Out of respect for your privacy, we have implemented additional measures to comply with the obligations and rights associated with the collection of Personal Information as dictated by the laws governing the regions of our users.
- Disclosures for residents of Australia
If you are a resident of Australia, you have certain rights in relation to your Personal Information based on the Australian Privacy Act 1988 (“Privacy Act 1988”) that we comply with as part of our commitment to your privacy. This supplemental section, together with other relevant sections of the Policy, provides information about your rights and how to exercise them. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the Privacy Act 1988.
(a) Right to access and correct: You have the right to access Personal Information we hold about you. You also have the right to request corrections to your Personal Information if you think the information is inaccurate, out-of-date, incomplete, irrelevant or misleading.
(b) Right to restrict processing: You can request that we stop or restrict the processing of your Personal Information in certain circumstances, such as when you contest the accuracy of your data.
(c) Right to data portability: You have the right to request the transfer of your Personal Information to a different service provider as long as it is technically possible to do so or directly to you.
(d) Right to not be subject to automated decision-making: You have the right to opt out of decisions based solely on automated processing of your Personal Information, particularly when these decisions have legal or similarly significant effects on you.
(e) Right to anonymity: You are generally able to use a pseudonym or remain anonymous when interacting with us. However, in some circumstances, you may have to provide certain Personal Information. For example, we may require Personal Information to assess your eligibility for a program or service. We will inform you if you are not able to remain anonymous or use a pseudonym when dealing with us.
- Disclosures for residents of Brazil
If you are a resident of Brazil, you have certain rights in relation to your Personal Information based on the Brazilian General Data Protection Law (“LGPD”) that we comply with as part of our commitment to your privacy. This supplemental section, together with other relevant sections of the Policy, provides information about your rights and how to exercise them. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the LGPD.
(a) Right to know and access: You have the right to confirm whether we process your Personal Information and, if so, access it. This ensures you are fully informed about the data we hold and how it's used.
(b) Right to correct: You have the right to correct Personal Information if you find any of it in our possession to be incorrect or outdated as we are committed to maintaining the accuracy and relevance of your Personal Information.
(c) Right to anonymize and block: You can request the anonymization or blocking of Personal Information that is unnecessary, excessive, or not processed in compliance with the LGPD.
(d) Right to data portability: You have the right to transfer your data to another service provider or product supplier, promoting your freedom to choose services without losing your data history.
(e) Right to delete: If we have processed your data based on consent, you can request its deletion, except where law requires or permits us to retain it.
(f) Right to information about third parties: You can ask about the third parties with whom we share your data, ensuring transparency in our data sharing practices.
(g) Right to information on consent denial: You have the right to be informed about the consequences of not providing consent to make informed decisions about the use of your Personal Information.
(h) Right to withdraw consent: You can withdraw your consent for data processing at any time to ensure control over your Personal Information.
(i) Right to review automated decisions: You can request a review of decisions made solely based on automated processing of your data to ensure fairness and accuracy in processes that significantly impact you.
- Disclosures for residents of Canada
If you are a resident of Canada, you have certain rights in relation to your Personal Information based on the Personal Information Protection and Electronic Documents Act (“PIPEDA”) that we comply with as part of our commitment to your privacy. This supplemental section, together with other relevant sections of the Policy, provides information about your rights and how to exercise them. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the PIPEDA.
(a) Right to access: You have the right to access the Personal Information we hold about you if you wish to review, verify, or correct your information.
(b) Right to correct: We strive to maintain the accuracy of your Personal Information and will promptly make necessary corrections when you identify inaccuracies in your data.
(c) Right to withdraw consent: You can withdraw your consent regarding the handling of your Personal Information at any time, subject to legal or contractual limitations.
(d) Right to complain: You have the right to file a complaint with the Privacy Commissioner of Canada if you feel your Personal Information is being handled in a way that violates PIPEDA.
(e) Right to challenge compliance: You can challenge our compliance with PIPEDA, including how we handle your Personal Information, consent, access requests, and how we respond to your correction requests.
(f) Right to know about breaches: You have the right to be notified in cases of a security breach involving your Personal Information that poses a real risk of significant harm.
- Disclosures for residents of the EU/EEA and the UK
If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), or the United Kingdom (“UK”), you have certain rights in relation to your Personal Information based on the GDPR and the UK DPA that we comply with as part of our commitment to your privacy. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the GDPR and the UK DPA.
(a) Right to withdraw consent: You have the right to withdraw consent where you have previously given your consent to the processing of your Personal Information. To the extent that the legal basis for our processing of your Personal Information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
(b) Right to access: You have the right to learn if your Personal Information is being processed by us, obtain disclosure regarding certain aspects of the processing, and obtain a copy of your Personal Information undergoing processing.
(c) Right to rectification: You have the right to verify the accuracy of your information and ask for it to be updated or corrected. You also have the right to request us to complete the Personal Information you believe is incomplete.
(d) Right to object to the processing: You have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent. Where Personal Information is processed for the public interest, in the exercise of an official authority vested in us, or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection. You must know that, however, should your Personal Information be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn whether we are processing Personal Information for direct marketing purposes, you may refer to the relevant sections of this Policy.
(e) Right to restrict processing: You have the right, under certain circumstances, to restrict the processing of your Personal Information. These circumstances include: the accuracy of your Personal Information is contested by you and we must verify its accuracy; the processing is unlawful, but you oppose the erasure of your Personal Information and request the restriction of its use instead; we no longer need your Personal Information for the purposes of processing, but you require it to establish, exercise or defend your legal claims; you have objected to processing pending the verification of whether our legitimate grounds override your legitimate grounds. Where processing has been restricted, such Personal Information will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, to exercise or defense of legal claims, for the protection of the rights of another natural, or legal person or for reasons of important public interest.
(f) Right to delete: You have the right, under certain circumstances, to obtain the erasure of your Personal Information from us. These circumstances include: the Personal Information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure such as where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, to exercise or defense of legal claims.
(g) Right to data portability: You have the right to receive your Personal Information that you have provided to us in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance from us, provided that such transmission does not adversely affect the rights and freedoms of others.
(h) Right to complaint: You have the right to complain to a data protection authority about our collection and use of your Personal Information. If you are not satisfied with the outcome of your complaint directly with us, you have the right to lodge a complaint with your local data protection authority. For more information, please contact your local data protection authority in the EU or the EEA. This provision is applicable provided that your Personal Information is processed by automated means and that the processing is based on your consent, on a contract which you are part of, or on pre-contractual obligations thereof.
- Disclosures for residents of New Zealand
If you are a resident of New Zealand, you have certain rights in relation to your Personal Information based on the New Zealand’s Privacy Act 2020 (“Privacy Act 2020”) that we comply with as part of our commitment to your privacy. This supplemental section, together with other relevant sections of the Policy, provides information about your rights and how to exercise them. Unless otherwise expressly stated, all terms in this section have the same meaning as defined in the Privacy Act 2020.
(a) Right to Access: You have the right to access your Personal Information that we hold, enabling you to review and understand the data we have about you for transparency and accuracy.
(b) Right to Correction: If your Personal Information is incorrect or outdated, you have the right to request its correction, ensuring that the information we hold is accurate and up-to-date.
(c) Right to Make a Complaint: If you believe your privacy rights have been breached, you have the right to make a complaint to a data protection authority.
(d) Right to Object to Automated Decision-making: You can object to decisions made solely on automated processing of your Personal Information that have significant effects on you, ensuring a fair and transparent decision-making process.
(e) Right to Data Portability: Where applicable, you have the right to request the transfer of your Personal Information to another service provider if technically possible or directly to you.
(f) Right to Anonymity and Pseudonymity: Where possible, you have the option to interact with us without revealing your identity or by using a pseudonym, offering flexibility and control over your personal engagement.
(g) Notification of Data Breaches: In the event of a data breach that may harm your privacy, we will notify you promptly, taking immediate steps to mitigate any potential impacts.
- Disclosures for residents of the USA
If you are a resident of the United States, you may have certain privacy rights under applicable state privacy laws. This section describes the rights we support and how to exercise them, including for residents of states with comprehensive privacy laws (including, but not limited to, California, Colorado, Connecticut, Delaware, Iowa, Maryland, Utah, and Virginia). This section also applies to residents of other U.S. states to the extent their state privacy laws provide similar rights, and it should be read together with the other applicable sections of this Policy. This supplemental section, together with other relevant sections of the Policy, provides information about your rights and how to exercise them under the California Consumer Privacy Act and the California Privacy Rights Act (collectively, “CCPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CDPA”), the Delaware Online Privacy and Protection Act (“DOPPA”), the Iowa Consumer Data Protection Act (“ICDPA”), the Maryland Personal Information Protection Act (“PIPA”), the Utah Consumer Privacy Act (“UCPA”), the Virginia Consumer Data Protection Act (“VCDPA”), and any and all regulations arising therefrom. Unless otherwise expressly stated, terms used in this section have the meaning given to them under applicable U.S. state privacy laws.
In addition to the rights as explained in this Policy, if you provide Personal Information as defined in the statute to obtain Services for personal, family, or household use, you have the right to submit requests related to your Personal Information as permitted under applicable law. Note that there are circumstances when we may not be able to comply with your request such as when we are not able to verify your request or find that providing a full response conflicts with other legal obligations or regulatory requirements. You will be notified if it’s the case.
(a) Right to know and right to access: You have the right to request certain information we have collected about you. Once we receive and confirm a verifiable request from you, we will disclose to you, to the extent permitted by law:
- The specific pieces of Personal Information we hold about you.
- The categories of sources from which Information about you is collected.
- The purposes for collecting, selling, or sharing your Personal Information.
You have the right to request that the Personal Information is delivered in a format that is both portable and easily usable, as long as it is technically possible to do so.
(b) Right to correct: You have the right to request that we correct your inaccurate Personal Information taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information.
(c) Right to delete: You have the right to request deletion of your Personal Information.
(d) Right to opt-out of the sale and sharing: You have the right to opt-out of the sale of your Personal Information which may include selling, disclosing, or transferring Personal Information to another business or a third party for monetary or other valuable consideration.
(e) Right to opt out of targeted advertising: You may have the right to opt out of processing of your Personal Information for targeted advertising purposes, where required by applicable law.
(f) Right to opt out of profiling: You may have the right to opt out of certain profiling in furtherance of decisions that produce legal or similarly significant effects, where required by applicable law.
(g) Right to consent to or limit the use of your sensitive personal information: You have the right to consent to the use of your Sensitive Personal information and to direct us to restrict its use and disclosure solely to what is essential for carrying out or delivering the Services in a manner reasonably anticipated by an average user, or for certain business objectives as specified by law. However, we do not use Sensitive Personal Information for any purposes other than those legally permitted or beyond the scope of your consent.
(h) Right to non-discrimination: You have the right to not be discriminated against in the Services or quality of Services you receive from us for exercising your rights. We may not, and will not, treat you differently because of your data subject request activity, and we may not and will not deny goods or Services to you, charge different rates for goods or Services, provide a different level quality of goods or Services, or suggest that we would treat you differently because of your data subject request activity.
(i) California Shine the Light: California residents that have an established business relationship with us have the right to know how their personal information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law, or the right to opt out of such practices.
To exercise any of your rights, simply contact us using the details below. After we receive and verify your request, we will process it to the extent possible within our capabilities. Where required by applicable U.S. state privacy law, we will also honor opt-out preference signals (such as browser-based or device-based signals) for requests to opt out of certain types of processing.
- Other countries and general privacy rights
If you reside in a country not specifically mentioned in this policy, we are committed to protecting your personal data in accordance with internationally recognized privacy principles. Users from these regions may have rights similar to those outlined above and other data protection laws. These rights include:
- The right to access, correct, or delete your personal data.
- The right to restrict or object to certain types of processing.
- The right to withdraw consent for data processing.
- The right to data portability, where applicable.
- The right to opt out of targeted advertising and data sales, where required by law.
- The right to file a grievance with a relevant data protection authority.
- The right to nominate a representative to exercise your privacy rights on your behalf, if permitted by applicable regulations.