flex-metrics.com
Mail: SoftSolutions Inc. / Flex-Metrics
709 S. Jefferson St., Suite 100
Roanoke, VA 24016
Attn: Privacy Officer

For individuals in the EEA or Switzerland, you may also contact your local data protection authority.

If dispute resolution mechanisms apply (e.g. under data transfer frameworks), they will be described to you in relevant notices.

13. Miscellaneous

• Our website may contain links to third-party sites. We are not responsible for their privacy practices — please review their own policies.

• This Privacy Policy does not apply to anonymized or de-identified data, or to information collected via third-party services not governed by us.

• If any provision of this policy is held invalid, the remainder will continue in full force.