Privacy Notice
Privacy Notice Key Points
- Personal Data We Collect
- Sharing the Personal Data We Collect
- International Transfer
- Security
- Your Rights - How to Access and Limit Our Use of Certain Personal Data
- Data Retention
- Cookies and Similar Technologies
- Third Party Sites and Services
- Children
- Communications
- Changes
- Comments and Questions
- Appendix A: Supplemental Privacy Notice for California Residents
- Personal Data We Collect.
- Depending on your usage and geographic location, we collect different types of data and we and any of our third-party sub-contractors ("Sub Contractors") and service providers we use or cooperate with ("Service Providers") use the data we collect for different purposes, as specified below. It is your voluntary decision whether to provide us with certain Personal Data, but if you refuse to provide such Personal Data, we may not be able to register you and/or provide you with the Services or part thereof on our App and/or Site and/or any other platform we may use to provide our Services. See below a description of the Personal Data we collect for what purpose and the legal basis:
- Visitors to the Site.
Contact Information. If you contact us, whether by submitting an online form that we make available or by sending an email to an email address that we display on the Site with questions, comments, or for purposes of customer/technical support, interest in advertising or regarding open positions, we collect the information contained in your message and any other information, including Personal Data, you provide.
How we use this data. To respond to your request or inquiry, to contact you regarding advertisement with us or regarding jobs at Karma.
Legal Basis. We process this Personal Data based on legitimate interest when we respond to your request or inquiry.
IP Address and Site Activity. When you visit the Site, we will automatically collect, through cookies and other tracking technologies, information about your computer, including non-Personal Data such as your operating system and browser type, and Personal Data such as your IP address, browsing history, and information regarding your viewing history on the Site. For more information about the cookies and similar technologies we use and how to adjust your preferences, please see the section "Cookies and Similar Technologies" below.
How we use this data. (1) to review usage and operations, including in an aggregated non-specific analytical manner, develop new products or services and improve current content, products, and Services; (2) to prevent fraud, protect the security of our Site and Services, and address any problems with the Site and/or Services.
Legal Basis. Strictly necessary cookies which are required for the proper and basic operation of the website will be processed in our legitimate interest. Other cookies, including any analytic or marketing cookies, will be processed based on your consent which we will obtain through our cookie notice and consent management.
- Users. When you use the Services, we collect the following types of Personal Data from you:
Registration Data. If you chose to register in order to use our Services, you will be required to register and provide us with the following mandatory Personal Data: your name and email address as well as a password that you will choose and use for your account. If you use the Services by logging in through a third-party login/account registration service (such as Facebook, Google, or Twitter), we also receive Personal Data about you as provided by such third-party service, as determined by such third party's policies and your preferences. You may choose to provide optional information such as your gender.
How we Use this Data. We use this Personal Data in order to provide you with the Services and to respond to your inquiries and requests and to contact and communicate with you and to provide you with informational newsletters and promotional materials relating to our App and Services, including via email; and (2) to prevent fraud, protect the security of and address any problems with the Site or App.
Legal Basis. (1) We process this Personal Data for the purpose of providing the Services to you, which is considered performance of a contract with you, including responding to your inquiries and requests and providing customer support.
Usage and Activity Data. When you use the Services on our App or Site, we will collect information about your mobile device, including non-Personal Data such as your operating system, browser, device type, and Personal Data such as your IP address, device ID, your browsing history and any information regarding your viewing and purchase history on our Services. For more information about the cookies and similar technologies we use and how to adjust your preferences, please see the section "Cookies and Similar Technologies" below.
How we Use this Data. (1) to review usage and operations, including in an aggregated non-specific analytical manner, develop new products or services and improve current content, products, and Services; (2) to prevent fraud, protect the security of our Site, App, and Services, and address any problems with the Site, App, and/or Services.
Legal Basis. Strictly necessary cookies which are required for the proper and basic operation of the website will be processed in our legitimate interest. Other cookies, including any analytic or marketing cookies, will be processed based on your consent which we will obtain through our cookie notice and consent management.
Products Viewed. We collect data regarding Products that you have saved. This data includes the product name, price, color, size, description and the link to the product on the applicable third-party online store. When you purchase products in connection with our Services, we collect data regarding the products that you purchased. This data includes purchase basket size, date of purchase and name of online store.
How we Use this Data. We use this Personal Data (1) in order to provide you with the Services and to respond to your inquiries and requests and to contact and communicate with you and (2) to review usage and operations, including in an aggregated non-specific analytical manner, develop new products or services and improve current content, products, and Services.
Legal Basis. (1) We process this Personal Data for the purpose of providing the Services to you, which is considered performance of a contract with you. (2) When we process this data in order to review usage, this is based on our legitimate interests to develop our products and Services.
Browsing Data. In case you a user of our browser extensions we may collect data regarding web browsing data, which includes web pages visited, clicked stream data and information about the content you viewed.
How we Use this Data. We use this Personal Data (1) in order to provide you with the Services and feature of the extension and (2) we will share this data in an aggregated, anonymized manner, for marketing research and commercial use with our business partners.
Legal Basis. (1) We process this Personal Data for the purpose of providing the Services to you, which is considered performance of a contract with you. (2) When we process and share the aggregated and anonymized data we will ask for your consent.
- Karma Gives Customers. When you participate in the Karma Gives Program, we collect the following types of Personal Data from you:
Paypal Account Information. We collect details relating to the Paypal account that you have designated to receive Rewards. **Note that if a User has provided us with your PayPal account details and has designated you to receive the Rewards, we process these details in fulfillment of our contract with the applicable User.
How we Use this Data. We use this Personal Data in order to provide the Rewards.
Legal Basis. We process this Personal Data for the purpose of providing the Rewards, which is considered performance of a contract with you.
Transaction Information. We collect data relating to transactions you have made when participating in the Karma Gives Program. You can see a record of your transactions within your account dashboard. This data is collected automatically through cookies. For more information about the cookies and similar technologies we use, please see the section "Cookies and Similar Technologies" below.
How we Use this Data. We use this Personal Data in order to track your transactions and provide you with the Rewards.
Legal Basis. We process this Personal Data for the purpose of providing the Rewards to you, which is considered performance of a contract with you.
- Statistical Information. By analyzing all of the information we receive, including all information concerning users we may compile statistical information across a variety of platforms and users ("Statistical Information"). Statistical Information helps us understand trends and customer needs so that new products and services can be considered and so that existing products and services can be tailored to customer desires. Statistical Information may be linked to Personal Data. We may share such Statistical Information with our partners, without restriction, on commercial terms that we can determine in our sole discretion.
- Analytics. We and/or our Service Providers or Sub Contractors, use analytics tools ("Tools"), including Google analytics to collect information about the use of the Site, App, or Services. Such Tools collect information such as how often users visit the Site or App, what pages they visit when they do so, and what other sites and mobile applications they used prior to visiting the Site or App. We use the information we get from the Tools to improve our Site, App, and Services. Google's ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Analytics Terms of Service located at https://www.google.com/analytics/terms/us.html and the Google Privacy Policy located at https://www.google.com/policies/privacy/.
- Direct Marketing. As described above, we may use Personal Data to let you know about our products and Services that we believe will be of interest to you and, if you have consented, about products and services of third parties. We may contact you by email or through other communication channels. In all cases, we will respect your preferences for how you would like us to manage marketing activity with respect to you. To protect privacy rights and to ensure you have control over how we manage marketing with you:
- We will take steps to limit direct marketing to a reasonable and proportionate level and only send you communications which we believe may be of interest or relevance to you.
- At any time you can update or correct your personal profile within your account, or change your preferences for the way in which you would like us to communicate with you, including how you receive details of latest offers or newsletters from us.
- You can ask us to stop sending email marketing by following the "unsubscribe" link you will find on all the email marketing messages we send you. Alternatively, you can contact us at [email protected].
- You can change the way your browser manages cookies, which may be used to deliver online advertising, by following the settings on your browser as explained below.
- If our marketing activities are based upon your consent, you may withdraw this consent at any time by changing your preferences on your personal profile.
- Legal Uses. We may use your Personal Data as required or permitted by any applicable law, for example, to comply with audit and other legal requirements.
- Sharing the Personal Data We Collect. We share your information, including Personal Data, as follows:
- Business Partners. Karma works with certain third-party business partners through affiliate marketing programs. This means that with respect to (some of your) interactions on the website, such as saving items, clicking on links to third-party websites, clicking on advertising links, or purchasing an item, Karma may earn commissions from its business partners. The data that will be shared with those business partners however we will not share any details of your activities or items you have tagged with them. In addition Karma may share aggregated, anonymized data related to the browsing activities of our extension users with some of our business partners.
Service Providers, and Sub Contractors. We also disclose information, including Personal Data we collect from and/or about you, to our trusted Service Providers and Sub Contractors, who have agreed to confidentiality restrictions and who use such information solely on our behalf in order to: (1) help us provide you with the Site, App, and/or Services; (2) aid in their understanding of how users are using our Site, App, and/or Services; (3) for the purpose of direct marketing (see above for more details).
Such Service Providers and Sub Contractors provide us with IT and system administration services, data backup, security, and storage services, data analysis, and help us serve advertisements and provide other marketing services.
- Data Controllers. When you use our Services, we also disclose your Personal Data to additional third parties, such as business partners, which act as independent, separate controllers with respect to the collection of your Personal Data. The details and contact information of such controllers are as set forth below.
- Business Transfers. Your Personal Data may be disclosed as part of, or during negotiations of, any merger, sale of company assets or acquisition (including in cases of liquidation) in such case, your Personal Data shall continue being subject to the provisions of this Privacy Notice.
- Law Enforcement Related Disclosure. We may share your Personal Data with third parties: (i) if we believe in good faith that disclosure is appropriate to protect our or a third party's rights, property or safety (including the enforcement of the Terms and this Privacy Notice); (ii) when required by law, regulation subpoena, court order or other law enforcement related issues, agencies and/or authorities; or (iii) as is necessary to comply with any legal and/or regulatory obligation.
- Other Uses or Transfer of Your Personal Data. If you use our Services together with or through a third-party service, site and/or mobile application, we may receive information (including Personal Data) about you from those third parties. Please note that when you use third-parties outside of our Site, App, or Services, their own terms and privacy policies will govern your use of those services.
Rakuten Marketing 215 Park Avenue, 2nd floor, New York, NY, USA AdTraction 199 Bishopsgate, London, EC2M 3TY, United Kingdom AWIN Eichhornstraße 3, 10785 Berlin, Germany Commission Junction 530 E Montecito StreetSanta Barbara, CA 93103, USA Commission Factory Suite 401, 32 Martin Place, Sydney, NSW 2000, Australia Flex Offers 990 Biscayne Blvd Office #1402, USA Impact Radius 223 E. De La Guerra St., Santa Barbara, CA 93101, USA PepperJam 555 E North Ln, Conshohocken, PA 19428, USA Performance Horizons 8th Floor, West One, Forth Banks, Newcastle Upon Tyne, United Kingdom, NE1 3PA Share-A-Sale 15 W. Hubbard St. STE 500, Chicago IL 60654, USA SkimLinks 52 Bevenden Street, London N1 6BL, United Kingdom Target 233 East De La Guerra, Santa Barbara, California, USA 93101 Viglink/Sovrn 5541 Central Avenue, Suite 100, Boulder, CO 80301, USA Cuelinks D/6, Goragandhi Shopping Center, Opp Railway Stn. Chandavarkar Road, Borivali - West, Mumbai - 400 091 Yieldkit Jarrestraße 44 b, 22303 Hamburg, Germany TradeDoubler Tradedoubler Ltd.4th Floor, 90 High Holborn, WC1V 6LJ London Soicos Moldes 3333, CP 1429, Capital Federal, Buenos Aires, Argentina NOCTEMQUE Camp-King-Allee 17, 61440 Oberursel (Taunus), Germany Apple 8th Floor, West One, Forth Banks, Newcastle Upon Tyne, United Kingdom, NE1 3PA Linkbux 5th Floor, #3 Minrun Building, 1388 Yishan Road, Xuhui District, Shanghai,China Digidip Skalitzer Str. 68, 10997 Berlin, Germany Brendreward 7600 Chevy Chase Drive Chase Park, Suite 300 Austin, TX 78752, USA Avantlink 1922 Pro1922 Prospector Park City, Utah 84060 United Statesspector Park City, Utah 84060 USA Webgains 21 Farringdon Road, London, EC1M 3HA, UK Revoffers 315 S. Coast Highway 101, #528 - Encinitas, CA 92024, USA Linkconnector 1001 Winstead Drive Suite 300 Cary, NC 27513, USA Goaffpro 1st Floor, 159 D, new mandi Sirsa, Haryana, 125055, India Refersion 242 W 38th St, New York, NY 10018, USA Tradetracker 70 Wapping Wall London, E1W 3SS, UK Intango/RevenueHits HaBarzel St 38, Tel Aviv-Yafo, Israel, 6971054 Sourceknowledge 1001 Boulevard De Maisonneuve Wes Suite 1510 Montreal, Quebec H3A 3C8, Canada Connexity 2120 COLORADO AVE. STE. 400 SANTA MONICA, CA 90404, USA - International Transfer.
- We use Sub Contractors and Service Providers and have affiliates who are located in countries other than your own and send them information we receive (including Personal Data). We conduct such international transfers for the purposes described above. We will ensure that these third parties will be subject to written agreements ensuring the same level of privacy and data protection as set forth in this Privacy Notice, including appropriate remedies in the event of the violation of your data protection rights in such third country.
- Whenever we transfer your Personal Data to third parties based outside of the European Economic Area ("EEA"), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data by the European Commission.
- Where we use certain service providers, we may use specific contracts approved by the European Commission which give Personal Data the same protection it has in the EEA.
- Please contact us at [email protected] if you would like further information on the specific mechanism used by us when transferring your Personal Data out of the EEA.
- Security. We have implemented and maintain appropriate technical and organization security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to Personal Data appropriate to the nature of such data. The measures we take include:
- Safeguards – The physical, electronic, and procedural safeguards we employ to protect your Personal Data include secure servers and SSL encryption of data.
- Access Control – We dedicate efforts for a proper management of system entries and limit access only to authorized personnel on a need to know basis of least privilege rules, review permissions once per month, and revoke access immediately after employee termination.
- Internal Policies – We maintain and regularly review and update our privacy related and information security policies.
- Personnel – We require new employees to sign non-disclosure agreements according to applicable law and industry customary practice.
- Encryption – We encrypt the data in transit using secure HTTPS protocols.
- Database Backup – Our databases are backed up on a daily basis for certain data and are verified regularly. Backups are encrypted and stored within the production environment to preserve their confidentiality and integrity, are tested regularly to ensure availability, and are accessible only by authorized personnel.
- However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
- As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect user IDs and passwords, please take appropriate measures to protect this information.
- Your Rights - How to Access and Limit Our Use of Certain Personal Data. Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to the Personal Data that we or other controllers hold about you, as detailed below. For any requests to exercise such rights with respect to information held by other controllers, please contact the applicable controller directly. If you wish for us to notify all independent controllers, please specify that request when you contact us in order to exercise any of your rights. We will investigate and attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by applicable data protection laws. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any information and/or comply with any of your requests, as detailed below:
- Right of Access. You have a right to know what Personal Data we collect about you and, in some cases, to have such Personal Data communicated to you. Subject to applicable law, we may charge you with a fee. Please note that we may not be able to provide you with all the information you request, and, in such case, we will endeavor to explain to you why.
- Right to Data Portability. If the processing is based on your consent or performance of a contract with you and processing is being carried out by automated means, you may be entitled to (request that we) provide you or another party with a copy of the Personal Data you provided to us in a structured, commonly-used, and machine-readable format.
- Right to Correct Personal Data. Subject to the limitations in applicable law, you may request that we update, complete, correct or delete inaccurate, incomplete, or outdated Personal Data.
- Deletion of Personal Data ("Right to Be Forgotten"). You have a right to request that we delete your Personal Data if either: (i) it is no longer needed for the purpose for which it was collected, (ii) our processing was based on your consent and you have withdrawn your consent, (iii) you have successfully exercised your Right to Object (see below), (iv) processing was unlawful, or (iv) we are required to erase it for compliance with a legal obligation. We cannot restore information once it has been deleted. Please note that to ensure that we do not collect any further Personal Data, you should also delete our App from your mobile devices, terminate your account with us, and clear our cookies from any device where you have used our Site or App. We may retain certain Personal Data (including following your request to delete) for audit and record-keeping purposes, or as otherwise permitted and/or required under applicable law.
- Right to Restrict Processing: You can ask us to limit the processing of your Personal Data if either: (i) you have contested its accuracy and wish us to limit processing until this is verified; (ii) the processing is unlawful, but you do not wish us to erase the Personal Data; (iii) it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise, or defend of a legal claim; (iv) you have exercised your Right to Object (below) and we are in the process of verifying our legitimate grounds for processing. We may continue to use your Personal Data after a restriction request under certain circumstances.
- Direct Marketing Opt Out. You can change your mind at any time about your election to receive marketing communications from us and/or having your Personal Data processed for direct marketing purposes. If you do, please notify us by contacting us at [email protected]. We will process your request as soon as reasonably possible, however it may take a few days for us to update our records before any opt out is effective.
- Right to Object. You can object to any processing of your Personal Data which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
- Withdrawal of Consent. You may withdraw your consent in connection with any processing of your Personal Data based on a previously granted consent. This will not affect the lawfulness of any processing prior to such withdrawal.
- Right to Lodge a Complaint with Your Local Supervisory Authority. You may have the right to submit a complaint to the relevant supervisory data protection authority if you have any concerns about how we are processing your Personal Data, though we ask that as a courtesy you please attempt to resolve any issues with us first. List of EAA Supervisory Authorities can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
- Data Retention
- Subject to applicable law, we retain Personal Data as necessary for the purposes set forth above. We may delete information from our systems without notice to you once we deem it is no longer necessary for these purposes. Retention by any of our processors may vary in accordance with the processor's retention policy. Your data will be retained for as long as you have a registered account.
- In some circumstances, we may store your Personal Data for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, audit, accounting requirements and so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data, and whether those purposes can be achieved through other means, as well as applicable legal requirements.
- Please contact us at [email protected] if you would like details regarding the retention periods for different types of your Personal Data.
- Third Party Sites and Services. Portions of the Services may involve linking to or using websites or services belonging to third parties, including those of third-party vendors or retailers. All use of third-party applications or services is at your own risk and subject to such third party's privacy policies.
- Children. Karma does not knowingly collect Personal Data from children under the age of 16. In the event you become aware that an individual under the age of 16 has enrolled without parental permission, please advise us immediately at [email protected].
- Communications. As part of the Services, we may send you e-mail or other messages and/or a newsletter about us or our Services. You may also elect to receive notifications from us regarding sales, coupons and products that are "back in stock" or "low in stock", as well as the addition of new stores to our Services. You may remove your Personal Data from our mailing list and stop receiving future communication from us by following the UNSUBSCRIBE link located at the bottom of each communication or by emailing us at [email protected]. You will also be given the opportunity to unsubscribe from commercial messages in any such email or other message we send as well as through your account settings. Please note that we reserve the right to send you service-related communications, including service announcements and administrative messages, relating either to your account or to your transactions on these Services, without offering you the opportunity to opt out of receiving them. Should you not wish to receive such communications, you may cancel your account.
- Changes. When visiting our Platform, you shall be asked to accept the terms of this Privacy Notice. If you do not agree with the terms hereof, please do not use the Platform or Services. We may update this Privacy Notice from time to time - in which case, we shall notify you of such changes. We will post the updated Privacy Notice on this page. Please come back to this page every now and then to make sure you are familiar with the latest version. Any new Privacy Notice will be effective from the date it is accepted by you.
- Comments and Questions. If you have any comments or questions about this Privacy Notice, or if you wish to exercise any of your legal rights as set out herein, please contact us at [email protected].
- Appendix A: Supplemental Privacy Notice for California Residents
This Supplemental Privacy Notice for California Residents ("CA Supplement") supplements and forms an integral part of our general privacy notice, available at https://www.karmanow.com/ ("Privacy Notice") . This CA Supplement describes how we collect, share, and store personal information about California residents who visit our Site and/or use our App and/or Services, as well as the rights they have with respect to that information. If not otherwise defined herein, capitalized terms have the meaning given to them in our Privacy Notice. Please read the Privacy Notice for additional terms that may apply to you.
"Personal Information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise may be defined by applicable law.
Depending on your usage, we collect different types of information and we and any of our third-party sub-contractors and service providers use the information we collect for different purposes, as specified below. It is your voluntary decision whether to provide us with certain Personal Information, but if you refuse to provide such Personal Information, we may not be able to register you and/or provide you with the Services or part thereof.
This CA Supplement will cover the following topics:- Categories of Personal Information We Collect
- Purposes of Collecting your Personal Information
- How We Share Your Personal Information
- Your Rights - How to Access and Limit Our Use of Certain Personal Information
- How to Contact Us
- Categories of Personal Information We Collect. In the past twelve months, we have collected the following Personal Information from visitors to our Site and users of our App and/or Services, including members of our Cashback Rewards Program.
Category Example Collected A. Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. Yes: Online identifier, unique online identifier, IP address, email address, name. B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories.Yes: Paypal account details. C. Protected classification characteristics under California or federal law. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). No D. Commercial information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Yes: Products purchased including the products name, price, color, size, description, the link to the product on the applicable third-party online store, the purchase basket size, date of purchase, name of online store. E. Biometric information. Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, face prints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. No F. Internet or other similar network activity. Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. Yes: Browsing history, search history, access time and data, search queries products viewed, online stores visited, interaction with advertisements. G. Geolocation data. Physical location, approximate location derived from IP address or movements. Yes: Approximate location. H. Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. No I. Professional or employment-related information. Current or past job history or performance evaluations. No J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. No K. Inferences drawn from other personal information. Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. No L. Sensitive personal information. Government-issued identifying numbers, financial account details, genetic data, precise geolocation, race or ethnicity, religious or philosophical beliefs, union membership, mail, email, text messages, biometric data, health data, and sexual orientation or sex life. No - Purposes of Collecting your Personal Information. We collect the Personal Information listed above for following purposes:
- Contact Information: We collect this Personal Information in order to respond to your inquiry or request.
- Registration Information: We collect this Personal Information in order to provide you with the Services, to contact and communicate with you, to provide you with informational newsletters and promotional materials relating to our Site, App, and Services, including via email, and to prevent fraud, protect the security of and address any problems with the Site or App.
- Device/Network Information: We collect this Personal Information in order to review usage and operations, including in an aggregated non-specific analytical manner, develop new products or services and improve current content, products, and Services. We also use this Personal Information to prevent fraud, protect the security of our Site, App, and Services, and address any problems with the Site, App, and/or Services.
- Product/Usage Information: To provide you with the Services, to respond to your inquiries and requests, and to contact and communicate with you. Furthermore, we use this information to review usage and operations, including in an aggregated non-specific analytical manner, to develop new products or services, and to improve current content, products, and Services.
- Paypal Account Information: To calculate and provide you with your Cashback Rewards.
- Your Rights - How to Access and Limit Our Use of Certain Personal Information. Subject to certain exemptions, you have certain rights in relation to the Personal Information that we have collected about you, as detailed below. In accordance with applicable law, we may ask for reasonable evidence to verify your identity before we comply with certain of your requests, as detailed below.
- Your Rights
- Right of Access. You have the right to request that we disclose to you any or all of the following in respect of the 12-month period preceding your request:
- The specific Personal Information we have collected about you.
- The categories of Personal Information we have collected about you.
- The categories of sources from which we collected the Personal Information about you.
- The categories of third parties with whom we share Personal Information about you.
- The categories of Personal Information about you we have sold and the categories of third parties to whom we have sold such Personal Information.
- The categories of Personal Information about you we have disclosed for a business purpose and the categories of third parties to whom we have disclosed such Personal Information.
- Our business or commercial purpose(s) for collecting or selling your Personal Information.
- Right to Delete. Subject to certain exceptions, you have the right to request that we and any of our service providers delete your Personal Information.
- Right to Correct. If you find that any of the we've collected about you is inaccurate, you have the right to correct such information.
- Right to Non-Discrimination for Exercising your Consumer Privacy Rights. You have the right not to be discriminated against for exercising any of your consumer privacy rights, such as, not being denied any goods or services or charged different prices or rates.
- Right of Access. You have the right to request that we disclose to you any or all of the following in respect of the 12-month period preceding your request:
- How to Exercise your California Privacy Rights.
- Contact Information. To exercise any of the rights detailed above, please submit a verifiable request to us by contacting us at [email protected]. You may only request to exercise your right of access twice within a 12-month period.
- Submitting a Verifiable Request. In order to exercise your right to know or right to delete you must submit a request containing sufficient information that allows us to reasonably verify you are the person about whom we collected the applicable Personal Information or an authorized agent of such person, which may include details relating to your account. Any requests made through your password protected account will be verified through our existing authentication procedures for such account.
- Submitting Requests through an Authorized Agent. An authorized agent may exercise requests on your behalf. In order to exercise your right to know or right to delete through an agent, we may ask for reasonable evidence to verify your identity and the agent’s identity, and written authorization permitting the agent to act on your behalf before complying with your request. In order to submit a request to opt-out of the sale of your Personal Information through an agent, we may ask for written authorization permitting the authorized agent to act on your behalf before complying with your request. We reserve the right to deny the request of any agent that does not provide proof that they have been authorized to act on behalf of the applicable consumer in accordance with applicable law.
- Children. We do not knowingly sell the Personal Information of California residents under 16 years of age.
- Your Rights
- How to Contact Us. If you have any comments or questions about this CA Supplement or our privacy practices, or if you wish to exercise any of your legal rights as set out herein, please contact us at [email protected].
