Privacy Notice
UK/EEA Privacy Notice
US Privacy Notice
-
- What personal data do we collect?
- What we do with your personal data?
- Ability to opt-in/out
- Information collected from other sources
- Disclosure of personal information to third parties, vendors, service providers, or for company communications
- Choices about the collection and use of your information
- Collection of information from children
- Other considerations
- State specific privacy laws
- Contacts
- State Specific Addenda
UK/EEA Privacy Notice
This Privacy Notice provides details of the personal data Acquinex companies, inclusive of branches, (collectively, “Acquinex”, “we”, “us” or “our”) collect from you, what we do with it, how you might access it and who it might be shared with.
It must be read alongside your insurance terms and conditions and the Terms of Use which apply to the access and use of this website.
We use the words personal information to describe any information relating to a living individual as a means to identify them, such as a name, contact information, location data and online identifier.
What personal data do we collect?
The personal data we collect depends on whether you just visit our website or use our services. If you visit our website, you do not need to provide us with any personal data. However, your browser transmits some data automatically, such as the date and time of your visit, your browser type, your operating system, the last web page you visited and your internet protocol (“IP”) address. Our Cookies page contains more details about how we use cookies.
If you use our services, personal data may be required to fulfil the requirements of a contractual relationship, which may exist between you and Acquinex. Examples of personal data we may collect include:
- Personal details, for example name;
- Contact details, for example postal address, email address and phone number;
- Insurance and claim information, for example policy and claim numbers, and other information relevant to insurance policy issuance, claim assessment and settlement; and
- Financial information, for example bank account number.
If you provide us with personal data about other people, we expect you to ensure that they know you are doing so and they are content with their information being provided to us.
What we do with your personal data
We process your personal data only for the purpose for which it is collected. We use this personal data for the provision of information and services or the performance of the contract.
We may use your personal data for other similar purposes, including marketing and communications, but that will only occur if we have your consent or where, as a current or previous user of our services, we rely on a legitimate interest justification for doing so. You have a right at any time to stop us from contacting you for marketing purposes. Please contact us to do so – see the ‘Contacts’ section below.
The way insurance works means that, if you have a contractual relationship with us, your information may be shared with, and used by, a number of third parties, for example:
- Where required or permitted to do so by law or where requested or required by a regulator, the police or law enforcement agencies;
- Where necessary in order to assist in the prevention or detection of any criminal activity or is otherwise in the overriding public interest;
- Where we need to check the information provided to us before we can fulfil your insurance policy;
- With insurers in connection with the provision of your insurance policy;
- Within our group of companies to facilitate the effective management, administration and/or operation of our services;
- As required in order to give effect to contractual arrangements we have in place with you and insurance brokers and/or intermediaries through which you have arranged your policy;
- As required to enforce or apply this Privacy Notice, or the contract of insurance itself;
- In the event that we are bought or sell our business, in which case we may disclose your personal data to the prospective buyer of such business or assets;
- With our third party service providers, including technology suppliers, hosting/storage providers, lawyers, tax advisers and auditors; or
- Where required in connection with litigation or asserting or defending our legal rights and interests.
There may be occasions where your personal data may be transferred to and stored in locations outside the United Kingdom or European Economic Area (“EEA”) in connection with the purposes set out above. We will take all reasonable steps to ensure that your personal data is treated securely and in accordance with this Privacy Notice and applicable laws and regulations.
How do we look after personal data?
We only collect personal data that is required for the purposes of providing our insurance services, as described above. We restrict, secure and control all of the data we hold, whether physical or electronic, against unauthorised access, damage, loss or destruction. We retain personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Notice, or longer if required or permitted by law. We may retain personal data for a longer period where required by our legal and regulatory obligations or where we believe it is necessary to establish, defend or protect our legal rights and interests or those of others. If we retain your personal data for historical or statistical purposes, we will ensure that the personal data cannot be used for any other purpose. Whilst in our possession, together with your assistance, we try to maintain the accuracy of your personal data.
How can you access your personal data?
You have the right to request access to any of your personal data we may hold. If any of that information is incorrect, you can request that we change it. If we are not using your information correctly, you can request that we stop using it or that we delete it completely.
If you would like to make a request to see what personal data of yours we hold, you may make a request to our Data Protection Officer – please see the ‘Contacts’ section below.
Where we have asked for your consent to use your personal data, you have the right to withdraw that consent at any time. If you withdraw your consent, we will stop using your personal data where legally possible. Any processing undertaken before your withdrawal remains valid and lawful.
There will not usually be a charge for dealing with these requests, although we reserve the right to charge a reasonable administrative fee where an excessive number of requests are being made.
Contacts
Our companies are subsidiaries of PIB Group Limited. If you have any questions about this Privacy Notice or would like to exercise your rights, please contact our Data Protection Officer.
Data Protection Officer
PIB Group Limited
1 Minster Court
Mincing Lane
London, EC3R 7AA
[email protected]
+44 (0) 330 058 9700
If you have any concerns about the way we are processing your personal data, or we are unable to resolve an enquiry or a complaint, you have the right to make a complaint to the following organisations:
Entity/Branch name: Acquinex Limited / Acquinex GmbH (UK Branch)
Organisation name: Information Commissioner’s Office
Entity/Branch name: Acquinex GmbH
Organisation name: Hessian Data Protection Office
Entity/Branch name: Acquinex GmbH (Spółka z ograniczoną odpowiedzialnością) Oddział w Polsce
Organisation name: President of the Personal Data Protection Office
Entity/Branch name: Acquinex A/S
Organisation name: Danish Data Protection Agency (Datatilsynet)
Entity/Branch name: Acquinex A/S (Dutch Branch)
Organisation name: Dutch Data Protection Authority
Entity/Branch name: Acquinex A/S, Svensk Filial
Organisation name: Swedish Authority for Privacy Protection
Entity/Branch name: Acquinex AS, Sucursal en España
Organisation name: Agencia Espanola de Proteccion de Datos
US Privacy Notice
This Privacy Notice provides details of the personal data Acquinex companies, inclusive of branches, (collectively, “Acquinex”, “we”, “us” or “our”) collect from you, what we do with it, how you might access it and who it might be shared with.
It must be read alongside your insurance terms and conditions and the Terms of Use which apply to the access and use of this website.
We use the words personal information to describe any information relating to a living individual as a means to identify them, such as a name, contact information, location data and online identifier.
What personal data do we collect?
The personal data we collect depends on whether you just visit our website or use our services. If you visit our website, you do not need to provide us with any personal data. However, your browser transmits some data automatically, such as the date and time of your visit, your browser type, your operating system, the last web page you visited and your internet protocol (“IP”) address. Our Cookies banner contains more details about how we use cookies.
If you use our services, personal data may be required to fulfil the requirements of a contractual relationship, which may exist between you and Acquinex. Examples of personal data we may collect include:
- Personal details, for example name;
- Contact details, for example postal address, email address and phone number;
- Insurance and claim information, for example policy and claim numbers, and other information relevant to insurance policy issuance, claim assessment and settlement; and
- Financial information, for example bank account number.
If you provide us with personal data about other people, we expect you to ensure that they know you are doing so and they are content with their information being provided to us.
What we do with your personal data
We process your personal data only for the purpose for which it is collected. We use this personal data for the provision of information and services or the performance of the contract. Personal information (such as your name, address, social security number, date of birth, phone numbers, credit card information, and email address) will be maintained in encrypted form on secure servers. We may combine the information submitted under various forms and services in order to provide you with a better experience and to improve the quality of our services.
We may use your personal data for other similar purposes, including marketing and communications, but that will only occur if we have your consent or where, as a current or previous user of our services, we rely on a legitimate interest justification for doing so. You have a right at any time to stop us from contacting you for marketing purposes. Please contact us to do so – see the ‘Contacts’ section below.
The way insurance works means that, if you have a contractual relationship with us, your information may be shared with, and used by, a number of third parties, for example:
- Where required or permitted to do so by law or where requested or required by a regulator, the police or law enforcement agencies;
- Where necessary in order to assist in the prevention or detection of any criminal activity or is otherwise in the overriding public interest;
- Where we need to check the information provided to us before we can fulfil your insurance policy;
- With insurers in connection with the provision of your insurance policy;
- Within our group of companies to facilitate the effective management, administration and/or operation of our services;
- As required in order to give effect to contractual arrangements we have in place with you and insurance brokers and/or intermediaries through which you have arranged your policy;
- As required to enforce or apply this Privacy Notice, or the contract of insurance itself;
- In the event that we are bought or sell our business, in which case we may disclose your personal data to the prospective buyer of such business or assets;
- Within our third party service providers, including technology suppliers, hosting/storage providers, lawyers, tax advisers and auditors; or
- Where required in connection with litigation or asserting or defending our legal rights and interests.
Ability to Opt-in/Out
If we propose to use your personal information for any purposes other than those described in this Notice and/or in the specific service notices, you may “opt-out” or say no to having your information shared by contacting us – see the ‘Contacts’ section below. We will not collect or use sensitive information for purposes other than those described in this Notice and/or in the specific service notices, unless we have obtained your prior consent.
If you do choose to decline to submit personal information to any of our services, there may be some instances in which we may not be able to provide those services to you.
Information Collected from Other Sources
From time to time, we may receive personal information about you from third party sources but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. This Privacy Notice applies to how we handle your information.
We do not exercise control over the websites that are displayed in other browser windows opened by links from within our various services. These other sites may place their own cookies or other files on your computer, collect data, or solicit personal information from you.
Disclosure of Personal Information to Third Parties, Vendors, Service Providers, or for Company Communications
We may disclose personal information that we collect, or you provide, as described in this Privacy Notice under the following circumstances:
- To transfer data to our affiliates from time to time for our legitimate business purposes. Affiliates are defined as group companies, subsidiaries, parent companies, joint ventures, and other corporate entities under common Acquinex ownership;
- To contractors, service providers, and other third parties we use to support our business that are bound by an obligation to keep personal information confidential and use it only for the purposes for which we disclose it to them;
- To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by the Company about our Website users is among the assets transferred; and
- To fulfil the purpose for which you provide it.
Choices about the Collection and Use of Your Information
This website may use “cookies” to enhance your viewing experience. A cookie is a tiny element of data that is sent to your browser to be stored on your hard drive so that we can recognize you when you return. You may set your browser to notify you when you receive a cookie or refuse cookies from all websites. Please note, if you reject cookies, it is possible that some web pages may not load properly, your access to certain information might be denied, or you might be required to enter information more than once.
Promotional Offers from the Company: If you do not wish to have your e-mail address/contact information used by the Company to promote our own or third parties’ products or services, you can opt-out. Please contact us to do so, see the ‘Contacts’ section below.
Targeted Advertising: If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt-out. Please contact us to do so, see the ‘Contacts’ section below.
How do we look after personal data?
We only collect personal data that is required for the purposes of providing our insurance services, as described above. We restrict, secure and control all of the data we hold, whether physical or electronic, against unauthorised access, damage, loss or destruction. We retain personal data only for as long as is necessary to fulfil the purposes outlined in this Privacy Notice, or longer if required or permitted by law. We may retain personal data for a longer period where required by our legal and regulatory obligations or where we believe it is necessary to establish, defend or protect our legal rights and interests or those of others. If we retain your personal data for historical or statistical purposes, we will ensure that the personal data cannot be used for any other purpose. Whilst in our possession, together with your assistance, we try to maintain the accuracy of your personal data.
Confidentiality and Security
We will not add your name to mailing lists unless you specifically request that we do so. We do not share, sell, lease, or rent our mailing or customer lists to third parties. We may use third parties to help us administer e-mail alerts. If personally identifiable information (i.e. name, address, e-mail address, telephone number) is provided to any of these third parties, we will require that they maintain such information in strict confidence in compliance with this policy. We also assess new technology for protecting customer information on an ongoing basis.
We take the security of your personal information seriously and take appropriate technical and organizational measures against unauthorized or unlawful processing of personal data, and against accidental loss, destruction of, or damage to, personal data. Please contact us immediately if you believe your Personal Information has been exposed.
Although we take appropriate measures to protect the security of the information communicated through the website, no Internet connected computer system can be made absolutely secure from intrusion. We, therefore, cannot and do not guarantee that information communicated by you to us will be received or that it will not be altered before or after its transmission to us. If you elect to use the website to communicate with us, you do so at your own risk.
How can you access your personal data?
You have the right to request access to any of your personal data we may hold. If any of that information is incorrect, you can request that we change it. If we are not using your information correctly, you can request that we stop using it or that we delete it completely.
If you would like to make a request to see what personal data of yours we hold, you may make a request to our Data Protection Officer – please see the ‘Contacts’ section below.
Where we have asked for your consent to use your personal data, you have the right to withdraw that consent at any time. If you withdraw your consent, we will stop using your personal data where legally possible. Any processing undertaken before your withdrawal remains valid and lawful. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
There will not usually be a charge for dealing with these requests, although we reserve the right to charge a reasonable administrative fee where an excessive number of requests are being made.
Collection of Information from Children
We do not knowingly collect personal information from anyone under the age of 13. If you believe that we are processing personal information pertaining to a child inappropriately, we ask you to contact us using the information provided under the “Contact Us” section.
For more information about protecting your child’s privacy online, visit the Federal Trade Commission website at https://www.ftc.gov.
Other Considerations
When you use some of Acquinex products, services, or applications or post on an Acquinex forum, chat room, or social networking service such as Facebook, X (Twitter), or other such social media sites, the personal information and content you share is visible to other users and can be read, collected, or used by them.
State Specific Privacy Laws
Many states and territories have their own privacy regulations which apply to individuals and corporations that live or do business in, frequent, or offer good and services to its residents. The individual laws of these states vary and as such you should familiarize yourself with your individual state laws.
Addendum 1 which can be found at the end of this notice summarizes each current state privacy regulation
Contacts
Our companies are subsidiaries of PIB Group Limited. If you have any questions about this Privacy Notice or would like to exercise your rights, please contact our Data Protection Officer.
Data Protection Officer
PIB Group Limited
1 Minster Court, Mincing Lane London, EC3R 7AA
[email protected]
+44 (0) 330 058 9700
If you have any concerns about the way we are processing your personal data, or we are unable to resolve an enquiry or a complaint, you have the right to make a complaint to the following organizations:
Changes to our Privacy Notice
This Privacy Notice may be updated from time to time. It remains your responsibility to access and check these terms and conditions whenever you access the Website as the latest version of these terms and conditions will govern. We do not accept any liability for any errors or omissions.
This Privacy Notice was last updated in [insert new Privacy notice date].
What is Personal Data?
Personal data includes all data revealing racial or ethnic origin, religious beliefs, mental or physical health condition, sex life, sexual orientation, citizenship, or immigration status. In addition, sensitive data includes genetic or biometric data, personal data of a known child, and precise geolocation data.
Opt-In for Personal Data Processing?
We will never use or process your personal data without first obtaining your consent. To obtain your consent we will always request your clear affirmative approval prior to processing your personal data. Consent may be requested in the form of a written statement, including by electronic means, or any other unambiguous affirmative actions.
Consumer Data Rights
As a consumer you have following rights with regards to your personal data:
- The right to confirm whether we are processing your personal data and to access personal data;
- The right to correct inaccuracies or delete your personal data;
- The right to ‘Be Forgotten’;
- The right to obtain a portable copy of your personal data; and
- The right to opt out of the processing of data for any and all purposes.
Opt-Out Preference
You may opt-out of providing and allowing us to use your Personal data at any time. If you would like to Opt-Out of providing us any data, please use the ‘Contact Us’ page.
Disclosure
We may at times be required to disclose your personal data to a third party to assist in processing your request. Any disclosure to a third party will be strictly under a written contract with the third party provider authorizing the third party to use the personal data to perform services on our behalf.
Privacy by Design
We limit the collection of personal data to what is adequate, relevant, and reasonably necessary for the purposes disclosed, we will never collect personal information that is not required to conduct business with you nor use any information collected for purposes that are neither reasonably necessary to, nor compatible with our services without obtaining your consent.
Security
We have implemented and maintain administrative, technical, and physical data security practices to protect the confidentiality, integrity and accessibility of your personal data. In addition, we mandate that any third party that we share your data with are subject to a confidentiality duty for that data and provide any required assistance to us as Controllers in meeting our obligations to provide data breach notices and maintain reasonable security.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
What rights does the Oregon Consumer Privacy Act (OCPA) grant consumers?
The OCPA grants Oregon residents acting in an individual context, (“consumers”), certain access and control rights concerning their personal data. Consumers do not include those in a commercial or employment context.
As a consumer you may submit authenticated requests for the following:
- Confirm whether we are processing your data.
- Ask us to provide access to your data.
- Ask us to correct inaccurate personal data or delete any personal data about you.
- Obtain a copy of your personal data (i.e., data portability).
- Opt-out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling.
We will respond to all requests within 45 days. Furthermore, if we refuse to grant your request, we must explain the reasons behind our decision in writing. If you disagree with our decision, you have the right to appeal our decision in writing within 60 days from the date of the denial.
What are our obligations under the OCPA?
We will limit the collection of personal data to what is adequate, relevant, reasonably necessary, and proportionate in relation to the purposes for which the personal data is processed. We have established, implemented, and maintain administrative, technical, and physical data security practices to protect the confidentiality, integrity, and security of your personal data. We will notify you if we sell your personal data to third parties or engages in targeted advertising. You have the right to opt out at any time.
Disputes Concerning Consumer Data Privacy
If you are not satisfied with our response or actions a formal complaint may be filed with the Oregon Attorney General.
Questions or Concerns?
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
Tennessee Code Title 47, Chapter 18 amended to include the Tennessee Information Privacy Act (TIPA) permits users of our website and other services that we may provide who are Tennessee residents the right to confirm, access, correct, delete, or obtain a copy of their personal information, or opt out of specific uses of their Information. Furthermore, TIPA also provides Tennessee residents the right ‘To Be Forgotten’ by a company.
A Tennessee resident has the right to know what Personal Information is collected, used, disclosed, or sold, to delete any Personal Information collected, to opt-out of the sale of Personal Information, and to not be discriminated against for exercising such rights.
We will respond to all requests within 45 days and if we cannot honor your request, we will provide a detailed explanation as to why the request cannot be honored.
What is considered Personal Information?
Personal Information is any information that can be linked to an identifiable individual, excluding publicly available information. Examples of Personal Information include: a home address, a driver’s license or state identification number, passport information, a financial account number, login credentials, and payment card information.
Information Controller Responsibilities
As the controllers of your Information, we will limit Information collection and processing of your Information to only what is necessary, store your Information in a secure encrypted environment and will always ask for your consent before using or processing any sensitive Information in a manner that is contrary to this policy or not previously approved by you.
Your Rights as a Tennessee Resident
Right to know: Upon receipt of a verifiable consumer request, you have the right to know what Personal Information we collect, how we use, disclose or sell your personal information. You may also request a copy of any and all Personal Information that we may hold.
Furthermore, you may request that we disclose the following information:
- The categories of Personal Information collected and categories of sources from which Personal Information is collected
- The business or commercial purpose for collecting or selling Personal Information.
- The categories of third parties with whom we share Personal Information; and
- The specific pieces of Personal Information we have collected about you
Right to Delete: Upon receipt of a verifiable consumer request, you have the right to request that we delete or restrict the use of any and all Personal Information about you which we have previously collected. If it is necessary for us to maintain the Personal Information for certain purposes, we will notify you within 45 days of your request with a detailed explanation as to why your personal information cannot be deleted or its use restricted.
Note: If access to your personal information is deleted or restricted, we may not be able to provide you will access to all of our services
Correct Inaccuracies: Upon receipt of a verifiable consumer request, you have the right to correct inaccuracies in your Personal Information.
Right to Opt-Out of Sale of Personal Information: We do not sell Personal Information, including the Personal Information of minors under the age of 16. However, pursuant to TIPA regulation, upon receipt of a verifiable consumer request, you may request that your personal information not be sold in the future.
No Discrimination: You have the right not to be discriminated against because you exercised any of your rights under the TIPA.
Exercise of your rights: If you would like to exercise any such rights or have any questions related to the information provided, please send a request via our ‘Contact Us’ page and a response will be provided within 24 hours.
The Texas Data Privacy and Security Act (TDPSA) regulates the collection, use, processing, and treatment of consumers’ personal data and provides residents the following rights:
- Confirm whether we are processing personal data and be provided the ability to access the personal data.
- Correct inaccuracies or delete your personal data at any time.
- Obtain a copy of your personal data, in a portable and readily usable format.
- Opt-out of processing personal data for targeted advertising, the sale of personal data, or its use for profiling.
We will address all data subject or opt-out requests within 45 days after the receipt of the request.
The TDPSA outlines duties for controllers related to collecting personal data, including limiting collection to what is adequate, relevant, and reasonably necessary, and requiring them to establish data security practices.
As data controllers we cannot:
- Collect personal data for reasons not disclosed to the consumer without consent.
- Process data in violation of state and federal laws that prohibit unlawful discrimination or discriminate against a consumer for exercising their rights.
- Process sensitive data without consent or process sensitive data of a child unless it’s in accordance with the Children’s Online Privacy Protection Act of 1998 (COPPA).
The Texas Data Privacy and Security Act (TDPSA) regulates the collection, use, processing, and treatment of consumers’ personal data and provides residents the following rights:
- Confirm whether we are processing personal data and be provided the ability to access the personal data.
- Correct inaccuracies or delete your personal data at any time.
- Obtain a copy of your personal data, in a portable and readily usable format.
- Opt-out of processing personal data for targeted advertising, the sale of personal data, or its use for profiling.
We will address all data subject or opt-out requests within 45 days after the receipt of the request.
Texas Data Privacy Law Requirements
The TDPSA outlines duties for controllers related to collecting personal data, including limiting collection to what is adequate, relevant, and reasonably necessary, and requiring them to establish data security practices.
As data controllers we cannot:
- Collect personal data for reasons not disclosed to the consumer without consent.
- Process data in violation of state and federal laws that prohibit unlawful discrimination or discriminate against a consumer for exercising their rights.
- Process sensitive data without consent or process sensitive data of a child unless it’s in accordance with the Children’s Online Privacy Protection Act of 1998 (COPPA).
Questions or Concerns?
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Utah Consumer Privacy Act (UCPA) is applicable to the following:
- Any controller or processor who:
- Conducts business in the state of Utah; or
- Produces a product or service that is targeted to consumers who are residents of the state of Utah.
- Any owner of the information (Consumer) who:
- Is a resident of the state of Utah; or
- Is provided a good or a service from a business that conducts its business in the state of Utah.
The UCPA provides you as the consumer the right to:
- Confirm whether we as the controller are processing your personal data;
- Access and delete your personal data;
- Obtain a copy of your personal data, in a format that: is portable, readily usable; and
allows you to transmit the data to another controller without impediment; and
- Opt-out of the processing of your personal data for any and all purposes.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Virginia Consumer Data Protection Act (VCDPA) provides consumers with certain rights related to their personal data. Under the Act, these rights include:
- The right to know, access, confirm personal data;
- The right to delete or to correct inaccuracies in personal data;
- The right to data portability (i.e., easy, portable access to all pieces of personal data held by a company);
- The right to opt-out of the processing of personal data for any and all purposes; and
- The right to not be discriminated against for exercising any of the foregoing rights.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Vermont Data Privacy and Online Surveillance Act (VDPOSA), effective January 1, 2028, provides consumers with certain rights related to their personal data. The VDPOSA provides you as the consumer the right to:
- Confirm whether we as the controller are processing your personal data;
- Correct inaccuracies in your personal data;
- Access and delete your personal data;
- Obtain a copy of your personal data, in a format that: is portable, readily usable; and allows you to transmit the data to another controller without impediment; and
- Opt-out of the processing of the personal data for purposes of:
- Targeted advertising;
- The sale of personal data;
- Profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you.
- If your personal data was processed for the purposes of profiling in furtherance of any automated decision that produced any legal or similarly significant effect, you may:
- question the result of such profiling;
- be informed of the reason that such profiling resulted in such decision;
- review your personal data that was processed for the purposes of such profiling; and
- if the profiling decision concerned housing, taking into account the nature of the personal data and the purposes for which such personal data were processed, you may correct any incorrect personal data that were processed for the purposes of such profiling and have the profiling decision reevaluated based on the corrected personal data; and
- Obtain a list of the third parties to which such we have sold your personal data.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
California Civil Code Section §1798.83 and the California Consumer Privacy Act (CCPA) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. The CCPA also provides California residents the right ‘To Be Forgotten’ by a company.
A California resident has the right to know what Personal Information is collected, used, disclosed, or sold, to delete any Personal Information collected, to opt-out of the sale of Personal Information, and to not be discriminated against for exercising such rights.
Right to Know
A California resident has the right to request that we disclose what Personal Information we collect, use, disclose or sell. You may request that we disclose the following information upon receipt of a verifiable consumer request:
- The categories of Personal Information collected and categories of sources from which the Personal Information is collected;
- The business or commercial purpose for collecting or selling Personal Information;
- The categories of third parties with whom we share Personal Information; and
- The specific pieces of Personal Information we have collected about you.
Right to Delete
As a California resident, you have the right to request that we delete any Personal Information about you which we have previously collected. If it is necessary for us to maintain the Personal Information for certain purposes, we are not required to comply with your deletion request. If we determine that we will not delete your Personal Information when you request us to do so, we will inform you and tell you why we are not deleting it.
Right to Opt-Out of Sale of Personal Information
We do not sell Personal Information, including the Personal Information of minors under the age of 16. However, pursuant to applicable law, a California resident may request that their information not be sold in the future. To do so please send a request via our ‘Contact Us’ page.
No Discrimination
You have the right not to be discriminated against because you exercised any of your rights under the CCPA.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Colorado Privacy Act (CPA) provides consumers with certain rights related to their personal data.
The CPA provides five main rights for the consumer.
Right of Access
You have the right to confirm whether a controller is processing your personal data and to have the sole right to access your personal data.
Right to Correction
You have the right to correct inaccuracies in any personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data.
Right to Delete
You have the right to delete personal data concerning the consumer.
Right to Data Portability
You have the right to obtain your personal data in a portable and, to the extent technically feasible, readily usable format that allows you the consumer to transmit the data to another entity without hindrance.
Right to Opt-Out
You have the right to opt out of the processing of your personal data for any and all purposes.
Right to Appeal
You have the right to appeal any denial to take action. We will provide a response to your appeal request within 45 days of receipt.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Connecticut Data Privacy Act (CTDPA) gives Connecticut residents certain rights over their personal data and establishes responsibilities and privacy protection standards for data controllers that process personal data.
What is considered personal data?
Personal data is any information that can be linked to an identifiable individual, excluding publicly available information. Examples of personal data include: a home address, a driver’s license or state identification number, passport information, a financial account number, login credentials, and payment card information.
Access
Consumers have the right to confirm whether a controller is processing their personal data and access such personal data, unless such actions reveal a trade secret. Consumers also have the individual right to obtain a list of specific third parties to which their personal data has been sold. We do not sell of any Connecticut resident’s precise geolocation data as it is outright prohibited
Correction
Consumers have the right to correct inaccuracies in their personal data (with some limitation) and the right to delete personal data which is not publicly available.
Data Portability
Consumers have the right to obtain a portable copy of their personal data to the extent technically feasible and provided the controller will not be required to reveal any trade secret.
Opt-Out of Certain Data Processing
Consumers have the right to opt out of any and all processing of personal data for purposes of:
- targeted advertising;
- the sale of personal data; or
- profiling in connection with automated decisions that produce legal or similarly significant effects concerning the consumer.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
What constitutes personal data under the Delaware Data Privacy Act (DDPA)?
The DDPA covers any personally identifiable information (PII) about a Delaware resident (User), who may use an application or service publicly available. Examples of PII includes, however is not limited to, data revealing racial or ethnic origin, religious beliefs, mental or physical health condition, or any other information that can be directly tied to you. We will always obtain your consent when we collect such data.
Consumer rights and requests:
As a User you have the following rights as it relates to your data:
- Right to know about processing
- Right to access your data and that of any minors under the age of 13 of which you are the guardian
- Right to data correction and/or deletion
- Right to data portability
- Right to opt-out of the processing of PII for any purposes including but not limited to for the purposes of data sales, targeted advertising, or profiling
- Right to obtain a list of the categories of third parties to which the controller has disclosed the consumer’s personal data
These requests will be completed within 45 days.
Right to Delete
You have the right to request that we delete any PII about you which we have previously collected. If it is necessary for us to maintain the PII for certain purposes, we may not be required to comply with your deletion request. If we determine that we cannot delete your PII we will inform you and advise why the information cannot be deleted.
Questions or Concerns?
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
What is considered personal data under the Florida Data Privacy Law (FDPL)?
Personal data is any information that can be linked to an identifiable individual, excluding publicly available information. Examples of personal data include however are not limited to: home address, driver’s license or state identification number, passport information, financial account number, login credentials, and payment card information.
Consumer Rights and Requests
- The right to access and obtain a copy of any data that the controller may hold.
- The right to delete or correct inaccuracies in their personal data.
- The right to opt-out of the selling and/or sharing of personal data for targeted advertising, including removal of personal data from voice or facial recognition technologies.
- Permits parents and guardians to exercise rights on behalf of their children.
We will respond to any request within forty-five (45) days of receipt of such request. If we cannot honor your request, you have the right to appeal that decision.
Selling Personal Data
We will not sell your personal data except under the following circumstances:
- To a third party for purposes of providing a product or service requested by you
- That has been made available to the general public through a mass media channel and access is not restricted
- As part of a merger or an acquisition under the condition of a non-disclosure agreement
Targeted Advertising
We may use the personal data that you have provided for targeted advertising purposes, including through unaffiliated websites or companies.
You may opt-out of any and all targeted advertising at any time.
Consumers Right of Action
If you are not satisfied by any response or action related to your personal information, you may file a formal complaint with the Florida Department of Legal Affairs.
Questions or Concerns?
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Indiana Consumer Data Protection Act (“ICDPA”) provides consumers with certain rights related to their personal data.
Under the Act, these rights include:
- The right to know, access and confirm personal data that was previously provided by the consumer.
- The right to delete or to correct inaccuracies in personal data previously provided to the controller.
- The right to data portability (i.e., easy, portable access to all pieces of personal data held by a company).
- The right to opt-out of the processing of personal data for any and all purposes including targeted advertising; and
- The right to not be discriminated against due to the nature of the data or for exercising any of the foregoing rights.
Consumer is defined as any individual or business resident in Indiana. A business that may be domiciled in another state however have a physical presence in Indiana may also be defined as a Consumer.
If you would like to learn more about your rights as an Indiana consumer or exercise any such rights, please send a request via our ‘Contact Us’ page.
The Iowa Consumer Data Privacy Act (ICDPA) provides Iowa residents or other individuals (Consumers) the following rights when it comes to accessing and managing their personal information:
- The right to access personal information,
- The right to confirm processing,
- The right to deletion (only applicable to personal data provided to the business by the consumer),
- The right to data portability (only applicable to personal data provided to the business by the consumer), and
- The right to opt out of sale.
Sensitive Data Processing Requirements
The ICDPA requires that we provide you with “clear notice and an opportunity to opt out” of the processing of sensitive data (which includes biometric information to the extent it is “processed for the purpose of uniquely identifying a natural person”).
Privacy Notices
The following information will be provided to you upon request:
- Categories of and purposes personal data being processed,
- How you may exercise your data rights,
- Categories of personal data that we may share with third parties; and
- Categories of third parties with whom we may share your personal data.
Questions or Concerns?
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
The Louisiana Data Privacy Act (LDPA), effective January 1, 2027, gives consumers control over their personal information.
The LDPA provides you as the consumer the right to:
- Confirm whether we as the controller are processing your personal data;
- Correct inaccuracies in your personal data;
- Access and delete your personal data;
- Obtain a copy of your personal data, in a format that: is portable, readily usable; and allows you to transmit the data to another controller without impediment; and
- Opt-out of the processing of the personal data for purposes of:
- Targeted advertising;
- The sale of personal data;
- Profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
MGL c.214, § 1B Right of Privacy of the Massachusetts Information Privacy Act (MIPA) provides that any Massachusetts resident (resident) shall have a right against unreasonable, substantial, or serious interference with his privacy. Information may only be collected with the resident’s express permission and any company that holds such information must immediately delete it upon a request to do so from the impacted resident.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
What rights does the Montana Consumer Data Privacy Act (MCDPA) grant consumers?
The MCDPA grants Montana residents acting in an individual context, (“consumers”), certain access and control rights concerning their personal data. Consumers do not include those in a commercial or employment context.
As a consumer you may submit authenticated requests for the following:
- Confirm whether we are processing your data.
- Ask us to provide access to your data or obtain a copy of your personal data (i.e., data portability).
- Ask us to correct inaccurate personal data or delete any personal data about you.
- Opt-out of the processing your personal data for purposes of targeted advertising, the sale of personal data, or profiling.
We will respond to all requests within 45 days. Furthermore, if we refuse to grant your request, we must explain the reasons behind our decision in writing. If you disagree with our decision you have the right to appeal our decision in writing within 60 days from the date of the denial.
What are our obligations under the MCDPA?
We will limit the collection of personal data to what is adequate, relevant, reasonably necessary, and proportionate in relation to the purposes for which the personal data is processed. We have established, implemented, and maintain administrative, technical, and physical data security practices to protect the confidentiality, integrity, and security of your personal data. We will notify you if we sell your personal data to third parties or engage in targeted advertising. You have the right to opt out at any time.
Disputes Concerning Consumer Data Privacy
If you are not satisfied with our response or actions a formal complaint may be filed with the Montana Attorney General Investigations and Enforcement unit.
Questions or Concerns?
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
What is Personal Data?
Personal Data is defined as any information that is linked or reasonably linkable to an identified or identifiable individual, including pseudonymous data such as when used in combination with other identifying information. It excludes de-identified or publicly available information.
In addition, sensitive data, which is a subset of personal data, includes:
- Personal data collected from a known child under the age of 13.
- Genetic or biometric data processed to uniquely identify an individual.
- Personal data that reveals an individual’s race or ethnic origin, religion, mental or physical health condition, sexuality, or immigration status.
- Precise geolocation data.
Personal Data Processing Consent
We will never use or process your personal data without first obtaining your consent. To obtain your consent we will always request your clear affirmative approval prior to processing your personal data. Consent may be requested in the form of a written statement, including by electronic means, or any other unambiguous affirmative actions.
Consumers rights
You have the following rights as it relates to your personal data:
- To know whether we are processing your personal data.
- To correct inaccuracies in or request deletion of your personal data.
- To access or obtain a copy of your personal data in a portable and readily usable format.
- To opt-out of personal data processing, for any purposes including but not, limited to:
- personal data sales;
- targeted advertising; or
- profiling for decisions that produce legal or similarly significant effects on consumers.
We will respond to all requests within 45 days of receipt. If a request cannot be honored for any reason legal or otherwise, we will notify you in writing and provide details of how you can dispute our decision(s).
Disclosure
We may at times be required to disclose your personal data to a third party to assist in processing your request. Any disclosure to a third party will be strictly under a written contract with the third-party provider authorizing the third party to use the personal data only to perform services on our behalf.
In addition, all third parties will adhere to all data security obligations and regularly, however no less than annually, conduct data protection assessments and immediately notify us of any findings.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
What is Personal Data?
Personal data includes all data however not limited to racial or ethnic origin, religious beliefs, mental or physical health condition, sexual orientation, or citizenship status. In addition, sensitive data includes genetic or biometric data, personal data of a known child, and precise geolocation data.
Consent
We will always obtain your explicit consent prior to collecting and using any of your personal data.
Consumer Data Rights
As a Consumer you have the right to confirm whether we are processing your personal data; the right to correct inaccuracies; the right to delete personal data; the right to know the purposes for processing your personal data; the right to know how your data is shared with third parties and the categories of third parties that will receive the personal data; the right to obtain a portable and readily usable copy of personal data; and the right to opt out for any and all processing.
We will respond and take the requested action within 45 days of receipt of the request. If we cannot honor your request for any reason including legal requirements, written notice with an explanation as to why the request cannot be honored will be provided.
Privacy by Design
We limit the collection of personal data to what is adequate, relevant, and reasonably necessary for the purposes disclosed. We will never collect additional categories of personal information that is not required to conduct business with you nor use any information collected for purposes that are neither reasonably necessary to, nor compatible with our services without obtaining your consent.
Security
We have implemented and maintain administrative, technical, and physical data security practices to protect the confidentiality, integrity and accessibility of your personal data. In addition, we mandate that any third party that we share your data with are subject to a confidentiality duty for that data and provide any required assistance to us in meeting our obligations to provide data breach notices and maintain reasonable security.
Opt-out Preference Signals
As the owner of the personal information, you have the right to opt-out of any processing of personal data for any purpose. Please be aware that we may not be able to provide you with all services if you choose to opt-out from providing us with any requested data or choose to have any data that was previously provided deleted.
If you would like to exercise any such rights or have any questions related to this regulation, please send a request via our ‘Contact Us’ page.
Make an enquiry
If you would like more information on Acquinex, how we may be able to assist on a potential transaction as well as developing and working with us please get in touch.