(Effective Date: 1/1/2020, updated 15 January 2020)
Everyone at Photofy respects your privacy and personal data and we’ve created a clear and concise policy that helps you to understand how we use and protect your data and privacy. Any time you have a question or concern, please reach out to us at firstname.lastname@example.org and we will be happy to help.
This Policy will explain and disclose in plain language the following ways Photofy collects and uses your personal data:
1. Who is collecting your personal data?
2. What personal data is being collected?
3. What is the legal basis for processing your personal data?
4. Will your data be shared with third parties?
5. How will the information be used?
6. How long will the data be stored?
7. What rights do you have regarding your data?
8. How can you raise a complaint?
9. How to have your data deleted
Photofy’s legal name is Photofy, Inc. and we are located at 1053 E. Whitaker Mill Road, Suite 107, Raleigh, NC 27604, United States. Photofy, Inc. is the data controller responsible for this app and website and any handling of personal data carried out by or on behalf of Photofy. We will update this policy occasionally and will always update the effective date when we do.
What Personal Information Do We Collect?
- Email Address
- Phone Number
- IP Address
- User-Generated Content
- Device Identifiers
- Geolocation Data
The information we gather enables us to personalize, improve and continue to operate the Services. In connection with certain aspects of the Services, we may request, collect and/or display some of your Personal Information. We collect the following types of information from our users.
When you create an Account, you will provide information that could be Personal Information, such as your username, password, date of birth, and email address. You acknowledge that this information may be personal to you, and by creating an account on the Services and providing Personal Information to us, you allow others, including us, to identify you and therefore may not be anonymous. We may use your contact information to send you information about our Services, but only rarely when we feel such information is important. You may unsubscribe from these messages through your Account settings, although we, regardless, reserve the right to contact you when we believe it is necessary, such as for account recovery purposes.
IP Address Information and Other Information Collected Automatically:
- We automatically receive and record information from your web browser when you interact with the Services, including your IP address and cookie information. This information is used for fighting spam/malware and also to facilitate the collection of data concerning your interaction with the Services (e.g., what links you have clicked on).
- Generally, the Services automatically collect usage information, such as the number and frequency of visitors to the Site. We may use this data in aggregate form, that is, as a statistical measure, but not in a manner that would identify you personally. This type of aggregate data enables us and third parties authorized by us to figure out how often individuals use parts of the Services so that we can analyze and improve them.
We may receive confirmation when you open an email from us. We use this confirmation to improve our customer service.
Information Collected Using Cookies:
- Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. We strongly recommend that you leave cookies active because they enable you to take advantage of the most attractive features of the Services.
Information Related to Advertising and the Use of Web Beacons:
Note: Photofy does not currently serve advertisements via our platform other than for our services. No third party ads are allowed in our system. Additionally, we do not share or sell any user information with third-parties. We have previously served ads and the following information pertaining to advertising pertains to that previous state.
To support and enhance the Services, we may serve advertisements and also allow third parties advertisements, through the Services. These advertisements are sometimes targeted and served to particular users and may come from third party companies called "ad networks." Ad networks include third-party ad servers, ad agencies, ad technology vendors and research firms
To increase the effectiveness of ad delivery, we may deliver a file (known as a "web beacon") from an ad network to you through the Services. Web beacons allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. Web beacons also enable ad networks to serve targeted advertisements to you when you visit other websites. Because your web browser must request these advertisements and web beacons from the ad network's servers, these companies can view, edit or set their own cookies, just as if you had requested a web page from their site.
We also collect certain information from your mobile device, including but not limited to the following:
- Location Information that allows us to periodically determine your location, including your location relative to and within third party merchant locations.
- Device and Usage Information that may include (i) information specific to your mobile device (e.g., make, model, operating system, device identifier and similar information); (ii) information about your use of features, functions, or notifications on the device; and (iii) signal strength relating to WiFi or Bluetooth functionality, temperature, battery level, and similar technical data.
We may collect this information even if you are not logged in to the application.
You should be able to adjust the settings on your iOS mobile device to prevent our collection of Location Information by disabling the location services feature on your device. You should be able to adjust your settings on your Android mobile device to prevent our collection of Location Information by disabling Bluetooth and Location.
We collect statistical information about how both unregistered and registered users, collectively, use the Services ("Aggregate Information"). Some of this information is derived from Personal Information. This statistical information is not Personal Information and cannot be tied back to you, your Account or your web browser.
Marketing and Communications Data:
We collect and record your preferences in receiving direct marketing from us and our third parties and your communication preferences.
California Customers Notice of Privacy Rights
Consumer Privacy. The California Consumer Privacy Act, Cal. Civ. Code §1798.100 et. seq. (“CCPA”), grants residents of California certain rights with respect to their Personal Information and requires us to provide such individuals with certain information, described in this Section.
- Know the ways in which we acquire, use, share, disclose and otherwise process your Personal Information;
- Know the specific pieces of your Personal Information that we hold;
- Request the deletion of your Personal Information, subject to several exceptions; and
- Not to be denied goods or services for exercising these rights
California residents also have the right to opt-out of the sale of their Personal Information and other information is shared with Third-Party Businesses to further their own commercial purposes such as generating profiles about individuals. California residents can exercise this right here: Do Not Sell My Personal Information. If we have actual knowledge that a California resident is younger than 16, we will request opt-in consent before selling their Personal Information. Note that we can still share Personal Information with third parties if those transfers aren’t “sales,” such as with our Service Providers or Enterprise Partners.
Depending on the circumstances and which Service you use, we have disclosed the following categories of your Personal Information for a “business purpose” (as defined in the CCPA) in the preceding twelve (12) months:
- Identifiers (such as contact information, government IDs, cookies, etc.)
- Protected characteristics classification information (like race, gender, ethnicity, etc.)
- Commercial information
- Geolocation data
- Internet or other electronic network activity information
- Financial, medical, or health insurance information
- Audio, electronic, visual, thermal, olfactory, or similar information
- Professional information
- Education information
- Inferences drawn from any of the above information categories.
B. Shine the Light. California’s "Shine the Light" law, Civil Code Section 1798.83, gives California customers the right to prevent our disclosure of their Personal Information to third parties for those third parties’ direct marketing purposes, and requires certain businesses to respond to requests from California customers asking about the business' practices related to disclosing Personal Information to third parties for the third parties’ direct marketing purposes. Alternately, such businesses may have in place a policy not to disclose Personal Information of customers to third parties for the third parties’ direct marketing purposes if the customer has exercised an option to opt-out of such information-sharing. We have such a policy in place. As discussed above in Section X(A)(2), California residents can exercise their right to opt-out here: Do Not Sell My Personal Information.
How, and With Whom, Is My Information Shared?
The Services are designed to help you share information with others. As a result, some of the information generated through the Services is shared publicly or with third parties.
Public Information about Your Activity on the Services:
Some of your activity on and through the Services is public by default. This may include, but is not limited to, content you have posted publicly on the Site, through any Applications, or otherwise through the Services.
Please also remember that if you choose to provide Personal Information using certain public features of the Services, then that information is governed by the privacy settings of those particular features and may be publicly available. Individuals reading such information may use or disclose it to other individuals or entities without our control and without your knowledge, and search engines may index that information. We therefore urge you to think carefully about including any specific information you may deem private in content that you create or information that you submit through the Services.
IP Address Information:
Information You Elect to Share:
We share Aggregate Information with our partners, service providers and other persons with whom we conduct business. We share this type of statistical data so that our partners can understand how and how often people use our Services and their services or websites, which facilitates improving both their services and how our Services interface with them. In addition, these third parties may share with us non-private, aggregated or otherwise non personal Information about you that they have independently developed or acquired.
Email Communications with Us:
As part of the Services, you may occasionally receive email and other communications from us, such as communications relating to your Account. Communications relating to your Account will only be sent for purposes important to the Services, such as password recovery.
User Profile Information:
User profile information including your username and other information you enter may be displayed to other users to facilitate user interaction within the Services. We will not directly reveal user email addresses to other users.
As stated above, we do not currently collect financial information, as that information is collected and stored by our Payment Processor. However, we may from time to time request and receive some of your financial information from our Payment Processor for the purposes of completing transactions you have initiated through the Services, enrolling you in discount, rebate, and other programs in which you elect to participate, protecting against or identify possible fraudulent transactions, and otherwise as needed to manage our business.
Information Shared with Our Agents:
We employ and contract with people and other entities that perform certain tasks on our behalf and who are under our control (our "Agents"). We may need to share Personal Information with our Agents in order to provide products or services to you. Unless we tell you differently, our Agents do not have any right to use Personal Information or other information we share with them beyond what is necessary to assist us. You hereby consent to our sharing of Personal Information with our Agents.
Information Disclosed Pursuant to Business Transfers:
In some cases, we may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this policy.
Information Disclosed for Our Protection and the Protection of Others:
We also reserve the right to access, read, preserve, and disclose any information as it reasonably believes is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request, (ii) enforce these Terms of Service, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security or technical issues, (iv) respond to user support requests, or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
Ways We Disclose and Share the Information We Collect:
We share the information we collect with third-party business partners who commit to comply with applicable laws concerning their usage of the information. Our third-party business partners may use the information either for themselves or on behalf of their own business partners to:
- Operate and improve their services;
- Provide you with advertisements and information within the Services or outside the Services for products and services or send you other notifications based on variables such as your location, and assess your level of engagement with them; and
- Carry out other purposes that are disclosed to you and to which you consent.
Information We Share With Your Consent:
Except as set forth above, you will be notified when your Personal Information may be shared with third parties, and will be able to prevent the sharing of this information.
Is Information About Me Secure?
Your Account information will be protected by a password for your privacy and security. You need to prevent unauthorized access to your Account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your Account.
We seek to protect Account information to ensure that it is kept private; however, we cannot guarantee the security of any Account information. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. In the unlikely event of a breach of our security, we will notify you via our Services and/or email within 72 hours of our knowledge of such an event.
We otherwise store all of our information, including your IP address information, using industry-standard techniques. We do not guarantee or warrant that such techniques will prevent unauthorized access to information about you that we store, Personal Information or otherwise.
What Information of Mine Can I Access?
If you are a registered user, you can access information associated with your Account by logging into the Services. Registered and unregistered users can access and delete cookies through their web browser settings.
California Privacy Rights: Under California Civil Code sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personal customer information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties. If you are a California resident and would like a copy of this notice, please submit a written request to the following address: 1053 E. Whitaker Mill Road, Suite 107, Raleigh, NC 27604.
How Can I Delete My Account?
Should you ever decide to delete your Account, you may do so by emailing email@example.com. If you terminate your Account, any association between your Account and information we store will no longer be accessible through your Account. However, given the nature of sharing on the Services, any public activity on your Account and shared prior to deletion will remain stored on our servers and will remain accessible to the public.
What Choices Do I Have Regarding My Information?
- Most of the features of the Services require you to register and thus require you to provide certain information with respect to those features. Should you prefer to not provide any information, you do not have to register for these Services.
- You can always opt not to disclose certain information to us, even though it may be needed to take advantage of some of our features.
- You can delete your Account. Please note that we will need to verify that you have the authority to delete the Account, and activity generated prior to deletion will remain stored by us and may be publicly accessible unless your request that we delete it. Please remember that any content shared outside our app will remain.
How Long Will Photofy Keep My Data? - Data Retention
Photofy will only keep your data only as long as necessary to provide the services you have requested from us or to meet legal requirements. You can ask us to delete your data in some circumstances; see Your legal rights below for further information.
In some cases your personal data may be anonymized for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Your Legal Rights
If the General Data Protection Regulation applies to you because you are in the European Union, you have rights under data protection laws in relation to your personal data:
- The right of access – You have the ability to make a ‘data subject access request’ for information we have about you.
- The right to be informed – Our responsibility to inform you how we use your personal data.
- The right to get copies of your data - You can get a copy of any data that we have about you.
- The right to get your data corrected. – If we have incomplete or incorrect data about you, let us know and we will fix it.
- The right to be deleted. – You can ask us to delete the personal data we have about you.
- The right to limit data use – You can limit the way we use your data.
- The right to data portability – You can ask us for a copy of your personal data in a common format.
- The right to object – You can object to us processing your personal data.
- Rights relating to decisions being made about you without human involvement - You can control when decisions are made about you without people being involved, called ‘automated processing’.
What If I Have Questions or Concerns or Wish to Exercise My Rights?
If you have any questions or concerns regarding privacy using the Services, please send us a detailed message to firstname.lastname@example.org. We will make every effort to resolve your concerns. We have a data privacy manager that can be contacted directly at email@example.com. Please refer and specific data privacy questions or concerns to that address for fastest response and resolution. We try to respond to all requests within 7 days although sometimes it may take longer for very complex questions. We will always respond and let you know the status.
(Effective Date: 1/1/2020, updated 15 January 2020)