Privacy Policy

Scope of Policy vs. Hosted and Managed Client Data

• Cloud Hosting: Data that you store on our servers as part of our cloud hosting services is governed by our Cloud Terms of Service located at https://verito.com/cloud-terms-of-service.
• Managed IT: Data accessed or processed via our Managed IT services (including local device management) is governed by our Managed IT Terms of Service located at https://verito.com/MIT-terms-of-service.

For the purposes of the California Consumer Privacy Act (CCPA) and similar state privacy laws, regarding Hosted Client Data and Managed IT Data (collectively "Client Data"), Verito acts solely as a "Service Provider" (or "Processor"), and you, the Client, act as the "Business" (or "Controller"). We do not access, use, or disclose Client Data except as described herein and except as is necessary to provide our services to you or as required by law.

Authorized Access and Use: To provide these services effectively, you acknowledge and agree that our "authorized use" includes:

• International Technical Support: Remote infrastructure maintenance and software troubleshooting performed by subsidiaries.
• Anonymized Benchmarking: The creation of aggregated and anonymized industry studies regarding security controls and compliance, provided such data cannot identify you, your business, or your individual data subjects.
• Infrastructure Management: Use of infrastructure providers who may have physical access to hardware but lack access to your Client Data.

Client Responsibilities

You represent and warrant that you have obtained all necessary consents and provided all necessary notices to data subjects (including your own clients and employees) regarding the processing of their data by Verito. You are solely responsible for ensuring that your use of our services to store or process personal data complies with applicable laws, including but not limited to the GLBA and COPPA.

This policy applies to information we collect:

• on the Site;
• in email, text, and other electronic messages between you and the Site;
• when you interact with our advertising and applications on third party websites and services, if those applications or advertising include links to the Site;
• by any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Site.

If you apply for or are employed by Company, we may also use your information for the following purposes:

• To develop and improve your experience including to generate analytics.
• To process your application, assess your qualifications or to communicate with you about employment.
• To administer pay and other benefits that are a part of your employment package.
• To provide general business management and operation.
• For accounting, financial reporting and business planning.
• To ensure your safety and the security of Company-held information.
• To perform pre-employment background checks where permitted by law.
• To comply with legal and regulatory obligations under applicable law or any other purpose that we disclose to you in the course of providing employment.
• For any purpose as reasonably required by Company in connection with your application for and during the course of your employment.

We may also merge or otherwise combine your information in furtherance of the purposes above.

Purpose of this Privacy Policy

This Privacy Policy aims to give you information on how we collect and process your personal information through your use of the Site, including any data you may provide through the Site when you purchase, access or use any of our products/services.

It is important that you read this Privacy Policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your data.

Controller

Verito Inc. is the controller and responsible for your personal information (Visitor and Account Data). Where it is necessary or appropriate for the purposes for which we hold your information, we may share your relevant information across our affiliated companies. All our affiliated companies covered by this notice manage your personal information in the manner and to the standards set out in this Privacy Policy.

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the Data Privacy Manager at the email address below: [email protected]

https://verito.com

Collection of Information

Personal information means any information about an individual from which that person can be identified. It does not include information where the identity has been removed (anonymous data).

We may collect, use, store, and transfer different kinds of personal information about you which we have grouped together as follows:

• Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Site.
• Profile Data includes your username and password, purchases, or orders made by you, your interests, preferences, feedback, and survey responses.
• Usage Data includes information about how you use our Site, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Business Operations and Compliance Data includes information you provide during the setup of services such as the Written Information Security Plan (WISP), including details about your business practices, security protocols, and operational structure.
• Managed IT & RMM Data: For clients using our Managed IT services, we may collect technical data via Remote Monitoring and Management (RMM) tools, including device specifications, software installation status, patch levels, and system performance metrics. Note: We access devices and data as reasonably necessary to provide the Services, maintain system health, or as requested by the Client.

We also may collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal information but is not considered personal information by law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Site feature. However, if we combine or connect Aggregated Data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this Privacy Policy.

We do not collect any Special Categories of Personal Information (Higher Risk Data) about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, genetic and biometric data). Nor do we collect from you any information about criminal convictions and offenses.

We use different methods to collect data from and about you including through:

Direct Interactions

You may give us your Identity, Contact, Financial, and Business Operations Data by filling in forms or by corresponding with us by postal mail, phone, email or Other Channels. This includes personal information you may provide when you:

• subscribe to our publications;
• request marketing to be sent to you;
• create an account on our Site;
• inquire about or place an order for our products or services (including WISP setup);
• apply for a job on our Site; or
• give us feedback or contact us.

Automated Technologies or Interactions

As you interact with our Site, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal information by using cookies, web beacons, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. See our section on Cookies.

Third Parties or Publicly Available Sources

We may receive personal information about you from various third parties as set out below:

• Technical Data about you from analytics providers or search information providers;
• Contact, Financial, and Transaction Data from providers of technical, payment, and delivery services;
• Data Enrichment Providers: We may verify or enrich the contact information you provide using third-party services such as Apollo and ZoomInfo.
• Google Analytics and Microsoft Clarity. We may use Google Analytics and Microsoft Clarity, or similar services, as web analysis services provided by Google and Microsoft respectively, in order to better understand your use of our Site and how we can improve it. We utilize obfuscation techniques where possible to anonymize data collected through these services. For example, these services collect information such as how often users visit a website, what pages they visit, and what other websites they used prior to coming to such website. These services collect only the IP address assigned to you on the date you visit a website, rather than your name or other identifying information. We do not combine the information collected through the use of these services with your personal information. Although these services may plant a permanent cookie on your web browser to identify you as a unique user the next time you visit a website, the cookie cannot be used by anyone but the respective service provider.

To more fully understand how Google may use the data it collects on the Site please review "How Google uses information from sites or apps that use our services" (located here https://policies.google.com/technologies/partner-sites?hl=en-US or any successor URL).

For more information on Microsoft Clarity's privacy practices, please review the Microsoft Privacy Statement (https://privacy.microsoft.com/en-us/privacystatement).

Please rest assured that we will only collect personal information that you knowingly and willingly provide by way of completed forms and emails, or information about the type of browser, IP address, or type of operating system you are using to assist us in providing and maintaining superior quality service. It is the intent of the Company to use personal information only for the purpose for which it was requested and any additional uses specifically provided on the Site and in accordance with the terms of our Privacy Policy and Terms of Use.

It is highly recommended and suggested that you review the privacy policies and statements of any website you choose to use or frequent as a means to better understand the way in which other websites garner, make use of, and share information collected.

Use of Information Collected

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

• To process payments for products and services you have purchased from us.
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
• To review applications for employment and requests to set up accounts.
• Performing services including maintaining or servicing accounts, providing customer service, verifying customer information, processing payments, providing advertising or marketing services, or providing analytic services.
• Internal Account-Based Marketing: We may use Business Operations and Compliance Data collected during the setup of products (such as WISP) to market similar or relevant goods and services offered by Verito and its strategic partners to you. This data is processed internally (utilizing tools such as HubSpot) and is not shared with third parties for their independent marketing purposes.
• Benchmarking and Industry Studies: We may aggregate and anonymize Business Operations and Compliance Data to create industry benchmarks and studies regarding security controls and compliance. This aggregated data will not identify you or your business.
• Debugging to identify and repair errors that impair existing intended functionality.
• Internal research for technological development and demonstration.

Note that we may process your personal information for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal basis we are relying on to process your personal information where more than one basis has been set out in the table below. Generally, we do not rely on consent as a legal basis for processing your personal information. You have the right to withdraw consent to marketing at any time by contacting us.

GLBA Safeguards

As a service provider to tax and accounting professionals, we understand the importance of data security. We maintain administrative, technical, and physical safeguards designed to assist you in meeting your obligations under the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule (16 CFR Part 314).

Promotional Offers from Us

At times, we may find it necessary to use personal information as a means to keep you informed of other possible products and/or services that may be available to you from the Site. We may also be in contact with you with regard to completing surveys and/or research questionnaires related to your opinion of current or potential future products and/or services that may be offered. You will receive marketing communications from us if you have requested information from us or purchased products and/or services from us and you have not opted out of receiving that marketing, or if you have opted in to our marketing program. See our section on Unsubscribe or Opt-Out for more details.

Sweepstakes, Contests, Giveaways, Raffles or Similar Promotions

We may operate sweepstakes, contests, giveaways, raffles and similar promotions through the Site or our affiliates' sites, including with respect to any links or landing pages related thereto that may require online registration by and among us, our affiliates, third parties, or vendors. We typically ask you for certain personal information when you enter and, if applicable, win a sweepstake, contest, giveaway, raffle or similar promotion. We may share this personal information with our affiliates, or other third parties, including, but not limited to, sponsors, co-sponsors, marketing parties, or prize providers of such sweepstakes, contests, giveaways, raffles and promotions (irrespective of whether it is hosted by us), or otherwise in accordance with the rules applicable to such sweepstakes, contests, giveaways, raffles or promotions. You should carefully review the rules of each sweepstake, contest, giveaway, raffle and promotion in which you participate through the Site or our affiliates' sites, as they may contain additional important information about us, or other third parties', including, but not limited to, sponsors', co-sponsors', marketing parties', or prize providers' use of your personal information. Insofar as the terms and conditions of such rules concerning the treatment of your personal information conflict with this Privacy Policy, the terms and conditions of such rules shall control. We are not responsible for the terms and conditions of a third party, including, but not limited to, a sponsor's, co-sponsor's, marketing party's, or prize provider participant's, privacy policy.

Promotional Emails During Sweepstakes, Contests, Giveaways, Raffles or Similar Promotions Registration Process

Through the Company, you can request to receive promotional emails from us. We may also ask if you want to receive such promotional emails from us during sweepstakes, contests, giveaways, raffles or similar promotional registration processes. If you want to receive our promotional emails, you will be asked to provide certain personal information and areas of interest so that we can fulfill your request. If you would like to stop receiving such promotional emails, please refer to the unsubscribe or opt-out provisions within the Privacy Policy and any emails received by you.

Third Party Marketing

The Company does not now, nor will it in the future, sell, rent or lease any of our customer lists and/or names to any third parties.

Disclosures of Your Personal Information

We may find it beneficial to share specific data with our company group and trusted partners, or our payment processing vendors, in an effort to conduct statistical analysis, provide you with email, text messages and/or postal mail, deliver support, fill orders and/or arrange for deliveries to be made, or otherwise for the purposes set out in the table above. Any third parties shall be strictly prohibited from making use of your personal information, other than to deliver those services which you requested, and as such they are thus required, in accordance with this Privacy Policy, to maintain the strictest of confidentiality with regards to all your information. We may share your personal information with Internal Third Parties (as set out in the Glossary) or External Third Parties (as set out in the Glossary).

We may disclose your personal information, without prior notice to you, only if required to do so in accordance with applicable laws and/or in a good faith belief that such action is deemed necessary or is required in an effort to:

• Remain in conformance with any decrees, laws, and/or statutes or in an effort to comply with any process which may be served upon us and/or our Site;
• Maintain, safeguard and/or preserve all the rights and/or property of the Company; and
• Perform under demanding conditions in an effort to safeguard the personal safety of users of the Site and/or the general public.

Infrastructure Providers: We utilize Summit as a server farm provider to host our infrastructure. Summit has physical access to the hardware but does not have logical access to your data. We manage these servers remotely.

Changes to Sub-processors: We maintain a list of our sub-processors (such as Summit) which we utilize to deliver our services. Such a list may be provided upon request.

International Support: We utilize our affiliates and subsidiaries which may be based in the US or abroad to provide remote infrastructure support and software troubleshooting. Access is restricted to infrastructure maintenance, and technical and administrative controls are in place to prevent unauthorized access to Client Data.

We may also disclose your personal information to third parties to evaluate or conduct a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Site users/consumers is among the assets transferred. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this Privacy Policy.

We require all third parties to respect the security of your personal information and to treat it in accordance with applicable law. We do not allow our third party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.

Change of Purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

United States Data Residency

We are a business headquartered in the United States that provides services primarily to customers located within the United States. Our primary storage and processing facilities are located in the United States. Except for infrastructure support access and as otherwise described herein, we do not transfer Client Data to international jurisdictions.

If you are visiting our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated. By using our services, you understand that your information may be transferred to our facilities and those third parties with whom we share it as described in this Policy.

If You Fail to Provide Personal Information

Where we need to collect personal information by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with products or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Cookies

Please note that certain information about your computer hardware and software and browsing actions and patterns may be collected by the Company through automatic data collection technologies as you navigate through and interact with our Site. This information is used by us for operation of our Site and our business, to maintain quality of the Site and our business, and to provide general statistics regarding use of the Site. The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). Unless you have adjusted your browser settings so that it will refuse cookies, our system will issue cookies when you direct your browser to our Site. Please review the "Cookies" section and specifically the "Use of Cookies" subsection below for more information on cookies and how you can manage your cookies settings.
• Flash cookies. Certain features of our Site may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Site. Flash cookies are not managed by the same browser settings as are used for browser cookies. For information about managing your privacy and security settings for Flash cookies, see the "Choices About How We Use and Disclose Your Information" subsection below.
• Web Beacons. Pages of the Site and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related Site statistics (for example, recording the popularity of certain Site content and verifying system and server integrity).

Use of Cookies

The Site uses "cookies" to help personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the web server that you have returned to a specific page. For example, if you visit certain Site pages, a cookie helps us to recall your specific information on subsequent visits. When you return to the Site, the information you previously provided can be retrieved.

Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. Please see the "Choices About How We Use and Disclose Your Information" section below for more information about managing your computer's settings for cookies.

Third Party Use of Cookies and Other Tracking Technologies

Some content or applications on the Site are served by third parties, including servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Site. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see the "Choices About How We Use and Disclose Your Information" section below.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. Certain mechanisms are available to you on your browser settings that provide you with the following control over your information:

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. To learn how you can manage your Flash cookies settings, visit the Flash player settings page on Adobe's website. If you disable or refuse cookies, please note that some parts of the Site may become inaccessible or not function properly. For more information about the cookies we use, please see our section on "Cookies."
• Promotional Offers from Us. If we have sent you a promotional email, you may click on the unsubscribe link at the bottom of the email to be omitted from future email distributions.
• Do Not Track Signals: Our Site may not recognize or respond to certain automated browser signals regarding tracking mechanisms, such as "Do Not Track" instructions or Global Privacy Control (GPC) signals.

We do not control third parties' collection or use of your information to serve interest-based advertising (the collection of data across web domains owned or operated by different entities, or the use of such data, for the purpose of tailoring advertising based on preferences or interest known or inferred from the data collected). However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") or who follow the Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising at the following websites:

• NAI Website (US): https://optout.networkadvertising.org/?c=1
• DAA Website (US): https://optout.aboutads.info/?c=2&lang=EN

Accessing and Correcting Your Information

You may send us an email at [email protected] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Residents of certain states, such as California, Nevada, Colorado, Virginia, and Utah may have additional personal information rights and choices.

Please see Your State Privacy Rights below for more information.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Data portability.
• Opt-out of personal information processing for targeted advertising and sales.

Colorado, Connecticut, and Virginia also provide their state residents with rights to:

• Correct inaccuracies in their personal information, taking into account the information's natural processing purpose.
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

Residents of certain states, such as California, Nevada, Colorado, Virginia, Utah, and other jurisdictions with applicable state privacy laws may have additional rights.

To exercise any of these rights please send an email to [email protected] or to the following mailing address:

Verito Inc.
3524 Silverside rd. Suite 35B, Wilmington, Delaware 19810

To appeal a decision regarding a consumer rights request please send an email to [email protected] stating the reasons with reasonable detail for such appeal.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise their sale opt-out rights may submit a request to this designated address: [email protected]. However, please know we do not currently sell data triggering that statute's opt-out requirements.

Children Under the Age of 18

Our Site is not intended for children under eighteen (18) years of age. No one under age eighteen (18) may provide any personal information to or on the Site. The Company does not knowingly collect personal information from children under the age of eighteen (18) without verifiable parental consent. If it is determined that such information has been inadvertently collected on anyone under the age of eighteen (18), we will promptly take the necessary steps to ensure that such information is deleted from our system's database.

Hosted and Managed Client Data: While Verito does not collect data from children, we acknowledge that our Clients (such as Tax and Accounting Professionals) may use our hosting or managed IT services to store data regarding minors (e.g., dependent information on tax returns). In such cases, Verito acts as a Service Provider/Processor. The Client is the responsible Controller for ensuring compliance with applicable laws, including the Children's Online Privacy Protection Act (COPPA), regarding such data.

Unsubscribe or Opt-Out

All users and/or visitors to our Site have the option to discontinue receiving communications from us and/or reserve the right to discontinue receiving communications by way of email, text messages, or newsletters. You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you. If you wish to unsubscribe or opt-out from any third party websites, you must go to that specific website to unsubscribe and/or opt-out.

Where you opt out of receiving these marketing messages, this will not apply to personal information provided to us as a result of a product/service purchase or other transactions.

Links to Other Web Sites

Our Site may contain links to affiliate and other third party websites. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. The Company does not control, claim, nor accept responsibility for any privacy policies, practices, and/or procedures of such other websites. Therefore, we encourage all users and visitors to be aware when they leave our Site to read the privacy statements/policy of each and every website you visit.

Data Security

The Company has put in place appropriate security measures and shall take reasonable precautions to maintain adequate physical, procedural, and technical security with respect to our offices and information storage facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modification of the user's personal information under our control. In addition, we limit access to your personal information to those employees, agents, contractors, service providers, and other third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We may use payment processing companies based in the United States who provide credit card processing services.

Data Breach Notification: We have put in place procedures to deal with any suspected personal information breach. In the event of a confirmed data breach affecting your personal information or Hosted/Managed Client Data, we commit to notifying you within a commercially reasonable timeframe, not to exceed seventy-two (72) hours of such confirmation, unless a longer period is required by law enforcement or applicable regulation. We will also notify any applicable regulator of a breach where we are legally required to do so.

The safety and security of your information also depends on you. If, when and where we may give you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information, to the extent possible, in public areas of the Site. The information you share in public areas may be viewed by any user of the Site.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

Data Retention

We will only retain your personal information for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or other requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Retention of Inquiry Data: We generally retain data regarding inquiries and prospective clients for a period of twenty-four (24) months of inactivity. After this period, if no business relationship has been established, the data is deleted or anonymized.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal information. You have the right to:

• Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal information in cases where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information, which override your rights and freedoms.
• Request restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information in the following scenarios: if you want us to establish the data's accuracy; where our use of the data is unlawful but you do not want us to erase it; where you need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims; you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Request the transfer of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us as set forth below in "How to Contact Us."

No Fee Usually Required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What We May Need from You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time Limit to Respond

We try to respond to all legitimate requests within forty-five (45) days. Occasionally it could take us longer than forty-five (45) days if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Dispute Resolution

Governing Law:
This Privacy Policy and all matters arising out of or relating to it are governed by and construed in accordance with the substantive laws of the State of Florida, without regard to its conflict of laws principles.

Binding Arbitration and Class Action Waiver:
Any dispute, controversy, or claim arising out of or relating to this Privacy Policy, or the breach thereof, shall be required to be brought and resolved through binding arbitration administered by the American Arbitration Association (AAA). The arbitration shall take place in Orlando (Orange County), Florida, and judgment on the award rendered by the arbitrator(s) may be entered in any court having jurisdiction thereof.

The parties irrevocably and unconditionally agree that any action to compel arbitration, to enforce an arbitration award, or seeking injunctive or other equitable relief (if such relief is not available through arbitration) arising out of or relating to this Privacy Policy shall be brought and litigated exclusively in the federal and state courts sitting in Orange County, Florida. The parties hereby consent to the exclusive jurisdiction and venue of such courts and waive any objection to such jurisdiction or venue based on inconvenient forum or any other ground.

Waiver of Class Actions: You and Verito agree that each may bring claims against the other only in an individual capacity and not as a plaintiff or class member in any purported class or representative proceeding. Further, unless both you and Verito agree otherwise, the arbitrator may not consolidate more than one person's claims, and may not otherwise preside over any form of a representative or class proceeding. The parties hereby waive any right to a trial by jury.

Changes to this Privacy Policy

We reserve the right to update and/or change the terms of our Privacy Policy, and as such we will post those changes to our Website https://verito.com/privacy-policy, so that our users and/or visitors are always aware of the type of information we collect, how it will be used, and under what circumstances, if any, we may disclose such information. If at any point in time we decide to make use of any personal information on file in a manner vastly different from that which was stated when this information was initially collected, the user or users shall be promptly notified by email. Users at that time shall have the option as to whether or not to permit the use of their information in this separate manner. We keep our Privacy Policy under regular review.

Accessing and Correcting Your Information

You can review and change your personal information by sending us an email at [email protected] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. Proper access and use of information provided on the Site is governed by our Terms of Use.

Your Duty to Inform Us of Changes

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

Acceptance of Terms

Through the use of the Site, you are hereby accepting the terms and conditions stipulated within this Privacy Policy. If you are not in agreement with our terms and conditions, then you should refrain from further use of our Site. In addition, your continued use of our Site following the posting of any updates or changes to our terms and conditions shall mean that you are in agreement and have accepted such changes.

How to Contact Us

If you have any questions or concerns regarding this Privacy Policy or our privacy practices, please feel free to contact our Data Privacy Manager at the following email or mailing address:

Email address: [email protected]

Verito Inc.
3524 Silverside rd. Suite 35B, Wilmington, Delaware 19810
Attn: Data Privacy Manager

Glossary

• Legitimate Interest means the interest of our business in conducting and managing our business to enable us to offer and give you the best service/product and the best and most secure experience. We consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
• Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
• Comply with a legal obligation means processing your personal information where it is necessary for compliance with a legal obligation that we are subject to.
• Internal Third Parties mean other companies in our company group acting as joint controllers or processors.
• External Third Parties mean:
  • Service providers acting as processors who provide IT and system administration services.
  • Professional advisers including lawyers, bankers, auditors, and insurers based in the United States who provide consultancy, banking, legal, insurance, and accounting services.
  • Marketing providers, including public relations specialists, advertisers, and sales.
  • Payment processing companies based in the United States who provide credit card processing services.