Privacy Policy
Last Updated and Effective Date: January 2022
About This Privacy Policy
This Privacy Policy describes Labroots Inc.’s (“Labroots”) practices for collecting, using, maintaining, protecting, and disclosing (“processing”) your personal information when you use our services (“Services”), such as when you:
- Visit a website of our that links to this Privacy Policy (“Website(s)”), including labroots.com
- Create an account with Labroots
- Attend a virtual event, webinar, or otherwise engage with our interactive or pre-recorded content
- Interact with our sponsors or advertisers
- Make a purchase or other transaction with us
- Subscribe to or engage with our newsletters or other electronic communications
- Interact with our social media pages
- Click on our ads posted on third-party sites
- Communicate with our service representatives or features (including via chat functions, email, text, or phone)
- Use our Services anywhere we collect information from you and refer to this Privacy Policy
This Privacy Policy also applies to personal information we collect from third parties about you. This Privacy Policy does not apply to websites, apps, videos (embedded or direct links), or other content (each a “Linked Site”) to which we link that are not operated by us. Linked Sites have their own personal information collection and use practices, and we are not responsible those practices. We encourage you to read each Linked Site’s privacy disclosures to understand how your personal information is processed.
Our privacy practices are subject to the applicable laws of the places in which we do business, so we have added region-specific terms that only apply to customers located in certain geographic regions, or as required by applicable laws.
What is Personal Information?
“Personal information” (sometimes called “personal data”) is a broadly defined term whose legal definition varies across jurisdictions. When used in this Privacy Policy, “personal information” includes information that is reasonably capable of identifying a particular individual (including through their device) either alone or when combined with information from other sources.
What Personal Information Do We Collect?
The personal information we collect about you depends on the nature and context of your interaction with our Company and Services. It may also depend on various choices you make about how to use the Services we offer, the functionality and features you choose or enable, your location, the devices you us to interact with our services, and applicable law. The following describes the personal information we collect about you and the way we collect it.
Personal Information You Give to Us
We collect the following categories personal information you provide to us, including the following:
- Your Personal Details. For example, your first and last name, email address, phone number, physical address, job titles, and other contact information you provide.
- Account and Other Identifiers. For example, a username, screen name, handle, account ID, assigned user ID, customer number, or similar identifier that can be used to identify and user or account.
- User Content. For example, emails and text messages, photos, videos, audio recordings, customer support communications, comments/feedback, and any other content submitted by you.
- Survey data. We may contact some individuals to request participation in a survey or other general research. If you choose to take part in these, you may provide personal information, in or along with your survey responses, or in any other feedback or comments you give us.
- Contests, sweepstakes, and prize drawings data. If you take part in a contest, sweepstakes, or prize drawing, then you may provide personal information, feedback, or comments to enter, or as part of the contest, sweepstakes, or prize drawing.
- Messages and email data. We collect information about you when you send, receive, open, read or otherwise engage with messages, email, or other communications in connection with our Services, including whether you have opened or acted on those communications.
- Social Media Content. For example, interactions with our social media pages and content you post on them. If you use a social media provider to register or login to your Labroots account, we will receive your personal information from them.
- Other Personal Information You Provide. If you provide us personal information other than that described above, we will collect it and use it for the purposes for which you provide it or other consistent purposes.
- Inferences. In certain instances, we may infer personal information about you based on the information you have provided to us or that we have collected about you.
Sensitive Personal Information. Some jurisdictions have defined certain categories of personal information as “special” or “sensitive.” We collect the following categories of sensitive personal information when you provide it to us or allow us to collect it based on your interaction with us.
- Payment processing information. For example, the form of payment, payment card number and details, bank account number, payment service provider, and other payment information you provide. Any payment card information you use to make a purchase on our Services is collected and processed directly by our payment processors, such as PayPal. The use of any payment information that you choose to share with PayPal is governed by its privacy policy.
- Demographic information. For example, information that reveals your racial or ethnic origin, religious or philosophical beliefs, union membership, political opinions, or sex life or sexual orientation.
- Precise Geolocation. You may choose to grant our Services permission to access your device’s precise geolocation, which we may use to confirm your address and help us operate or personalize our Services, including by tagging posts, providing information on or adding information to a map, and helping us show you more relevant content or ads.
Personal Information We Derive Through Your Use of Our Services
We and our third-party partners use cookies, web beacons, clear GIF, pixels, internet tags, and other similar tracking technologies (collectively, “tracking technologies”) to gather information when you interact with our websites, mobile apps, and email communications. We use some of these tracking technologies help us optimize and maintain the security of our websites and your account. We also use them for compatible purposes like save your preferences, fixing errors, and ensuring consistent service of our websites and mobile apps.
We permit third parties to use tracking technologies on our websites for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, and provide metrics on advertising effectiveness. The third parties use their technology to provide advertising about products and services tailored to your interests which may appear either on our websites or on other websites.
The information we collect using these technologies includes:
- Device and Browser Identifiers. For example, an assigned user ID, IP address, or similar identifier that can be used to identify your device.
- Coarse Location Information. A general approximation of your location that is not based on global position system (GPS) information.
- Browsing and Search History. Information about the content you view and searches you make on our Website(s).
- Website Log and Usage Data. Information related to our pages you viewed, the services and features you used or interacted with, your browser type and details about any links or communications with which you interacted.
- Advertising Metrics. Information about the advertisements you have viewed on our Website.
Because the “Do Not Track” browser-based standard signal has yet to gain widespread acceptance, our Website(s) currently does not respond to those signals.
Personal Information We Collect From Third Parties
We may collect information about you from third parties (such as companies we partner with or that provide services to us) and public sources. For example:
- Sponsors and Content Providers. Our Sponsors and other content providers will share personal information related to their workforce members and attendees of virtual events, webinars and other interactive programs.
- Vendors and partners. Our vendors and partners may provide information to us, such as:
- Information about users of our services for advertising, analytics, personalization, and measurement purposes.
- Information about businesses to help us create business pages and offer our Services to businesses.
- Advertisers. Our advertising partners provide us with information about their users or potential customers to help us personalize advertising and measure the performance of their advertisements.
- Other Users. Users of our Services may provide contact information of other individuals to us, including their contacts’ names, email addresses, mailing addresses, and phone numbers, for sending out information related to our Services, including to send links to relevant content posted on or through our Services.
Who Provides Us with Personal Information?
We mostly collect personal information directly from you or based on your interaction with our Website. However, we also may collect personal information from third-party sources. These include Sponsors, our Business Services Providers, Marketing and Advertising Providers, government entities, our company affiliates, security services providers, other individuals, social media platforms, and other users of our Services.
Even if you aren’t a registered user of our Services, your information might still be collected. Some users may choose to share information about their contacts, including their name, email address, phone number, or other information. User may also post or comment with personal information about other users.
What Do We Do with Your Personal Information?
We may use your personal information for a variety of reasons. Depending on how you interact with our Services, these include using personal information:
- To deliver our Services to you and to improve them.
- To validate your identity as necessary to ensure the security of your personal information.
- To send you important information, such as information about your transactional interactions with us.
- To send you marketing and promotional communications.
- To work with our sponsors and advertisers for marketing related campaigns.
- To facilitate communications.
- To respond to your requests related to our Services.
- To maintain and improve the security and performance of our Services.
- To anonymize, aggregate, or de-identify your personal information (so it can no longer identify you) in furtherance of conducting research and analysis.
- To make strategic decisions concerning our business operations.
- To deliver targeted advertising and to measure its effectiveness.
- To determine the effectiveness of promotional campaigns.
- To enforce, and review compliance with, the legal terms that govern our offerings in furtherance of our legitimate interest in ensuring adherence to the relevant terms.
- To comply with our legal obligations under applicable laws.
- To protect the rights, safety, and property of the Labroots, our users, and third parties.
- In any other way we may describe when you provide the information.
- For any additional purpose, in which case we will notify you before we use it for such purpose.
When we process personal information about you to comply with legal requirements or to perform our obligations under a contract with you or with our customer through whom you use our offerings, failure to provide such information may prevent or delay our fulfillment of these obligations.
When and With Whom Do We Share Your Personal Information?
We may share your personal information with the following:
Sponsors and Content Providers. If we have obtained your personal information from a Sponsor or other content provider, or if you have attended content provided by them, we may share personal information related to your interaction with their content with them, typically for purposes of reporting attendance, sending follow up emails, or otherwise interacting with them. In some cases, Labroots is the joint-controller of the personal information we collect on behalf of Sponsors and/other content providers.
Business Services Providers. These are those persons or entities with whom we have a relationship to provide business operations services and support to Company. These providers may include the following:
- IT Operations Providers. These include cloud computing service providers, internet service providers, data backup and security providers, functionality and infrastructure providers, and similar service providers.
- Operations Providers. These include service provider with whom we partner to provide day-to-day business operations, including payment processors, security vendors, business software service providers, hospitality service providers, banks, facilities management providers.
- Professional Advisors. These include lawyers, accountants, consultants, security professionals, and other similar parties when disclosure is reasonably necessary to comply with our legal and contractual obligations, prevent or respond to fraud or abuse, defend ourselves against attacks, or protect the rights, property, and safety of us, our customers, and the public.
Marketing and Advertising Partners and Providers. These include advertising, direct marketing, and lead generation providers, affiliate marketing program providers, retargeting platforms, data brokers, ad networks, marketing consultants, Labroots sponsors and advertisers, and similar service providers.
Affiliates. Our affiliates include our parent company, subsidiaries, joint venturers, or other companies that we control or that are under common control with us.
Legally Required Parties. Persons to whom we are required by law to provide information, such as pursuant to a subpoena or a court order.
Reorganization. Persons involved in the consideration, negotiation, completion of a business transaction, including the sale, merger, consolidation, acquisition, change in control, transfer of substantial assets, bankruptcy, or reorganization, and any subsequent integration.
Authorized Disclosures: To any party when authorized by the individual to whom it pertains to share it.
How Long Do We Keep Your Personal Information?
We will retain your personal information only for so long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of your personal information; the purposes for which we process your personal information and whether we can achieve those purposes through other means; and the applicable legal requirements. In some circumstances, you may ask us to delete your information. Additionally, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
How Do We Protect Your Personal Information?
We have implemented and maintain reasonable security procedures and practices, appropriate to the nature of the information, to protect your personal information from unauthorized access, destruction, use, modification, or disclosure. However, no security measure is perfect, so we cannot guarantee the security of your personal information.
Do We Collect Information from Minors?
Our Services are not intended for persons under 16 years of age. We do not knowingly collect or process the personal information of individuals under the age of 16. If we learn that we have collected personal information from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us their Personal Information, please contact us at Privacy@Labroots.com.
What Are Your Privacy Choices?
You can control the collection and use of personal information for some of our processing activities. This includes:
Adjusting Communication Preferences
Emails From Labroots: During the registration for Labroots, you should be presented with an opt-in to receive email communications. If you wish to no longer receive email communications, you can click on the “unsubscribe” link located at the bottom of the email, email Labroots at privacy@labroots.com to let us know, and we will remove you immediately. Opting out of marketing or newsletter emails will not opt-you out of all emails—we may need to send you transactional or similar emails related to your Labroots account, purchases, legal or contractual updates, or similar topics. You are not able to opt-out of these emails.
Emails from Labroots Sponsors and Partners: During registration for a Labroots virtual event or webinar, you may be asked to opt-in to receive emails from the Sponsors of that specific event/webinar. If you choose to opt-in to receive email communication from the Sponsor, you can opt-out or unsubscribe at any time by clicking on the “unsubscribe” or similar opt-out link in the Sponsors’ email communication. If you are not able to do so, you can email Labroots at privacy@labroots.com to let us know and we will contact the sponsor immediately. Opting out of marketing or similar communications from Sponsors may not prevent all emails from Sponsor. Sponsors have their own privacy policies regarding the personal information they collect and process about you. We urge you to review their privacy policies regarding their processing of your personal information.
Text Messages: You may opt out of automated text notifications any time by replying “STOP,” or any alternative keyword we have shared with you.
Blocking Cookies
Most web browsers automatically accept cookies by default, but you can alter how your browser responds to cookies by adjusting the settings. Information about managing cookies for popular web browsers can be found in the links below:
Safari (Desktop) and Safari Mobile (iOS).
Blocking Google Analytics
Many websites, including ours, employ Google Analytics. To opt out of Google Analytics data collection, follow these instructions from Google.
Exercising Your Privacy Rights
Some jurisdictions provide covered individuals with specific privacy rights which can be exercised against covered entities. Depending on the jurisdiction, these rights may include the following:
- Access and Portability. The right to know (or confirm) what personal information a business has collected about you, and to receive a copy of it.
- Deletion/Restriction. The right to request that a business delete personal information it has collected from you or restrict how it is used, subject to certain exception.
- Correction/Rectification. The right to request correction of inaccurate personal information maintained by the business.
- Opt-Out of the Sale/Sharing of Your Personal Information. The right to opt-out of the sale of your personal information to third parties. The term “sale” varies by jurisdiction, but sometimes includes the right to opt-out of the use of personal information for targeted advertising purposes.
- Revoke Consent. Where consent is required for processing under applicable law, you may withdraw your consent to the processing of your information at any time.
- Limitation/Restriction. The right to limit or restrict a business’s use or disclosure of certain personal information.
- Opt-out of Profiling: The right to opt- out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- Non-Discrimination. The right not to be discriminated against for exercising any of the rights conferred at law.
Labroots will honor the privacy rights afforded to individuals in accordance with applicable law.
You may make a request at any time to exercise your privacy rights listed above by using our Privacy Portal or emailing us at Privacy@Labroots.com. We will respond to your request within a reasonable period (if properly submitted) and in accordance with applicable law. If we need more time to process and respond to your request, we will notify you of that fact along with the reason for the delay. If we decline to act regarding your request, we will inform you of our decision and the reason for it, and, if applicable, with instructions on how you may appeal our decision.
International Transfers
We are located and operate in the United States. By submitting personal information to us, you understand that we may transfer your personal information to country foreign to you, including the United States, for processing. The laws that apply to the use and protection of personal information in the United States, or other countries or jurisdictions in which we transfer or process personal information, may be different from the laws and protections in your country. These transfers may include transfers to our service providers located in foreign jurisdictions. Whenever we engage a service provider, we require that its privacy and security standards adhere our requirements and applicable privacy laws.
Do We Update Our Privacy Policy?
We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access our Services or otherwise interact with us to stay informed about our information practices and the choices available to you.
How Can You Contact Us?
If you have questions or comments about this Privacy Policy or complaints and our privacy practices, please contact us at:
Mail: Labroots, Inc., 18340 Yorba Linda Blvd., Suite 107 PMB 427, Yorba Linda, CA 92886
Email: Privacy@Labroots.com
Visit our Support Page: https://www.labroots.com/support
Supplemental Notice for Residents of Virginia
You may make a request at any time to exercise your privacy rights under Virginia law by contacting us using the contact methods described above. We will respond to your request withing 45 days of receipt (if properly submitted). If we need more time to process and respond to your request, we will notify you of that fact along with the reason for the delay. In all cases we will complete your request within 90 days from the date of our receipt of your properly submitted request. If we decline to act regarding your request, we will inform you of our decision and the reason for it, along with instructions on how you may appeal our decision.
Supplemental Notice for Residents of California
This section applies to residents of the State of California in addition to all other applicable rights and information contained in this Policy.
California law requires that we describe the personal information we collect, disclose, and sale/share based on certain defined categories. To be clear, this chart overlaps with the description of our processing practices described above. This chart below describes our practices covering the past 12 months.
|
Categories of Personal Information |
Categories of Sources from which the Information was Collected |
Categories of Third Parties to whom this type of Personal Information is Disclosed for a Business Purpose |
Types of Third Parties with Whom this Category of Personal Information Is Shared/Sold |
|
Identifiers (e.g., name, signature, address, telephone email, IP address) |
|
|
Marketing and Advertising Providers |
|
Customer Records (as defined in Cal. Civ. Code § 1798.80(e)) |
|
|
We do not sell or share |
|
Protected Classifications (e.g., Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status). |
|
|
We do not sell or share |
|
Commercial Information (e.g., your purchasing or consuming histories or tendencies). |
|
|
Marketing and Advertising Providers |
|
Internet/Network Activity (your your browsing history, search history). |
|
|
Marketing and Advertising Providers |
|
Geolocation Data |
We may gather your geolocation based on your address, IP address, or other data associated with a particular location. If you are using company-equipment that collects geolocation, we may associate that geolocation with you. |
|
Marketing and Advertising Providers |
|
Sensory Data (e.g., Audio, electronic, visual, thermal, olfactory, or similar information). |
We may collect your image, voice, electronic activity, or other sensory data through recording devices such as a security camera, call recording device, or thermal image scanner. |
|
We do not sell or share |
|
Professional or employment-related information (e.g., Current or past job history or performance evaluations). |
We do not collect from consumers generally. Candidates for employment may be provided supplemental notices regarding collection of this information. |
N/A |
N/A |
|
Education Information |
We do not collect from consumers generally. Candidates for employment may be provided supplemental notices regarding collection of this information. |
N/A |
N/A |
|
Inferences drawn from other personal information |
We may make inferences about your preferences, likes, and interests based on personal information you provide to us. |
|
Marketing and Advertising Providers |
|
Sensitive Personal Information |
|
|
We do not sell or share |
We will not collect a category of Personal Information not listed above, or use any Personal Information collected in any of the above categories for a business purpose not listed above, without first providing you with notice.
Exercising Your California Privacy Rights
Submitting Access, Deletion, and Correction Requests
To make an access, deletion, correction, or limitation request, please use our email us at Privacy@Labroots.com.
After we receive your request, to ensure the security of the information we store and consumers’ privacy, we will verify that you are appropriately affiliated with the subject of the request, either as the consumer or as an authorized agent or guardian of the consumer. We may ask you to provide a few pieces of information to confirm your identity in our records.
You may designate an authorized agent to exercise your rights under the CCPA on your behalf. You must provide the authorized agent written permission to exercise your rights under the CPRA on your behalf and we may deny a request from an agent on your behalf if we cannot verify that they have been authorized by you to act on your behalf. Even if you use an authorized agent to exercise your rights under the CCPA on your behalf, pursuant to the CCPA we may still require that you verify your own identity directly to us. This provision does not apply if you have provided a power of attorney under the California Probate Code.
Opting Out of the Sale/Share of Your Personal Information
Our use of tracking technologies may be considered a “sale” and/or “sharing” under California law. You can opt-out of being tracked by third parties by clicking “Your Privacy Choices” link at the bottom of our website and selecting your preferences or by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any offline information because we do not make a connection between your browser and offline information. If you would like us to process an opt-out request for offline information we “sell” or “share” we recommend you submitting the Do Not Sell or Share Personal Information form that is in Your Privacy Choices.
Notice of Financial Incentive
We offer our or provide loyalty programs, promotional programs, sweepstakes, contests, or similar incentive programs that provides certain perks, such as rewards and exclusive offers (collectively, “Promotions”). When you sign up for one of these Promotions, we typically ask you to provide your personal information. Because our Promotions involve the collection of personal information, they might be interpreted as a “financial incentive” program under California law. The value of your personal information to us is related to the value of the free or discounted products or services, or other benefits that you obtain or that are provided as part of the applicable Promotion, less the expense related to offering those products, services, and benefits to Promotion participants. You may withdraw from participating in a Promotion at any time by contacting us using the designated method set forth in the applicable terms and/or rules.
Additional California Privacy Rights
California Civil Code Section § 1798.83 permits users of our web site that are California residents to request certain information regarding our disclosure of personal information to other parties for their direct marketing purposes. To make such a request, please send an email to Privacy@Labroots.com with the subject “Shine the Light Request.”
Supplemental Notice for Individuals Residing in the European Union or United Kingdom
If you live in the European Union (“EU”) or United Kingdom (“UK”), this section applies to you. If you live in Australia or Canada, you may have some of the following rights under applicable law.
These privacy notices are provided as a supplement to our Privacy Policy. For a more complete understanding of our privacy practices and how we handle personal information, please read our Privacy Policy.
Controllers
Labroots, Inc. is the controller for personal data relating to data subjects located in the EU and UK.
Address: 18340 Yorba Linda Blvd., Suite 107 PMB 427, Yorba Linda, CA 92886
Email: Privacy@Labroots.com
Data Protection Officer: james.hilton@labroots.com
On What Legal Bases Do You Collect My Information?
To the extent required by applicable law, we will collect your personal data with your consent, where required, and in accordance with our legitimate need to provide you our Services.
Under European data protection laws, Labroots is required to rely on one or more legal bases to collect, use, share, and otherwise process the information we have about you. We describe these legal bases and some accompanying examples in more detail below.
Performing our Agreement. Labroots processes your information as is necessary to perform our contract with you, the Terms and Conditions and User Agreement. For example:
- We use your information in order to create your account and set you up as a registered user on Labroots.
- We transfer your information outside of the EU to the United States in order to provide our Services.
Your Consent. Labroots processes certain information based on your consent, which you may revoke at any time. For example:
- We and our partners use cookies and similar technologies, as described in more detail in our Cookie Policy, based on your consent.
- Where you choose a method of verification to confirm your address, we do so in accordance with your consent.
- If you decide to use location services in the context of Labroots, we collect and process such location information based on your consent.
- We rely on your consent to tailor ads based on your activity and information on other websites and partner data, such as inferred interests.
- We will send you marketing communications where you have consented to receiving such communications in accordance with applicable law.
Legal Obligation. Labroots may process your information to comply with a legal obligation, a court order, or to exercise and defend legal claims. For example:
- We may preserve and disclose your information if it is necessary to respond, based on applicable law, to a valid legal request (e.g., a subpoena, search warrant, court order, or other binding request from government or law enforcement).
- We may retain and process your information where it is necessary for compliance with applicable tax laws.
Vital Interests. Labroots may process your information in certain circumstances when it is necessary to protect your vital interests, or those of others. For example:
- We may need to process your information in order to protect your life or safety or the lives or safety of others, or otherwise prevent physical injury or other harm to any person or the general public.
- We may preserve or share your information with law enforcement and related authorities where we have a good faith belief that it is required in the context of an imminent threat.
- We may share your personal data with disaster relief agencies, first responders and other individuals to facilitate disaster or emergency response efforts.
Legitimate Interests. We may process your information where it is necessary for the purposes of Labroots’ or a third party’s legitimate interests, such as those of registered users, our Sponsors, or partners. We process your information in furtherance of the following legitimate interests:
- Safety and Security. We use your information because it is necessary to pursue our and our legitimate interests in ensuring Labroots is secure, such as implementing and enhancing security measures and protections, protecting against fraud, spam and abuse, and enforcing our terms of use and other agreements.
- Providing, improving, and developing our Services. We use your information to provide our Services, including any personalized services, and to understand and improve our business and our user relationships.
- Providing ads, and measurement and analytics services. We use your information to provide personalized ads both on and off Labroots and to measure and analyze the success of those ads in order to provide accurate and reliable reporting to our advertisers. We do so as necessary to pursue our legitimate interests of marketing and monetizing our Services.
- Sending marketing communications. We rely on our legitimate interests in marketing and promoting our Services to use your contact information and send you marketing communications in accordance with applicable law, except where applicable law requires that we rely on your consent to send such communications.
- Sharing information for legal and safety reasons. Where required for legal and safety reasons, we may disclose information to law enforcement and related agencies and authorities in furtherance of the legitimate interests described further below.
- As detailed in the Privacy Policy, where we process your information based on legitimate interests, you have the right to object to such processing. Where you exercise your right to object, we will cease processing your information for that specific purpose, unless there are compelling legitimate grounds overriding your objection or where your information is processed for legal reasons.
Business Contact Information
We hold the names and contact details of individuals acting in their capacity as representatives of their organizations, across the business. If this relates to interactions regarding our regulatory functions, the lawful basis is article 6(1)(e) of the UK GDPR. If the interactions relate to suppliers, contracts, buildings management, IT services etc., the legal basis is article 6(1)(c) of the UK GDPR for any legal obligation or article 6(1)(f) because the processing is within our legitimate interests as a business.
What Are My Rights?
Under data protection laws, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information. In certain cases, such as for access to, rectification or deletion of your information, please be sure to read the options you have under the “What are My Choices” section above.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms part of our public tasks or is in our legitimate interests.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organization to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated. You can read more about this right here.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
If you have an EU resident and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority or Labroots’s lead supervisory authority.
Similarly, if you have a UK resident, you have the right to lodge a complaint with the UK Information Commissioner’s Office.
Where Is My Information Stored and Transferred?
If you live in Australia, Canada, or Europe, we may transfer your personal data to other jurisdictions where we have facilities or service providers, including the United States, where data protection laws may not provide the same protections as the laws of your home country.
For residents of Europe, the United States is not subject to an adequacy decision, i.e., the European Commission has not determined, under Article 45 of Regulation (EU) 2016/679 (GDPR), that the United States ensures an adequate level of protection for personal data under its laws. (An explanation of adequacy decisions and list of recognized jurisdictions can be found here.) When we transfer personal data of data subjects in Europe to a third country that is not subject to an adequacy decision, we will do so in accordance with all applicable data protection laws.
If you have questions about these international transfers of personal data, or to request a copy of the relevant standard contractual clauses, please email us at Privacy@Labroots.com, or contact us as provided in the “How Can You Contact Us?” section, above.
Supplemental Notice to Canadian Data Subjects
Canadian laws provide specific rights to Canadians. If you are a Canadian resident, this section applies in addition to all other applicable rights and information contained in the Privacy Policy.
We are committed to openness and accountability with respect to how we handle your personal information pursuant to Canadian federal and provincial privacy laws (“Canadian Privacy Law”), including:
- The Personal Information Protection and Electronic Documents Act (PIPEDA)
- Alberta’s Personal Information Protection Act (Alberta PIPA)
- British Columbia’s Personal Information Protection Act (BC PIPA)
- Québec's Act respecting the protection of personal information in the private sector (Québec Act).
Consent. In most cases, we rely on implied consent to collect, use, or disclose your personal information. In some circumstances, including those involving sensitive personal information, we obtain express consent. Where you have provided your consent to the collection, use, and transfer of your personal information (whether orally, in writing, or electronically), you may have the legal right to withdraw your consent under certain circumstances. In addition to the methods described above with respect to your privacy choices, you may withdraw your consent by contacting us at Privacy@Labroots.com. Please note that if you withdraw your consent, we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.
Use of Your Personal Information. We will not collect, use, or disclose personal information except for the identified purposes identified above (See Disclosures of Your Personal Information), unless we have received additional consent or the processing is authorized without consent. Where we engage service providers who utilize the personal information we provide to them, we ensure that an agreement is place the ensure compliance with applicable Canadian Privacy Law.
Canadian Access and Challenge Rights Canadian Privacy Law provides the right to receive information about the existence, use, and disclosure of your personal information and be provided access to that information. You may also challenge the accuracy and completeness of your personal information and have it amended as appropriate. Depending on the nature of the challenged information, amendment may involve correction, deletion, or addition of information.
Exercising Your Canadian Privacy Rights. If you have an account with us, you may view and update your account information (as noted above) directly by logging into your account. To submit a request for access to information not contained within your account, or to challenge the accuracy or completeness of your personal information, you may submit a request using our Privacy Portal. When submitting a request, we may require that you take additional steps to validate your identity or legal authority. We will begin processing your request once you have completed the verification process.
We have put procedures in place to receive and respond to inquiries about our policies and practices relating to the handling of personal information. We will provide a response to any personal information request within the timeframe required by law. If we cannot substantively respond to your request in a timely manner, we will notify you and state the reason for the delay. Under certain circumstances, we may not be able to fulfill your request, such as when doing so would interfere with our regulatory or legal obligations, where we cannot verify your identity, or if your request involves disproportionate cost or effort. However, we will respond to your request within a reasonable time, as required by law, and provide an explanation.
Additional information about how to exercise your rights under Canadian Privacy Law can be found here:
Office of the Privacy Commissioner of Canada
Toll-free: 1-800-282-1376
Office of the Information and Privacy Commissioner of Alberta
Toll-Free: 1-888-878-4044
Edmonton office: (780) 422-6860
Calgary office: (403) 297-2728
Office of the Information and Privacy Commissioner of British Columbia
Vancouver: (604) 660-2421
Elsewhere in BC: (800) 663-7867
Commission d’accès à l’information du Québec
Toll-free: 1-888-528-7741
Supplemental Notice for Residents of Australia
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You consent to us processing your personal information in accordance with this Privacy Policy.
Access To and Correction of Your Personal Information
You may access or request correction of the personal information that we maintain about you by using our Privacy Portal or Privacy@Labroots.com. There are some circumstances in which we are not required to give you access to your personal information. There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material). We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate, up to date and complete.
If you have complaints about our privacy practices please contact us using the contact methods provided. We will evaluate any complaints and determine if further action is necessary and keep you informed of our investigation and decisions. If you remain dissatisfied with our handling of a privacy issue, you may approach an independent advisor or contact the Office of the Australian Information Commissioner (OAIC) (www.oaic.gov.au) for guidance on alternative courses of action which may be available.