Last Modified: May 9, 2022
Shappi Inc. respects your privacy and is committed to protecting it through our compliance with this “Privacy Policy.” Throughout this Privacy Policy, we refer to any person accessing or using this website as “you,” or the “User.”
This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website www.shappi.com, its accompanying application or “app” (collectively our “Web Properties”) and our practices for collecting, using, maintaining, protecting and disclosing that information.
This Privacy Policy applies to information we collect:
It does not apply to information collected by:
Please read this Privacy Policy carefully to understand our policies and practices regarding your “Personal Information” (as defined below in INFORMATION WE COLLECT) and how we will treat it. If you do not agree with our policies and practices, your only choice is not to use our Web Properties. By accessing or using the Web Properties, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of the Web Properties after we make changes is deemed to be your acceptance of those changes, so please check the Privacy Policy periodically for updates.
SHAPPI INC.’S PRIVACY ASSURANCE
CHILDREN UNDER THE AGE OF 13
Our Web Properties are not intended for children under 13 years of age. No one under the age of 13 may provide any Personal Information to, or on, the Web Properties. We do not knowingly collect Personal Information from children under 13. If you are under 13, do not use or provide any information on the Web Properties, or on or through any oftheirfeatures/functionality, make any purchases through the Web Properties, use any of the interactive or public comment features that may be available on the Web Properties, or provide any information about yourself to us, including your name, address, telephone number, email address or any screen name or user name you may use. If we learn that we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at hello@shappi.com.
INFORMATION WE COLLECT
We collect several types of information from and about users of our Web Properties, including log data, device data, and Personal Information.
Log Data
When you visit our Web Properties, our servers may automatically log the standard data provided by your web browser. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.
Device Data
We may also automatically collect data about the device you’re using to access our Web Properties. This data may include the device type, operating system, unique device identifiers, device settings, and location data. What we collect depends on the individual settings of your device and software.
Personal Information
We may collect information from you while you use the Web Properties, including:
HOW WE COLLECT INFORMATION
Information We Collect Automatically
As you navigate through and interact with our Web Properties, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions and patterns, as described above. The technologies we use for this automatic data collection may include cookies, flash cookies, or web beacons. For more information on these technologies, see our DATA COLLECTION POLICY below. The information we collect automatically is statistical data and does not include Personal Information, but we may maintain it for the any of the reasons listed in HOW WE USE YOUR INFORMATION.
Information You Provide Directly to Us
The information we collect on or through our Web Properties may include:
Information Provided to Us by Third Parties
If we receive Personal Information about you from a third party (for example, our business partners, data brokers, or background checking agencies), we will protect it as set out in this Privacy Policy. If you are a third party providing Personal Information about somebody else, you represent and warrant that you have such person’s consent to provide the Personal Information to us.
DATA COLLECTION POLICY
The technologies we use for automatic data collection on the Web Properties may include:
DO NOT TRACK
“Do Not Track” is a preference you can set in your browser to let websites you visit know that you do not want them collecting certain information about you. We do not currently respond to, or honor, Do Not Track signals or requests from your browser.
THIRD-PARTY USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES
Some content or applications on the Web Properties are served by third parties, including but not limited to content providers and application providers. These third parties may use cookies (alone or in conjunction with web beacons or other tracking technologies) to collect information about you when you use our Web Properties. The information they collect may be associated with your Personal Information, or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
HOW WE USE YOUR INFORMATION
We may collect your information for a number of reasons, specifically:
DISCLOSURE OF YOUR INFORMATION, GENERALLY
We disclose Personal Information that we collect or that you provide, as described in this Privacy Policy, in the following circumstances:
DISCLOSURE OF YOUR INFORMATION TO THIRD PARTIES
We may disclose your Personal Information to third party service providers for the purpose of enabling them to provide their services, if you have allowed us to do so, including but not limited to:
We may also disclose your Personal Information to third parties for the purpose of establishing, exercising, or defending our legal rights, including but not limited to:
We may disclose aggregated, anonymized, statistical data and/or non-identifying information about our users without restriction.
CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION
We strive to provide you with choices regarding the Personal Information you provide to us. The following mechanisms should help to provide you with control over your information:
We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.
ACCESSING AND CORRECTING YOUR INFORMATION
If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, you can review and change your Personal Information by logging into your account profile on the Web Properties and navigating to the appropriate settings page or sending us an email at hello@shappi.com to request access to, correct, or delete any Personal Information that you have provided to us. We cannot delete some of your Personal Information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or regulatory requirement, result in fraud, or cause the information to be incorrect.
DELETING YOUR INFORMATION
In some circumstances, you may ask us to delete your personal information. To do so, please email hello@shappi.com and include your name, email address, and postal address. We will delete such personal information if (1) deletion is required under applicable law, and (2) no exception or exemption to this legal requirement is applicable to Shappi Inc. We may not accommodate a request to change information if we believe the change would violate any law or regulatory requirement.
DATA SECURITY
We won’t keep Personal Information for longer than is necessary to present our Web Properties to you or to provide our services to you.
We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure. All information you provide to us through the Web Properties are secured by TLS technology, and is stored on our secure, password protected servers behind firewalls. We have implemented a restricted employee access for all of our servers containing personally identifiable information.
Any payment transactions will be encrypted using SSL technology. We use Stripe (PCI-DSS compliant) as our payment processor.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Web Properties, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Web Properties. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Web Properties.
DATA PROTECTION OFFICER
Our Data Protection Officer’s contact information can be found at the end of this Privacy Policy. The DPO will be responsible for the following:
SPECIFIC GEOGRAPHIC INFORMATION AND PROTECTIONS
CALIFORNIA
If you are a California resident, you have the right to request information from us regarding the manner in which we share certain categories of your Personal Information with third parties for their own direct marketing uses. California’s “Shine the Light” Act provides that you have the right to submit a request to us at our email address in order to receive information on the categories of customer information that we shared and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. To obtain this information, please send an email message to hello@shappi.com with “Request for Privacy Information- California” in the subject line and in the body of your message. We will provide the requested information to you in your email address in response.
Please be aware that not all information sharing is covered by the Shine the Light requirements, and only information on covered sharing will be included in our response.
ARGENTINA
The Personal Data Protection Law/Act 25,326 (“PDPL”) of Argentina, Regulatory Decree 1558/2001, and other provisions issued by the National Directorate for Personal Data Protection comprise the current main legal framework of Argentine Data Protection Regulations.
The PDPL aims to help protect the privacy of personal data, and to give individuals access to any information stored in public and private databases and registries. The PDPL outlines obligations and principles related to data processing, including on security and the transfer of data internationally between data controllers or data processors.
As the PDPL only applies to reporting databases (PDPL, Section 1), we believe that the PDPL is not applicable to Shappi Inc in connection with the provision of services offered through the Web Properties.
Your Rights as a Data Subject
Additionally, Article 43 of the Federal Constitution, third paragraph, provides, in relevant part that any person may have access to personal data about such person and to information about the purpose with which they are kept, and to request the suppression, correction, confidentiality or updating of the data where inaccurate or discriminatory. If you are a resident of Argentina and would like to make a request for information that Shappi Inc. maintains regarding yourself, please send an email to hello@shappi.com with “Request for Privacy Information- Argentina” in the subject line and in the body of your message.
BRAZIL
The Brazilian General Data Protection Law (“LGPD”), Federal Law no. 13,709/2018 applies to any processing operation carried out by a natural person or a legal entity, of public or private law, irrespective of the means used for the processing, the country in which its headquarter is located, or the country where the data are located, provided that:
As such, users of the Web Properties that are located in Brazil will have protections under the LGPD.
Personal Data, Sensitive Data, and Data Processing
The LGPD defines personal data as any information related to an identified or identifiable natural person. Anonymized data is not be considered personal data, except when the process of anonymization has been reversed or if it can be reversed applying reasonable efforts.
Sensitive personal data is defined as any personal data concerning:
The processing of personal data may only be carried out based on one of the following legal bases:
We have outlined throughout this Privacy Policy how your personal data may be processed, transferred, and used. If you do not consent to such personal data processing, transfer, and/or use, your only option is to refrain from using the Web Properties. Your continued use of the Web Properties will be deemed consent to the processing, transfer, and use of such personal data.
Notwithstanding the above, personal data processing shall be done in good faith and based on the following principles:
At this time, we do not process any sensitive data, as defined under the LGPD.
If you are a resident of Argentina and have questions about our compliance with the LGPD, please send an email to hello@shappi.com with “Request for Privacy Information- Brazil” in the subject line and in the body of your message.
COLOMBIA
Colombia recognizes two fundamental personal data rights under Articles 15 and 20 of its Constitution: the right to privacy and the right to data rectification. Personal data processing is further regulated by two statutory laws and several decrees that set out data protection obligations: Statutory Law 1266 of 2008 (Law 1266) and Statutory Law 1581 of 2012 (Law 1581). As such, users of the Web Properties that are located in Brazil will have rights and protections under these laws.
Personal Data, Sensitive Data, and Data Processing
Under Law 1266, personal data is defined as any information related to or that may be associated with one or several determined or determinable natural or legal persons. Personal data may also be regarded as public, private or semi-private data. Public data is available to the public based on a legal or constitutional mandate. Private or semi-private data is data that does not have a public purpose, is intimate in nature and the disclosure of which concerns only the data subject.
Under Law 1581, personal data is defined as any information related to, or that may be related to, one or several determined or determinable individuals, meaning natural persons only.
Under Law 1266, sensitive personal data is defined as data that due to its sensitivity is only relevant to its owner.
Under Law 1581, sensitive personal data is any data that affects its owner’s intimacy or whose improper use might cause discrimination. Data that reveals any of the below information is considered sensitive data and its processing is forbidden by law:
At this time, we do not process any sensitive data, as defined under Law 1581; we may process sensitive data, as defined under Law 1266.
Sensitive data shall only be processed:
We have outlined throughout this Privacy Policy how your personal data may be processed, handled, used, and the purposes of such processing. If you do not consent to such personal data processing, transfer, and/or use, your only option is to refrain from using the Web Properties. Your continued use of the Web Properties will be deemed consent to the processing, transfer, and use of such personal data.
Your Rights as a Data Subject
Under the Colombian Constitution, all individuals have the right to personal and family privacy, as well as the right to know, update, and rectify information collected about them in data banks and in the records of public and private entities.
If you are a resident of Colombia and would like to make a request or claim to update, rectify or suppress data, or revoke authorization, please send an email to hello@shappi.com with “Request to Update Data- Colombia” in the subject line and in the body of your message. Please note, we will require you to provide verification that you are a Colombian resident and that you are the individual you are claiming to be. You will be required to verify access to the email address you submitted. You are required to verify your email in order for us to proceed with your Colombian rights requests. Please check your spam or junk folder in case you can’t see the verification email in your inbox.
If you are a resident of Colombia and have questions about our compliance with Laws 1581 or 1266 or Articles 15 and 20, please send an email to hello@shappi.com with “Request for Privacy Information- Colombia” in the subject line and in the body of your message.
PERU
Colombia recognizes a right to privacy regarding information that affects personal and family privacy through Article 2 of the Political Constitution of Peru. Personal data processing is further regulated by the Personal Data Protection Law N° 29733 (“PDPL”). As such, users of the Web Properties that are located in Peru will have rights and protections under these laws.
Personal Data, Sensitive Data, and Data Processing
Personal data is defined as information—regardless of whether numerical, alphabetic, graphic, photographic, acoustic—about personal habits or any other kind of information about an individual that identifies or may identify such individual by any reasonable means.
Sensitive personal data includes all of the following:
The collection and processing of personal data requires the data subject’s prior, informed, express and unequivocal consent. We will ask for your consent before collecting your personal data through any forms or registration for use of the Web Properties. You understand that your consent is not necessary if the data collected from you is dissociated or anonymized.
At this time, we do not process any sensitive data.
If you are a resident of Peru and have questions about our compliance, please send an email to hello@shappi.com with “Request for Privacy Information- Peru” in the subject line and in the body of your message.
BOLIVIA
In Bolivia, any individual or collective person who believes to be unduly or illegally prevented from knowing, objecting or obtaining the deletion or rectification of the data registered by any physical, electronic means, magnetic or computer, in public or private files or databases, or that affect their fundamental right to personal or family privacy, or in their own image, honor and reputation, may file a Private Protection Action.
Personal Data, Sensitive Data, and Data Processing
Personal data is defined as any information about a natural person identified or identifiable, expressed by numbers, alphabetic letters, graphics, photographs, alphanumeric symbols, acoustic forms or any other type of data. It is considered that a person is identified when his identity can be determined directly or indirectly as long as this do not require terms or disproportionate activities.
Sensitive data is defined as data that refers to the intimate sphere of the individual, or whose inappropriate use can cause discrimination of any type or high risk to the particular individual.
We will only process personal data when you grant your consent for one or more specific purposes, when necessary for the fulfilment of a court order, for the defense or recognition of the rights of the holder/owner before a public authority, to protect the vital interests of the holder/owner or of another natural person; among other legitimate and informed reasons. By using our Web Properties and the services they offer, you are granting your consent for Shappi Inc. to process your personal data for the specific purpose of providing services to you.
At this time, we do not process any sensitive data.
If you are a resident of Bolivia and have questions about our compliance, please send an email to hello@shappi.com with “Request for Privacy Information- Bolivia” in the subject line and in the body of your message.
PARAGUAY
In Paraguay, any person may file an action to have access to (i) personal data about such person or its property; and (ii) information about the use of such data and purpose for which it is kept, whether it is stored in public or private data registries. Additionally, any person may request the suppression, correction, confidentiality or updating of the data where inaccurate or discriminatory.
Personal Data, Sensitive Data, and Data Processing
Art. 3 of Personal Credit Data Protection Law defines personal data or personal information as information of any type that refers to legal entities or natural persons that are identified or identifiable. An identifiable person shall mean any person who can be identified by means of an identifier or by one or more elements that characterize the physical, physiological, genetics, mental, economic, cultural, or social identity of the data subject. The rights and guarantees of personal data protection shall be extended to legal entities, insofar as they are applicable.
Sensitive data is defined as information that refers to the intimate sphere of the data subject, or data that, if misused, may give rise to discrimination or entail a serious risk for the data subject. Personal data is considered sensitive when it reveals aspects such as:
At this time, we do not process any sensitive data.
Your Rights as a Data Subject
A data subject has the right to:
If you are a resident of Paraguay and would like to make a request or claim to update, rectify or suppress data, or revoke authorization, please send an email to hello@shappi.com with “Request to Update Data- Paraguay” in the subject line and in the body of your message. Please note, we will require you to provide verification that you are a Paraguayan resident and that you are the individual you are claiming to be. You will be required to verify access to the email address you submitted. You are required to verify your email in order for us to proceed with your Paraguayan rights requests. Please check your spam or junk folder in case you can’t see the verification email in your inbox.
If you are a resident of Paraguay and have questions about our compliance, please send an email to hello@shappi.com with “Request for Privacy Information- Paraguay” in the subject line and in the body of your message.
CHANGES TO OUR PRIVACY POLICY
It is our policy to post any changes we make to our Privacy Policy on this page, with a notice that the Privacy Policy has been updated on the Web Properties home page. If we make material changes to how we treat our users’ Personal Information, we will notify you by email to the most recent email address provided to Shappi Inc. either through correspondence or through your user account and/or through a notice on the Web Properties home page. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Web Properties and this Privacy Policy to check for any changes.
CONTACT INFORMATION
DATA CONTROLLER
The Data Controller for the Web Properties is Shappi Inc. To ask questions or make a comment about this Privacy Policy and our privacy practices, contact us at: legal@shappi.com.
Effective Date of this Privacy Policy: November 3, 2021