RapidScale Privacy Notice

Effective Date: July 09, 2025

This privacy notice is organized by topic to help you find the information that matters most to you.

1. Introduction

RapidScale respects your privacy and commits to protecting it through our compliance with the practices described in this notice.

This privacy notice describes our practices for collecting, using, maintaining, protecting, and disclosing the personal data we may collect from you or that you provide when you visit our websites or other digital properties, communications, or forms that link or refer to this privacy notice (collectively our “website“).

This privacy notice applies to the personal data collected through our website regardless of the country where you are located. This website and services are directed at commercial businesses and are not for personal or household use. If you are an individual that interacts with one of our clients, you should contact that business directly for more information about their privacy practices. California residents have additional rights as set forth in the section entitled Notice to Residents of California below.

Our processing activities may be more limited in some jurisdictions due to the restrictions of their laws. For example, the laws of a particular country may limit the types of personal information we can collect or the manner in which we process that personal information. In those instances, we may adjust our internal policies and/or practices to adapt to the requirements of local law.

We take reasonable measures to ensure that any personal information collected is relevant for the purposes for which it is to be used. We do not process personal information in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by the individual. To the extent necessary for those purposes, steps to ensure that personal information is reliable for its intended use, accurate, complete, and current.

This privacy notice supplements our other notices and is not intended to override them. Please read this privacy notice carefully to understand our policies and practices for processing and storing your personal data.

2. Who We Are

Our website is provided by RapidScale, a company whose office is at 301 Hillsborough Street, Suite 1300, Raleigh, North Carolina 27603 (“RapidScale”, “we”, “our or us).

3. Our Contact Details

RapidScale will answer questions regarding the collection, storage and use of personal information that we collect from our website. If you have any such question or query, please contact us using the following contact details:

By email: info@rapidscale.net

By mail: RapidScale

301 Hillsborough Street, Suite 1300

Raleigh, NC 27603

4. What is Meant By “personal data” or “personal information”?

Personal data (also called personal information) is information which we could reasonably use to identify you directly or indirectly for example your name, address, financial information, internet protocol (IP) address, username or another identifier.

Some personal data is unique to you and therefore requires greater protection. This data is referred to as sensitive or special category data which includes information regarding your health, religious or philosophical beliefs, race, or ethnicity to provide a few examples.

Some jurisdictions may consider additional categories of personal data to be sensitive data, including financial information or precise geolocation.

5. Data We May Collect About You

We collect use, store and transfer different types of data from and about the visitors to our website, candidates for vacancies we advertise via our website, vendor contacts and customers. The data we collect from and about you will depend on our relationship with you, and will include:

Personal data that we could reasonably use to directly or indirectly identify you, such as:

  • Identity data: this may include your name, username or other similar identifier and any other identity data that you may include in your communication with us.
  • Employment and commercial data: this may include your company names and job titles.
  • Candidate data: includes information you have provided us in connection with your application for employment.
  • Contact data: this may include addresses, phone numbers, facsimile numbers, and email addresses.
  • Transaction data: this may include details about our transactions with you including, service orders, fulfilment of your orders, maintenance requests and billing details.
  • Preferences: this may include details about your product and service preferences.
  • Communication and requests data: this may include your reasons for contacting us, your communication records and copies of your correspondence (including email addresses), if you contact us; and your responses to surveys that we might ask you to complete for research purposes.
  • Location data: we may collect your location data from your IP address and through your contact forms and communications with us within which you provide us those details.
  • Marketing and communications data: this may include your preferences in receiving marketing, from us and our third parties and your newsletter subscription preference.

Technical information such as:

  • Technical data: we may collect your IP address, your login data, browser, version and language, time zone setting and location, internet service provider, browser plugin types and versions, operating system and platform, and other technology on the devices you use to access our website.
  • Usage data: this may include information about how you use our website, access dates and times, webpages viewed, search information, and other similar statistics.

Non-personal data that does not directly or indirectly reveal your identity or directly relate to an identified individual, such as:

  • Demographic information, statistics, or aggregated information: statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific website feature.
  • Non-personal details about your website interactions: we may collect information including the full Uniform Resource Locators (URLs), clickstream information to, through, and from our website (including date and time), products viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from the page.

If we combine or connect non-personal, demographic, or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

6. Sensitive Information

RapidScale does not intentionally collect personal information that reveals race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, views, or activities, that concerns health or sex life, information about social security benefits, or information on criminal or administrative proceedings and sanctions other than in the context of pending proceedings.

Some jurisdictions may consider additional categories of personal data to be sensitive data, including financial information or precise geolocation. We will only process that and any other sensitive personal information in the relevant jurisdiction if and to the extent permitted or required by applicable law.

7. How We Collect Data About You

We use different methods to collect data from and about you including through:

  • Direct interactions. You may give us information about yourself by filling in forms or by corresponding with us by phone, email or otherwise. This includes information you provide when you create an account, subscribe to our service, search for a product or service, place an order, enter a promotion or survey, call our customer service number, and when you report a problem with our website. We also collect personal information directly from you via interactive tools and forms located on our website.
  • Automated technologies or interactions – We also collect standard information from you using automated tools. These automated tools collect information such as your browser type and language, Internet service provider, Internet protocol (IP) address, access dates and times, web pages viewed, search information, and other similar statistics. The automated tools used by RapidScale to collect this information include, without limitation, web beacons, cookies, embedded web links and other commonly used information-gathering tools.
  • Third parties or publicly available sources. We may receive information about you from third parties including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, data brokers, or aggregators.

8. Why How we Process and Use Your Information

We need your personal information to conduct our business and provide you with our website and services, to communicate with you [to deliver advertising and marketing to you] and / or to conduct other business operations, such as using data to improve and personalise your experience.

Examples of how we may use the personal data we collect include to:

  • Present and personalize our website and provide you with the information, products, services, and support that you request from us.
  • Meet our obligations and enforce our rights arising from any contracts with you, including for processing payments, billing or collections, or comply with legal requirements.
  • Fulfil the purposes for which you provided the data or that were described when it was collected.
  • Notify you about changes to our website, products, or services.
  • Ensure that we present our website content in the most effective manner for you and for your computer.
  • Diagnose problems with a customer’s hosting environment and provide access to secure areas of this website.
  • Administer our website and conduct internal operations, including for troubleshooting, data analysis, testing, research, statistical, and survey purposes.
  • Improve our website, products or services, marketing, or customer relationships and experiences.
  • Enable your participation in our website’s interactive features, social media, or other similar platforms.
  • Protect our website, employees, or operations.
  • Detect fraud or criminal activity.
  • Configure marketing and outreach programs, measuring or understanding the effectiveness of the advertising we serve to you and others, and to deliver relevant advertising to you.
  • Track the number of times advertisements and emails are viewed, correspond with potential new customers (subject to their consent), and update services on a periodic basis
  • Make suggestions and recommendations to you and other users of our website about goods or services that may interest you or them.

We may use non-personal data for any business purpose.

We only process personal information if and to the extent permitted or required by applicable law in the relevant jurisdiction, including in accordance with a lawful basis and/or an individual’s consent as required by law.

Most commonly we will use your personal information in the following circumstances:

  • Where you have consented before the processing.
  • Where we need to perform a contract, we are about to enter or have entered with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.

For more information in specific jurisdictions see the following sections below withing this notice:

9. Withdrawing Consent

If we rely on your consent to process your personal information, which may be express or implied consent according to the applicable law, you have the right to withdraw consent at any time. You can withdraw your consent by contacting us at info@rapidscale.net.

Please note that this will not affect the lawfulness of the processing before the withdrawal, nor when applicable law allows, will it affect the processing of your personal information on the basis of any other lawful ground other than consent.

10. Disclosure of Your Personal Data

Insofar as reasonably necessary for us in delivering our products and services to you and for the purposes set out in this privacy notice, we may share your personal information with the below parties that help us manage our business and deliver our products, or services:

  • Any member of our corporate group, which means our subsidiaries, our ultimate holding company and its subsidiaries, and our affiliates.
  • Business partners, suppliers, service providers, sub-contractors, and other third parties we use to support our business (such as analytics and search engine providers that assist us with website improvement and optimization). We contractually require these third parties to keep that personal data confidential and use it only for the contracted purposes.
  • Third parties to market their products or services to you if you have consented to/not opted out of these disclosures. We contractually require these third parties to keep that personal data confidential and use it only for the contracted purposes. For more information, see Your Personal Data Use Choices.
  • Advertisers and advertising networks that require the data to select and serve relevant ads to you and others.
  • Credit reference agencies when required to assess your credit score before entering into a contract with you.
  • To fulfil the purpose for which you provide it.
  • For any other purposes that we disclose when you provide the data.
  • With your consent.

We only allow those organisations to handle your personal information if we are satisfied, they take reasonable measures to protect your information. We also impose contractual obligations on them to ensure they can only use your personal data to provide services to us and to you.

We or the third parties mentioned above occasionally also share personal data with:

  • our and their external auditors, e.g., in relation to the audit of our or their accounts, in which case the recipient of the information will be bound by confidentiality obligations;
  • our and their professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations;
  • law enforcement agencies, courts, tribunals, and regulatory bodies to comply with our legal and regulatory obligations; and
  • other parties that have or may acquire control or ownership of our business (and our or their professional advisers) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised, but this may not always be possible. The recipient of any of your personal data will be bound by confidentiality obligations.

The specific kind of information we share will depend on your activities with us and will be shared only to the extent required or permitted by law, and/or with your consent.

Please note however that this privacy notice does not apply to sharing of personal information by third party providers who may collect personal information from you and may share it with us. In these situations, we strongly advise you to review the applicable the third-party provider’s privacy notice before submitting your personal information.

11. Transferring Your Information Overseas

We do business globally and may centralize certain aspects of our information processing activities and data storage in different countries. We may therefore have to share and transfer your personal information from one country to another, or even across multiple jurisdictions. Your personal information may therefore be subject to privacy laws that are different from those in the country where the personal information is collected or those in your country of residence.

We will ensure your personal information has an appropriate level of protection and will undertake appropriate due diligence and risk assessments prior to transferring the information. We will ensure the transfer of your personal information in line with applicable data protection law. Often, this protection is set out under a contract with the organisation that receives your personal information. You can find more details of the protection given to your information when it is transferred overseas by contacting us using the details set out in the Our contact details section of this privacy notice.

12. What Happens if You Don’t Provide your Personal Information?

You may always choose what personal information (if any) you wish to provide to us. Please note, however, our ability to provide you with some of our products and services may be affected if you choose not to provide certain details, for example, we cannot reply to you without a name or contact details.

13. Keeping Your Personal Information Safe

The security of your personal data is very important to us. We use physical, electronic, and administrative measures designed to protect your personal data from loss, misuse, and unauthorized access, use, alteration, or disclosure. These measures include employee training, periodic reviews, assessment, and implementation of new (or applicable) technologies and purging of data, encryption, firewalls, and restrictions on access. In addition, all personal data is located in data center facilities with enhanced security features. All data is safeguarded to established security standards.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website. In particular, e-mails sent to us may not be secure, and you should, therefore, take special care in deciding what information you send to us via e-mail.

Any transmission of personal data is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the website.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

14. External Links

The website may include links to third-party websites, plug-ins, services, social networks, or applications. Among other things, these links may lead you to white papers, reference articles, agency, or authority websites, press releases, customer websites, and the websites of our preferred vendors. RapidScale does not transmit any visitor information to these sites.

Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not control these third-party websites, and we encourage you to read the privacy notice of every website you visit.

15. Children

Our website is not intended for children. No one under age 16 may provide any personal information to or on the website. We do not direct our website to minors, and we do not knowingly collect personal data from children under 16 or as defined by local legal requirements. If we learn we have mistakenly or unintentionally collected or received personal data from a child without appropriate consent, we will delete it. If you believe we mistakenly or unintentionally collected any information from or about a child, please contact us at info@rapidscale.net.

16. Your Personal Data Use Choices

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:

  • Promotional Offers from RapidScale. If you do not want us to use your email address/contact information to promote our own products and services, or third parties’ products or services, you can opt-out by checking the relevant box located on the form where we collect your data, or at any other time by logging into the website and checking or unchecking the relevant boxes to adjust your account profile’s user preferences, or by sending us an email with your request to info@rapidscale.net.

You may also opt-out out of further marketing communications by following the opt-out links on that message. This opts out does not apply to information provided to us as a result of a product purchase, warranty registration, product service experience, or other transactions.

  • Third-Party Advertising. If you do not want us to share your personal data with unaffiliated or non-agent third parties for promotional purposes, you can opt-in/opt-out by checking the relevant box by clicking on the “Do Not Sell or Share My Personal Information” link in the footer of our website.
  • Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. You may click on the “Do Not Sell or Share My Personal Information” button in the footer of our website to use the management platform to disable non-essential cookies.
  • Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt-out by checking the relevant box located on the form where we collect your data. You can also always adjust your user advertising preferences in your account profile by checking or unchecking the relevant boxes, or by sending us an email stating your request to info@rapidscale.net.

17. Cookies and Other Tracking Technologies

Each time you interact with our website, we may, depending on the consent provided and your jurisdiction, automatically collect personal information, including technical data about your device, your browsing actions and patterns, content and usage data. We collect this data using Cookies (small files placed on your device), server logs and other similar technologies like pixels, tags and other identifiers in order to remember your preferences, to understand how our website is used, and to customise our marketing offerings.

These technologies also allow us to improve our website by enabling us to:

  • Estimate our audience size and usage patterns.
  • Store your preferences so we may customize our website according to your individual interests.
  • Speed up your searches.
  • Recognize you when you return to our website.

We provide you with a way to manage your cookie preferences based on categories of cookies through our management tool that is available by clicking on the “Do Not Sell or Share My Personal Information” link in the footer of our website.

18. FURTHER INFORMATION FOR EEA AND UK RESIDENTS

We are subject to the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR) in relation to goods and services we offer to individuals and our wider operations in the UK and European Economic Area (EEA). This privacy notice relates to personal data where Company is the controller of the personal data subject to UK and EEA data protection. l

18.1 EU Representative

If you wish to exercise your rights under the EU GDPR, you or your authorized agent may submit an Individual Rights Request. We have appointed GRCI Law to act as our EU representative. You may contact our representative at eurep@grcsolutions.io or mail your request to Head of Data Privacy Manager Service, GRCI Law Limited, IT Governance Europe, Third Floor, The Boyne Tower, Bull Ring, Lagavooren, Drogheda, Co. Louth, A92 F682.

Please ensure you include our company name in any correspondence you send to our representative.

18.2 UK Representative

If you wish to exercise your rights under the UK GDPR, you or your authorized agent may submit an Individual Rights Request. We have appointed GRCI Law Limited to act as our UK Representative. You may contact our representative at ukrep@grcsolutions.io or mail your request to UK Representative, Unit 3, Clive Court, Bartholomew’s Walk, Cambridgeshire Business Park, Ely, Cambridgeshire, CB7 4EA, UK.

Please ensure you include our company name in any correspondence you send to our representative.

18.3 RapidScale As A Data Processor

RapidScale acts only as a Data Processor with respect to personal information that is collected, stored or used by its customers. Our sole function is to provide the limited technical support needed to run our customers’ systems on our servers for the benefit of those customers.

18.4 Details about our processing of your personal information

The table below describes the ways we plan to use your personal data, and which lawful basis we rely on to do so. We have also identified what our legitimate interests are where appropriate.

LAWFUL BASIS

PURPOSE EXAMPLES

Contract

We use your personal information on the basis that it is necessary for us evaluate applications and candidates for a vacant role prior to entering into an employment contract for that role with the most suitable candidate.

Recruitment of candidates (contractors, employees and providers)

We may use the personal information we collect about you to assess your skills, qualifications, and suitability for the role for which you applied.

We may use the following personal data:

  • Identity data
  • Contact data
  • Employment and commercial data
  • Location data
  • Candidate Data

Legitimate interest

When we rely on this, we will carry out a Legitimate Interests Assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under data protection law.

Our legitimate business interests do not automatically override your interests – we will not use your personal data for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise required or permitted to by law.

Managing our business

We process personal data for our own legitimate business interest. This relates to us managing our business to enable us to maintain and monitor the performance of our website and to constantly look to improve the website and the services it offers to our users, including when we respond to your queries and complaints, where you are not a client or supplier, or a potential client or supplier.

We may use the following personal data:

  • Identity data
  • Contact data
  • Technical data
  • Marketing and communications data

Provide and maintain our Services

To provide and maintain our Services, including to monitor the usage of these, troubleshooting, data analysis, network security and system testing necessary for our legitimate interests in maintaining the useability, security and integrity of our website

We may use the following personal data:

  • Identity data
  • Location data
  • Transaction data
  • Technical data

Recommendations and marketing

To make recommendations to you about services that may interest you. We may use the following personal data:

  • Identity data
  • Contact data
  • Preferences
  • Technical Data
  • Marketing and communications data
  • Usage data

To measure and analyse the effectiveness of the advertising we serve you. We may use the following personal data:

  • Identity data
  • Contact data
  • Location data
  • Technical Data
  • Marketing and communications data
  • Usage data

To make suggestions and recommendations to you about goods or services that may be of interest to you and necessary for our legitimate interests (to develop our products/services and grow our business). We may use the following personal data:

  • Identity data
  • Contact data
  • Preferences
  • Location data
  • Technical data
  • Marketing and communications data
  • Usage data

Rights and claims

To enforce or apply our terms of use, our terms and conditions, or other contracts. To exercise our rights, to defend ourselves from claims and to keep to laws and regulations that apply to us and the third parties we work with. We may use the following personal data:

  • Identity data
  • Contact data
  • Transaction data
  • Technical data
  • Usage data

Data subject rights

Verifying your identity when you exercise your data subject rights. Fulfilling data subject rights requests. We may use the following personal data:

  • Identity data
  • Employment and commercial data
  • Contact data
  • Location data
  • Communication and requests data
  • Transaction data
  • Marketing and communications data
  • Technical data
  • Usage Data
  • Candidate data

As necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud, and in the context of a business reorganisation or group restructuring exercise we may use the following categories of personal data:

  • Identity data
  • Employment and commercial data
  • Contact data
  • Location data
  • Communication and requests data
  • Transaction data
  • Marketing and communications data
  • Technical data
  • Usage Data
  • Candidate data

Legal obligations

We may use your personal data to comply with laws (for example, if we are required to co-operate with a police investigation after a court order orders us to).

Legal requirement

The processing is necessary for compliance with legal obligations, such as but not limited security requirements.

To comply with applicable law, for example in response to a request from a court or regulatory body, where such request is made in accordance with the law

Criminal activity

To detect fraudulent or criminal activity, we may share information with forces such as the police.

Consent

We may have to get your consent to use your personal data, such about you or when we want to send you marketing.

Wherever consent is the only reason for using your personal data, you have the right to change your mind and/or withdraw your consent at any time by clicking the Unsubscribe button at the bottom of an applicable email or by contacting us.

Marketing

To measure and analyse the effectiveness of the advertising we serve you.

We may collect IP addresses and store Cookies on visitors’ devices.

We may use the following personal data, depending on what you consent to:

  • Identity data
  • Contact data
  • Location data
  • Preferences
  • Technical Data
  • Marketing and communications data
  • Usage data
  • Candidate Data

Data analytics

We use data analytics to improve our website, products/services, marketing, customer relationships and experiences. We may use the following personal data:

  • Identity data
  • Transaction data
  • Technical Data
  • Usage data

18.5 Details About Sharing Your Personal Data

Details of the third parties with whom we may share your personal information will be provided upon request by emailing us at info@rapidscale.net.

18.6 Details About Transfers of Personal Information Overseas

As a global business, RapidScale may centralize or store certain personal information in countries outside of where it was originally collected, including jurisdictions that may not offer the same level of data protection as your home country. This may involve transferring your personal information across borders, including to or from the United States and other countries where we or our service providers operate. Where we transfer your information internationally, we do so in compliance with applicable data protection laws, including the EU GDPR, UK GDPR, and other relevant laws. We ensure that an adequate level of protection is in place, such as by using approved Standard Contractual Clauses (SCCs), intra-group agreements, or other legally recognized safeguards. Prior to any transfer, we conduct appropriate due diligence and risk assessments to ensure your information remains protected. For more details about the safeguards, we use when transferring personal data internationally, you can contact us at info@rapidscale.net.

18.7 Your Rights

Please see more details about your rights in the table below. In most circumstances, you do not need to pay any charge for exercising your rights. We have one month to respond to you.

YOUR RIGHT

DETAILS

Right to be informed:

We have a legal obligation to provide you with concise, transparent, intelligible, and easily accessible information about your personal information and our use of it. We have written this privacy notice to do just that, but if you have any questions or require more specific information.

Right of access:

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information. When you request this data, this is known as making a data subject access request (DSAR). In most cases, this will be free of charge; however, in some limited circumstances, for example repeated requests for further copies, we may apply an administration fee.

Right to rectification:

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Right to erasure:

You have the right to ask us to erase your personal information in certain circumstances. We have the right to refuse to comply with a request for erasure if we are processing the Personal Data for one of the following reasons:

· To exercise the right of freedom of expression and information.

· To comply with a legal obligation.

· To perform a task in the public interest or exercise official authority.

· For archiving purposes in the public interest, scientific research, historical research or statistical purposes.

· For the exercise or defense of legal claims.

Right to restriction of processing:

You may ask us to stop processing your Personal Data. We will still hold the data but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:

  • The accuracy of the personal data is contested.
  • Processing of the personal data is unlawful.
  • We no longer need the personal data for processing, but the personal data is required for part of a legal process.
  • The right to object has been exercised and processing is restricted pending a decision on the status of the processing.

Right to object to processing:

You have the right to object to processing in certain circumstances. You can also object if the processing is for a task carried out in the public interest, the exercise of official authority vested in you, or your legitimate interests (or those of a third party).

Right to data portability:

This right only applies if we are processing information based on your consent or for the performance of a contract and the processing is automated.

18.8 Complaints

We hope that we can resolve any query or concern you raise about our use of your information. Please contact us at info@rapidscale.net first and title your email “Complaint”. All complaints will be treated in a confidential manner, and we will try our best to deal with your concerns.

You have the right to lodge a complaint with a supervisory authority in the UK or relevant EEA member state where you work or normally live, or where any alleged infringement of data protection law occurred. The details of European supervisory authorities can be found here: Our Members | European Data Protection Board (europa.eu). The supervisory authority in the UK is the ICO, which may be contacted at https://ico.org.uk/concerns or by telephone on 0303 123 1113. The details of the supervisory authority in Switzerland can be found here:Startseite (admin.ch).

18.9 DPO

We have appointed GRCI Law Limited as our DPO, and they can be contacted at: dpoaas@grcsolutions.io.

19 FURTHER INFORMATION FOR CALIFORNIAN RESIDENTS

19.1 Rights of California Residents

We may collect the personal information categories listed in the table below. The table also lists, for each category, our use purposes, and whether we share the information with third parties for cross-context behavioral advertising.

Personal Information Category

Purpose

Shared for Cross-Context Behavioral Advertising

Identifiers, such as identity data and contact data such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.

Recruitment of candidates, managing our business, providing and maintaining our services, recommendations, enforcing our rights, responding to data subject rights, complying with law, marketing, and data analytics.

Shared

California Customer Records personal information, which includes a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

Some personal information included in this category may overlap with other categories.

Recruitment of candidates, managing our business, providing and maintaining our services, enforcing our rights, responding to data subject rights, complying with law, and data analytics.

No

Protected classification characteristics under California or federal law, such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, reproductive health decision-making, military and veteran status, or genetic information (including familial genetic information).

Recruitment of candidates, managing our business, and complying with law.

No

Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Recruitment of candidates, managing our business, providing and maintaining our services, recommendations, enforcing our rights, responding to data subject rights, complying with law, marketing, and data analytics.

Shared

Internet or other similar network activity, such as browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.

Recruitment of candidates, managing our business, providing and maintaining our services, recommendations, enforcing our rights, responding to data subject rights, complying with law, marketing, and data analytics.

Shared

Geolocation data, such as physical location or movements.

Recruitment of candidates, managing our business, providing and maintaining our services, recommendations, enforcing our rights, responding to data subject rights, company with law, marketing, and data analytics.

No

Professional or employment-related information, such as current or past job history or performance evaluations.

Recruitment of candidates, managing our business, enforcing our rights, and complying with law.

No

Except as otherwise permitted or required by applicable law, we will only retain your personal information for as long as necessary to fulfill the purposes it was collected for, as required to satisfy any legal obligations, or as necessary to resolve disputes. To determine the appropriate retention period, we consider applicable legal requirements; the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure of your personal information; the purposes for which we use your personal information; and whether we can achieve those purposes through other means.

We do not collect any “sensitive personal information” at this time. We do not knowingly sell the personal information of consumers under 16 years of age. In order to opt-out of the sale and/or sharing of your Identifiers via our website, please click on the “Do Not Sell or Share My Personal Information” link in the footer of our website to use the management platform to disable non-essential cookies. You may also opt-out of the sale and/or sharing of your personal information via our website by using a browser with a recognized opt-out preference signal enabled. You will need to do this on each browser and each device that you use to access our Services. Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data on our behalf.

You have the right to request that we disclose what personal information we collect, use, sell or share, as well as the right to request that we correct and delete certain personal information that we have collected from you.

How to submit a rights request:

  • If you believe that your personal information has been collected by or shared with us during the course of a business-to-business relationship between us and your current or former company, you or your authorized agent may submit an Individual Rights Request or by calling the toll-free number associated with our service.
  • If you are a client of ours and would like to submit a request to us as your service provider/processor, you may submit a Business Rights Request. The company information provided must match with the information that we have in our account records. This form is only for authorized client representatives, not for individuals.
  • If you are a consumer that has a relationship with one of our clients, you should contact that business directly.

We will require you to verify your identity and residency before we can act on your request. If you have an account with us, you are required to provide the name and email address linked with your account to start the verification process. If you are unable to reasonably verify your identity, we may not be able to fulfil your request. If you are asking for access on behalf of someone else, we will require verification of your identity, as well as proof of authorization by the individual whose personal information you wish to access. There may be information that we will not return in response to your request, such as information that would affect the privacy of others or interfere with legal obligations. Further, your request may be subject to certain limits or exceptions recognized under applicable law. Similarly, there may be reasons why we cannot comply with your request, such as the need to keep your personal information to provide you service or to fulfil a legal obligation. If we do not comply fully with a request, we will explain the reasons in our responses and offer you an opportunity to appeal our decision. We reserve the right to charge a reasonable fee or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome. We will not discriminate against you as a result of your exercise of any of these rights.

Under California’s “Shine the Light” law, website visitors who are California residents may request and obtain a notice once a year about the personal information we share with other businesses for their direct marketing purposes. Such a notice includes a list of the categories of personal information that was shared (if any), and the names and addresses of all third parties with which the personal information was shared (if any). The notice covers the preceding calendar year. To obtain such a notice, please contact us as previously described.

In addition, under this law you are entitled to be advised how our site handles “do not track” browser signals. We do not use technology recognising do-not-track signals from your browser.

20. FURTHER INFORMATION FOR CANADIAN RESIDENTS

We may process your information if you have given us specific permission (express consent) to do use your information for a specific purpose, or in situations where your permission may be inferred (implicit consent), You can request to access your data, correct inaccuracies, withdraw your consent, make a complaint about our privacy practices, request deletion your personal data, or exercise any other privacy rights provided for by applicable law at any time by emailing us at info@rapidscale.net.

In some exceptional instances we may be able to process your information without your consent:

  • If collection is clearly in the consent of the individual and consent cannot be obtained in a timely manner.
  • For investigations in fraud and crime prevention.
  • For business transactions provided certain conditions are met.
  • If disclosure is required to comply with applicable law.
  • If it is reasonable to expect collection with consent would compromise the accuracy and/or availability of the information and the collection is reasonable for the purposes related to investigating a breach of agreement or a contravention of the laws of Canada.
  • If it was produced by an employee in the course of their employment, business or profession and the collection is consistent with the purpose for which the information was produced.
  • If the collection is solely for artistic, journalistic or research purposes.
  • The information is publicly available and specified in the applicable regulations.

We hope that we can resolve any query or concern you raise about our use of your information. Please contact us at info@rapidscale.net first and title your email “Complaint”. However, if you are not satisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

21. Changes to This Privacy Notice

This privacy notice is effective as of the last updated date stated at the top of this privacy notice. We may change this privacy notice from time to time with or without notice to you. Please be aware that, to the extent permitted by applicable law, our use of the information collected is governed by the privacy notice in effect at the time we collect the information.

Please refer back to this privacy notice on a regular basis.