Privacy Policy

Ergo is committed to complying with the applicable data privacy and security requirements in the countries in which it operates.Ergo complies with internationally recognized standards of privacy protection, and with various privacy laws globally including, but not limited to, the EU General Data Protection Regulation (GDPR). This Privacy Notice applies when providing advisory, risk, investigations, intelligence, diligence, and regulatory consulting, or other services to its customers.

We want you to know how we collect, use, share, and protect your personal data.

This Privacy Statement tells you:
  1. What this Privacy Statement covers
  2. What personal data we collect
  3. Purposes for which we use the personal data we collect
  4. How we share the personal data we collect
  5. How we protect the personal data we collect
  6. Your ability to review or modify personal information or unsubscribe from notices; Retention of your personal information
  7. How we handle personal information when we act as a processor
  8. Miscellaneous
  9. Information specific to the European Economic Area (EEA) and Swiss users
  10. Changes to this Privacy Statement

Ergo has designated a Privacy Officer who is responsible for our compliance with this Privacy Statement. Our Privacy ‎‎Officer may be contacted via email at legal@ergo.net.

1. What this Privacy Statement covers

This Privacy Statement applies to www.ergo.net (“website”) and Ergo’s practices for handling personal information when we act as controller of personal information provided to Ergo over the Internet by viewing or using the website or that we otherwise collect from or about you. Ergo will collect, store, and use personal information only in compliance with this Privacy Statement and applicable law.

In Section 7 below, we describe how we handle personal information provided by Ergo’s clients, and their third parties.

Ergo acts as a processor on behalf of our clients when processing personal information to provide the Service, including when we conduct a due diligence investigation and prepare a due diligence report (a “Due Diligence Report”) summarizing the results of that investigation, as described in more detail in Section 7 below.

Please carefully read this Privacy Statement to understand how we will treat the information you provide while visiting this website and that we may otherwise collect from or about you. This Privacy Statement also describes your choices regarding the use of your personal information, including how you can access, update and correct your personal information. Please note however that when we process personal information to provide the Service, the choices available to you are described in our clients’ respective privacy policies, and not this Privacy Statement. This Privacy Statement may change from time to time. Please check the Privacy Statement each time you use the website for the most current information.

We may obtain your consent to collect, use or disclose personal information. In some cases applicable law does not require your consent. ‎Your consent can be expressed or given through an authorized representative such as a lawyer, ‎‎agent or broker.‎ Consent may be provided orally, in writing or electronically. To withdraw consent at any time you may email us at legal@ergo.net. We will honor your withdrawal of consent, subject to legal, contractual and other restrictions. If you notify us that you withdraw consent, we ‎‎will inform you of the likely consequences of that withdrawal of consent, which may include our inability ‎to ‎provide certain services for which that information is necessary.‎

“Personal data” or “personal information”, as used in this Privacy Statement, means information that relates to you as an individually identified or identifiable person.

2. What personal data we collect

A. Information You Give Us

Ergo collects personal information from you or that you provide to us when accessing the website or otherwise. Based on the nature of the transaction, the types of personal information that may be collected from you include the following:

Contact Information: contact and identifying information (e.g. name, address, email address, phone and fax numbers, employer(s), job title(s)) in connection with your expression of interest in receiving information about, or your registering for, Ergo products or services and conferences;

Other Information: other personal information not listed above that you may voluntarily provide to us in an online form or through an email.

B. Information We Collect Through Technology on the website

1. First Party Cookies
Ergo’s website may use technologies, such as cookies, scripts and tags to analyze trends, to administer the website, to track users’ movements around the website and to gather demographic information about our user base.

When you visit the website,, we may collect general Internet data, including your domain name, the web page from which you entered the website, which pages you visited on the website, and how much time you spend on each page. To collect this information, a “cookie” may be set on your computer whenever you visit the website. A cookie is information sent by a web server to a web browser and stored by the browser. Each time the browser requests a page from the web server, the cookie communicates with the web server. This enables the web server to identify and track the web browser.

Cookies contain information that allows our web servers to recognize your IP address whenever you visit the website. We use cookies to record session information, passwords and the profile of subscribed clients of the site in order to provide better service when visitors return to the website. We use the information we collect to study how this website is used, so that we may improve and enhance your experience on our website. For example, we also may use information obtained from cookies to tailor how the website appears to you to better match your interests and preferences.

As is true of most websites, Ergo gathers certain information automatically and stores it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp and clickstream data. We do not link this automatically-collected data to personal information.

If you would prefer not to receive cookies, you can alter the configuration of your browser to refuse cookies. Most browsers allow you to refuse to accept cookies. (For example, in Internet Explorer you can refuse all cookies by clicking “Tools”, “Internet Options”, “Privacy”, and selecting “Block all cookies” using the sliding selector.) If you block cookies, some areas of the website (and other websites) will not function properly. For example, without cookies, a website typically cannot remember that you have logged in when you move from page to page in the website. In addition, you may be required to accept cookies in order to complete certain actions on the website, such as filling in a request form for our white papers or webinar recordings.

2. Third Party Cookies
We may use third-party cookies and other automated devices and applications, such as those provided by Google Analytics, Google AdSense, LinkedIn and HubSpot. These entities may use cookies and other tracking technologies, such as web beacons or local storage objects (LSOs), to perform their services in accordance with their own privacy policies. To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout. You can learn more about our use of cookies through our Cookies Policy.

We may track your online activities over time and across third party websites or online services. For example, we might use web beacons to help us determine what links or advertisers brought you to our website. We then track your activities on our website. We also may use web beacons to track your visits to other websites so that third party service providers can display Ergo advertisements to you on those other websites based on your activities while on the website (“remarketing”).

C. Limits on Our Collection, Use and Disclosure of Personal Information

Ergo will not collect personal information indiscriminately but will limit collection of personal information to ‎‎that which is reasonable and necessary for the purposes described in this Privacy Statement. We will also collect personal information as authorized by law‎.

Ergo will use and disclose personal information for the purposes set out in this Privacy Statement and as authorized by law.

3. Other Website

Our website contains links to other websites that may collect your personal information. If you click on one of those links, you will be taken to websites we do not control. This Privacy Statement does not apply to the information practices of that website. You should read the privacy policy of other websites carefully. We are not responsible for such third party’s sites.

We may also provide social media features that enable you to share information with social networks and to interact with us on various social media sites. Your use of these features may result in the collection or sharing of personal information about you, depending on the feature. We encourage you to review the privacy policies and settings on the social media sites with which you interact to make sure you understand the information that may be collected, used, and shared by those sites.

3. Purposes for which we use the personal data we collect

When your personal information is collected, Ergo may use it for the purposes described in this Privacy Statement, including compliance purposes. Ergo will only use your personal information for the purpose for which it was initially collected. We will only use your personal information for a materially different purpose if you consent.

The purposes for which we will use your personal information include the following:

  • Operating Ergo’s business and providing and administering Ergo’s products and services;
  • Sharing Due Diligence Reports with our clients;
  • Operating, maintaining and improving the website;
  • Responding to your questions and requests for information;Responding to requests for service quotes;
  • Responding to your inquiries about job postings
  • Providing newsletters and information about webinars and other events;
  • Registering users for promotional materials and events;
  • Contacting users for marketing, advertising, and sales purposes;
  • Contacting users with relevant information regarding system updates;
  • Responding to questions and feedback;
  • Aggregating information into non-identifiable information for benchmarking and other purposes;
  • Conducting market research and analysis;
  • Continuously evaluating and improving the online user experience;
  • Investigating violations of Ergo’s terms of use;
  • Network and information security;
  • Fraud prevention;
  • Reporting suspected criminal acts;
  • Managing or transferring our assets or liabilities, for example, in connection with an acquisition or merger, ‎the ‎provision of security for a credit facility, a corporate reorganization or the change of a supplier of products or services, provided that recipient entity uses the disclosed information solely for the purposes permitted by this Privacy Statement‎;
  • Maintaining accurate client records;
  • Collecting debts owed to Ergo;
  • Complying with the law or to protect the rights, property, or safety of Ergo, our users, or others; and
  • Responding to law enforcement, conducting legal processes (such as in the case of litigation, which may involve the sharing of personal information with a judicial authority or parties to a lawsuit), responding to subpoenas and other legal requests.

4. How we share the personal data we collect

We will share your personal information with third parties only in the ways that are described in this Privacy Statement unless you consent. Ergo does not sell or rent personal information to third parties.

Previously Described Purposes:
Ergo may disclose personal information as necessary or appropriate for any of the listed above in “Purposes for Which We Use the Personal Data We Collect.”

Other Service Providers:
Ergo may retain agents, subcontractors or service providers from time to time in relation to our business ‎or ‎the website. If we require a service provider to deal with your personal ‎‎information, we will take reasonable steps to ensure that the service provider adheres to privacy ‎‎procedures and will keep your personal information confidential. We will not provide more information ‎‎than is necessary to the service provider and will ensure that the information is returned or destroyed ‎once ‎the purpose for which it was given is filled.‎

Ergo is based in USA and our affiliates and service providers may be located in various jurisdictions and you acknowledge that personal ‎information ‎may be processed and stored in foreign jurisdictions with different ‎privacy laws, and ‎that the governments, courts or law enforcement or regulatory agencies in those ‎jurisdictions may be able ‎to obtain disclosure of that personal information through the laws of the foreign ‎jurisdiction.‎

Other Disclosures:
Ergo also may disclose your personal information and any other additional information available to Ergo for any of the following purposes:

  • for fraud prevention or reporting suspected criminal acts, or violations of Ergo’s terms of use;
  • to respond to law enforcement, conducting legal process (such as in the case of litigation, which may involve the sharing of personal information with a judicial authority or parties to a lawsuit), responding to subpoenas and other legal requests;
  • in connection with corporate transaction, such as a merger, acquisition or sale of all, or a portion, of Ergo’s assets;
  • to comply with the law or to protect the rights, property, or safety of Ergo, our users, or others;
  • to any other third party with your prior consent to do so;
  • to any third party without your consent as permitted or acquired by applicable law; and
  • in accordance with applicable law when managing or transferring our assets or liabilities, for example, in connection with an acquisition or merger, ‎the ‎provision of security for a credit facility, a corporate reorganization or the change of a supplier of products or services, provided that recipient entity uses the disclosed information solely for the purposes permitted by this Privacy Statement‎.

5. How we protect the personal data we collect

Ergo is committed to protecting the personal information that Ergo receives about individuals. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we cannot guarantee the security of your personal information, we utilize a combination of online and offline security technologies, procedures and organizational measures to help safeguard personal information against loss, misuse, and unauthorized access, disclosure, alteration and destruction.

We maintain physical, electronic and procedural safeguards to help safeguard the personal information that you provide to Ergo. We employ Transport Layer Security (TLS) data encryption when data is transmitted over the Internet to our website. In addition, we have security protocols and measures in place that aim to protect the personal information we maintain about you from unauthorized access or alteration.

Specifically, we have installed firewall, physical security and technological security measures, and encryption of certain information. Strong password protection protocols are used on our computers, and employees are kept up-to-date on our security and privacy policies. The servers used to store personal information are maintained in a secure environment with appropriate security measures.

In addition, access to client information is restricted to authorized personnel only. Only employees who need the personal data to perform a specific job (for example, a client service representative) are granted access to personal data. Employees with access to personal data are kept up-to-date on our security and privacy practices.

It is important for you to protect against unauthorized access to your password and to your computer. Be sure to close your browser after you have completed your visit to the website.

6. Your ability to review or modify personal information or unsubscribe from notices; Retention of your personal information

Access/Review/Modify:
You may have a right to access your personal information that we control.‎ In most cases, if you have provided your personal information to Ergo while browsing Ergo’s publicly accessible website or in connection with the Due Diligence Reports. If you wish to update such personal information (if any) that you have provided us, you may correct, update, amend or delete it by contacting us by email at the contact information listed below. If we do not make a requested change to your personal information, we ‎will annotate the personal information under our control with a note that the correction was requested ‎‎but not made‎. If our client controls your personal information, we will refer you to our client.

Also, if you no longer desire our updates or marketing services, you may email us at legal@ergo.net. We will promptly unsubscribe you from our mailing list.

How To Unsubscribe:
You may cancel or modify the email communications you have chosen to receive from Ergo by following the instructions contained in emails from us. Alternatively, you may email Ergo at unsubscribe@ergo.net with your request, what email addresses you wish not to receive Ergo emails. Within a reasonable period, we shall ensure that such email addresses are unsubscribed.

Data Retention:
Ergo will retain your information for the duration of the client relationship, if any. We also retain your personal data for at least twelve (12) months after our last interaction with you. Further, we will retain and use your information as necessary to comply with our legal obligations, resolve disputes or enforce our agreements. We will destroy, erase or make anonymous documents or other records containing personal information ‎as soon ‎as it is reasonable to assume that the original purpose is no longer being served by retaining the ‎‎information and retention is no longer necessary for a legal or business purpose.‎

7. How we handle personal information when we act as a processor

Our clients, and their third parties using our Service, provide us personal information. Ergo acts as a processor on behalf of its clients when processing personal information to provide the Service. To obtain information about how our clients process personal information, and the choices that may be available to you about how our clients process your personal information, please see our clients’ respective privacy policies.

When providing the Service, we act on behalf of our clients, and pursuant to their directions. Our clients may ask us to conduct a due diligence investigation on another organization (the “Client’s Third Party”) with which our client currently has, or is considering entering into, a business transaction or relationship. To initiate this due diligence investigation, our client may provide us with personal information on directors, shareholders, owners, or managers of Client’s Third Party. This personal information may include full name, date of birth, title, corporate affiliation, email address, phone number, passport or ID number. Before providing this personal information to us, our client must ensure that both our client and our Client’s Third Party have complied with any relevant data privacy legislation in their collection, use, storage and onward transmission of personal data to Ergo, including by providing applicable individuals with any legally required notice and by obtaining any legally required consent. Our Client’s Third Party also must acknowledge and agree that the due diligence investigation will include personal data relating to its directors, shareholders, owners, or managers. As part of our due diligence investigation, we may collect personal information on behalf of our client by administering questionnaires and processing personal information received in response to those questionnaires.

We will use the information that we collect as part of our due diligence investigation on behalf of our client to prepare a Due Diligence Report if our client requests that we do so.

When Ergo performs due diligence services for a client, we may disclose personal information submitted by the Client’s Third Party and/or our client through the website about the Client’s Third Party directors, shareholders, owners, or managers to the Ergo client that requested the due diligence services.

On behalf of our client, Ergo also may disclose this personal information to certain third parties as necessary to conduct the due diligence investigation (such as national corporate registers and providers of databases including perpetrators of bribery, anti-money laundering and other criminal activity), as well as to third party representatives or subcontractors authorized by Ergo to assist in the due diligence investigation. Ergo discloses to these representatives and subcontractors only the personal information they need to deliver to Ergo (for the benefit of Ergo’s client) the requested product or service. Ergo prohibits these third parties from using that information for any other purpose. Ergo requires, by written agreement, that these parties maintain commercially reasonable measures to protect the confidentiality of the personal information received from Ergo.

On behalf of our client, Ergo may transfer personal information submitted to it for a due diligence investigation to an overseas receiver to perform the investigation. These transfers will occur when Ergo is attempting to verify the corporate standing of a potential third party, any past litigation or other adverse information of directors, shareholders, owners, or managers during times they were in country other than the country where they currently reside. The Client’s Third Party and our client are responsible for obtaining the prior consent of the relevant directors, shareholders, owners, or managers to these cross-border data transfers.

8. Miscellaneous

A. Links To Third Party Sites
The website may include links to third party websites whose privacy practices may differ from those of Ergo. Please be aware that those third party websites are outside of our control and are not covered by this Privacy Statement. If you submit personal information to any of those sites, your information is governed by their privacy policies. If you have questions about how another site uses your information, consult that site’s privacy statement.

B. Policy Regarding Children
Ergo does not offer services to children under the age of 18 and this website is not directed to or intended for use by children under the age of 18. Ergo does not intend to collect information about children under the age of 18 through the website.

C. California Online Privacy Protection Act Compliance/Your California Privacy Rights
California residents who use the website may request that we provide certain information regarding our disclosure of your personal data to third parties for their direct marketing purposes. You can make such a request by email to legal@ergo.net.

9. Information specific to EEA and Swiss users

The information in this section, which should be read together with the rest of this Privacy Statement applies solely to users in the European Economic Area and Switzerland (collectively, the “EEA”) and solely with respect to personal data we collect as a controller.

Individuals who reside in the EEA (“EEA Individuals”) are not required by statute or by contract to provide any personal data to us.

A. Transfers of Personal Information
The personal data collected by Ergo may be transferred to USA or other jurisdictions (which may include Germany and the United Kingdom (which are member states of the EEA).

B. Legal Bases For Processing and Purposes
Ergo processes your personal data on the basis of your consent (where required by law), to provide you information about the products and services that we think might interest you; and to contact users who are not customers for marketing, advertising, and sales purposes.

Ergo also processes personal data as necessary for its legitimate interests in managing its business to increase its revenues and capitalize on opportunities while acting in compliance with law and managing risks. We rely on legitimate interests as the legal basis for processing personal data to share our Due Diligence Reports to maintain and improve the website; to aggregate information into non-identifiable information for benchmarking and other purposes; to conduct market research and analysis; to continuously evaluate and improve the online user experience; to try to ensure network and information security; to prevent fraud and to report suspected criminal acts; to manage or transfer our assets or liabilities, for example, in connection with an acquisition or merger, ‎the ‎provision of security for a credit facility, a corporate reorganization or the change of a supplier of products or services; and to protect the rights, property, or safety of Ergo, our users, or others in those cases where not required by law.

Ergo also processes personal data as necessary to perform a contract, such as to provide our contracted services to you; to operate Ergo’s business and provide and administer Ergo’s products and services; to set up client and Client’s Third Party accounts; to respond to your questions and requests for information; to respond to requests for service quotes; to respond to your inquiries about job postings; to provide newsletters and information about webinars and other events that you request; to register users for promotional materials and events at their request; to contact users with relevant information regarding system updates; to respond to questions and feedback; to investigate violations of Ergo’s terms of use; to maintain accurate customer records; and to collect debts owed to Ergo.

Ergo also processes personal data to comply with laws such as the Foreign Corrupt Practice Act and the UK Bribery Act, to protect the rights, property, or safety of Ergo, our users, or others where required by law; to respond to law enforcement; to conduct legal processes (such as in the case of litigation, which may involve the sharing of personal information with a judicial authority or parties to a lawsuit); and to respond to subpoenas and other legal requests.

C. Rights of EEA Residents

1.Right to Object to Processing for Direct Marketing or Legitimate Interests

EEA Individuals have the right to object to the processing of their personal data for purposes of Ergo’s direct marketing or, on grounds relating to the EEA Individual’s particular situation, for Ergo’s legitimate interests, by contacting Ergo at legal@ergo.net.

2.Other Individual Rights

Access, Correction, Deletion:
EEA Individuals have the right to access their personal data collected by Ergo and to request that Ergo update, correct, or delete their personal data as provided by applicable law. EEA Individuals also have the right to restrict Ergo’s processing of their personal data.

Data Portability:
EEA Individuals have the right to data portability concerning their personal data. Subject to certain limitations, the right to data portability allows EEA Individuals to obtain from Ergo, or to ask Ergo to send to a third party a digital copy of the personal data that they provided to Ergo. EEA Individuals’ right to access their personal data includes their right to receive a copy of all, or a portion, of their personal data in Ergo’s possession as long as Ergo’s providing the personal data would not adversely affect the rights and freedoms of others.

Point of Contact/Complaints:
EEA Individuals can exercise these rights by contacting legal@ergo.net. Ergo will respond to such requests in accordance with applicable data protection law. If EEA Individuals believe that their personal data has been processed in violation of applicable data protection law, they have the right to lodge a complaint with the relevant data protection authority in the country where they reside, where they work, or where the alleged violation occurred.

Withdrawing Consent:
EEA Individuals may use the contact information above, at any time, to withdraw their consent for the processing of their personal data where Ergo requires their consent as a legal basis for processing their personal data. Any withdrawal will apply only prospectively, and Ergo will continue to retain the personal data that EEA Individuals provided before they withdrew their consent for as long as allowed or required by applicable law.

3.EU Representative:

You can contact our representative at legal@ergo.net.

10. Changes to this Privacy Statement

Ergo may revise or update this Privacy Statement on occasion to reflect changes to our practices. If we make any material changes to this Privacy Statement, we will provide notification of such changes’ effective date prior to the changes taking effect through our website and directly to you if we have your contact information on file. Ergo will not provide less privacy protection, without your consent, to information collected under a prior Privacy Statement. We encourage you to refer back to this Privacy Statement for the latest information and the effective date of any changes.

Contact Us

Any inquiries, complaints or questions regarding this Privacy Statement should be directed in writing to our Privacy ‎‎Officer:

Email: legal@ergo.net

Last updated: July 15, 2021