Personal Information Provided by the User: We collect information that you, as a user, provide when registering with us to avail of our services, get information about our products or services, participate in events related to our products or services, or otherwise contact us. The personal information you provide includes the following:
Please note that all information you provide during registration must be true, complete, and accurate. You must notify us beforehand of any changes or updates to your personal information.
Sensitive Information: Kindly note that we do not process sensitive information or entertain any such activity.
Automated Data Acquisition: Our website automatically collects information when you visit or use our services. Although no details of your identity, such as your name and contact details, are revealed, it may include information about the device and usage, like the IP address, country, location, Cookie id, language preferences, browser and device information, referring URLs, and information about when and when you use our products and services, and other technical details.
Such information is primarily collected for maintaining security and the operational activities of our services and for other purposes like reporting and internal analytics. Like several other businesses, we collect information from cookies and similar technologies.
Our website processes your information for multiple reasons, which again depends on how you use our services. Some of the cases include the following:
Our website does not share, sell, or transfer users' personal information to any outside party. However, that excludes the third parties we use to run our website and provide you with our online services and products. That said, be sure that such collaborations only occur if all parties agree not to share, sell, or transfer customer information they receive from our end. Here are some parties we may share your information:
We work with subcontractors, such as hosting service providers, technicians, IT specialists, website service providers, claim adjusters, advertising and marketing specialists, accounting and bookkeeping offices, and legal advisors, to process personal information, manage technical infrastructure, and ensure proper functionalities of the website. Be sure that all subcontractors work and process information in accordance with the instructions listed in our contract.
Advertisers and intermediaries may process certain data to select suitable advertising content for display based on the available information in cookies and other online identifiers with personal data.
Once you pay for our services, your payment details will be shared with our payment intermediaries.
As explained, we only process data in ways that depend on your use of our website and products. Depending on the circumstance, we may use and process your information upon one or more of the following legal bases.
In all cases, you will be notified about the applied legalities for processing your personal data on a certain legal basis. We will also inform you if we cannot do it in accordance with our obligations under the specific legislation.
Please know that we only process information when it is required for legal reasons under the applicable law, but with your consent to provide you services, or meet contractual obligations, to meet the business interests and to protect your rights by complying with laws.
Under the General Data Protection Regulation (GDPR) and UK GDPR, we must explain the bases on which your personal information will be processed. We may rely on the following legal bases for data processing of the EU and UK users:
In these regions, you have fundamental data subject rights along with the right to withdraw consent applicable under the GDPR.
EU and the UK charge a heavy penalty for regulated personal data collection, which starts from 2 million EUR or 2% of the company's turnover, violating laws for the year preceding the violation, whichever is higher. The penalty is doubled for repeated violations.
If you want to exercise any of these rights, be sure to contact us immediately. We will consider and act upon your request at the earliest following the applicable data protection laws.
If you are a user from Canada, kindly note that we will process information only after getting your consent on processing or using your personal data for a specific purpose or in situations for implied consent. Note that you can withdraw your content at any time.
In some cases, we may have legal permission under applicable law to process your data without consent, such as:
The Personal Information Protection and Electronic Documents Act (PIPEDA) is a federal law for protecting privacy. It sets the ground rules for handling users' personal information during commercial activities. We abide by the fundamental principles of PIPEDA and ensure accountability, identifying purposes, consent, accuracy, safeguards, limiting collection, openness, individual access, limiting use, disclosure, and retention, and challenging compliance.
The Privacy Act (RSC, 1985, c. P-21) governs how the federal government manages the data it collects and the uses of personal information from its employees and the general public. The Act gives an individual inside or outside Canada the right to request data access held by the federal government and request correction. The legislation is presented to protect individuals' privacy and provide them with the right access to their personal data.
Canada's Anti-spam Legislation (CASL) is the federal law that handles spam and other electronic threats. It is responsible for investing in false or unsolicited electronic messages, alteration of data transmission, and deceptive marketing practices.
Unregulated data collection or collecting data by violating the applicable laws can bring an individual a hefty penalty of up to CAD 100,000 under PIPEDA and CAD 10,000 under CASL.
California Civil Code Section 1798.83, in other words, "Shine the Light" law, permits our users, who are residents of California, to request information from us once a year without any charge. The personal information would be in categories we disclosed to other parties for marketing purposes, and the personal information, like the names and addresses of all the parties with whom we shared data the preceding year. As a California resident, you can place similar requests by sharing your queries with us through our contact information provided below. In case you are below 18 and have availed of our services, you can write to us to remove unwanted data or public posts on the services. Contact our team immediately, and remember to include the email address you used to register and a residential statement suggesting you are a California resident. We assure you that none of your will be publicly displayed on the availed services. However, kindly be aware that data will not be completely removed from our systems for legal, safety and other factors abiding by the law.
Under the California Code of Regulations, a "resident" is:
The CCPA provides California residents with specific rights for the protection of personal data, like the following:
However, we may deny obliging to your request in case your data is necessary for us for any of the following situations:
As a California resident, you can exercise your CCP right, and to do so, contact us with the details shared in the last section below. In case you are an authorised agent submitting the request on behalf of a consumer, you should have a copy of the written authorisation signed by a particular consumer.
After receiving your request, we will verify your identity to determine if you are the same person on whom we have all the necessary information in our system. To verify, we will ask you certain questions or request you to provide certain information that matches your previous information shared with us. For example, we may ask you for information we already have, like your phone or email address. If required, we may use another verification process to determine your identity or authority to make a request. If you cannot verify the primary identification information, we may ask for more safety and fraud prevention information. We will delete all the additional information after the verification.
Violating the CCPA can bring civil penalties of up to $7,500 for every violation. In case of willful violation, $2,500 per violation, while for advertent violation after notice, 30 days are offered to find a cure. A user can seek statutory damage of $100 and not more than $750 per consumer in every occurrence, or actual damages, whichever is greater, brought by them for violating security breach.
If the processor continues to violate the VCDPA forms after 30 days of the cure period, or if the professor fails to comply with a written statement by the Attorney General, the Attorney General will announce action on behalf of the Commonwealth. S/he will seek an injunction to prevent VCDPA violations and a civil penalty close to $7,500.
According to the Colorado Consumer Protection Act, a violation is an act of deceptive trade practice. Even though the CPA does not have a fixed penalty amount, the Colorado Consumer Protection Act does and stipulates a penalty of $20,000 per violation.
Under UNPA, the Attorney General has enforcement responsibilities, and the entities must be informed in writing of the suspected violations and given 30 days to correct them. They can file a lawsuit for uncured offences and seek damages and civil fines of $7,500 from the consumer for every violation. Even though there’s no private right of action, the local privacy laws are preempted based on stature.
HDCA is intended to deter, prevent, and lessen harmful digital communication, cyberbullying and harassment. Furthermore, it suggests that digital communication should not:
The Act empowers users to take action against the alleged breaches and resolve the issue with the help of a suitable legislative body.
The main intent of UEMA is to identify spam sent from, to, or within New Zealand. This Act allows users to raise complaints against the company sending spam messages. The company can also be fined for spamming with SMS, faxes, email and other instant messages. However, please note that UEMA doesn’t cover the following:
Consent doesn’t end by clicking “unsubscribe." A business can use an existing database with previously given consent. However, you can complain if you continue to receive spam despite unsubscribing or not giving consent. In such cases, a business can be fined up to $500,000 for compensation for the losses.
The Privacy Act 2020 aims to promote and protect individual privacy by giving effect to international privacy standards and providing a framework for ensuring security for personal data, including your access to information and practising other rights and interests. There are 13 privacy principles related to data storage, use, collection, and disclosure of information, and an individual's right to access personal information and request correction.
Penalties in New Zealand for the unregulated collection of personal data are either NZ$10,000, the cost of damages from such a violation, or the blocking of the resource.
The Protection of Personal Information Act 4 of 2013 assures to:
Under South African law, cybercrimes are treated as a criminal offence. The Act mandates everyone to clearly understand the regulations before prosecuting them. Cyber extortion, cyber fraud, malicious communication, and unlawful access to the computer system are some of the cybercrimes listed in this Act.
Furthermore, unregulated collection of personal data that is collected by violating the applicable law can invite the following penalties:
The amount of the fine is from EUR 10,000 to EUR 520,000 in the equivalent.
In addition, from February 1st, 2022, data collection can begin only after obtaining the appropriate permission from the owner of such data. Therefore, it is necessary to install a pop-up on the site that will appear when entering from the territory of South Africa, which will request permission to collect and process and only after that let on the site.
PLEASE NOTE: We do not extend our service in Australia
Furthermore, you can opt out of marketing and promotional communications by clicking on the UNSUBSCRIBE option or contacting us. You will be immediately removed from the regular marketing list. Nonetheless, we may still contact you if we have to communicate with you regarding your service, administration, user account, and other non-marketing purposes.
For updating or changing your account information or terminating your account, you can contact us whenever required. Nevertheless, if you wish to do it on your own, you can: Log in to your account > go to account settings > update or change your user details. You can follow similar steps to terminate your account. Once we receive your account termination request, we will delete or deactivate your account and information from active databases. As mentioned earlier, we may retain some information for fraud prevention, troubleshooting problems, future investigations, enforcement of our legal terms and/or compliance with applicable legal requirements.
The services linking to third-party services, websites, or applications may contain advertisements from third parties with no affiliation with us and may link to other online platforms. We do not guarantee about the third parties and don't take liability for any kind of loss or damage caused by using such third-party sources and platforms. Even including a link towards a third-party platform does not imply any endorsement by us. In such cases, we cannot guarantee the privacy and security of your data shared with third parties, including websites, applications, and other sites linked to the services. You are advised to review the policies of third-party platforms and contact them directly in case of confusion.
We have taken all the necessary measures and implemented the latest technological and organisational security norms and measures to ensure top-notch data security while processing. However, despite all our sincere effort to protect your personal information, no storage technology can guarantee complete security, so we won’t make unrealistic promises stating no hackers, cybercriminals, or other unauthorised parties can break into our security system to collect, steal, access, modify your data. We do our best to protect your information from unsafe sources. Still, transmitting your data to and from our services should be at your own risk. You should only access our services and products within a safe environment.
We do not knowingly collect information or market our products and services to children under 18. When you use our services or products, we assume that you are 18 years of age or a guardian of a minor and consent to use our services. If we learn that a user is less than 18, the account is immediately deactivated, and we take the necessary measures to delete their personal data from our systems. If you know someone below 18 availing of our services or products, please notify us at [email protected]. We will take instant action.
We process your personal information both within and outside the country. Each country has different data processing laws, and we ensure we abide by legal measures to assure high privacy compliance.
We will provide you with the necessary information and take action on your request related to your rights within one month of receiving the request. The duration is likely to increase by 15 more days in case of an overwhelming number of requests, complicated requests, or requests that require extensive action. Regardless, we will inform you beforehand of such an extension within one month of receiving the request and the reason for such delay.
In special instances, like getting customer support, our support team may request your account access. In such circumstances, they will be able to see your personal data in your account. Please note that we always take users’ permission before accessing their accounts. However, if you don’t permit access, it will delay the process and affect the customer support provisions.
Your providing personal data is entirely voluntary, meaning there's no obligation. Yet, personal information is necessary for creating a user account and availing of our services or using our products. If you refuse you provide information, you will be less likely to get access to all our service features.
In case of a data breach, we will keep you informed. We will notify the respective data protection agency without delay to minimise the possibility of high violations of your rights and data safety. We take the best measures to avert such risks.
A Solvemore LTD, a company incorporated under the laws of Cyprus with a registered office at Evi Building, Floor 2, Flat/Office 201, Kypranoros 13, 1061 Nicosia, Cyprus, will be the controller of your personal data.