Privacy Policy
Introduction
Welcome to https://surprise.pobb.net (hereafter referred to as "Surprise," "we," or "our"). We are committed to protecting your privacy and ensuring the security of your personal data. This comprehensive Privacy Policy outlines our practices regarding the collection, handling, and protection of personal information in adherence to various international privacy laws and regulations, including but not limited to:
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
- Quebec Law 25
- General Data Protection Regulation (GDPR) of the European Union (EU)
- Brazil's Lei Geral de Proteção de Dados (LGPD)
- California Consumer Privacy Act (CCPA/CPRA)
- Colorado Privacy Act (CPA)
- Utah Consumer Privacy Act (UCPA)
- Connecticut's Consumer Data Protection Act (CTDPA)
- Virginia Consumer Data Protection Act (VCDPA)
- South Africa's Protection of Personal Information Act (POPIA)
Scope
This policy covers all aspects of our website, applications, online services, and products offered under the Surprise brand. However, it is important to emphasize that this policy does not extend to third-party platforms, applications, or services accessible through links on our site. These external entities have their own privacy policies, and we encourage you to review them before providing any personal data.
Processing Activities
This Privacy Policy governs your interactions with Surprise when:
- You use our applications and services as an authorized user.
- You visit our websites linked to this Privacy Statement.
- You receive communications from us, including newsletters, emails, phone calls, or text messages (SMS).
Personal Data Collection
We collect various categories of personal data, which include:
- Account Information: Details related to your account creation and management, such as usernames, passwords, and account preferences.
- Payment Information: Credit card details, billing addresses, and payment transaction records required for processing purchases or services.
- Financial Information: Bank account information and financial records associated with transactions on our platform.
- Purchase Information: Data related to your purchases, including products/services acquired, quantities, and purchase dates.
- Mobile Device Identifiers: Unique identifiers from your mobile device, such as IP addresses, device IDs, and advertising IDs.
- Location Data: Geolocation information provided by your browser or device when you interact with our services.
- Feedback: Your comments, suggestions, reviews, and ratings to enhance our products and services.
- Social Media Information: User data from social media platforms when you connect your accounts to Surprise for seamless access or sharing.
- Product Information: Details about the products you view, search for, or purchase on our website.
We collect this data through various means: user input forms, account settings, browsing activities, automated tracking technologies (like cookies and device fingerprinting), and third-party data providers who assist us in enhancing our services.
Cookies
Surprise uses cookies to enhance your experience and provide valuable insights into how users interact with our platform. Cookies are small text files stored on your browser or device that serve different purposes:
- Strictly Necessary: These cookies enable core functionalities like login, account management, and secure transactions. Without them, using our services would be significantly impaired.
- Preference: They remember user preferences for a personalized experience across our website.
- Analytics: Analytics cookies help us track site usage, measure performance, and understand how users navigate through our platform, allowing us to improve its functionality.
You have control over non-essential cookies through our Cookie Manager, where you can customize your cookie settings according to your preferences.
Retention and Deletion
We retain personal data for the duration required by law or for legitimate business purposes. The specific retention periods vary depending on the type of data and its use:
- Account information and transaction records are typically kept for as long as necessary to fulfill legal obligations or resolve disputes.
- Financial and payment data is retained for a period after the last transaction, as mandated by financial regulations.
- Location data may be stored temporarily for analytics purposes but is not linked to any individual user without consent.
- Once the purpose of data collection is fulfilled, or when it is no longer necessary, we delete or anonymize the personal data in accordance with legal requirements.
Security Measures
Surprise implements robust security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We employ industry-standard encryption for data transmission and storage, ensuring that your information remains secure when shared with third-party service providers. These measures include:
- Encryption of data at rest and in transit.
- Access controls and employee training to maintain data security.
- Regularly updated security protocols and software to address emerging threats.
- Monitoring and audit trails to detect and prevent unauthorized access.
Children's Privacy
We are committed to protecting the privacy of children under 18 years old. Surprise does not knowingly collect personal information from children, and our services are not directed at individuals in this age group. If you believe we have inadvertently collected data from a minor, please contact us immediately using the details provided below, and we will take prompt action to delete that information.
Your Rights (Data Subject Rights)
Depending on your jurisdiction and local privacy laws, you may have certain rights regarding your personal data:
- Access: The right to request access to the personal data we hold about you and its associated details.
- Rectification: The right to have inaccurate or incomplete personal data corrected.
- Erasure (Right to be Forgotten): The right to request the deletion of your personal data, except under certain circumstances.
- Restriction: The right to limit the processing of your personal data in specific situations.
- Portability: The right to receive your personal data in a structured, commonly used format and to transfer it to another controller.
- Objection: The right to object to the processing of your personal data for certain purposes.
- Non-Discrimination: The right to be free from discrimination when exercising any of your data subject rights.
To exercise these rights or if you have any concerns regarding your data, please contact our Data Protection Officer at the email address provided below. We will respond to your request as soon as possible and within the timeframes stipulated by applicable law.
Changes to Policy
Surprise reserves the right to update or modify this Privacy Policy at any time. Any changes will be effectively immediately upon posting on our website, with a clear notification on our homepage or through email communication to registered users. We encourage you to review this page periodically for the latest information on our privacy practices.
Contact Information
For any questions regarding this Privacy Policy, your data protection rights, or if you would like to exercise these rights, please contact us:
- Email: [email protected]
- Postal Address: Surprise Data Protection Team, [Address], [City, State, ZIP Code]