You may likewise decide not to give us "discretionary" Personal Data; however, please remember that without it, we will most likely be unable to provide you with the full scope of our administrations or the best client experience when utilising our Services.
When enlisting on our site or reading content as suitable, you could be approached to type in your name, email, or subtleties to assist you with your experience. When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:
Account Data: To use certain features (like posting, comments, or subscribing), you must create a user account. When you create or update your account, we collect and store the data you provide, like your email address, password, and name, and assign you a unique identifying number ("Account Data").
Personal Data: Personal Data is information that can be used to identify you specifically, including your name, email address, telephone number, gender, and date of birth or demographic information like your hometown. You consent to give us this information by providing it to us voluntarily on our website and app. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain benefits from our website and app.
We do not knowingly collect data from or market to children under 13 years of age.
We do not knowingly solicit data from or market to children under 13 years of age. By using the Website and app, you represent that you are at least 13 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Website and app. If we learn that personal information from users less than 13 years of age has been collected, We will take reasonable measures to delete such data from our records promptly. If you become aware of any data we may have collected from children under 13, don't hesitate to contact us at firstname.lastname@example.org.
We may obtain certain information through your social media or other online accounts if they are connected to your WhaTheByte account. If you login to via Facebook or another third-party platform or service, we ask for your permission to access certain information about that other account. For example, depending on the platform or service, we may collect your name, profile picture, account ID number, login email address, location, the physical location of your access devices, gender, birthday, and list of friends or contacts.
Social Networking Data: We may access personal information from social networking sites and apps, including Facebook, and Google, which may include your name, social network username, location, email address, age, gender, profile picture, and any other public information. If you do not want us to access this information, please go to the specific social networking site and change your privacy settings.
Mobile Device Data: If you use our website via a mobile device or app, we may collect information about your mobile device, including device ID, model and manufacturer, and location information.
Those platforms and services make information available to us through their APIs. The information we receive depends on what information you (via your privacy settings) or the platform or service decide to give us.
This information is registered automatically with the visit by configuration or manual of each tool on the website and app.
When you visit, connect with, or utilise our service, we may gather, record, or create specific specialised data about you. We do so autonomously or with the assistance of third-gathering Service Providers, including using "*cookies**" and other following innovations.
We automatically collect certain information when you visit, use or navigate the Website and app. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser, and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website and app and other technical information. This information is primarily needed to maintain the security and operation of our Website and app and for our internal analytics and reporting purposes.
We may access certain information about you if you choose to register or log in to our website and app using a social media account.
Our Sites offer you the ability to register and log in using your third-party social media account details (like your Facebook or Google logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile Information we receive may vary depending on the social media provider concerned but will often include your name, email address, friends list, profile picture, and other information you choose to make public.
The APIs that we use to store and access cookies and other information on your devices. If you are a user currently in the European Union, please look at our EU User Consent Policy.
We process personal data to operate, improve, understand, and personalise our services. We use personal data for the following purposes:
To meet or fulfil the reason you provided the information to us.
To communicate with you about the Services, including Service announcements, updates, or offers.
Correspond with you; and
Compile anonymous statistical data for our use or a third party's use; and
Prevent fraudulent activity on our website or mobile app; and
Analyse trends to improve our website and app, and offerings.
To personalise and develop our site and the services we provide you and improve our offerings.
For marketing and promotions.
To create, maintain, customise, and secure your account with us.
To prevent illegal activity, fraud, and abuse.
To help our site that will be ready to serve you better.
We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.
As noted in the list above, we may communicate with you if you've provided us with the means. For example, if you've given us your email address, we may send you promotional email offers or email you about your use of the Services. Also, we may receive a confirmation when you open an email from us, which helps us improve our services. If you do not want to receive communications from us, please indicate your preference by emailing us at email@example.com.
Once your personal information is collected, as detailed above, we may share it with third parties for various reasons: email delivery, data hosting, analytics, payment processing, and content streaming. These services may collect browsing data that includes IP addresses, referring pages, and users’ movements as they navigate the Website and app. Other third parties help us with our marketing efforts, including sending and analysing our marketing efforts by measuring whether recipients have opened an email and clicked on any content.
When we share your personal information with a third party, we require that the third party protect the information consistent with this Statement and limit its use to perform the services they provide to us. For example, when we share personal information with payment processors or presenters of web seminars, its use is limited to providing that service.
Currently, various browsers — such as Internet Explorer, Firefox, and Safari — offer a “do not track” or “DNT” option that relies on a technology known as a DNT header, which sends a signal to Web sites visited by the user about the user's browser DNT preference setting. WhaTheByte does not currently commit to responding to browsers' DNT signals concerning the Company's Web sites, in part because industry groups have adopted no common industry standard for DNT, technology companies, or regulators, including no consistent standard of interpreting user intent. WhaTheByte takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.
Recognise you if you sign in to use our offerings. This allows us to provide recommendations, display personalised content, and provide other customised features and services.
We are keeping track of your specified preferences. This allows us to honour your likes and dislikes, such as your language and configuration preferences.
Detecting and preventing fraudulent activity and improving security.
We are conducting research and diagnostics to improve our offerings.
Reporting allows us to measure and analyse the performance of our offerings.
Strictly Necessary Cookies: These cookies are necessary for the website and app to function and cannot be switched off in our systems. They are often set in response to your actions, which amount to a service request, such as setting your privacy preferences, logging in, or filling in forms.
Functional cookies: These cookies enable the website and app to provide enhanced functionality and personalization. They may be set by third party providers whose services we have added to our pages or by us.
Performance cookies: These cookies allow us to count visits and traffic sources to measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site.
Targeting cookies: These cookies may be set through our site and used to build a profile of your interests and show relevant adverts on other sites.
In addition to our cookies, we may also use various third-party cookies to report usage statistics of the Service, deliver advertisements on and through the Service, and so on. These cookies may be set through our site by our advertising partners. Those companies may use them to build a profile of your interests and show you relevant adverts on other sites.
We use Google Analytics to investigate the utilisation of our site of users and visitors. Google Analytics assembles data about site use through cookies. The data assembled identifying with our site is utilised to make reports about the utilisation of our site.
Cookie Preferences on the website: Our cookies allow you to take advantage of some essential and useful features. Blocking some types of cookies may impact your experience of our sites. You can change your cookie preferences anytime by clicking ‘Cookie Preferences' in the website's footer.
Browser settings: You can also manage browser cookies through your browser settings. The 'Help' feature on most browsers will tell you how to remove cookies from your device, prevent your browser from accepting new cookies, how to notify you when you receive a new cookie, how to disable cookies, and when cookies will expire. Check the support site for your browser to understand the privacy settings available to you. If you block or reject some of our cookies through your browser’s settings, you might not be able to use certain offerings that require you to sign in to an account, and some features and services may not work. You might also have to manually adjust your preferences or settings every time you visit our website.
If you are a resident of Nevada, you have the right to opt out of selling certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at firstname.lastname@example.org with the subject line "**Nevada Do Not Sell Request**" and providing us with your name and the email address associated with your account. Please note that we do not sell your Data as sales are defined in Nevada Revised Statutes Chapter 603A.
With regard to the assortment of private information from children under the age of 13 years, the Children's Online Privacy Protection Act (COPPA) puts parents in charge. The Federal Trade Commission, United States consumer safety firm, enforces the COPPA Guideline, which defines what providers of websites and online services should do to safeguard children's privatises and security online. For more details: https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/childrens-online-privacy-protection-rule.
Customer Data" means any personal data that WhaTheByte processes on Customer's behalf via the Services, as more particularly described in this DPA.
"Data Protection Laws" means all data protection laws and regulations applicable to a party’s processing of Customer Data under the Agreement, including, where applicable, EU Data Protection Laws and Non-EU Data Protection Laws.
“EU Data Protection Law” means all data protection laws and regulations applicable to Europe, including (i) Regulation 2016/679 of the European Parliament and the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data (General Data Protection Regulation) (“GDPR“); (ii) Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector; (iii) applicable national implementations of (i) and (ii); and (iv) in respect of the United Kingdom (“UK“) any applicable national legislation that replaces or converts in domestic law the GDPR or any other law relating to data and privacy as a consequence of the UK leaving the European Union.
“Europe” means, for this DPA, the European Union, the European Economic Area and/or their member states, Switzerland, and the United Kingdom.
“Non-EU Data Protection Laws” means the California Consumer Privacy Act (“CCPA”); the Canadian Personal Information Protection and Electronic Documents Act (“PIPEDA”); and the Brazilian General Data Protection Law (“LGPD “), Federal Law no. 13,709/2018.
“SCCs” means the standard contractual clauses for processors as approved by the European Commission or Swiss Federal Data Protection Authority (as applicable), which shall be applied only to transfers of Customer Data from the European Union.
“Sensitive Data” means (a) social security number, passport number, driver’s license number, or similar identifier (or any portion thereof); (b) credit or debit card number (other than the truncated (last four digits) of a credit or debit card); (c) employment, financial, genetic, biometric or health information; (d) racial, ethnic, political or religious affiliation, trade union membership, or information about sexual life or sexual orientation; (e) account passwords; or (f) other information that falls within the definition of “special categories of data” under applicable Data Protection Laws.
“Services Data” means any data relating to the Customer’s use, support, and/or operation of the Services, including volumes, activity logs, frequencies, bounce rates, or other information regarding emails and other communications the Customer generates and sends using the Services.
Parties' roles: If EU Data Protection Law or the LGPD applies to either party's processing of Customer Data, the parties acknowledge and agree that concerning the processing of Customer Data, Customer is the controller and is a processor acting on behalf of Customer, as further described in Annex A (Details of Data Processing) of this DPA.
Purpose limitation: WhaTheByte shall process Customer Data only following Customer's documented lawful instructions as outlined in this DPA, as necessary to comply with applicable law, or as otherwise agreed in writing ("Permitted Purposes"). The parties agree that the agreement sets out the Customer's complete and final instructions to WhaTheByte concerning processing Customer Data. Processing outside the scope of these instructions (if any) shall require a prior written agreement between the parties.
Prohibited data. Customer will not provide (or cause to be provided) any Sensitive Data to WhaTheByte for processing under the Agreement, and WhaTheByte will have no liability whatsoever for Sensitive Data, whether in connection with a Security Incident or otherwise. To avoid doubt, this DPA will not apply to Sensitive Data.
Customer compliance: Customer represents and warrants that (i) it has complied, and will continue to comply, with all applicable laws, including Data Protection Laws, in respect of its processing of Customer Data and any processing instructions it issues to WhaTheByte; and (ii) it has provided, and will continue to provide, all notice and has obtained, and will continue to obtain, all consents and rights necessary under Data Protection Laws for WhaTheByte to process Customer Data for the purposes described in the agreement. Customer shall have sole responsibility for the accuracy, quality, and legality of Customer Data and how Customer acquired Customer data. Without prejudice to the generality of the preceding, Customer agrees that it shall be responsible for complying with all laws (including Data Protection Laws) applicable to any emails or other content created, sent, or managed through the service, including those relating to obtaining consents (where required) to send emails, the content of the emails and its email deployment practices.
The lawfulness of Customer's instructions: Customer will ensure that United Kingdom processing of the Customer Data by Customer's instructions will not cause WhaTheByte to violate any applicable law, regulation, or rule, including, without limitation, Data Protection Laws. WhaTheByte shall promptly notify Customer in writing unless prohibited from doing so under EU Data Protection Laws if it becomes aware or believes that any data processing instruction from Customer violates the GDPR or any UK implementation of the GDPR.
Under certain circumstances, you have rights under data protection laws to your data.
You may have the following rights: -
Request access to your data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and check that we are lawfully processing it.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide.
Request deletion of your data. This enables you to ask us to delete or remove personal data where there is no good reason to continue processing it. You also have the right to ask us to delete or remove your data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be notified to you, if applicable, at the time of your request.
Object to processing your data where we are relying on a legitimate interest (or those of a third party). Something about your situation makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms. You also have the right to object to processing your data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information, overriding your rights and freedoms.
Request restriction of processing of your data. This enables you to ask us to suspend the processing of your data in the following scenarios:
If you want us to establish the data's accuracy.
Our use of the data is unlawful, but you do not want us to erase it.
You need us to hold the data even if we no longer require it, as you need it to establish, exercise, or defend legal claims.
You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your data to you or a third party. We will provide your data in a structured, commonly used, machine-readable format to you or a chosen third party. Note that this right only applies to automated information you initially provided consent for us to use or use the information to perform a contract with you.
Withdraw consent at any time when we are relying on consent to process your data. However, this will not affect the lawfulness of any processing before you withdraw your consent. If you withdraw your consent, we may not provide certain services to you.
The personal information we process may be transmitted or transferred to countries other than where you reside. Those countries may have data protection laws that are different from the laws of your country.
The servers for our platform are in Singapore, and third-party service providers operate in many countries around the world. When we collect your personal information, we may process it in any of those countries.
We have taken appropriate steps and put safeguards in place to help ensure that your personal information remains protected by this Privacy Statement. For example, any data transfers between our group companies are governed by our intragroup agreements, which incorporate strict data transfer terms (including the European Commission's Standard Contractual Clauses, for transfers from the EEA) and require all group companies to protect the personal information they process in accordance with applicable data protection law.
We also require that third-party service providers to whom a data transfer is made have appropriate safeguards to protect your personal information in compliance with applicable data protection law. The measures used will depend on the service provider, and our agreements with them may include European Commission-approved Standard Contractual Clauses, the service provider's certification under the EU-U.S. and/or Swiss-U.S. Privacy Shield certification, or reliance on the service provider's Binding Corporate Rules, as defined by the European Commission.
We have implemented industry-accepted administrative, physical, and technology-based security measures to protect against the loss, misuse, unauthorised access, and alteration of personal information in our systems. We ensure that any employee, contractor, corporation, organisation, or vendor with access to personal information in our systems is subject to legal and professional obligations to safeguard that personal information.
We use regular Malware Scanning.
Your individual information is comprised of secured systems and is merely accessible by a restricted number of folks who've special access privileges to such systems and must keep the information confidential carefully. Furthermore, your resource's sensitive/credit information is encrypted via Secure Socket Layer (SSL) technology.
We implement several security measures whenever a user gets into, submits, or accesses their information to protect your individual information.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or form of electronic storage is 100 per cent secure. Therefore, we cannot guarantee its absolute security.
WhaTheByte prohibits unauthorised access or use of personal information stored on our servers. Such access is a violation of law, and we will fully investigate and press charges against any party that has illegally accessed the information within our systems.
The CAN-SPAM Act is a regulation that sets the guidelines for commercial email, establishes requirements for commercial announcements, offers recipients to have emails ceased from being delivered to them, and spells out hard fines for violations.
We accumulate your email to be able to:
Send information, react to questions, and/or other demands or questions
To maintain compliance with CANSPAM, we consent to the next:
Do not use untrue or misleading subject matter or email addresses.
Identify the concept as an advertisement in some realistic way.
Include the physical address of our site headquarters or business
Screen third-party email marketing services for conformity, if one can be used.
Honour opt-out/unsubscribe demands quickly.
Allow users to unsubscribe, utilising the link at the bottom of every email.
If anytime you want to unsubscribe from receiving future emails, you can email us at email@example.com, and we'll immediately remove you from ALL communication.
Suppose you would like to contact us to understand more about this Policy or to contact us concerning any matter relating to individual rights and your Personal Information. In that case, you may do so via email.
This document was last updated on November 19, 2022.