Privacy Policy

Modified on: Tue, 6 Aug, 2024

Entropico operates worldwide through subsidiary and affiliate companies (collectively, “Entropico,” “we” or “us”)

Entropico Entities & Affiliates

Entropico is committed to protecting the personal information of our clients and prospective clients, as well as other users of our websites and services. It is important to us that you understand how we treat your personal information and we encourage you to read this Policy carefully.

When Entropico collects and processes personal information in order to provide our services to clients, we will only process such personal information on behalf of the particular client in order to provide our services to that client. Our collection, use, disclosure and other processing of personal information on behalf of clients is subject to the privacy policy of our respective clients.

OVERVIEW

This table provides a summary of the personal information and how we use it, which is further explained in our Privacy Policy below. While the actual information we collect and our use of such personal information varies depending upon the nature of our relationship and interactions, the table below provides a general overview of the categories of personal information we collect and the purposes for which we use such information.

CATEGORIES OF PERSONAL INFORMATION WE COLLECT

• Name, contact information and other identifiers: identifiers such as a name, username, account name, address, phone number, email address, online identifier, IP address, government-issued identification numbers or other similar identifiers.

• Customer records: paper and electronic customer records containing personal information, such as name, signature, contact information, employment history, government identifiers, and financial or payment information.

• Protected classifications: characteristics of protected classifications under California or federal law such as race, sex, age, religion, national origin, disability and citizenship.

• Commercial information: such as records of real property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.

• Internet or other electronic network activity information: such as browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.

• Geolocation data: precise location information about a particular individual or device.

• Audio, video and other electronic data: such as, CCTV footage, photographs, and call recordings, as well as other audio, electronic, visual, or similar information.

• Employment information: professional or employment-related information.

• Education information: education information and records.

• Profiles and inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

   

USE OF PERSONAL INFORMATION

• Operating Services and Sites and providing related support

• Responding to requests

• Analyzing and improving Services, Sites and our business

• Personalizing experiences

• Advertising and marketing

• Protecting our legal rights and preventing misuse

• Complying with legal obligations

• Related to our general business operations

   

INDIVIDUAL RIGHTS

Please see the Your Choices and Rights section below for a description of the choices we provide and the rights you have regarding your personal information. If you are a California resident, please be sure to review the section Additional Information for Individuals in Certain Jurisdictions below for important information about the categories of personal information we collect and disclose and your rights under California privacy laws.

SCOPE

This Privacy Policy (“Policy”) explains how we process information that we collect from users of our website www.entropico.com and on any other websites, mobile applications or other online services that display or like to this Policy (together, the “Site”), as well as from our former, current and prospective clients and other individuals that use our products and services or communicate with us. Please note, that this Policy only applies to us but not to any third-party websites that may process, share, or distribute your personal information or other information.

Our collection, use and disclosure and processing of personal information about individuals will vary depending upon the circumstances. This privacy notice is intended to describe our overall privacy and data protection practices. In some cases, different or additional notices about our data collection and processing practices may be provided and apply to our processing of certain personal information.

Personal Information. In this Policy, our use of the term “personal information” includes other similar terms under applicable privacy laws—such as “personal information” and “personally identifiable information.” In general, personal information includes any information that identifies, relates to, describes, or is reasonably capable of being associated, or reasonably linked or linkable with a particular individual.

Not Covered by this Policy. This privacy notice does not apply to job applicants and candidates who apply for employment through our job application portal, or to employees and non-employee workers, whose personal information is subject to different privacy notices.

Client Data. Entropico provides digital experience services in the areas of creative and content ideation, development, and management; data consulting; digital marketing campaign management and consulting; and access and management of third-party technology services (our “Services”). We may receive, access or otherwise process personal information in order to provide our Services (the “Client Data”) to clients. In such cases, Entropico will only process Client Data on behalf of and under the instructions of our clients and as set out in our client agreements, or where otherwise required by applicable laws.displ

CONTROLLER AND RESPONSIBLE PARTY

Entropico Global INC is the parent company of our Entropico group entities and the controller of your personal information. In addition, where you have a direct business relationship with another Entropico group entity, they are a controller for the personal information they used to manage their direct business relationship with you, such as name and contact details. With respect to any Client Data, our clients are the data controllers or businesses for their respective Client Data, and we are a data processor or service provider with respect to Client Data.

INFORMATION WE COLLECT

The personal information that we collect and process will vary depending upon the circumstances. You do not have to provide us with your personal information to access much of our Site. However, if you choose not to disclose certain information, we may not be able to provide certain Services to you or we may be unable to fully respond to your inquiry.

Sources of Personal Information. We collect personal information directly from individuals, automatically related to the use of our Site or Services, and in some cases, from third parties (such as social networks, platform providers, payment processors, and operators of certain third party services that we use).

Information collected directly. We may collect personal information about you (such as your name, address, and contact details) directly from you. For example, when you fill out a ‘Contact Us’ form, signup for our mailing lists, register for events we host or sponsor, register for an account, post comments on our Sites, or otherwise provide us information through the Sites, we may collect personal information such as:

• Name, company name, and title/position

• Email address, phone number, mailing address and contact details

• Contact preferences and interests

• Business affiliations

• For events, it may include dietary restrictions, requested accommodations and other event-related preferences

• Other information related to your request or inquiry

Automatically-collected information. We use cookies, log files, pixel tags, local storage objects, and other tracking technologies to automatically collect information when users access or use the Services or visit our Site, such as IP address, general location information, domain name, page views, a date/time stamp, browser type, device type, device ID, Internet service provider (“ISP”), referring/exit URLs, operating system, language, clickstream data, and other information about the links clicked, features used, size of files uploaded, streamed or deleted, and similar device and usage information. For more information, see the “Cookies and similar devices” section below.

Information collected from third parties. We may collect personal information from third party sources, such as public databases, joint marketing partners, social media platforms or other third party platforms. For example, if you choose to link, create, or log in to your Services account with a third-party account (e.g., Google), or if you post information or engage with us on third party platforms we may collect personal information about you related to that third party platform or account. In many cases you can control what personal information you share with us through privacy settings available on those third-party social media services.

Categories of Personal Information we collect. Certain laws, such as the California Consumer Privacy Act (“CCPA”) requires that we disclose certain information about the categories of personal information that we collect about individuals. While the information we collect varies depending upon the circumstances, such as our interactions with you, we may collect the following categories of personal information (subject to applicable legal requirements and restrictions):

• Name, contact information and other identifiers: identifiers such as a name, username, account name, address, phone number, email address, online identifier, IP address, government-issued identification numbers or other similar identifiers.

• Customer records: paper and electronic customer records containing personal information, such as name, signature, contact information, employment history, government identifiers, and financial or payment information.

• Protected classifications: characteristics of protected classifications under California or federal law such as race, sex, age, religion, national origin, disability and citizenship.

• Commercial information: such as records of real property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.

• Internet or other electronic network activity information: such as browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement.

• Geolocation data: precise location information about a particular individual or device.

• Audio, video and other electronic data: such as, CCTV footage, photographs, and call recordings, as well as other audio, electronic, visual, or similar information.

• Employment information: professional or employment-related information.

• Education information: education information and records.

• Profiles and inferences: Inferences drawn from any of the information identified above to create a profile reflecting a resident’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

Certain laws, including the EU General Data Protection Regulation (“GDPR”), require that we inform you of the legal bases for our processing of your personal information. Pursuant to the GDPR (and other similar laws), we process personal information for the following legal bases:

• Performance of a contract: as necessary to enter into or carry out the performance of our contract with you.

• Compliance with laws: for compliance with legal obligations and/or defense against legal claims, including those in the area of labor and employment law, social security, and data protection, tax, and corporate compliance laws.

• Our legitimate interests: in furtherance of our legitimate business interests, which are not overridden by your interests and fundamental rights, including:

  • Performance of contracts with clients and other parties

• Implementation and operation of global support (e.g., IT) services for our business operations

• Improving our Site and Services, developing trend and benchmark reports, and similar purposes

• Customer relationship management and improving our Sites and Services, including other forms of marketing and analytics

• Fraud detection and prevention, including misuse of Services or money laundering

• Physical, IT, and network perimeter security

• Internal investigation

• Mergers, acquisitions, and reorganization, and other business transactions

• With your consent: where we have your consent (the GDPR (where it applies) and other applicable laws give you the right to withdraw your consent, which you can do at any time by contacting us using the details at the end of this privacy notice. In some jurisdictions, your use of the Services may be taken as implied consent to the collection and processing of personal information as outlined in this privacy notice.

In addition, we may process your personal information where necessary to protect the vital interests of any individual.

Purposes for Using Personal Information. The purposes for which we may process personal information will vary depending upon the circumstances. In general we use personal information for the purposes set forth below, and where GDPR or other relevant laws apply, we have set forth the legal bases for such processing in parenthesis (see above for a further explanation of our legal bases):

• Operating Services and Sites and providing related support: to provide and operate our Sites and Services, communicate with you about your use of the Sites and Services, provide troubleshooting and technical support, respond to your inquiries, fulfill your orders and requests, process your payments, communicate with you, and for similar service and support purposes. (Legal bases: performance of our contract with you; and/or our legitimate interests)

• Responding to requests: to respond to your inquiries, fulfill your orders and requests, and consider your request or application (e.g., if you have submitted a resume or other application information online or by email, we will use it as part of the application review process). (Legal basis: performance of our contract with you)

• Analyzing and improving Services, Sites and our business: to better understand how users access and use the Sites, and our other products and offerings, and for other research and analytical purposes, such as to evaluate and improve our services and business operations and to develop services and features. (Legal basis: our legitimate interests)

• Personalizing experiences: to tailor content we may send or display on the Sites, including to offer location customization and personalized help and instructions, and to otherwise personalize your experiences. (Legal basis: our legitimate interests)

• Advertising and marketing: to promote Entropico’s products and services on third-party websites, as well as for direct marketing purposes, including to send you newsletters, client alerts and information we think may interest you. If you are located in a jurisdiction that requires opt-in consent to receive electronic marketing messages, we will only send you such messages if you opt-in to receive them. (Legal bases: our legitimate interests; and/or with your consent)

• Protecting our legal rights and preventing misuse: to protect the Sites and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use or this Privacy Policy. (Legal bases: our legitimate interests; and/or compliance with laws)

• Complying with legal obligations: to comply with the law or legal proceedings. For example, we may disclose information in response to subpoenas, court order, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. (Legal bases: our legitimate interests; and/or compliance with laws)

• Related to our general business operations: to consider and implement mergers, acquisitions, reorganizations, and other business transactions, and where necessary to the administration of our general business, accounting, recordkeeping and legal functions. (Legal bases: our legitimate interests; and/or compliance with laws)

Aggregate, De-identified or Anonymous Data. We also create and use aggregate, anonymous and de-identified data to assess, improve and develop our business, products and services, and for similar research and analytics purposes. This information is not generally subject to the restrictions in this Policy, provided it does not identify and could not be used to identify a particular individual.

DISCLOSURE OF PERSONAL INFORMATION

In general, we disclose the personal information we collect as follows:

• Affiliates. Your personal information may be shared with our affiliated companies.

• Entropico Entities & Affiliates, whose handling of personal information is subject to this Policy.

• Service providers. We may share your information with third party service providers who use this information to perform services for us, such as payment processors, hosting providers, auditors, advisors, consultants, and customer service and support providers.

• Enterprise users. If you use the Services on behalf of your company (our client), we may share personal information about your access to the Services and your communications or requests to us, with the relevant enterprise client.

• Business transfers. We may disclose or transfer information, including personal information, as part of any merger, sale, and transfer of our assets, acquisition or restructuring of all or part of our business, bankruptcy, or similar event, including related to due diligence conducted prior to such event where permitted by law.

• Legally required. We may disclose your information if we are required to do so by law (e.g., to law enforcement, courts or others, in response to a subpoena or court order).

• Protect our rights. We may disclose information where we believe it necessary to respond to claims asserted against us or, comply with legal process (e.g., subpoenas or warrants), enforce or administer our agreements and terms, for fraud prevention, risk assessment, investigation, and protect the rights, property or safety of us, our clients, and others.

Aggregate and De-identified or Anonymous Data. We may share aggregate, anonymous or de-identified data with third parties for research, marketing, analytics and other purposes, provided such information does not identify a particular individual.

Categories of Personal Information Disclosed. Certain privacy laws (such as the CCPA) require that we disclose the categories of personal information that we may disclose for a business purpose. (Further descriptions of the categories of personal information are provided above, in the Information We Collect section). In general, we may disclose the following categories of personal information in support of our business purposes identified above:

• Name, contact information and other identifiers

• Customer records

• Protected classifications

• Internet or other electronic network activity information

• Geolocation data

• Audio, video and other electronic data

• Employment information

• Profiles and inferences

Categories of Personal Information Sold. The CCPA defines a “sale” as disclosing or making available to a third-party personal information in exchange for monetary or other valuable consideration. While we do not disclose personal information to third parties in exchange for monetary compensation from such third parties, we do disclose or make available certain categories of personal information to third parties, in order to receive certain services or benefits from them (such as when we allow third party tags to collect browsing history and other information on our Sites to improve and measure our ad campaigns), including:

• Name, contact information and other identifiers

• Internet or other electronic network activity information

• Profiles and inferences

Cookies and Similar Devices.

Like many websites, we use cookies to recognize you when you return to our website so that we can provide you with a customized experience. We may also use pixels, JavaScript, log files and other mechanisms to gather information about your use of our Site. For more information about the use of cookies on our Site and how you can manage your cookie preferences, you can review our Cookie Policy.

COOKIE POLICY

Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Site, while others are used to enable a faster log-in process or to allow us to track your activities while using our Site. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. See our Cookie Policy for more information.

Clear GIFs, Pixel Tags and Other Technologies. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs (also referred to as web beacons, web bugs or pixel tags), in connection with our Services to, among other things, track the activities users of our Services, help us manage content, and compile statistics about usage of our Services. We and our third-party service providers also use clear GIFs in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

Log Files. Most browsers collect certain information, such as your IP address, device type, screen resolution, operating system version, and internet browser type and version. This information is gathered automatically and stored in log files.

Third-Party Analytics. We also use automated devices and applications, such as Google Analytics (more info here) to evaluate the use of our Services. We use these tools to gather non-personal information about users to help us improve our Services and user experiences. These analytics providers may use cookies and other technologies to perform their services, and may combine the information they collect about you on our Sites with other information they have collected for their own purposes. This Policy does not cover such uses of data by third parties.

Do-Not-Track Signals. Our Site does not respond to do-not-track signals. For more information about do-not-track signals, please click here. You may, however, disable certain tracking as discussed above (e.g., by disabling cookies) and set out in our Cookie Policy.

INTEREST-BASED ADVERTISING

We work with third-party ad networks, analytics companies, measurement services and others (“third party ad companies”) to manage our advertising on third-party sites, mobile apps and online services. We and these third party ad companies may use cookies, pixels tags, and other tools to collect activity information on our Services (as well as on third-party sites and services), as well as IP address, device ID, cookie and advertising IDs, and other identifiers, general location information, and, with your consent, your device’s geolocation information. This information is used to provide you more relevant ads and content and to evaluate the success of such ads and content.

This cookie policy (“Cookie Policy”) describes the types of cookies, pixels, local storage objects, and similar devices (collectively, “cookies” unless otherwise noted) we use on the Entropico website and our purposes for using them.

If you have questions about this Cookie Policy, please contact us at privacy@entropico.com.

For more info about the types of cookies we use on the Entropico website, please see below:

What is a cookie?

A cookie is a small file that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser. Unless you have adjusted your browser setting so that it will refuse cookies, our website will issue cookies as soon as you visit the website.

What cookies do we use and why?

We use cookies to help us provide you with a good experience, improve our website, and to personalize the marketing ads we serve to you after you visit the Entropico website.

The cookies we may use on the Entropico website may be categorized as follows:

• Performance

• Functionality

• Targeting

Note, some cookies may fulfill more than one of these purposes.

‘Performance’ cookies collect information about how to use the Entropico website e.g. which pages you visit and if you experience any errors. These cookies do not collect any information that could identify you and are only used to help us improve how the Entropico website operates, understand the interests of our visitors, and measure the effectiveness of our advertising.

We use performance cookies to:

• Carry out web analytics: Provide statistics on how the Entropico website is used

• Obtain data on the number of visitors of Entropico website

• Help us improve the Entropico website by measuring any errors that occur

• Test different designs for the Entropico website

Some of these cookies are managed for us by third parties.

‘Functionality’ cookies are used to provide services or to remember settings to improve your visit.

We use functionality cookies for such purposes as:

• Remember settings you’ve applied such as layout, text size, preferences and colors

• Remember if you’ve already filled in a form or survey on our website

• Remember if you have previously dismissed a notification or other prompt

Some of these cookies are managed for us by third parties.

‘Targeting’ cookies are used to track your visit to the Entropico website, as well as other websites, apps and online services, including the pages you have visited and the links you have followed, which allows Entropico to display targeted ads to you.

We may use targeting cookies to improve how we deliver personalized ads and content and to measure the success of ad campaigns

Cookie Domain entropico.com

Cookie Name

_ga

_gid

Purpose Used to distinguish users for Google Analytics

Type of Cookie First-party

–

Cookie Domain entropico.com

Cookie Name _gclxxxx

Purpose Used for Google conversion tracking

Type of Cookie First-party

–

Cookie Domain entropico.com

Cookie Name hubspotutk

Purpose Used by Hubspot for user authentication

Type of Cookie First-party

–

Cookie Domain entropico.com

Cookie Name __hssc, __hssrc, __hstc

Purpose Used by Hubspot for website analytics

Type of Cookie First-party

–

Cookie Domain linkedin.com

Cookie Name lidc, bcookie, bscookie, li_gc, AnalyticsSyncHistory

Purpose Used by the LinkedIn social network

Type of Cookie Third-Party

–

Cookie Domain linkedin.com

Cookie Name UserMatchHistory

Purpose Used by LinkedIn for advertising

Type of Cookie Third-Party

–

Cookie Domain ads.linkedin.com

Cookie Name lang

Purpose Used by LinkedIn for advertising

Type of Cookie Third-Party

–

Cookie Domain youtube.com

Cookie Name VISITOR_INFO1_LIVE

Purpose Used by Google to track viewing of videos

Type of Cookie Third-Party

–

Cookie Domain youtube.com

Cookie Name CONSENT, YSC

Purpose Used by Google for advertising

Type of Cookie Third-Party

 

MANAGE YOUR PREFERENCES

You may opt-out of certain cookies or change your cookie preferences for this website as described below.

OUR WEBSITE

You can review or change your preferences for most third-party cookies and tags on this website by adjusting your Cookie Settings for the respective websites.

Please note that your preferences are applied on a browser and device basis. So, you will need to set your cookie preferences for each browser and device you use to access this website and the associated Services. Further, if you subsequently delete cookies, your preferences may be lost and need to be reset. You may also delete, block, or disable one or more cookies via your browser settings; see below for more information on how to do this.

DELETING AND BLOCKING OUR COOKIES

You may delete, review and block cookies by adjusting your browser settings. However, if you block all cookies (including essential cookies), you may not be able to access all or parts of our Services. Please see the links below for more information on how to manage cookie settings for certain browsers.

MANAGE COOKIES IN YOUR BROWSER

Firefox – “Private Browsing” and managing cookie settings: Learn more

Chrome – “Incognito” mode and managing cookie settings: Learn more

Internet Explorer – “InPrivate” mode and managing cookie settings: Learn more

Safari – “Private Browsing” and managing cookie settings: Learn more

For further information about cookies, including how to see what cookies have been set and how to manage and delete them, please visit: www.allaboutcookies.org For UK users, information on the International Chamber of Commerce United Kingdom CC (UK) UK cookie guide can be found on the ICC website: International Chamber of Commerce UK – Digital Economy

MANAGING THIRD PARTY COOKIES

Most advertising technologies offer a way of managing how your data is used, and choices for opting out of certain types of advertising and marketing. Below are links to set your preferences for the advertising technologies we may use:

YOUR CHOICES ABOUT ADVERTISING AND ANALYTICS

Google Analytics – Browser Ad On (Opt Out) – Learn More

Google Ads DoubleClick – Ad Settings – Privacy info

Facebook Ads – Ad Settings – Privacy Info

LinkedIn Ads – Ad Settings – Privacy Info

Twitter Ads – Ad Settings – Privacy Info

Hubspot – Privacy Info

MORE INFORMATION ON THIRD PARTY AD NETWORKS

• EU: Internet Advertising Bureau
  A guide to behavioral advertising and online privacy that has been produced by the internet advertising industry can be found at: www.youronlinechoices.eu/

• US: Digital Advertising Alliance
  A guide to behavioral advertising and online privacy, and DAA Members Opt-out Tool: aboutads.info/choices

• Canada: Digital Advertising Alliance of Canada
  A guide to behavioral advertising and online privacy, and DAA Members Opt-out Tool: youradchoices.ca/choices

   

MORE INFORMATION ON THIRD PARTY ANALYTICS

Google Analytics

Google Analytics is a web analytic service provided by Google, Inc. (“Google”). Google uses cookies to help us analyze how visitors use the Entropico website. The information generated by the cookie about your use of the Entropico website (including your IP address) will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA. On behalf of the Entropico website, Google will use this information for the purpose of evaluating your use of the Entropico website, compiling reports on your activity for us and third parties who help operate and provide services related to the Entropico website. Google will not associate your IP address with any other data held by Google. You may refuse the use of these cookies by selecting the appropriate settings on your browser as described in this Cookie Policy. Further, you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available at tools.google.com/dlpage/gaoptout?hl=en-GB.

More information concerning the terms and conditions of use and data privacy can be found at google.com/analytics/terms/gb.html or at google.de/intl/en_uk/policies.

For more information about Google Analytics cookies, please see Google’s help pages and privacy policy:

• Google’s Privacy Policy

• Google Analytics Help

Google has developed the Google Analytics opt-out browser add-on; if you want to opt out of Google Analytics, you can download and install the add-on for your web browser here.

For information on the third parties that we work with, and how you can opt out of ads from them. For more information about third-party ad networks and to opt out of interest-based ads from many ad networks go to:

• Canada: http://youradchoices.ca

• EU: http://youronlinechoices.eu

• US: http://aboutads.info

INTERNATIONAL TRANSFERS

Entropico is headquartered in the United States and has operations and service providers in the United States and throughout the world. As such, we and our service providers may transfer your personal information to, or access it in, jurisdictions (including the United States) that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through appropriate written data processing terms and/or data transfer agreements.

If you are in the European Economic Area, and we process your personal information in a jurisdiction that the European Commission has deemed to not provide an adequate level of data protection (a “third country”), we will implement measures to adequately protect your personal information, such as putting in place standard contractual clauses approved by the European Commission or another measure that has been approved by the EU Commission as adducing adequate safeguards for the protection of personal information when transferred to a third country. You have a right to obtain details of the mechanism under which your personal information is transferred outside of the EEA; you may request such details by contacting us as set forth in the “Contact us” section below.

Your Choices and Rights

Access, Amend and Correct. If you wish to access personal information that you have submitted to us, to request the correction of any inaccurate information you have submitted to us, to request deletion of or object to processing of your information, please send your request to privacy@entropico.com. We may ask you for additional information so that we can confirm your identity.

Direct Marketing. You may always opt-out of direct marketing emails from us by following the instructions in such emails or emailing privacy@entropico.com. We may continue to send you transactional or service-related communications, such as service announcements and administrative messages.

Complaints. We will take steps to try to resolve any complaint you raise regarding our treatment of your personal information. You also have the right to raise a complaint with the privacy regulator in your jurisdiction.

Additional Information for Certain Jurisdictions. We are committed to respecting the privacy rights of individuals under all privacy laws applicable to us. Some privacy and data protection laws require that we provide specific information about individual rights to applicable consumers, which we have set forth at the end of this privacy notice:

• California: if you are a California resident, you have certain rights, under California privacy laws, regarding your personal information outlined below.

• EU/EEA: if you are in the European Union / European Economic Area, outlined below we provide further details about your rights under the GDPR.

Security

We have implemented safeguards and technical measures to protect the personal information that we have under our control from unauthorized access, use or disclosure. However, no data security measures can guarantee 100% security.

Retention

As a general rule, we retain your personal information for as long as necessary to fulfill the purposes for which it was collected or as necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements. In general, for example, we will retain relevant personal information of clients and Site visitors for at least three years from the date of our last interaction with you and in compliance with our obligations under applicable laws. We may retain personal information for longer where required by our regulatory obligations, professional indemnity obligations, or where we believe necessary to establish, defend, or protect our legal rights and interests or those of others. Our clients instruct us on how long to retain Client Data, which we handle as a data processor.

Information About Children

The Entropico site is not intended for minors under the age of 16. We do not knowingly or specifically collect information about minors under the age of 16. If you believe we have unintentionally collected such information, please notify us at privacy@entropico.com, so that we can delete this information from our servers.

Changes to our Privacy Policy

From time to time, we may update this Policy to reflect new or different privacy practices or to reflect changes in industry standards or legal requirements. We will place a notice online when we make material changes to this Policy. Additionally, if the changes will materially affect the way we use or disclose Information, we will notify you in advance of the change by sending a notice to the primary email address associated with your account or by posting a notice on our Site. We encourage you to periodically review this Policy for the latest information on our privacy practices.

Contact Us

If you have questions or concerns regarding the way in which your personal information is being processed or this Policy, please email us at privacy@entropico.com or reach out to Entropico using the contact information below:

Entropico
1833 N SAN FERNANDO RD, LOS ANGELES, CA 90065

ADDITIONAL INFORMATION FOR INDIVIDUALS IN CERTAIN JURISDICTIONS

Information for California residents

In this section, we provide information for California residents, as required under California privacy laws, including the California Consumer Privacy Act (“CCPA”).

California Residents’ Rights. California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below:

• Do-Not-Sell: California residents have the right to opt-out of our sale of their personal information. Opt-out rights can be exercised by submitting a request to privacy@entropico.com. We do not sell personal information about residents who we know are younger than 16 years old without opt-in consent.

• Notice before collection: We are required to notify California residents, at or before the point of collection of their personal information, the categories of personal information collected and the purposes for which such information is used.

• Request to delete: California residents have the right to request, at no charge, deletion of their personal information that we have collected about them and to have such personal information deleted, except where an exemption applies. We will respond to verifiable requests received from California residents as required by law.

• Request to know: California residents have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of personal information that we have collected about them in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without hindrance. California residents also have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including:

  • categories of personal information collected;

  • categories of sources of personal information;

  • business and/or commercial purposes for collecting and selling their personal information;

  • categories of third parties/with whom we have disclosed or shared their personal information;

  • categories of personal information that we have disclosed or shared with a third party for a business purpose; and

  • categories of third parties to whom the residents’ personal information has been sold and the specific categories of personal information sold to each category of third party.

     

• California residents may make a Request to Know up to twice every 12 months, at no charge. We will respond to verifiable requests received from California residents as required by law.

• Discrimination and financial incentives: The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA. A business may offer financial incentives for the collection, sale or deletion of California residents’ personal information, where the incentive is not unjust, unreasonable, coercive or usurious, and is made available in compliance with applicable transparency, informed consent, and opt-out requirements. California residents have the right to be notified of any financial incentives offers and their material terms, the right to opt-out of such incentives at any time, and may not be included in such incentives without their prior informed opt-in consent.

Submitting Verifiable Requests. Requests to know and requests to delete may be submitted by email at privacy@entropico.com

We will respond to verifiable requests received from California residents as required by law. For more information about our privacy practices, you may contact us as set forth in the Contact Us section above.

Individuals in The European / European Economic Area

This section explains the right that data subjects in the European Union / European Economic Area (“EEA”) have pursuant to the GDPR.

Rights under the GDPR. Individuals in the EEA have the below rights with respect to their personal information.

• Right of access: You can ask us to: confirm whether we are processing your personal information; give you a copy of that information; provide you with other information about your personal information such as what data we have, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it for, what rights you have, how you can make a complaint, where we got your information from and whether we have carried out any profiling, to the extent that such information has not already been provided to you in this Policy.

• Right to rectify and complete personal information: You can ask us to rectify inaccurate information. We may seek to verify the accuracy of the data before rectifying it.

• Right of erasure: You can ask us to erase your personal information, but only where: it is no longer needed for the purposes for which it was collected; you have withdrawn your consent (where the data processing was based on consent); following a successful right to object (see ‘Objection’ below); it has been processed unlawfully; or to comply with a legal obligation to which we are subject. We are not required to comply with your request to erase your personal information if the processing of your personal information is necessary: for compliance with a legal obligation; or for the establishment, exercise or defense of legal claims. There are certain other circumstances in which we are not required to comply with your erasure request, although these two are the most likely circumstances in which we would deny that request.

• Right of restriction: You can ask us to restrict (i.e. keep but not use) your personal information, but only where: its accuracy is contested, to allow us to verify its accuracy; the processing is unlawful, but you do not want it erased; it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; you have exercised the right to object, and verification of overriding grounds is pending. We can continue to use your personal information following a request for restriction, where: we have your consent; to establish, exercise or defend legal claims; or to protect the rights of another natural or legal person.

• Right to object to our use of your personal information for direct marketing purposes: You can request that we change the manner in which we contact you for marketing purposes. You can request that we not transfer your personal information to unaffiliated third parties for the purposes of direct marketing or any other purposes.

• Right to object for other purposes: You have the right to object at any time to any processing of your personal information which has our legitimate interests as its legal basis. You may exercise this right without incurring any costs. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms. The right to object does not exist, in particular, if the processing of your personal information is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

• Right to (data) portability: You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it ‘ported’ directly to another Data Controller, but only where our processing is based on your consent and the processing is carried out by automated means.

• Right to withdraw consent: You can withdraw your consent in respect of any processing of personal information which is based upon a consent which you have previously provided.

• Right to obtain a copy of safeguards: you can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside the EU/EEA. We may redact data transfer agreements to protect commercial terms.

• Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information. We ask that you please attempt to resolve any issue with us first, although you have a right to contact your supervisory authority at any time.

Submitting a GDPR Request. Please contact us at privacy@entropico.com to exercise one of these rights. If we receive any requests from individuals related to the Platform Data, we will forward the request to the relevant clients.

Individuals in Australia

Entropico values and respects the privacy of the people we deal with. Entropico is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) (Privacy Act) and other applicable privacy laws and regulations.

We may send you direct marketing communications and information about our services, opportunities, or events that we consider may be of interest to you if you have requested or consented to receive such communications.

These communications may be sent in various forms, including mail, SMS, fax and email, in accordance with applicable marketing laws, such as the Australian Spam Act 2003 (Cth). You consent to us sending you those direct marketing communications by any of those methods. If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so.

You may opt-out of receiving marketing communications from us at any time by following the instructions to “unsubscribe” set out in the relevant communication or by contacting us using the details set out in the “How to contact us” section.

In addition, we may also use your personal information or disclose your personal information to third parties for the purposes of advertising, including online behavioural advertising, website personalisation, and to provide targeted or retargeted advertising content to you (including through third party websites).

For complaints about how Entropico handles, processes or manages your personal information, please contact privacy@entropico.com. Note we may require proof of your identity and full details of your request before we can process your complaint.

It will not always be possible to resolve a complaint to everyone’s satisfaction. If you are not satisfied with Entropico’s response to a complaint, you have the right to contact the Office of Australian Information Commissioner (at www.oaic.gov.au/) to lodge a complaint.