Privacy Policy
Introduction
Welcome to https://surprise.pobb.net (hereafter referred to as "Surprise," "we," or "the Company"). We are dedicated to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines our practices regarding the collection, storage, handling, and processing of personal information in adherence to various international privacy laws, including:
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
- Quebec Law 25
- The General Data Protection Regulation (GDPR) of the European Union (EU)
- Brazil's General Data Protection Law (LGPD)
- California's Consumer Privacy Act (CCPA) and its subsequent amendments (CPRA)
- Colorado's Consumer Protection Act (CPA)
- Utah's Consumer Sales Privacy Act (UCPA)
- Connecticut's ConnectiCut Data Privacy Act (CTDPA)
- Virginia's Consumer Data Protection Act (VCDPA)
- South Africa's Protection of Personal Information Act (POPIA)
Scope
This policy applies to all aspects of the Surprise website, mobile applications, online services, and products. However, please note that it does not extend to third-party platforms, applications, or services accessible through links on our site. These external entities have their own privacy policies governing data collection and usage.
Processing Activities
This policy outlines our practices when users:
- Utilize our applications and services as authorized users.
- Visit websites linked to this Privacy Policy.
- Engage with communications from Surprise, including newsletters, emails, phone calls, or text messages (SMS).
Personal Data Collection
Surprise collects various types of personal data, which can include:
- Account Information: Details associated with your user account, such as username, email address, and password hashes.
- Payment Information: Credit card details, billing addresses, and payment history for processing transactions.
- Financial Information: Bank account numbers, investment portfolios (if provided), and financial transaction records.
- Purchase Information: Product or service orders, order history, and purchase preferences.
- Mobile Device Identifiers: Unique device identifiers, IP addresses, and mobile network information for analytics and user experience improvement.
- Location Data: Geographic coordinates and location-based services data (with user consent) to personalize content.
- Feedback: User-provided reviews, ratings, and comments.
- Social Media Information: Data from social media platforms when users interact with our content or share it.
- Product Information: Details about products or services that you view, purchase, or express interest in.
We gather this data through direct user input, interactions with our platform, and automated technologies, including tracking cookies and other similar tools. Additionally, we may receive personal data from third parties who have legitimate relationships with us, subject to their privacy practices.
Cookies
Surprise uses cookies to enhance your browsing experience and for analytics purposes:
- Strictly Necessary Cookies: Ensure basic functionality of our website and services.
- Preference Cookies: Remember user preferences and settings.
- Analytics Cookies: Track aggregated data for website optimization and performance analysis.
Users have control over non-essential cookies through our Cookie Manager, allowing them to customize their cookie preferences.
Retention and Deletion
We retain personal data as necessary for the fulfillment of specific purposes, such as:
- Providing and improving our services.
- Complying with legal requirements.
- Resolving disputes.
- Conducting market research.
Once these purposes are achieved, or when data is no longer needed, we securely delete or anonymize the information.
Security Measures
Surprise implements robust security measures to safeguard personal data:
- Encryption of data at rest and in transit.
- Secure third-party processing partners who adhere to strict privacy standards.
- Regular security audits and updates to protect against potential threats.
Children's Privacy
We do not intentionally collect or store personal data from children under the age of 18. If we learn that we have collected such information, we will take steps to delete it promptly.
Your Rights (Data Subject Rights)
Depending on your jurisdiction, you may have certain rights regarding your personal data:
- Access: Request access to the personal data we hold about you.
- Rectification: Ask for correction of inaccurate or incomplete personal data.
- Erasure (Right to be Forgotten): Demand the deletion of your personal data under specific circumstances.
- Restriction: Limit the use or processing of your personal data.
- Data Portability: Receive your personal data in a structured, commonly used format and transfer it to another controller.
- Objection: Object to the processing of your personal data for legitimate interests or direct marketing purposes.
- Non-Discrimination: Be free from discriminatory decisions based solely on automated processing of personal data.
To exercise these rights or have any data-related inquiries, please contact our Privacy Team at [email protected] or via postal mail to: Surprise Privacy Team [Address] [City, State, ZIP Code]
Changes to Policy
We reserve the right to update this Privacy Policy as needed to reflect changes in our practices or legal requirements. Any modifications will be posted on this page with an updated effective date. We encourage users to review this policy periodically.
Contact Information
For any questions, concerns, or requests related to privacy or data management, please reach out to us via:
- Email: [email protected]
- Postal Mail: Surprise Privacy Team, [Address], [City, State, ZIP Code]