Privacy Policy

Last updated: June 30, 2023

INTRODUCTION

This Privacy Policy ("Policy") delineates the protocols for the collection, utilization, disclosure, and safeguarding of Personal Data by Lean Factor ("Company," "We," "Us," or "Our") through the digital platform accessible at https://www.leanfactor.com (the "Website"). By accessing or using the Website, you ("You," "Your," or "User") consent to this Policy, our Terms of Use, and any other successively cited or disclosed terms (collectively referred to as "TOU"). This consent is a legally binding agreement between You and the Company.

SCOPE AND APPLICABILITY

This Policy applies to all Users of the Website, irrespective of their geographical location. It includes specific provisions for residents of California, Virginia, Colorado, Connecticut, Utah, Brazil, Switzerland, and the European Union. It comprehensively outlines our practices regarding the collection, processing, and safeguarding of Your Personal Data, and it is in compliance with all applicable laws and regulations.

MODIFICATIONS AND AMENDMENTS TO THIS PRIVACY POLICY

We reserve the right to modify or update this Policy at any time, at our sole discretion. Changes will be effective immediately upon posting on the Website. Your continued use of the Website following any changes signifies Your acceptance of these changes. We will endeavor to notify Users of any significant changes via email and/or a prominent notice on our Service. However, you are responsible for ensuring we have an up-to-date email address for you and reviewing this Privacy Policy for changes periodically. If alterations involve consent-based processing, we will seek fresh consent from You.

DEFINITIONS, CLARIFICATIONS, AND LEGAL REFERENCES

This section includes definitions and clarifications of terms such as Account, Device, Personal Data, Transfer of Your Personal Data, Usage Data, User, Consumer, Data Subject, Data Processor, Company, Data Controller, Business, This Website, Service, "Do Not Track," and Reference to the European Union. These terms are defined in accordance with the applicable laws and regulations.

EQUAL PROTECTION OF USER DATA

This website shares User Data only with third parties carefully selected to ensure that they provide the same or equal protection of User Data as stated in this privacy policy and requested by applicable data protection laws. Further information on data processing and privacy practices by third parties can be found in their respective privacy policies.

RIGHT TO OBJECT TO PROCESSING

Users have the right to object to the processing of Personal Data under certain circumstances. This includes processing based on public interest, official authority, or the Owner's legitimate interests. A substantial, situation-specific justification must support the objection. Users also have the right to object to processing for direct marketing purposes at any time without charge or explanation.

EXERCISING USER RIGHTS

Users may exercise their rights through the contact details provided in this Policy. Requests are free and will be addressed within one month or as applicable law requires. The Owner will communicate any rectification, erasure, or processing restrictions to recipients unless it is impractical or involves excessive effort.

LEGAL BASIS AND PURPOSES FOR PROCESSING

We process Personal Data under various legal bases, including but not limited to consent, contractual obligations, legal compliance, public interest, and legitimate interests, as detailed in this Policy. Personal Data may be used for legal purposes in Court or during the stages leading to possible legal action. Users acknowledge that the Owner may disclose Personal Data upon request by public authorities in accordance with applicable laws and regulations.

ADDITIONAL DATA INFORMATION

This Website may gather files recording interactions or utilize other Personal Data for operational purposes. Additional Information not contained in this Policy can be requested from the Owner.

"DO NOT TRACK" REQUESTS

Because there is no legal or industry consensus yet on how “Do Not Track” signals should be recognized or honored; this website does not support “Do Not Track” requests at this time.

To determine whether any of the third-party services it uses honor the “Do Not Track” requests, please read their privacy policies.

This processing constitutes a sale based on the definition under the CCPA. In addition to the information in this clause, the User can find information regarding how to opt out of the sale in the section detailing the rights of Californian consumers.

UNDERSTANDING COOKIES AND TRACKING TECHNOLOGIES

Cookies are small files stored on Your device to enhance user experience and provide personalized content. We may use Cookies or other tracking tools to provide the service requested by the User and for other purposes described in this document and our Cookie Policy. We employ Cookies, beacons, tags, scripts, and other tracking technologies to monitor activity and retain Information. The Website uses Trackers as described in the Cookie Policy.

LINKS TO OTHER WEBSITES

Our Service may provide links to other websites not under our control. We recommend reviewing each website's privacy policy. We disclaim responsibility for the content, privacy policies, or practices.

PSEUDONYMOUS USE

When registering for this website, Users have the option to indicate a nickname or pseudonym. In this case, User's Personal Data shall not be published or made publicly available. Any activity performed by Users on this website shall appear in connection with the indicated nickname or pseudonym. However, Users acknowledge and accept that their activity on this website, including content, information, or any other material possibly uploaded or shared on a voluntary and intentional basis, may directly or indirectly reveal their identity.

PUSH NOTIFICATIONS

This website may send push notifications to the User to achieve the purposes outlined in this privacy policy.

Users may, in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then change those settings for this website, some or all of the apps on the particular device.

Users must be aware that disabling push notifications may negatively affect the utility of this website.

PUSH NOTIFICATIONS BASED ON THE USER'S GEOGRAPHIC LOCATION

This website may use the User's geographic location to send push notifications for the purposes outlined in this privacy policy. Users may, in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then changing those settings for some or all of the apps on the particular device. Users must be aware that disabling push notifications may negatively affect the utility of this website.

TRACKER DEFINITION

Tracker refers to any technology enabling the tracking of Users, including Cookies, unique identifiers, web beacons, embedded scripts, e-tags, fingerprinting, etc.

COLLECTION OF PERSONAL DATA AND PERSONAL INFORMATION SOURCES

We collect Personal Data independently or via third parties. The categories of Personal Data collected are detailed in specific sections of this Policy or through explanatory notices displayed prior to data acquisition. We collect Personal Information from you directly, indirectly, automatically, and from Service Providers. This includes forms, preferences, purchases, cookies, third-party vendors, etc.

USAGE OF PERSONAL INFORMATION

We may employ Your Personal Data for various purposes, including but not limited to Service Management, Account Management, Contractual Performance, Communication, Advertising, Business Transfers, and Miscellaneous Purposes as detailed in this Policy.

SHARING OF PERSONAL DATA

Your Personal Information may be shared with Service Providers, Affiliates, Business Partners, and Other Users or With Your Consent, as this Policy outlines. Any sharing of Personal Data will be in compliance with applicable laws and regulations.

CONTACTING THE USER

By filling in the contact form with their Data, the User authorizes this website to use these details to reply to requests for information, quotes, or any other kind of request as indicated by the form’s header.

Personal Data processed: city; company name; country; county; date of birth; email address; fax number; field of activity; first name; gender; last name; number of employees; phone number; physical address; profession; state; Tax ID; Trackers; Usage Data; User ID; various types of Data; website; ZIP/Postal code.

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; employment-related information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

Mailing list or newsletter (this website)

By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up for this Website or after making a purchase.

Personal Data processed: city; company name; country; county; date of birth; email address; first name; gender; last name; phone number; physical address; profession; state; Trackers; Usage Data; website; ZIP/Postal code.

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; employment-related information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

PROCESSING TECHNIQUES AND LOCATIONS

We implement appropriate security measures to prevent unauthorized access, disclosure, alteration, or unauthorized destruction of the Data. However, no method of transmission over the Internet or electronic storage is 100% secure. Personal Data is processed at Our operating offices and other locations where parties involved in the processing are situated. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. Users are entitled to learn about the legal basis for such transfers and the security measures undertaken.

DATA ACQUISITION FROM THIRD-PARTY SOCIAL MEDIA PLATFORMS

We facilitate account creation and login through Third-party Social Media Services, including Google, Facebook, and Twitter. We may collect Personal Data linked to your Third-Party Social Media Service account. You may opt to share additional Information with the Company via your Third-Party Social Media Service account, granting us rights to utilize, share, and retain it in line with this Policy.

USER'S RIGHTS AND CONTACT INFORMATION

Users have specific rights under applicable laws, including the right to access, rectify, delete, or restrict their Personal Data. Requests to exercise these rights can be directed to:

Owner and Data Supervisor:
Lean Factor
5407 N Haverhill Rd #337
West Palm Beach, FL 33407
Legal Advocate: To be disclosed
Email: Privacy@leanfactor.com
Phone: 1-800-818-7115

CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)

INTRODUCTION

This Notice is crafted exclusively for the residents of the State of California, United States of America, in strict adherence to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), and any subsequent amendments, enactments, or regulations. All terms and definitions utilized herein shall be interpreted in conformity with the meanings ascribed under the CCPA and CPRA, reflecting our commitment to transparency, compliance, and the protection of your privacy.

SCOPE AND LIMITATIONS

This Notice serves as a supplement to other sections of our privacy policy and shall supersede any inconsistent or conflicting provisions therein with respect to California residents.

The provisions of this Notice shall not extend to information that does not qualify as "personal information" as meticulously defined under CCPA and CPRA. This exclusion encompasses but is not limited to, anonymous, deidentified, aggregated, publicly available information as meticulously defined in the relevant statutes.

In the event of processing de-identified personal information, neither we nor any third party will undertake to reidentify such information, adhering to the principles of data minimization and purpose limitation.

INFORMATION "SHARING," "SELLING," COLLECTION, AND USAGE NOTICE (CCPA)

For the purposes of this Notice, "Personal Information" and "Sensitive Personal Information" shall be understood as defined by the CCPA.

Information "Sharing" and "Selling"

• Affirmation: We categorically affirm that we do not "sell" or "share" Personal Information in exchange for monetary or other valuable consideration, in alignment with the CCPA's definitions.
• Age Limitation: We neither willfully nor knowingly sell or share the Personal Information of consumers under the age of sixteen (16) years for cross-context behavioral advertising, upholding the rights of minors.

Collection and Usage Notice

• General Practices: Information regarding the categories, methods, and purposes of Personal Information collection is detailed herein and further elaborated in the “Detailed Information on the Processing of Personal Data” section.
• Categories of Personal Information: A comprehensive list of the categories of Personal Information that may have been collected within the past twelve (12) months is provided. This includes but is not limited to, Identifiers, Customer Records, Protected Classifications, Commercial Information, Biometric Information, Internet Activity, Geolocation Data, Sensory Data, Employment Information, Non-public Education Information, and Inferences.
• Exceptions: Personal Information does not encompass publicly accessible data from governmental records, deidentified or consolidated consumer data, and data exempted under specific laws such as HIPAA, FRCA, GLBA, FIPA, etc.

 YOUR CALIFORNIA CONSUMER PRIVACY ACT (CCPA) PRIVACY RIGHTS

 As a resident of California, the CCPA bestows upon you the following rights:

 Right to Know and Access: You may request information about the categories, specific pieces, sources, purposes, and third parties related to your personal information.

• Right to Notification: You are entitled to be informed about the accumulation and intended use of your Personal Data.
• Right to Disclosure: We will disclose our practices concerning your Personal Information upon request validation.
• Right to Opt-Out: You may direct us not to sell your Personal Information.
• Right to Deletion: Subject to legal exceptions, you may request the deletion of your Personal Data.
• Right to Non-Discrimination: We pledge non-discriminatory practices regarding the exercise of your privacy rights.

Details on how to exercise these rights are provided within this Notice.

SENSITIVE PERSONAL INFORMATION CATEGORIES AND USAGE

• Categories Gathered: Includes passwords, etc., with no additional categories collected without prior notification.
• Use for Business or Commercial Purposes: This may include Service Operation and Delivery, Legal Compliance, Security and Fraud Prevention, and Internal Administration.

The use of your Personal Data for these purposes is further detailed in the "Use of Your Personal Data" section.

Management and Disclosure of Personal Information

General Principles: We are committed to responsibly handling your Personal Information in accordance with applicable laws and regulations, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). The principles outlined herein reflect our dedication to privacy.

 Disclosure Categories:

 Business Transactions:

• Merger & Acquisition: In the event of a merger, acquisition, asset sale, or a similar transaction, your Personal Data may be transferred. Notification will be provided in advance, including details of any new Privacy Policy that may apply.

• Legal Obligations and Law Enforcement:
• Compliance: To comply with legal obligations, lawful requests from public authorities, courts, or government agencies.
• Protection & Defense: To fulfill legal duties, protect and defend our rights or property, prevent or investigate misconduct related to the Service, safeguard users' or the public's safety, or shield against legal liability.

• Sensitive Personal Information Control:
• Limited Use: Restriction upon your request, as necessary, to deliver services or goods within reasonable consumer expectations.
• Lawful Purposes: Utilization for specific lawful purposes in accordance with applicable laws.
• Unrestricted Right: You may request cessation of use or disclosure, and we will comply and instruct our contractors likewise.
• Contact and Compliance: Please refer to the contact details in this document for enforcement.

• Utilization of Your Personal Information:
• Purpose: For operating this Website, commercial websites, legal compliance, and rights defense.
• Consent: Explicit consent is required for unexpected or incompatible purposes.

• Preservation & Retention:
• Duration: Retention only for necessary purposes unless stated otherwise.

• Collection & Origin:
• Sources: Information collected directly or indirectly from you or third parties connected to this Website.

• Dissemination to Third Parties:
• Definition & Disclosure: Further details are available in the "Detailed Information on the Processing of Personal Data" section.

• Trade or Exchange of Personal Information:
• Sale & Sharing: As defined by the CCPA, including specific terms for third-party sharing.

• Contact Information: For further details or inquiries, please refer to the contact information in this document.

Section 2: Authorized Agent

 Agent Procedure:

 Submission: via email at CCPA@leanfactor.com.

Consumer Verification: Consistent with our verification process.

Proof of Authorization: Evidence of authorization is required, including direct verification.

Power of Attorney: Statutory power pursuant to California Probate Code sections 4121-4130.

1. Additional Assistance: Contact us with any questions or for additional information.

 Section 3: Opt-Out Rights for the Trade or Exchange of Personal Information

• General Rights: Includes the right to opt-out of processing, selling, or sharing Personal Information for targeted advertising, profiling, or other significant effects.
• Methods to Exercise Rights: Including direct contact and privacy choices link on our Website.
• Global Privacy Controls: Opt-out using global privacy controls, such as the Global Privacy Control (GPC).
• Follow-Up: A 12-month waiting period will apply after opting out.

Section 4: Privacy Rights under the California Consumer Privacy Act (CCPA)

• Right to Access and Portability: You may request disclosure and portability of Personal Information as detailed below.
• Scope of Disclosure: Disclosure encompasses the past 12 months and will be in a "portable" format if possible.
• Exercising Your Rights: Please follow the procedures in this policy or contact us using the information provided.
• Response Time: We will respond to verifiable requests in accordance with applicable legal requirements.

CONTACT, INQUIRIES, AND COMPLAINTS

Should you have any questions, require further information about this Notice, or wish to exercise your rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), please do not hesitate to contact us using the details provided below:

Email Address: CCPA@leanfactor.com

Phone Number: 1-800-81807115

Website Contact Page: https://www.leanfactor.com/pages/contact-support

Postal Address: 5407 N Haverhill Rd #337, West Palm Beach, FL 33407 USA

Your privacy rights are paramount to our commitment to transparency, compliance, and adherence to all pertinent laws and regulations, including but not limited to the CCPA and CPRA.

We endeavor to handle all inquiries, concerns, and complaints with fairness, integrity, and due diligence, in line with our legal obligations and our stringent internal policies and procedures. Our practices are structured in alignment with the CCPA/CPRA, reflecting our unwavering dedication to safeguarding your privacy and promoting trust.

Procedure for Complaints and Concerns:

1. Initial Contact: Please reach out to us using the contact details provided, including a brief description of your inquiry or concern. We will acknowledge receipt of your communication promptly.
2. Investigation: We will thoroughly investigate your inquiry or complaint and may request additional information or documentation from you to assist in our investigation.
3. Response: We will provide a substantive response detailing our findings and any actions taken or to be taken within a reasonable time frame consistent with legal requirements.
4. Appeal: If you are dissatisfied with our response, you may appeal our decision, providing further details or evidence to support your case.
5. External Resolution: Should our internal resolution process not satisfy your concerns, you may escalate your complaint to the relevant legal authority, such as the California Attorney General's Office.

Please be assured that we will treat your inquiry or complaint with the utmost confidentiality and professionalism. We are committed to fostering a relationship of trust and mutual respect with you and will work assiduously to resolve any matters pertaining to your privacy rights and our obligations.

COLORADO PRIVACY ACT NOTICE (CPA)

INTRODUCTION

This section of our Privacy Policy ("Policy") is specifically tailored for consumers domiciled in the State of Colorado in compliance with the Colorado Privacy Act (CPA). The terminology used herein retains the meaning as defined by the CPA and pertains solely to "personal data," excluding deidentified or publicly available information.

CATEGORIZATION OF PROCESSED PERSONAL DATA

We collect, disclose, and retain personal data as described in the following sections:

Information Collection: We collect various types of personal data, as outlined in this Policy's "Information We Collect" section.

Disclosure to Third Parties: We may disclose your personal data to third parties. The categories of third parties and the purposes for such disclosure are provided in the "How We Disclose Information" section of this Policy.

Data Retention: We retain your personal data for a period as specified in the "How Long We Keep Your Data" section of this Policy.

Purposes of Processing: We process your personal data for various purposes, as detailed in the "Purposes of Processing" section of this Policy.

SALE AND TARGETED ADVERTISING OF PERSONAL DATA

We neither sell your personal data in exchange for valuable consideration nor process it for targeted advertising as defined by the CPA.

PROFILING

We perform automated processing of your personal data to evaluate, analyze, or predict personal aspects related to, for example, your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. Such profiling activity is done in furtherance of decisions that may result in the provision or denial of, for example, financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, healthcare services, or access to essential goods or services.

You always have the right to opt-out of this kind of profiling activity. To fully exercise this right to opt-out, you can contact us at any time using the contact details provided in this document. To find out more about your rights and how to exercise them, you can consult the section of this document outlining your rights under the CPA.

YOUR RIGHTS UNDER THE CPA

As a Colorado consumer, you have the following rights under the CPA:

Right to Access: You have the right to confirm whether we process your personal data and to receive a copy of your personal data in a portable and readily usable format.

Right to Delete: You have the right to request the deletion of your personal data, subject to certain legal exceptions.

Right to Non-Discrimination: You have the right to exercise your privacy rights without receiving discriminatory treatment, such as changes in the price or quality of goods or services, except where it is reasonably related to the value provided by your data.

Right to Opt-Out: Given that we do not sell personal data, process targeted advertising, or engage in certain profiling, there is no need to exercise an opt-out right.

Authorized Agents: You may designate an authorized agent to make a request on your behalf, subject to certain requirements.

Right to Correct: You have the right to correct inaccuracies in your personal data.

Authenticating Your Request: We will verify your identity before processing your request and may request additional information if necessary.

Right to Appeal: If you are dissatisfied with our response, you have the right to appeal our decision within 90 days or file a complaint with the Colorado Attorney General’s Office.

GENERAL PROVISIONS

This Colorado Privacy Notice is an integral part of our broader Privacy Policy and exclusively pertains to consumers in Colorado. We employ the term "Personal Data" as defined in the CPA, have provided a synopsis of relevant categories, and abstain from gathering sensitive data unless otherwise disclosed.

For comprehensive details on these activities, please refer to the specific sections within this document, such as "Detailed Information on the Processing of Personal Data."

CONCLUSION

We are committed to adhering to the CPA's guidelines and providing you the opportunity to control your personal data. Should you have any concerns or wish to exercise your rights, please contact us using the details provided in this document. If you believe your rights have been violated, you may file a complaint with the Colorado Attorney General’s Office.

This revised Colorado Privacy Policy is designed to provide a comprehensive and legally robust framework for the protection of Personal Data in compliance with the Colorado Privacy Act. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

NOTICE OF PRIVACY RIGHTS UNDER THE VIRGINIA CONSUMER DATA PROTECTION ACT (VCDPA)

This Notice is provided exclusively to Virginia residents in accordance with the Virginia Consumer Data Protection Act (VCDPA). It delineates your rights and our responsibilities regarding the collection, usage, processing, and disclosure of Personal Data.

DEFINITIONS

"Personal Data" refers to the information defined as such in the VCDPA.

Other terms used herein have the meaning ascribed to them in the VCDPA unless otherwise noted.

YOUR RIGHTS UNDER THE VCDPA

Access, Correction, and Obtaining Personal Data

• Access: You may request confirmation regarding whether or not we are processing your Personal Data and accessing such data.
• Correction: Subject to the nature of the Personal Data and its processing purpose, you may request corrections to any inaccurate Personal Data we hold about you.
• Obtaining a Copy: We will furnish your Personal Data in a portable, easily transferable format if technically feasible.

Disclosure of Personal Information for Business or Commercial Objectives

• We may use or disclose specific categories of Personal Information for business or commercial objectives, subject to contractual restrictions to maintain confidentiality and prevent unauthorized use.

Refraining from the Sale or Processing of Personal Data

• Sale of Personal Data: You may direct us not to sell your Personal Data. Any information collected related to this request will be used solely to comply with it.
• Processing for Tailored Advertising: You have the right to abstain from the processing of your Personal Data for tailored advertising as defined by the VCDPA.

Third-Party Disclosures

• Your Personal Data may be disclosed to third parties as detailed in this document, consistent with VCDPA definitions.

Sale Interpretation under VCDPA and CCPA

• The terms "sell" and "sale" are defined uniquely in the VCDPA and CCPA. Our use of your Personal Data may be construed as a sale under the VCDPA, although not necessarily involving monetary benefit.

III. DATA HANDLING

Collection, Disclosure, Retention, and Purposes

• Refer to specific sections within this document for details on the collection, disclosure to third parties, retention periods, and purposes for processing data.

Data “Selling” and Targeted Advertising

• We do not "sell" your data or process it for targeted advertising as defined in the VCDPA.

Profiling

• We perform automated processing of your personal data to evaluate, analyze, or predict personal aspects related to, for example, your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. Such profiling activity is done in furtherance of decisions that result in the provision or denial of, for example, financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, healthcare services, or access to essential goods or services.

• You always have the right to opt out of this profiling activity. To fully exercise this right to opt-out, you can contact us any time using the contact details provided in this document. To find out more about your rights and how to exercise them, you can consult the section of this document outlining your rights under the VCDPA.

EXERCISING YOUR VCDPA RIGHTS

• Procedures for access, deletion, non-discrimination, opt-out, correction, authentication, and appeal are outlined, with potential fees, limitations, or denials under specific circumstances.

COMPLAINTS

• Violations may be reported to the Virginia Attorney General’s Office.

SPECIAL PROVISIONS FOR VIRGINIA CONSUMERS

• Entity, definitions, categories and purposes, consent, and integrity are specified in this document, including options to manage your consent.

VII. GENERAL PROVISIONS

• This Notice operates in conjunction with our broader privacy policy, with specific provisions for Virginia residents, and supersedes conflicting statements within that policy.
• Your VCDPA rights can be exercised via the links provided or by contacting us as indicated.

This revised Virginia Privacy Policy is designed to provide a comprehensive and legally robust framework for the protection of Personal Data in compliance with the Virginia Consumer Data Protection Act. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

CONNECTICUT PRIVACY NOTICE (CTDPA)

This Privacy Notice is provided for the residents of the State of Connecticut in accordance with the Connecticut Data Privacy Act (CTDPA). Definitions and terms used within this section are consistent with the definitions found in the CTDPA.

SCOPE AND WEBSITE

This notice applies exclusively to personal data as defined by the CTDPA and does not encompass deidentified or publicly available information.

CONTACT INFORMATION

For inquiries, concerns, or to exercise your rights under this Privacy Notice, please email Privacy@leanfactor.com.

III. COLLECTION, DISCLOSURE, AND RETENTION OF PERSONAL DATA

• Collection: A detailed description of the personal data we collect is found in the section titled "Information we collect."
• Disclosure: Information on how we disclose personal data to third parties is provided in "How we disclose information."
• Retention: The retention period for personal data is specified in "How long we keep your data."

DATA SELLING AND TARGETED ADVERTISING

We do not engage in the selling of your personal data nor process it for targeted advertising as per CTDPA definitions.

PROFILING

We perform automated processing of your personal data to evaluate, analyze, or predict personal aspects related to, for example, your economic situation, health, personal preferences, interests, reliability, behavior, location, or movements. Such profiling activity is done in furtherance of decisions that may result in the provision or denial of, for example, financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, healthcare services, or access to essential goods or services.

You always have the right to opt-out of this kind of profiling activity. To fully exercise this right to opt-out, you can contact us at any time using the contact details provided in this document. To find out more about your rights and how to exercise them, you can consult the section of this document outlining your rights under the CTDPA.

CTDPA RIGHTS

1. Right to Access: Confirmation and access to your personal data processed by us.
2. Right to Delete: Deletion of personal data, subject to legal exceptions.
3. Right to Non-Discrimination: Non-discriminatory practices upon exercising rights.
4. Right to Opt-Out: Opt-out from the sale of personal data, targeted advertising, or profiling.
5. Authorized Agents: Designation of agents for requests.
6. Right to Correct: Correction of inaccuracies in personal data.
7. Right to Appeal: Appeals against decisions within 90 days.
8. Privacy Policy Provisions: Specific provisions for Connecticut residents.

VII. CATEGORIES AND MOTIVES OF PERSONAL DATA PROCESSED

A comprehensive overview of the categories and motives for processing Personal Data is provided within this document.

VIII. SALE AND SHARING OF YOUR PERSONAL DATA

Details of the sale and sharing of personal data with third parties are elaborated within this document.

YOUR RIGHTS TO OPT-OUT OF SALES AND TARGETED ADVERTISING

Explanation of rights to opt-out of the sale of personal data and targeted advertising, including the utilization of the Global Privacy Control (GPC).

INVOCATION OF RIGHTS UNDER THE CTDPA

Outline of rights under the CTDPA, including verification, rectification, erasure, procurement, opt-out, and non-discrimination.

PROCEDURE FOR EXERCISING YOUR RIGHTS

Detailed instructions for enforcing rights, including authentication procedures, response timeframes, and appeal rights.

XII. COMPLAINTS

Complaints may be filed with the Connecticut Attorney General’s Office if rights are violated.

XIII. CONCLUSION

This Connecticut Privacy Notice (CTDPA) is binding on all parties and governed by Connecticut law. Inquiries and requests should be directed to the contact information provided. This notice may be updated periodically and will be available on this website.

This revised Connecticut Privacy Policy is designed to provide a comprehensive and legally robust framework for the protection of Personal Data in compliance with the Connecticut Data Privacy Act. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

UTAH CONSUMER PRIVACY ACT (UCPA) SUPPLEMENT

This Supplement constitutes an integral part of our Privacy Policy, exclusively governing consumers domiciled in the State of Utah (hereinafter "you") and is promulgated in accordance with the Utah Consumer Privacy Act (the "UCPA"). This document supplements and supersedes any conflicting provisions in our primary Privacy Policy.

DEFINITIONS

• "We," "Us," or "Our": Refers to the entity managing this website, including, where applicable, its parent, subsidiaries, and affiliates.
• "Personal Data": Corresponds to its definition under the UCPA, encompassing identifiable information about you.

CATEGORIES AND INTENT OF PERSONAL DATA PROCESSING
Collection and Processing of Personal Data

• Categories: We collect Personal Data, including identifiers, commercial information, and internet information, and refrain from collecting sensitive data.
• Purpose: Refer to "Detailed Information on the Processing of Personal Data" and "The Purposes of Processing" within this document.

Employment of Data and Disclosure to Third Parties

• Sharing and Classification: Your Personal Data may be shared with third parties as detailed in this document.

Trade of Your Personal Data

• Definition and Interpretation: Terms such as "trade," "sell," or "sold" are defined as per the UCPA.

Opt-Out Procedures and Entitlement

• Opt-Out Rights: Procedures for opting out of the trade of your Personal Data are detailed herein.

Use of Personal Data for Targeted Advertising

• Definition and Procedures: Targeted advertising is defined and regulated as per the UCPA.

 Privacy Rights Under the UCPA and Procedures

• Access, Deletion, Procurement, Opt-Out: Your rights concerning your data are detailed herein.
• Pricing and Services: No discrimination in pricing or services based on your execution of rights, except for voluntary loyalty programs.
• Procedure to Exercise Your Rights: Instructions on how to exercise your rights are provided.
• Our Response to Your Request: We will respond within 45 days, with a possible extension of up to 90 days, and provide an explanation for any delays.

 III. CONFIRMATION OF ADHERENCE

We are committed to maintaining transparency and compliance with the UCPA. Any Personal Data collected, including opt-out requests, will be used exclusively for the purposes stated herein. We assure adherence to these provisions and recognize the significance of safeguarding your Personal Data.

CONTACT INFORMATION

Should you have any questions or need further clarification regarding these provisions, please contact us through the information provided in this document. You may also utilize the privacy choices link provided on this website for streamlined processes.

UPDATES AND REVISIONS

This Supplement may be updated or revised periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Please review this Supplement regularly to stay informed about our information practices and your privacy rights and choices.

CONCLUSION

This Utah Consumer Privacy Act Supplement is binding and governed by the laws of the State of Utah. It is designed to provide a comprehensive framework for the protection of Personal Data in compliance with the Utah Consumer Privacy Act and includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing.

This revised Utah Privacy Policy is designed to provide a comprehensive and legally robust framework for the protection of Personal Data in compliance with the Utah Consumer Privacy Act. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

PRIVACY INFORMATION FOR USERS RESIDING IN BRAZIL (LGPD)

This section supplements and provides further explanation of the information in the privacy policy and is formulated by the entity managing this website and, where applicable, its parent, subsidiaries, and affiliates (collectively referred to as "we," "us," or "our").

APPLICABILITY OF REGULATIONS

The regulations laid down in this section apply to all users residing in Brazil, in compliance with the "Lei Geral de Proteção de Dados" (hereafter referred to as "LGPD"). These regulations supersede any contradictory or divergent provisions in the privacy policy.

DEFINITION OF PERSONAL INFORMATION

In this section, the term "Personal Information" refers to the definition provided in the LGPD.

III. BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

We process your Personal Information only when there is a legal basis for such processing, including but not limited to:

• Your explicit consent to specific processing activities;
• Compliance with legal or regulatory obligations;
• Execution of public policies or contracts;
• Studies conducted by research entities;
• Protection of physical safety or health;
• Our legitimate interests, provided your fundamental rights do not override such interests;
• Credit protection.

 CATEGORIES AND PURPOSE OF PERSONAL INFORMATION PROCESSING

• Categories: For detailed information about the categories of your Personal Information that we process, please refer to the section titled "Detailed Information on the Processing of Personal Data."
• Purpose: For detailed information about why we process your Personal Information, please refer to the sections titled "Detailed Information on the Processing of Personal Data" and "The Purposes of Processing."

YOUR PRIVACY RIGHTS UNDER BRAZILIAN LAW, SUBMISSION OF A REQUEST, AND OUR RESPONSE

• Your Privacy Rights Under Brazilian Law: You have the right to access, rectify, anonymize, block, delete, object to processing, request portability, revoke consent, lodge a complaint, and request information about automated decisions.
• Submitting Your Request: You may submit your request to exercise your rights through the contact details provided in this document or via a legally authorized representative.
• Our Response to Your Requests: We pledge to address your requests promptly and efficiently, providing detailed responses as required by the LGPD.

AUTHORIZED TRANSFER OF PERSONAL INFORMATION OUTSIDE BRAZIL

We are authorized to transmit your Personal Information outside of Brazil, subject to specific conditions outlined in the LGPD, including international legal cooperation, protection of life or physical safety, compliance with legal obligations, execution of public policies, and more.

VII. SECURITY MEASURES

We implement appropriate technical and organizational measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction.

VIII. CONTACT INFORMATION

For more detailed information about these legal bases or any other inquiries, please contact us using the contact details provided in this document.

UPDATES AND CHANGES

We reserve the right to update or modify this section to reflect changes in legal, regulatory, or operational requirements. We encourage you to review this section regularly to stay informed about our privacy practices and your rights.

CONCLUSION

This Privacy Information for Users Residing in Brazil is binding and governed by the laws of Brazil. It is designed to provide a comprehensive framework for the protection of Personal Information in compliance with the LGPD and includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

This revised Brazil Privacy Policy is designed to provide a comprehensive and legally robust framework for the protection of Personal Information in compliance with the LGPD. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

SWISS FEDERAL ACT ON DATA PROTECTION (FADP) COMPLIANCE STATEMENT

APPLICABILITY TO SWISS USERS

This section exclusively governs the processing of personal data pertaining to Users resident in or otherwise subject to the jurisdiction of Switzerland. To the extent that any information contained in the general privacy policy of this document is inconsistent with or contradicts the provisions herein, this section shall prevail for Swiss Users.

DETAILS OF PROCESSING OF PERSONAL DATA

• Categories and Types: Further particulars regarding the types and categories of Personal Data processed may be obtained by reference to the section entitled “Detailed Information on the Processing of Personal Data” within this document.
• Purposes: Specific purposes of such processing are detailed within this document.
• Recipients: Information regarding the categories of recipients to whom Personal Data may be disclosed is provided.
• Retention Periods: The retention periods for Personal Data are outlined in accordance with Swiss law.

III. USER RIGHTS UNDER THE SWISS FEDERAL ACT ON DATA PROTECTION

Users in Switzerland shall be entitled to exercise the following rights concerning their Personal Data:

1. Right of Access: Obtain confirmation and information regarding the processing.
2. Right to Object and Restrict Processing: Object to processing and request restrictions, including deletion, destruction, or prohibition of specific disclosures.
3. Data Portability: Receive Personal Data in a structured format and have it transferred to another controller.
4. Right of Rectification: Request correction or amendment of incorrect or incomplete data.
5. Right to Erasure: Request deletion of Personal Data in accordance with legal requirements.
6. Right to Lodge a Complaint: Lodge a complaint with the competent supervisory authority if you believe that your rights have been violated.

PROCEDURES FOR EXERCISING RIGHTS

• Submission of Requests: Requests to exercise the above rights must be submitted to the Owner through the contact information provided in this document.
• Response Time: Requests will be responded to promptly but no later than the period prescribed by applicable law.
• Verification: The Owner may request additional information to verify the identity of the User making the request.

ADDITIONAL PROVISIONS

Compliance with Law: The processing of Personal Data shall be conducted in strict adherence to the principles and obligations set forth in the FADP and any other applicable laws.

Updates and Changes: This section may be updated periodically to reflect changes in the law or practices concerning Personal Data.

Contact Information: For any questions or concerns, please contact the Owner using the contact details provided in this document.

SECURITY MEASURES

We implement appropriate technical and organizational measures to ensure the security and confidentiality of Personal Data in compliance with Swiss law.

VII. CONCLUSION

This Swiss Federal Act on Data Protection (FADP) Compliance Statement is designed to provide a comprehensive framework for the protection of Personal Data in compliance with Swiss law. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

This revised Switzerland Privacy Policy is designed to provide a comprehensive and legally robust framework for the protection of Personal Data in compliance with the FADP. It includes clear definitions, detailed explanations of data processing techniques, user rights, and legal bases for processing, all aimed at enhancing transparency and legal protection.

 

CHILDREN'S ONLINE PRIVACY PROTECTION ACT (“COPPA”) COMPLIANCE STATEMENT

GENERAL PROVISIONS

This document outlines our commitment to complying with the Children's Online Privacy Protection Act (“COPPA”) and related state laws, including California's Shine the Light Law and California Business and Professions Code Section 22581. It details our practices and obligations concerning collecting, using, and disclosing personal information from children under 13 and minors under 16.

PROHIBITION ON COLLECTION OF INFORMATION FROM CHILDREN UNDER 13

• Scope: Our Service is not intended for, and we do not knowingly target or solicit information from, anyone under the age of 13.
• Due Diligence: We exercise due diligence to avoid collecting Personally Identifiable Information from individuals under 13.
• Parental Notification: Parents or guardians discovering their child has provided Personal Data to us should notify us promptly.
• Remedial Measures: We shall delete that data immediately if we discover a collection from an individual under 13 without verified parental consent.

III. PARENTAL CONSENT REQUIREMENTS

• Compliance: We shall obtain parental consent before collecting and using information if applicable legal requirements require.

PROHIBITION OF PERSONAL INFORMATION TRANSACTIONS OF MINORS UNDER 16 YEARS

• Scope: Our Services are not designed to collect Personal Data from users under 16 years knowingly.
• Parental Guidance: Parents and guardians are urged to supervise their child's online activity and counsel them against sharing information without parental authorization.

RIGHT TO OPT-IN AND OPT-OUT FOR CONSUMERS UNDER 16 YEARS

• Consent Requirements: We do not trade or sell the Personal Data of Consumers under 16 years without explicit authorization.
• Revocation of Consent: Consumers may revoke their consent at any time. To exercise the right to opt-out, please contact us.

REPORTING SUSPECTED VIOLATIONS

• Notification: If you believe a child under 13 (or 16) years has provided us with Personal Data, please contact us for deletion.

VII. CALIFORNIA RESIDENTS' PRIVACY RIGHTS (CALIFORNIA'S SHINE THE LIGHT LAW)

• Disclosure: California residents may request information about the sharing of their Personal Data with third parties for direct marketing purposes.

VIII. PRIVACY RIGHTS OF CALIFORNIAN MINOR USERS (CALIFORNIA BUSINESS AND PROFESSIONS CODE SECTION 22581)

• Right to Removal: California residents under 18 may request the removal of publicly posted content or information.

CONCLUSION AND CONTACT INFORMATION

This disclosure policy is crafted in alignment with our commitment to maintaining transparency, security, and compliance with applicable laws and regulations. We encourage you to review the full policy and reach out to us using the contact information provided if you have any questions or concerns.

This revised policy is designed to provide a comprehensive and legally robust framework for the protection of children's and minors' privacy online, in compliance with COPPA and relevant state laws. It includes clear definitions, detailed explanations, and specific procedures, all aimed at enhancing transparency and legal protection.

PERMISSIONS REQUESTED BY THIS WEBSITE FROM FACEBOOK

This Website may request certain permissions from Facebook to execute actions with the User's Facebook account and to extract Information, including Personal Data. This enables the Website to connect with the User's Facebook social network account, a service provided by Facebook Inc.

For a comprehensive understanding of these permissions, kindly refer to Facebook's permissions documentation and privacy policy.

Permissions requested are as follows:

• Basic Information: By default, this includes specific User Data such as id, name, picture, gender, and locale. Certain connections, like Friends, are also accessible. Additional data may be available if the User has made more data public.
• Device Information
• Email: This grants access to the User's primary email address.
• Trackers: This term refers to any technology - including Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting - that allows the tracking of Users. This can be achieved by accessing or storing Information on the User's device.

DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA

Personal Data is collected for various purposes and through different services, which include:

• Access to Third-Party Accounts: This service allows the Website to access Data from your account on a third-party service and perform actions with it. These services require explicit authorization from the User and are not automatically activated.
• Facebook Account Access (Meta Platforms, Inc.): This service enables the connection between this Website and the User's Facebook social network account provided by Meta Platforms, Inc. The permissions sought include device Information, Email, and Trackers. The processing's legal basis is Consent. The place of processing is the United States. The legal basis for data transfer is the Standard data protection clauses. The category of Personal Information collected per the CCPA includes identifiers and Internet Information.
• Advertising: This service uses User Data for communication purposes displayed in banners and other advertisements on the Website, potentially based on User interests. Not all Personal Data is used for this purpose; specific Information and terms of use are detailed below. Some services listed below may use Trackers to identify Users or employ behavioral retargeting techniques, displaying ads tailored to the User's interests and behaviors, including those detected outside the Website. For more details, please review the privacy policies of the relevant services. Users can opt-out of such tracking by using any opt-out feature offered by the services listed below or by referring to the section titled "How to opt-out of interest-based advertising" in this document.

ADVERTISING AND ANALYTIC SERVICES

Impact (Provided by Impact Tech, Inc.)

Impact serves as an advertising service that facilitates processing Personal data encompassing Trackers and Usage Data. Processing is based on user consent, executed in the United States in accordance with Standard Data Protection Clauses. It encompasses operations, which under various regulations, including CCPA, VCDPA, CPA, CTDPA, and UCPA, constitute a sale and sharing as per the CCPA. The data category collected aligns with CCPA's "Internet Information."

Google Ads Conversion Tracking (Provided by Google LLC or Google Ireland Limited)

This analytical service connects data from the Google Ads network to actions taken on our Website. It processes data based on user consent, operates from the United States in compliance with Standard Data Protection Clauses, and constitutes a sale under regulations including CCPA, VCDPA, CPA, CTDPA, and UCPA.

Google AdSense & DoubleClick Cookie (Provided by Google LLC or Google Ireland Limited)

Google AdSense and DoubleClick network data correlate with actions on our Website, operating with user consent, under Standard Data Protection Clauses in the United States. This involves a sale under CCPA, VCDPA, CPA, CTDPA, and UCPA. Google uses cookies to display personalized ads. Users may opt out of the DoubleClick Cookie by visiting Google Ads Settings.

AdMob by Google (Provided by Google LLC or Google Ireland Limited)

AdMob links data from the Google AdSense and DoubleClick networks with actions on this Website. It operates with user consent in the United States in accordance with Standard Data Protection Clauses and is involved in a sale under regulations including CCPA, VCDPA, CPA, CTDPA, and UCPA. Opt-out instructions are available on Google's support page. For data usage details, visit Google's 'How Google uses data' and Privacy Policy pages.

Bing Ads (Provided by Microsoft Inc.)

This service correlates Bing network data with actions on this Website, based on user consent, operating in the United States under Standard Data Protection Clauses, and includes a sale under regulations including CCPA, VCDPA, CPA, CTDPA, and UCPA. Opt-out instructions are provided on the Bing Ads Opt-out page. Further details can be obtained from Bing Ads' Privacy Policy.

AdButler (Provided by Sparklit Networks Inc.)

AdButler, an advertising service, links AdButler network data with actions on our Website. It processes data based on user consent in the United States in accordance with Standard Data Protection Clauses involving a sale under various regulations, including CCPA, VCDPA, CPA, CTDPA, and UCPA. Sparklit Networks Inc.'s Privacy Policy provides additional Information.

Unity Ads (Provided by Unity Technologies)

Unity Ads correlates Unity Ads network data with actions on this Website. It operates with user consent in the United States, under Standard Data Protection Clauses, and participates in a sale under CCPA, VCDPA, CPA, CTDPA, and UCPA. Unity Technologies collects, uses, and transfers Personal data as its Privacy Policy outlines. Opt-out is possible via Unity Analytics or by enabling privacy features on mobile devices.

Heap Analytics (Provided by Heap Inc.)

Heap Analytics assists in analyzing revenue and user activity on our Website, processing Trackers and Usage Data based on user consent. Operating in the United States, it abides by Standard Data Protection Clauses and retains data for the necessary duration. This processing qualifies as a sale under CCPA, VCDPA, CPA, CTDPA, and UCPA.

Meta Ads Conversion Tracking (Meta Pixel) (Provided by Meta Platforms, Inc.)

This service correlates data from the Meta Audience Network with actions on our Website. Operating with user consent, it is located in the United States, complies with Standard Data Protection Clauses, and partakes in a sale under CCPA, VCDPA, CPA, CTDPA, and UCPA.

PRIVACY PREFERENCE SERVICES

Lean Factor Consent Database (Operated by Lean Factor LLC)

This facility secures and provides access to users' consent records pertinent to Personal data processing and related inclinations.

• Basis for Processing: Contractual Necessity
• Processing Location: United States - Privacy Policy - https://www.leanfactor.com/pages/legal#tab-1
• Data Retention: For the contract duration and as legally mandated
• Category of Information Collected as per CCPA: Internet Information

Lean Factor Privacy Controls and Cookie Solution (Operated by Lean Factor LLC)

This feature amasses and retains users' preferences concerning Personal Information processing, especially via cookies and similar tracking technologies deployed on this Website.

• Basis for Processing: Legal Requirement
• Processing Location: United States - Privacy Policy - https://www.leanfactor.com/pages/legal#tab-1
• Category of Information Collected as per CCPA: Internet Information

COMMERCIAL AFFILIATION

This service enables third-party product or service advertisements. Ads appear as variously styled advertising links or banners. The services below monitor clicks on the embedded icon or banner and communicate this data to our website. For details on collected data, consult the privacy policy of each service.

ReferralCandy (Facilitated by Anafore Pte. Ltd.)

A marketing affiliation tool offered by Anafore Pte. Ltd.

• Processed Personal Data Categories: Email Address, First and Last Name, Tracker, Usage Data
• Legal Processing Basis: User Consent
• Processing Location: Singapore - Privacy Policy - https://www.referralcandy.com/privacy
• Personal Information Category as per CCPA: Identifiers, Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale; adheres to CCPA-regulated promotional activities as per VCDPA, CPA, CTDPA, and UCPA.

Admitad (Facilitated by Admitad GmbH)

A marketing affiliation service by Admitad GmbH.

• Processed Personal Data Categories: Tracker, Universally Unique Identifier (UUID), Usage Data
• Processing Legal Basis: User Consent
• Processing Location: Germany - Privacy Policy - https://policies.mitgo.com/en/privacy-policy/admitad-privacy-policy-intro/
• Data Transfer Legal Basis: Standard Data Protection Clauses
• Personal Information Category as per CCPA: Identifiers, Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale; adheres to CCPA-regulated promotional activities as per VCDPA, CPA, CTDPA, and UCPA.

CJ Affiliate (Facilitated by Epsilon International UK Ltd, part of Publicis Groupe)

A marketing affiliation service by Epsilon International UK Ltd, part of Publicis Groupe.

• Processed Personal Data Categories: Purchase History, Tracker, Usage Data
• Processing Legal Basis: User Consent
• Processing Location: United Kingdom - Privacy Policy - https://www.cj.com/legal/privacy-policy-services
• Data Transfer Legal Basis: Standard Data Protection Clauses
• Personal Information Category as per CCPA: Commercial Information, Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale; adheres to CCPA-regulated promotional activities as per VCDPA, CPA, CTDPA, and UCPA.

DATA INTEGRATION

These services authorize the Data Controller to integrate user data with the third-party services listed in this privacy policy, potentially leading to data retention.

Integromat (Operated by Integromat s.r.o.)

Integromat is a workflow automation tool provided by Integromat s.r.o., enabling data integration across third-party services.

• Processed Personal Data Categories: Data communicated during the use of the service
• Processing
• Location: Czech Republic - Privacy Policy - https://www.make.com/en/privacy-notice
• Personal Information Category as per CCPA: Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale.

USER CONTACT

• Mailing List or Newsletter (This Website)
• Upon enrolling for the mailing list or newsletter, the user’s email address is included in a contact list for possible receipt of email messages containing information of commercial or promotional importance concerning this Website.
• Processed Personal Data Category: Email Address
• Processing Legal Basis: User Consent
• Personal Information Category as per CCPA: Identifiers.

Integration of Richpanel (Operated by Richpanel, Inc.)

When a User voluntarily provides their email address via the Richpanel Messaging widget or a Richpoanel support ticket, their email address and other data may be incorporated into Richpanel, a Customer help desk service provided by Richpanel, Inc.

• Processed Personal Data Category: Email Address
• Processing Legal Basis: Contractual Necessity
• Processing Location: United States - Privacy Policy - https://www.richpanel.com/privacy-policy
• Data Transfer Legal Basis: Standard Data Protection Clauses
• Data Retention: Data is retained as long as necessary to establish, exercise or defend legal claims
• Personal Information Category as per CCPA: Identifiers.

Swiftype (Operated by Elasticsearch BV)

Swiftype, a service by Elasticsearch BV, enables the Website to incorporate its search engine functionality.

• Processed Personal Data Categories: Trackers and Usage Data
• Processing Legal Basis: User Consent
• Processing Location: Netherlands - Privacy Policy - https://www.elastic.co/legal/privacy-statement
• Data Transfer Legal Basis: Standard Data Protection Clauses
• Personal Information Category as per CCPA: Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale.

Wistia widget (Privacy Mode) (Operated by Wistia, Inc.)

The Wistia widget, a video content visualization service, operates in privacy mode, ensuring Wistia captures fully anonymized viewing data from Users unless they actively consent to track.

• Processed Personal Data Category: Usage Data
• Processing Location: United States - Privacy Policy - https://wistia.com/privacy
• Personal Information Category as per CCPA: Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale.

TrustBox widget (Operated by Trustpilot A/S)

TrustBox widget, a service by Trustpilot A/S, offers a review and ratings functionality integrated into the Website's pages.

• Processed Personal Data Categories: Clicks, Page Views, and Usage Data
• Processing Legal Basis: User Consent
• Processing Location: Denmark - Privacy Policy - https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
• Personal Information Category as per CCPA: Internet Information
• Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as a sale.

ELECTRONIC COMMUNICATION AND MARKETING ENGAGEMENT

We reserve the right to engage you via electronic mail with informative newsletters, promotional materials, or other content that may pique your interest. You can withdraw from these correspondences at any time by adhering to the "unsubscribe" instructions in our emails or by contacting us directly.

To enhance our marketing communications, we may enlist the support of third-party Email Marketing Service Providers.

1. Mailchimp: A communication service offered by The Rocket Science Group LLC. Their privacy practices can be reviewed here - https://mailchimp.com/legal/privacy/
2. Klaviyo: A marketing platform provided by Klaviyo. Their privacy measures can be examined here - https://www.klaviyo.com/legal/privacy
3. Attentive: A SMS/text message marketing service presented by Attentive Mobile Inc. Their privacy standards can be assessed here - https://www.attentive.com/privacy
4. AWeber: A communication platform offered by AWeber Communications. Their privacy policies can be perused here - https://www.aweber.com/privacy.htm
5. Sinch: An email marketing platform, including services such as Mailgun, Mailjet, Email on Acid, and InboxReady. Their privacy practices can be viewed here - https://www.mailgun.com/legal/privacy-policy/
6. GetResponse: A marketing platform offered by GetResponse. Their privacy standards can be inspected here - https://www.getresponse.com/legal/privacy.html
7. Remarkety: Their privacy policy can be scrutinized here - https://www.remarkety.com/privacy-policy/
8. SendGrid: Their privacy policy can be assessed here - https://sendgrid.com/policies/privacy/

 HANDLING PAYMENTS AND DATA SECURITY

1. Third-Party Payment Processing Services: For the purpose of facilitating transactions related to paid products and/or services offered within our Service, we may engage the services of third-party payment processing entities. These entities are entrusted with the responsibility of securely managing and processing payment transactions on our behalf.

2. Non-collection of Payment Details: At no point in time does our Service directly collect, store, or have access to your payment card details or any other sensitive financial information. Such data is exclusively provided by you, the user, directly to our third-party payment processors.

3. Compliance with PCI-DSS Standards: We take the security of payment information seriously. To this end, all our third-party payment processors are mandated to be in full compliance with the Payment Card Industry Data Security Standard (PCI-DSS). This standard is managed and upheld by the PCI Security Standards Council, which is a collaborative initiative of major credit card brands including, but not limited to, Visa, Mastercard, American Express, and Discover. Adherence to the PCI-DSS requirements ensures that payment information is handled, processed, and stored in a secure and protected manner.

4. Liability: We shall not be held liable for any breaches, unauthorized transactions, or any other issues arising from the use of third-party payment processors. Users are advised to direct any concerns or disputes directly to the respective payment service provider.

5. Limitation of Our Involvement: Our website does not participate in, nor is it involved in, the direct collection or processing of payment details or personal information related to payment transactions. Our role is limited to receiving notifications from the relevant payment service provider regarding the status of the payment, specifically whether the payment transaction has been successfully executed or not.

6. External Payment Service Providers: Unless explicitly mentioned otherwise, all payments made via this website, whether by credit card, bank transfer, or other means, are processed through external payment service providers. As a general practice, and unless stated otherwise, users are required to furnish their payment details and associated personal information directly to these external payment service providers.

7. Third-party Privacy Policies: The collection, storage, and utilization of your Personal Information by our third-party payment processors are strictly governed by their individual Privacy Policies. We strongly recommend that users review the policies below to understand how their data is managed and protected.

Shopify Payments / Shop Pay

Shopify Payments and Shop Pay is a payment service that processes various forms of payments, including credit and debit cards.

Personal Data processed: Data communicated while using the service; email address; first name; language; last name; payment info; phone number; physical address; Usage Data; User ID.

Place of processing: United States - Privacy Policy - https://www.shopify.com/legal/privacy

We encourage you to peruse the privacy policies of our payment processors:

1. Apple Store In-App Payments - https://www.apple.com/legal/privacy/en-ww/
2. Google Play In-App Payments - https://www.google.com/policies/privacy/
3. Stripe - https://stripe.com/us/privacy
4. WePay - https://go.wepay.com/privacy-policy
5. PayPal - https://www.paypal.com/webapps/mpp/ua/privacy-full
6. Braintree - https://www.braintreepayments.com/legal/braintree-privacy-policy
7. FastSpring - http://fastspring.com/privacy/
8. Authorize.net - https://www.authorize.net/company/privacy/
9. 2Checkout - https://www.2checkout.com/policies/privacy-policy
10. Square - https://squareup.com/legal/privacy-no-account
11. Go Cardless - https://gocardless.com/en-eu/legal/privacy/
12. Elavon - https://www.elavon.com/privacy-pledge.html
13. WeChat - https://www.wechat.com/en/privacy_policy.html
14. Alipay - https://render.alipay.com/p/f/agreementpages/alipayglobalprivacypolicy.html
15. Affirm - https://www.affirm.com/privacy
16. WorldPay - https://www.worldpay.com/en-gb/privacy-policy

For transactions via bank transfers within our Service, we may require information to execute the transaction and authenticate your identity.

HOSTING AND BACKEND INFRASTRUCTURE SERVICES

This section pertains to services specifically engineered to provide hosting and backend infrastructure. These services are fundamental to the operational continuity and accessibility of our website and the facilitation of various functionalities and elements of our service. The geographic dispersion of these services might make it complex to ascertain the precise storage location of Personal Data.

Google Cloud Storage (Google LLC)

Google Cloud Storage is a hosting service provided by Google LLC.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy - https://policies.google.com/privacy 

Cloudflare Cloud Storage (Cloudflare, Inc.)

Cloudflare Cloud Storage is a hosting service provided by Cloudflare, Inc.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy - https://www.cloudflare.com/privacypolicy/

DigitalOcean (DigitalOcean Inc.): DigitalOcean, offered by DigitalOcean Inc., provides hosting services employed by our website. It processes various categories of Personal Data as delineated in its privacy policy on the legal basis of Contractual Obligation. The processing occurs in the Netherlands and Germany. Data retention extends to the duration required for the purpose of fulfillment. Personal Information collected under CCPA guidelines: Identifiers. Privacy Policy - https://www.digitalocean.com/legal/privacy-policy/

Amazon Web Services (AWS) (Amazon Web Services, Inc.): AWS, furnished by Amazon Web Services, Inc., caters to our hosting and backend needs. Personal Data processed includes various types detailed in their privacy policy under the legal ground of Contractual Obligation. Processing location: Ireland. Retained data persists as long as necessary for purpose fulfillment. Personal Information collected under CCPA guidelines: Identifiers. Privacy Policy - https://aws.amazon.com/privacy/ 

A-CUBE API (A-CUBE S.R.L): A-CUBE S.R.L provides A-CUBE API to facilitate this Website's compliance with the Italian Exchange System (ES). Post-payment, users' Personal data is shared for electronic invoice generation. The processed Personal data category: Invoicing Information. Processing location: Italy. Personal Information collected under CCPA guidelines: Commercial Information. Privacy Policy - https://www.acube.com/privacy-policy/

MongoDB Cloud (MongoDB, Inc.): MongoDB Cloud, offered by MongoDB, Inc., is a backend and hosting service. Category of Personal Data processed: Usage Data. Processing location: Germany. Personal Information collected under CCPA guidelines: Internet Information. Privacy Policy - https://www.mongodb.com/legal/privacy-policy

INFRASTRUCTURE MONITORING

Services under this category empower us to monitor the utilization and behavior of our website's components, enabling operational enhancements, performance optimization, maintenance improvements, and troubleshooting. The specifics of Personal Data processed depend on these services' features and manner of implementation, fundamentally designed to filter website activities.

New Relic (New Relic): New Relic, a monitoring service provided by New Relic Inc., filters all website traffic, including the interaction between the website and the user's browser or device, and collects analytical data pertaining to the website. Personal Information collected under CCPA guidelines: Identifiers and Internet Information. Privacy Policy - https://newrelic.com/termsandconditions/privacy

Uptime Robot (Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.)

Uptime Robot is a monitoring service provided by Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: Turkey - Privacy Policy - https://uptimerobot.com/privacyPolicy

INTERACTION WITH DATA COLLECTION AND OTHER THIRD-PARTY PLATFORMS

Services under this section enable users to engage with data collection platforms or other services directly from our website's pages. Whether the user employs these services actively or not, it may gather browsing and usage data upon installation.

• Typeform widget (TYPEFORM S.L): The Typeform widget, offered by TYPEFORM S.L., fosters interaction with the Typeform data collection platform. Personal Information collected under CCPA guidelines: Identifiers and Internet Information. Privacy Policy - https://admin.typeform.com/to/dwk6gt

INTERACTION WITH LIVE CHAT PLATFORMS

This type of service allows Users to interact with third-party live chat platforms directly from the pages of this website in order to contact and be contacted by this website‘s support service.

If one of these services is installed, it may collect browsing and Usage Data on the pages where it is installed, even if the Users do not actively use the service. Moreover, live chat conversations may be logged.

Richpanel

Richpanel Chat is a service for interacting with the Richpanel live chat platform provided by Richpanel Inc.

Personal Data processed: billing address; city; clicks; contents of the email or message; country; device information; email address; first name; geography/region; last name; order ID; phone number; product interaction; purchase history; shipping address; state; time zone; Trackers; Usage Data; User ID.

Place of processing: United States - Privacy Policy - https://www.richpanel.com/privacy-policy

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; geolocation data.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

Shopify Chat

Shopify Chat is a service for interacting with the Shopify live chat platform provided by Shopify Inc., Shopify Commerce Singapore Pte. Ltd or by Shopify International Limited, depending on how the Owner manages the Data processing.

Personal Data processed: billing address; city; clicks; contents of the email or message; country; device information; email address; first name; geography/region; last name; order ID; phone number; product interaction; purchase history; shipping address; state; time zone; Trackers; Usage Data; User ID.

Place of processing: 

• Canada - Privacy Policy - https://www.shopify.com/legal/privacy
• Singapore - Privacy Policy - https://www.shopify.com/legal/privacy
• Ireland - Privacy Policy - https://www.shopify.com/legal/privacy

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; geolocation data.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

Facebook Messenger Customer Chat

The Facebook Messenger Customer Chat is a service for interacting with the Messenger instant messaging app and platform provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing.

Personal Data processed: Data communicated while using the service; Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://www.facebook.com/about/privacy/
• Ireland - Privacy Policy - https://www.facebook.com/about/privacy/

Freshdesk

Freshdesk Messaging Widget (Freshworks, Inc.): The Freshdesk Messaging Widget, furnished by Freshworks, Inc., enables interaction with the Freshdesk live chat platform.

Personal Data processed: billing address; city; clicks; contents of the email or message; country; device information; email address; first name; geography/region; last name; order ID; phone number; product interaction; purchase history; shipping address; state; time zone; Trackers; Usage Data; User ID.

Place of processing: United States - Privacy Policy - https://www.freshworks.com/privacy/

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; geolocation data.

 

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

INTERACTION WITH SUPPORT AND FEEDBACK PLATFORMS

Services under this category enable users to interact with third-party support and feedback platforms directly from our website's pages. These services may collect browsing and usage data even if not actively used by the user.

• Elevio Widget (Elevio Pty. Ltd.): The Elevio Widget, provided by Elevio Pty. Ltd., allows interaction with the Elevio support and feedback platform. Personal Information collected under CCPA guidelines: Internet Information. Privacy Policy - https://elev.io/legal/privacy-policy

INTERNAL PROCESSING TOOLS

Radar, a proprietary tool of Lean Factor, periodically scans customer websites to identify compliance issues and communicate the outcomes via email. The legal ground for this processing is a contract, and no data transfer occurs.

MANAGEMENT OF CONTACTS AND SENDING MESSAGES

Services in this category manage a database of email contacts, phone contacts, or other contact information to communicate with the User. These services may also collect data regarding the User's interactions with the messages.

• Vero (Vero Holdings Australia Pty. Ltd.): Vero, a service that manages email addresses and sends messages, is provided by Vero Holdings Australia Pty. Ltd. Personal Information collected under CCPA guidelines: Identifiers and Internet Information. Privacy Policy - https://www.getvero.com/privacy/
• Twilio (Twilio, Inc.): Twilio, a service that manages phone numbers and enables communication, is provided by Twilio, Inc. Personal Information collected under CCPA guidelines: Identifiers. Privacy Policy - https://www.twilio.com/legal/privacy
• Klaviyo (Klaviyo Inc.): Klaviyo is an email address management and message-sending service provided by Klaviyo Inc. To take advantage of the service provided by Klaviyo, the Owner typically shares information about (purchasing) Users, such as for example contact details and shopping histories. Check the indication at “Personal Data processed“ below for an explanation of the extent of the sharing.

Personal Data processed: company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Trackers; Usage Data; username; various types of Data.

Place of processing: United States - Privacy Policy - https://www.klaviyo.com/legal/privacy/privacy-notice

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; employment-related information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

MANAGEMENT OF SUPPORT AND CONTACT REQUESTS

This service enables the website to manage support and contact requests received via email or other means, such as the contact form. The processed Personal Data depends on the Information in the user's messages and the communication method used (e.g., email address).

WhatsApp Business customer support

WhatsApp Business customer support is a customer support service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing.

Personal Data processed: account log-in; answers to questions; app information; billing address; browser information; browsing history; city; contents of the email or message; country; county; custom events; customer support; Data communicated while using the service; data relating to the point of sale; date of the message; device information; device logs; first name; geography/region; in-app messages; in-app purchases; interaction events; invoicing information; IP address; language; last name; latitude (of city); login history; longitude (of city); metro area; operating systems; order ID; password; payment info; phone number; primary account information; product interaction; profile picture; province; purchase history; sender of the message; shipping address; state; time the message was sent; time zone; Trackers; Usage Data; user content; username; ZIP/Postal code.

Place of processing: 

• United States - Privacy Policy - https://www.whatsapp.com/legal/privacy-policy
• Ireland - Privacy Policy - https://www.whatsapp.com/legal/privacy-policy-eea

CUSTOMER SERVICE MANAGEMENT

Freshdesk (Freshworks, Inc.)

Freshdesk, a comprehensive solution furnished by Freshworks, Inc., streamlines the administration and management of customer service requests and inquiries.

• Nature of Personal Data Processed: Data proffered during service engagement and various data categories specified in the service's privacy policy.
• Juridical Ground for Processing: Contractual Obligation.
• Data Processing Locale: United States - Privacy Policy - https://www.freshworks.com/privacy/
• Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• Data Retention Period: Kept until no longer required for legal claims' establishment, execution, or defense.
• Classification of Personal Information under CCPA: Identifiers and Internet Activity.

CONTENT COMMENTING

Content commenting services allow Users to make and publish their comments on the contents of this website.

Depending on the settings chosen by the Owner, Users may also leave anonymous comments. If there is an email address among the Personal Data provided by the User, it may be used to send notifications of comments on the same content. Users are responsible for the content of their own comments.

If a content commenting service provided by third parties is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the content commenting service.

Comment system managed directly (this website)

This website has its own internal content comment system.

Personal Data processed: email address; first name; last name; phone number; Trackers; Usage Data; username; website.

Category of personal information collected according to the CCPA: identifiers; internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

WEB CONFERENCE AND ONLINE TELEPHONY MANAGEMENT

This facility empowers the website to orchestrate the execution, administration, hosting, recording, circulation, and analysis of online telephony and web conferences for User interaction. Personal Data collected hinges on the Information Users submit while utilizing these services. They may be integrated with an array of third-party services facilitating subsequent data-processing actions, such as contact management, message dissemination, analytics, advertising, and payment processing.

Livestorm (LIVESTORM SAS)

Livestorm, provided by LIVESTORM SAS, is an avant-garde web conference management service. To understand user behavior, Livestorm may deploy cookies. Users can learn about opting out of Livestorm's cookie tracking on the designated page.

• Nature of Personal Data Processed: Data proffered during service engagement and Email Address.
• Juridical Ground for Processing: Consent.
• Data Processing Locale: France - Privacy Policy - https://www.livestorm.co/privacy-policy/
• Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• Data Retention Period: 3 Years.
• Classification of Personal Information under CCPA: Identifiers and Internet Activity.
• The processing constitutes: A Sale, as defined by CCPA, VCDPA, CPA, CTDPA, and UCPA.

REGISTRATION AND AUTHENTICATION

By registering or authenticating, Users authorize the Website to identify them and provide access to dedicated services.

As indicated below, third parties might provide registration and authentication services. In these scenarios, this Website may access specific Data these third-party services have stored for registration or identification. Some of these services may also compile Personal Data for targeting and profiling. For comprehensive details, refer to the descriptions of each service.

Facebook Authentication (Meta Platforms, Inc.)

Facebook Authentication, provided by Meta Platforms, Inc., is a registration and authentication service linked with the Facebook social network.

• Nature of Personal Data Processed: Trackers and various data types.
• Juridical Ground for Processing: Consent.
• Data Processing Locale: United States - Privacy Policy - https://www.facebook.com/about/privacy/
• Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• Classification of Personal Information under CCPA: Identifiers and Internet Activity.
• The processing constitutes A Sale and a Sharing, as defined by CCPA, VCDPA, CPA, CTDPA, and UCPA.

Direct Registration (this Website)

The User registers by filling out the registration form and providing Personal Data directly to this website.

Personal Data processed: academic background; billing address; budget; city; company name; country; county; date of birth; email address; fax number; field of activity; first name; gender; house number; language; last name; number of employees; password; phone number; physical address; picture; prefix; profession; profile picture; Social Security number (SSN); state; Tax ID; Trackers; Twitter handle; Usage Data; User ID; username; various types of Data; VAT Number; website; workplace; ZIP/Postal code.

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; sensorial information; employment-related information; inferred information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

Auth0 (Auth0, Inc)

Auth0 is a registration and authentication service provided by Auth0, Inc. To simplify the registration and authentication process, Auth0 can make use of third-party identity providers and save the information on its platform.

Personal Data processed: email address; first name; last name; password; picture; Trackers; various types of Data as specified in the privacy policy of the service.

Place of processing: 

• United States - Privacy Policy -  https://auth0.com/privacy
• European Union - Privacy Policy - https://auth0.com/privacy
• Australia - Privacy Policy - https://auth0.com/privacy

Google OAuth

Google OAuth is a registration and authentication service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing and is connected to the Google network.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

Instagram Authentication

Instagram Authentication is a registration and authentication service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing and is connected to the Instagram social network.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: 

• United States - Privacy Policy - https://help.instagram.com/519522125107875
• Ireland - Privacy Policy - https://help.instagram.com/519522125107875

Linkedin OAuth (LinkedIn Corporation)

Linkedin Oauth is a registration and authentication service provided by Linkedin Corporation and is connected to the Linkedin social network.

Personal Data processed: Trackers; Usage Data; various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy - https://www.linkedin.com/legal/privacy-policy

Log In with PayPal (PayPal Inc.)

Log In with PayPal is a registration and authentication service provided by PayPal Inc. and is connected to the PayPal network.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: See the PayPal privacy policy - Privacy Policy - https://www.paypal.com/webapps/mpp/ua/privacy-full

Pinterest OAuth (Pinterest, Inc.)

Pinterest OAuth is a registration and authentication service provided by Pinterest, Inc. and is connected to the Pinterest social network.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy - https://policy.pinterest.com/en/privacy-policy

Twitter OAuth (X Corp.)

Twitter Oauth is a registration and authentication service provided by X Corp. and is connected to the Twitter social network.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy - https://twitter.com/en/privacy

YouTube OAuth

YouTube OAuth is a registration and authentication service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing and is connected to the YouTube network.

Personal Data processed: various types of Data as specified in the privacy policy of the service.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

MANAGING CONTACTS AND SENDING MESSAGES

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.

These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

Remarkety (Namogoo Inc.)

Mailchimp is an email address management and message-sending service provided by Intuit Inc.

Personal Data processed: company name; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; phone number; physical address; Trackers; Usage Data; username; various types of Data.

Place of processing: United States - Privacy Policy - https://www.remarkety.com/privacy-policy/

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

BACKUP SAVING AND MANAGEMENT

This type of service allows the Owner to save and manage backups of this website on external servers managed by the service provider itself. The backups may include the source code and content and the data the User provides to this website.

Backup on Google Drive

Google Drive is a service to save and manage backups provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

Personal Data processed: various types of Data as specified in the service's privacy policy.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

Category of personal information collected according to the CCPA: identifiers.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

MANAGING DATA COLLECTION AND ONLINE SURVEYS

This type of service allows this website to manage the creation, deployment, administration, distribution, and analysis of online forms and surveys in order to collect, save and reuse Data from any responding Users.

The Personal Data collected depend on the information asked and provided by the Users in the corresponding online form.

These services may be integrated with a wide range of third-party services to enable the Owner to take subsequent steps with the Data processed - e.g., managing contacts, sending messages, analytics, advertising, and payment processing.

Klaviyo Forms (Klaviyo Inc.)

Klaviyo Forms is a form builder and data collection platform provided by Klaviyo Inc. To take advantage of the service provided by Klaviyo, the Owner typically shares information about (purchasing) Users, such as for example contact details and shopping histories. Check the indication at “Personal Data processed“ below for an explanation of the extent of the sharing.

Personal Data processed: city; company name; country; Data communicated while using the service; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Trackers; Usage Data; username.

Place of processing: United States – Privacy Policy.

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; employment-related information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

REMARKETING AND BEHAVIORAL TARGETING

The Company employs remarketing strategies to engage Users subsequent to their interaction with our Service. Our third-party partners utilize cookies and non-cookie technologies to facilitate understanding of User Devices and Service interaction. This enables Service enhancement in alignment with User interests and allows for the delivery of advertisements likely to resonate with Users.

Such services empower the Company and its partners to optimize and customize advertisements based on prior Website usage. This activity is accomplished by tracking Usage Data and employing Tracking Tools to collect Information, which is then relayed to our partners responsible for the remarketing and behavioral targeting activities.

Certain services provide a remarketing option based on email address lists. Along with any opt-out features provided by the services listed below, Users may learn more about opting out of interest-based advertising by referring to the dedicated section entitled "Options for Opting Out of Interest-Based Advertising" within this document.

These third-party vendors collect, store, use, process, and transfer Information about Your activity on Our Service in accordance with their Privacy Policies and to enable Us to:

• Measure and analyze traffic and browsing activity on Our Service.
• Show you advertisements for our products and/or services on third-party websites or apps.
• Measure and analyze the performance of Our advertising campaigns.

Some of these third-party vendors may utilize non-cookie technologies that may not be impacted by browser settings that block cookies. Your browser may not permit You to block such technologies. For more information, refer to the Privacy Policy of each vendor listed below.

The above excludes text messaging originator opt-in data and consent; this Information will not be shared with third parties.

Google Ads Remarketing (Google LLC or Google Ireland Limited)

Google Ads Remarketing, provided by either Google LLC or Google Ireland Limited, connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie. 

For details on Google's Data usage, refer to Google's partner policy. Users can opt out of Google's use of Trackers for Personalized ads by accessing Google's Ads Settings.

You can opt out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads

Google also recommends installing the Google Analytics Opt-out Browser Add-on - https://tools.google.com/dlpage/gaoptout - for your web browser. Google Analytics Opt-out Browser Add-on allows visitors to prevent their data from being collected and used by Google Analytics.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

• Nature of Personal Data Processed: Tracker and Usage Data.
• Legal Basis for Processing: Consent.
• Data Processing Locale: 

United States - Privacy Policy - https://policies.google.com/privacy - Opt Out - https://adssettings.google.com/

Ireland - Privacy Policy - https://policies.google.com/privacy - Opt-Out - https://adssettings.google.com/

• Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• Classification of Personal Information under CCPA: Internet Activity.
• This Processing Constitutes: A Sale, a Sharing, and Targeted Advertising as defined by CCPA, VCDPA, CPA, CTDPA, and UCPA.

Klaviyo segmentation and social advertising (Klaviyo Inc.)

Klaviyo segmentation and social advertising is a remarketing and behavioral targeting service provided by Klaviyo Inc. Klaviyo segmentation and social advertising makes use of tracking technologies to monitor User behavior. This Data is then used to personalize the User's experience and to provide targeted advertising. Klaviyo segmentation and social advertising may also connect the collected Data with other networks, including advertising networks, and enable these parties to track and target the User. The Owner, unless otherwise specified in this document, has no direct relationship with the third parties that Klaviyo segmentation and social advertising may be including. To take advantage of the service provided by Klaviyo, the Owner typically shares information about (purchasing) Users, such as for example contact details and shopping histories. Check the indication at “Personal Data processed“ below for an explanation of the extent of the sharing.

Personal Data processed: device information; email address; purchase history; Trackers; Usage Data.

Place of processing: United States - Privacy Policy/Opt out - https://www.klaviyo.com/legal/privacy/privacy-notice

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

META CUSTOM AUDIENCE (META PLATFORMS, INC.)

Meta Custom Audience, a behavioral targeting, and remarketing service rendered by Meta Platforms, Inc., intertwines this Website's activity with the Meta Audience Network. Please refer to this opt-out page to exclude yourself from Meta's utilization of Trackers for Personalized advertisements.

• Data Categories Processed: Email Address and Trackers.
• Grounds for Data Processing: Consent.
• Processing Locale: United States – Privacy Policy – Opt-out.
• Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• CCPA-Compliant Personal Information Classification: Identifiers and Internet Information.
• Processing Connotes: A Sale, a Sharing, and Targeted Advertising as characterized by CCPA, VCDPA, CPA, CTDPA, and UCPA.

FACEBOOK REMARKETING (META PLATFORMS, INC.)

Facebook Remarketing, a remarketing and behavioral targeting service extended by Meta Platforms, Inc., associates this Website's activity with the Meta Audience Network.

Data Categories Processed: Tracker and Usage Data.

Access this page to garner knowledge on Facebook's interest-based advertising: https://www.facebook.com/help/516147308587266.

Instructions to opt-out of Facebook's interest-based ads are available here: https://www.facebook.com/help/568137493302217.

Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising orchestrated by the Digital Advertising Alliance. Opting out from Facebook and other participating entities can be executed through the Digital Advertising Alliance in the USA (http://www.aboutads.info/choices/), the Digital Advertising Alliance of Canada in Canada (http://youradchoices.ca/), the European Interactive Digital Advertising Alliance in Europe (http://www.youronlinechoices.eu/), or by utilizing your mobile device settings.

For an in-depth understanding of Facebook's privacy practices, refer to Facebook's Data Policy: https://www.facebook.com/privacy/explanation.

• Grounds for Data Processing: Consent.
• Processing Locale: United States – Privacy Policy – Opt Out.
• Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• CCPA-Compliant Personal Information Classification: Internet Information.
• Processing Connotes: A Sale, a Sharing, and Targeted Advertising as characterized by CCPA, VCDPA, CPA, CTDPA, and UCPA.

E-COMMERCE SERVICES

The Owner employs the following services to facilitate the sale of goods, service provision, or online content monetization. These enable payment processing, subscription model setup, order tracking, and delivery management.

CHARGEBEE (CHARGEBEE INC.)

Chargebee, a subscription management tool provided by Chargebee Inc., aids the Owner in managing subscriptions, invoicing, pricing models, and subscription and revenue analytics.

• Data Categories Processed: Email Address, First Name, Invoicing Information, Last Name, Phone Number, and User Subscriptions.
• Grounds for Data Processing: Contract.
• Processing Locale: United States - Privacy Policy - https://www.chargebee.com/privacy
• Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• CCPA-Compliant Personal Information Classification: Identifiers and Commercial Information.

TAG MANAGEMENT SERVICES

The Owner utilizes the services listed below to centralize the management of the tags or scripts required on this Website. This may result in User Data flowing through these services and potentially being retained.

SEGMENT (TWILIO, INC.)

Segment, a service rendered by Twilio, Inc., oversees tag management.

• Data Categories Processed: Trackers and Usage Data.
• Grounds for Data Processing: Consent.
• Processing Locale: United States - Privacy Policy - https://www.twilio.com/en-us/legal/privacy
• Mechanism for Data Transfer: No Data Transfer.
• Data Retention Duration: Until the intended purpose is fulfilled.
• CCPA-Compliant Personal Information Classification: Internet Information.
• Processing Connotes: A Sale as defined by the CCPA, VCDPA, CPA, CTDPA, and UCPA.

Google Tag Manager

Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

Personal Data processed: Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

Category of personal information collected according to the CCPA: internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

RUDDERSTACK (SELF-HOSTED) (THIS WEBSITE)

RudderStack (self-hosted) is a tag management service employed by this Website.

• Data Categories Processed: Trackers and Usage Data.
• Processing Locale: United States - Privacy Policy - https://www.rudderstack.com/privacy-policy/
• Grounds for Data Processing: Consent.
• Mechanism for Data Transfer: No Data Transfer.
• CCPA-Compliant Personal Information Classification: Internet Information.

TRAFFIC OPTIMIZATION AND DISTRIBUTION SERVICES

These services enable this Website to distribute its content using servers across different countries and optimize performance. The Personal Data processed depends on the characteristics and the manner in which these services are implemented. Their function is to filter communications between this Website and the User's browser. Given the widespread distribution of this system, it is difficult to ascertain the locations to which the contents that may contain the User's Personal Information are transferred.

Cloudflare (Cloudflare, Inc.)

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.

The way Cloudflare is integrated means that it filters all the traffic through this website, i.e., communication between this website and the User's browser, while also allowing analytical data from this website to be collected.

Personal Data processed: Trackers; various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy - https://www.cloudflare.com/privacypolicy/

Category of personal information collected according to the CCPA: identifiers; internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

AKAMAI CONTENT DELIVERY NETWORK (AKAMAI TECHNOLOGIES, INC.)

Akamai Technologies, Inc. provides a hosting service known as Akamai.

• Data Categories Processed: Trackers and Usage Data.
• Grounds for Data Processing: Performance of a Contract.
• Processing Locale: United States - Privacy Policy - https://www.akamai.com/legal/privacy-statement
• Mechanism for Data Transfer: EU Standard Data Protection Clauses.
• Data Retention Duration: Until the intended purpose is fulfilled.
• CCPA-Compliant Personal Information Classification: Internet Information.

BUNNY CDN (BUNNYWAY D.O.O.)

BunnyWay d.o.o. provides a traffic optimization and distribution service known as Bunny CDN.

• Data Categories Processed: Usage Data.
• Grounds for Data Processing: Performance of a Contract.
• Processing Locale: Slovenia - Privacy Policy - https://bunny.com/privacy
• CCPA-Compliant Personal Information Classification: Internet Information.

CLOUDNS (CLOUD DNS LTD)

ClouDNS is a managed domain name system (DNS) service rendered by Cloud DNS Ltd. ClouDNS oversees DNS infrastructure to ensure rapid and secure traffic delivery.

• Data Categories Processed: Usage Data.
• Processing Locale: Bulgaria - Privacy Policy - https://www.cloudns.net/privacy-policy/
• Mechanism for Data Transfer: No Data Transfer.
• CCPA-Compliant Personal Information Classification: Internet Information.

LOCATION-BASED INTERACTIONS

Geolocation (this website)

This website may collect, use, and share User location Data in order to provide location-based services.

Most browsers and devices provide tools to opt-out of this feature by default. If explicit authorization has been provided, the User’s location data may be tracked by this website.

Personal Data processed: coarse location, geographic position, precise location.

SPAM PROTECTION

This type of service analyzes the traffic of this website, potentially containing Users' Personal Data, with the purpose of filtering it from parts of traffic, messages, and content that are recognized as SPAM.

Google reCAPTCHA

Google reCAPTCHA is a SPAM protection service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

Personal Data processed: answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events; Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

Category of personal information collected according to the CCPA: internet information; inferred information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

ENHANCEMENT, OPTIMIZATION, AND DIVERSE FUNCTIONALITIES

We collaborate with select third-party Service Providers to optimize our Service and enhance user experience.

Mouseflow

We use Mouseflow, a service by ApS, to monitor and understand user behavior on our website. This tool offers session replays and heatmap analytics to track interactions like clicks, scrolls, and browsing habits. It may gather Information from your device.

For Mouseflow's data handling policy, refer to: https://mouseflow.com/privacy/

FreshDesk

We use FreshDesk, a customer support software Freshworks, Inc. developed to streamline our customer service. The software may collect Information from your device.

For FreshDesk's privacy practices, refer to: https://www.freshworks.com/privacy/

Google Places

We utilize Google Places to garner Information about locations via HTTP requests. Google Places may collect Information from you and your device for security purposes.

For Google's data handling policy, kindly visit: https://www.google.com/intl/en/policies/privacy/

Richpanel

Their data management policy can be accessed at: https://richpanel.com/privacy-policy

ShipStation

Their data handling policy is available at: https://www.shipstation.com/privacy-policy/

APC Postal Logistics

Their privacy policy is provided at: https://www.apc-pli.com/privacy-policy.html

FedEx

Their privacy policy can be accessed at: https://www.fedex.com/en-us/trust-center.html

UPS

Their data management policy can be accessed at: https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/privacy-notice.page

USPS

Their data handling policy is available at: https://about.usps.com/who/legal/privacy-policy/

Twitter

Their privacy practices can be accessed at: https://twitter.com/en/privacy

Amazon

Their data management policy is available at: https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ

Instagram

Their privacy practices can be accessed at: https://www.instagram.com/legal/privacy/

Pinterest

Their privacy policy can be accessed at: https://www.privacypolicies.com/our-privacy-policy/

Snapchat

Their privacy policy can be accessed at: https://www.snap.com/privacy/privacy-policy

TikTok

Their data handling policy is available at: https://www.tiktok.com/legal/privacy-policy-row

Walmart

Their privacy practices can be accessed at: https://corporate.walmart.com/privacy-security

eBay

Their data management policy is available at: https://pages.ebay.com/help/policies/privacy-policy.html

LiveAgent

Their privacy policy can be accessed at: https://www.liveagent.com/privacy-policy/

Shopify

Their data handling policy is available at: https://www.shopify.com/legal/privacy

Gorgias

Their privacy practices can be accessed at: https://www.gorgias.com/privacy/privacy

Judge.me

Their data management policy is available at: https://judge.me/privacy

Yahoo

Their privacy policy can be accessed at: https://legal.yahoo.com/us/en/yahoo/privacy/index.html

DEVICE PERMISSIONS FOR PERSONAL DATA ACCESS

This website requests certain permissions from Users that allow it to access the User's device Data as described below.

Device permissions for Personal Data access (this website)

This website requests certain permissions from Users that allow it to access the User's device Data as summarized here and described within this document.

Personal Data processed: Apple's speech recognition servers permission; Approximate location permission (continuous); Approximate location permission (non-continuous); Biometric Data access permission; Bluetooth sharing permission; Calendar permission; Call permission; Camera permission; Camera permission, without saving or recording; Contacts permission; Google Assistant permission; Google Home permission; Health Data read permission; Health Data update permission; HomeKit permission; Media Library permission (Music); Microphone permission; Microphone permission, without recording; Motion sensors permission; NFC Reader permission; Phone permission; Photo Library permission; Precise location permission (continuous); Precise location permission (non-continuous); Reminders permission; Sensors permission; Siri permission; SMS permission; Social media accounts permission; Storage permission; TV Provider permission; Write-only Photo Library permission.

DISPLAYING CONTENT FROM EXTERNAL PLATFORMS

This type of service allows you to view content hosted on external platforms directly from the pages of this website and interact with them.

This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Google Maps widget

Google Maps is a maps visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this website to incorporate content of this kind on its pages.

Personal Data processed: Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

YouTube IFrame Player

YouTube IFrame Player is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this website to incorporate content of this kind on its pages. Through this Service, this website may collect Data directly or indirectly on or from Users’ devices, including by making use of trackers. Users may restrict such access to their Data via the security settings page provided by Google. Users may ask the Owner for further information about these privacy settings at any time through the contact details provided in this document. Data collected through the Service may also be used to help third parties deliver interest-based advertising. Users can opt out of third-party interest-based advertising through their device settings or by visiting the Network Advertising Initiative opt-out page.

Personal Data processed: Data communicated in order to use the Service; device information; password; Trackers; Usage Data; User ID; username.

Place of processing: 

• United States - Privacy Policy - http://www.google.com/policies/privacy - Opt out - https://security.google.com/settings/security/permissions
• Ireland - Privacy Policy - http://www.google.com/policies/privacy - Opt out - https://security.google.com/settings/security/permissions

YouTube Data API

YouTube Data API is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this website to incorporate functions normally executed on YouTube so that Users can watch, find, and manage YouTube content directly on this website. Through this Service, this website may collect Data directly or indirectly on or from Users’ devices, including by making use of Trackers. Users may restrict such access to their Data via the security settings page provided by Google. Users may ask the Owner for further information about these privacy settings at any time through the contact details provided in this document. Data collected through the Service may also be used to help third parties deliver interest-based advertising. Users can opt out of third-party interest-based advertising through their device settings or by visiting the Network Advertising Initiative opt-out page.

Personal Data processed: Data communicated in order to use the Service; Data communicated while using the service; device information; password; Trackers; Usage Data; User ID; username.

Place of processing: 

• United States - Privacy Policy - http://www.google.com/policies/privacy - Opt out - https://security.google.com/settings/security/permissions
• Ireland - Privacy Policy - http://www.google.com/policies/privacy - Opt out - https://security.google.com/settings/security/permissions

YouTube video widget (Google LLC)

YouTube is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing that allows this website to incorporate content of this kind on its pages.

Personal Data processed: Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

Category of personal information collected according to the CCPA: internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

Google Fonts

Google Fonts is a typeface visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this website to incorporate content of this kind on its pages.

Personal Data processed: Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy
• Ireland - Privacy Policy - https://policies.google.com/privacy

Category of personal information collected according to the CCPA: internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

Font Awesome (Fonticons, Inc. )

Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows this website to incorporate content of this kind on its pages.

Personal Data processed: Trackers; Usage Data.

Place of processing: United States - Privacy Policy - https://fontawesome.com/privacy

Category of personal information collected according to the CCPA: internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA

ANALYTICAL ASSESSMENTS

We may enlist the expertise of third-party service providers to monitor and scrutinize the use of our Service.

Cloudflare Web Analytics (Cloudflare, Inc.)

Cloudflare Web Analytics is an anonymized analytics service provided by Cloudflare, Inc. that gives the Owner insight into the use of this website by Users without needing to identify them. Further information may be found here and within the service's privacy policy.

Personal Data processed: device information; language; Usage Data.

Place of processing: United States - Privacy Policy - https://www.cloudflare.com/privacypolicy/

Category of personal information collected according to the CCPA: internet information; inferred information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA

YouTube Analytics and Reporting API

YouTube Analytics and Reporting API is a video content analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing. Through this Service, this website may collect Data directly or indirectly on or from Users’ devices, including by making use of trackers. Users may restrict such access to their Data via the security settings page provided by Google. Users may ask the Owner for further information about these privacy settings at any time through the contact details provided in this document. Data collected through the Service may also be used to help third parties deliver interest-based advertising. Users can opt out of third-party interest-based advertising through their device settings or by visiting the Network Advertising Initiative opt-out page.

Personal Data processed: Data communicated in order to use the Service; Data communicated while using the service; device information; password; Trackers; Usage Data; User ID; username.

Place of processing: 

• United States Privacy Policy - http://www.google.com/policies/privacy - Opt out - https://security.google.com/settings/security/permissions
• Ireland Privacy Policy - http://www.google.com/policies/privacy - Opt out - https://security.google.com/settings/security/permissions

Category of personal information collected according to the CCPA: identifiers; internet information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

Google Analytics

Google Analytics, a web analytics service proffered by Google, tracks and reports website traffic. Google employs the data collated to trail and examine our Service usage. Such data may be amalgamated with other services rendered by Google. Google may utilize the gathered data to contextualize and Personalize the advertisements of its proprietary advertising network.

To abstain from making your activity on the Service accessible to Google Analytics, you may install the Google Analytics opt-out browser add-on. This add-on prohibits Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from disseminating visit activity Information to Google Analytics.

For comprehensive details on Google's privacy practices, we invite you to visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Google Analytics 4

Google Analytics 4 is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of this website, to prepare reports on its activities and share them with other Google services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

Personal Data processed: browser information; city; device information; latitude (of city); longitude (of city); number of Users; session statistics; Trackers; Usage Data.

Place of processing: 

• United States - Privacy Policy - https://policies.google.com/privacy - Opt-Out - https://tools.google.com/dlpage/gaoptout?hl=en
• Ireland - Privacy Policy - https://policies.google.com/privacy - Opt-Out - https://tools.google.com/dlpage/gaoptout?hl=en

Category of personal information collected according to the CCPA: identifiers; internet information; geolocation data.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA and UCPA

Firebase

Firebase is an analytical service provided by Google Inc. You may opt out of specific Firebase features through your mobile device settings, such as your device advertising settings, or by adhering to the directives provided by Google in their Privacy Policy: https://policies.google.com/privacy

We strongly encourage you to peruse Google's safeguarding data policy: https://support.google.com/analytics/answer/6004245

For a detailed understanding of the type of Information Firebase collates, we suggest visiting the How Google uses data when you use our partners' sites or apps webpage: https://policies.google.com/technologies/partner-sites

Matomo

Matomo is a web analytics service. Their Privacy Policy can be accessed at: https://matomo.org/privacy-policy

Clicky

Clicky is a web analytics service. For more information about Clicky's privacy practices, please refer to their Privacy Policy: https://clicky.com/terms

Statcounter

Statcounter is a tool for web traffic analysis. For more information about Statcounter's privacy practices, please refer to their Privacy Policy: https://statcounter.com/about/legal/

Flurry Analytics

Flurry Analytics is a service provided by Yahoo! Inc. You can opt-out from the Flurry Analytics service to preclude Flurry Analytics from utilizing and sharing your Information by visiting Flurry's Opt-out page: https://developer.yahoo.com/flurry/end-user-opt-out/

For further details about Yahoo!'s privacy practices and policies, we invite you to visit their Privacy Policy page: https://policies.yahoo.com/xa/en/yahoo/privacy/index.htm

Mixpanel

Mixpanel is a service provided by Mixpanel Inc. To prevent Mixpanel from using your data for analytical purposes, you may choose to opt-out by visiting: https://mixpanel.com/optout/

For a detailed understanding of the type of Information Mixpanel collects, please visit the Mixpanel Terms of Use page: https://mixpanel.com/terms/

Unity Analytics

Unity Analytics, a service provided by Unity Technologies, collects, stores, processes, and transfers Personal data to provide, operate, and enhance Unity Technologies' services, including Personalized advertising services. To learn more about the type of data Unity Technologies collects, we invite you to visit their Privacy Policy page: https://unity3d.com/legal/privacy-policy.

To opt out of Unity Analytics, please visit: https://unity3d.com/legal/privacy-policy

You may opt out of all Personalized advertising by enabling privacy features on your mobile devices, such as Limit Ad Tracking (iOS) and Opt-Out of Ads Personalization (Android). Please refer to your mobile device's Help system for more Information.

Microsoft

Their Privacy Policy can be found at: https://privacy.microsoft.com/en-us/privacystatement

Linkedin

Their Privacy Policy is accessible at: https://www.linkedin.com/legal/privacy-policy

Facebook

Their Privacy Policy can be found at: https://www.facebook.com/privacy/explanation

USER DATABASE MANAGEMENT

This service facilitates the creation of user profiles by the Owner, commencing with the User's provision of an email address, Personal name, or other pertinent Information to this Website. User interactions are subject to analytical observation. The Personal Data thus procured may be amalgamated with publicly available User Information (including social media profiles) to fabricate private profiles that enhance this Website. Select services may enable the timely dissemination of messages to the User, such as emails triggered by specific actions on this Website.

Freshsales (Freshworks, Inc.)

Freshworks, Inc. provides a proprietary user database management service known as Freshsales.

• Categories of Personal Data Processed: Varied as per the service's privacy policy.
• Legal Justification for Processing: Contractual Performance.
• Jurisdiction of Processing: United States - Privacy Policy - https://www.freshworks.com/privacy/
• Legal Ground for Data Transfer: Standard Data Protection Clauses.
• Classification of Personal Data Gathered in Accordance with CCPA: Identifiers.
• This Processing Constitutes: A Sale per CCPA, VCDPA, CPA, CTDPA, and UCPA.

Bing Ads Remarketing

Bing Ads remarketing service is rendered by Microsoft Inc.

Opting out of interest-based Bing Ads can be accomplished by adhering to their instructions: https://advertise.bingads.microsoft.com/en-us/resources/policies/Personalized-ads

Further understanding of Microsoft's privacy practices and policies can be acquired by visiting their Privacy Policy page: https://privacy.microsoft.com/en-us/PrivacyStatement

Klaviyo CRM (Klaviyo Inc.)

Klaviyo CRM is a User database management service provided by Klaviyo Inc. Klaviyo CRM can also be used as a medium for communications, either through email or through messages within this website. To take advantage of the service provided by Klaviyo, the Owner typically shares information about (purchasing) Users, such as for example contact details and shopping histories. Check the indication at “Personal Data processed“ below for an explanation of the extent of the sharing.

Personal Data processed: city; company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; state; Trackers; Usage Data; username; various types of Data.

Place of processing: United States – Privacy Policy.

Category of personal information collected according to the CCPA: identifiers; commercial information; internet information; employment-related information.

This processing constitutes:

• a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
• a sharing according to the CCPA
• targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA

Twitter

Twitter's remarketing service is facilitated by Twitter Inc.

Opting out of interest-based ads from Twitter can be accomplished by adhering to their instructions: https://support.twitter.com/articles/20170405

Further understanding of Twitter's privacy practices and policies can be acquired by visiting their Privacy Policy page: https://twitter.com/privacy

Pinterest

Pinterest's remarketing services are facilitated by Pinterest Inc.

Opting out of interest-based ads from Pinterest can be accomplished by enabling the "Do Not Track" functionality of your web browser or by adhering to Pinterest's instructions: http://help.pinterest.com/en/articles/Personalization-and-data

Further understanding of Pinterest's privacy practices and policies can be acquired by visiting their Privacy Policy page: https://about.pinterest.com/en/privacy-policy

AdRoll

AdRoll's remarketing service is facilitated by NextRoll, Inc.

Opting out of AdRoll remarketing can be accomplished by visiting the AdRoll Advertising Preferences webpage: http://info.evidon.com/pub_info/573?v=1&nt=1&nw=false or the Opt-Out of Personalized Advertising webpage: https://help.adroll.com/hc/en-us/articles/216599538-Opting-Out-of-Personalized-Advertising

If you are a resident of California, please peruse the "Information For California Residents Only" section in the Privacy Policy of NextRoll, Inc.: https://www.nextroll.com/privacy#service-13

Further understanding of AdRoll's privacy practices can be acquired by visiting the NextRoll, Inc. Privacy Policy webpage: https://www.nextroll.com/privacy

Perfect Audience

Perfect Audience's remarketing service is facilitated by NowSpots Inc.

Opting out of Perfect Audience remarketing can be accomplished by visiting these pages: Platform Opt-out (http://pixel.prfct.co/coo) and Partner Opt-out (http://ib.adnxs.com/optout).

Further understanding of Perfect Audience's privacy practices can be acquired by visiting the Perfect Audience Privacy Policy & Opt-out webpage: https://www.perfectaudience.com/privacy/

AppNexus

AppNexus's remarketing service is facilitated by AppNexus Inc.

Opting out of AppNexus remarketing can be accomplished by visiting the

Privacy & the AppNexus Platform webpage: https://www.appnexus.com/platform-privacy-policy

Further understanding of AppNexus's privacy practices can be acquired by visiting the AppNexus Platform Privacy Policy webpage: https://www.appnexus.com/platform-privacy-policy

Information on Opting Out of Interest-Based Advertising

In addition to the opt-out mechanisms provided by the aforementioned services, Users can explore general opt-out procedures for interest-based advertising in the dedicated section of the Cookie Policy.

User Rights

Subject to legal limitations, Users have certain rights in relation to their Data processed by the Owner:

1. Consent Withdrawal: Users may revoke the consent previously given for processing their Personal Data.
2. Processing Objection: Users may object to the processing of their Data if such processing is predicated on a legal basis other than consent.
3. Data Access: Users may ascertain if the Owner is processing their Data, request specifics of such processing, and obtain a copy of the Data undergoing processing.
4. Verification and Rectification: Users may verify the accuracy of their Data and request rectification of inaccuracies or updates.
5. Processing Restriction: Users may restrict the processing of their Data. In this case, the Owner will refrain from processing their Data beyond storage.
6. Erasure: Users may demand the deletion of their Data by the Owner.
7. Data Transfer: Users may receive their Data in a commonly utilized, machine-readable format and, if technically viable, have it transferred to another controller without hindrance.
8. Lodge a Complaint: Users may lodge a complaint with their competent data protection authority.

FACEBOOK PAGE

DATA CONTROLLER FOR THE FACEBOOK PAGE

The Company, as the operator of the Facebook Fan Page https://www.facebook.com/ZNaturalFoods, along with the social network Facebook, acts as Joint Controllers of Your Personal Data collected during the use of the Service. 

The Company has entered into certain agreements with Facebook that establish the terms of use for the Facebook Fan Page. These agreements largely align with the Facebook Terms of Service: https://www.facebook.com/terms.php

Please refer to the Facebook Privacy Policy https://www.facebook.com/policy.php for additional details on Facebook's Personal data management practices. Alternatively, you may contact Facebook online or via mail: Facebook, Inc. ATTN, Privacy Operations, 1601 Willow Road, Menlo Park, CA 94025, United States.

FACEBOOK INSIGHTS

In accordance with the GDPR, we utilize the Facebook Insights function in connection with the operation of the Facebook Fan Page to procure anonymized statistical data about Our users.

To this end, Facebook deploys a Cookie on the user's device when visiting our Facebook Page. Each Cookie comprises a unique identifier code and remains operative for two years unless it is deleted before the conclusion of this period.

Facebook receives, records, and processes the Information stored in the Cookie, particularly when the user visits the Facebook services, services provided by other members of the Facebook Fan Page, and services offered by other companies using Facebook services.

For more information on the privacy practices of Facebook, please visit the Facebook Privacy Policy here: https://www.facebook.com/privacy/explanation

PRESONAL DATA COLLECTED THROUGH SOURCES OTHER THAN THE USER

The Owner of this website may have legitimately collected Personal Data relating to Users without their knowledge by reusing or sourcing them from third parties on the grounds mentioned in the section specifying the legal basis of processing. Where the Owner has collected Personal Data in such a manner, Users may find specific information regarding the source within the relevant sections of this document or by contacting the Owner.

RIGHT TO OPT-OUT OF SALE OF PERSONAL INFORMATION

• Opt-Out Right: You have the right to opt-out of the sale of your Personal Information.
• Opt-Out Procedure: Procedures for opting out are detailed for Website and Mobile Devices, including specific platforms and settings.
• Browser-Specific Opt-Out: Opt-out is browser-specific and may require re-opting if browsers or cookies are altered.

LEGAL INFORMATION AND COMPLIANCE

• Compliance: This privacy statement complies with multiple legislation provisions, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
• Jurisdiction: Country pertains to Florida, United States.
• Exclusivity: This privacy policy exclusively applies to this Website unless stated otherwise.

CONCLUSION AND CONTACT INFORMATION

This Privacy Policy is crafted in alignment with our commitment to transparency, security, and compliance with applicable laws and regulations. Throughout our site, we provide email links that allow you to contact us directly with any inquiries or comments you may have. We endeavor to respond promptly to every message received. The Information you dispatch to us is used to respond directly to your questions and comments. We also retain your email correspondence on file to better serve you should you have additional questions in the future. With your explicit consent, your Personal Information is shared solely with third parties (including manufacturers).

For inquiries concerning this Privacy Policy, you may contact us:

• By email: orders@leanfactor.com
• By visiting this page on our website: https://www.leanfactor.com/pages/contact-support
• By phone number: 1-800-818-7115

When you use our Site, Service, Service Providers, place an order, or contact us, you are acknowledging that you have read, understand, and agree to be bound by all of our Policies referenced and/or published on this site, collectively referred to as TOU, which includes our Legal Notice Disclaimer, Privacy Policy, Content Policy, Information & Security Policy, GDPR Statement, California Prop 65 Notice, Accessibility Statement, Bot & Crawler Access Terms of Use Policy, Advertising & Analytics Policy, Product Reviews Policy, Mobile Terms of Service, Shipping Policy, Return Policy, Cookie Policy, Data Collection opt-out, DMCA Compliance Statement, and Terms of Use Policy. Any disagreements must be settled with binding arbitration.