Effective Date: December 3, 2018
ChatThreads Corp. DBA Purchased (“Purchased,” “us,” “we,” or “our”) is committed to protecting the privacy of users (“user,” “you” or “your”) of (a) its websites, including Purchased.com, Shopalongapp.com, WhyNotBuy.com, and their affiliated sub-domains (collectively, the “Site”); (b) mobile applications, including the Shopalong mobile application (collectively, “Mobile Apps”); (c) surveys or other research opportunities offered on the Site or Mobile Apps, or hosted on a third-party website for one of our clients (“Surveys”); (d) sweepstakes or other incentive programs administered by Purchased (“Incentives”); and (e) any other products or services offered under the Purchased and/or Shopalong brands (collectively, and inclusive of all capitalized terms in this list, the “Services”).
WHAT PERSONAL INFORMATION DOES PURCHASED COLLECT?
Information You Actively Submit
In order to engage with us beyond simply surfing the Site or a Mobile App (for example, by registering, filling out a Survey, inquiring about our Services, or contacting us), you may be required to provide information which may personally identify you, such as your name, email address, mailing address, and/or mobile phone number (“Personal Information”). In each case, you know what Personal Information we collect, because you will actively submit the information.
Location Information, IP Addresses, Invitation URLs
If you visit the Site or interact with our Services on your mobile device, and your device is configured to allow it, we may also collect geolocation data. Otherwise, we only collect location data from individuals who explicitly agree to share it with us. Your location data will not be sent to us beyond the Survey participation period. We will not share your location data on an individually identifiable basis. You have the ability to stop location sharing by opting out of the Survey. When you fill out a Survey on the Site, or on a third-party website, we may also collect internet protocol (“IP”) addresses and/or the Uniform Resource Locator ("URL") on which you were invited to complete a Survey in order to help assess fraudulent Surveys, and to administer and operate the Surveys.
Only users who are direct participants in marketing programs with Purchased or our business partners are required to complete a registration form in order to complete our Surveys. During this registration process we will ask for Personal Information, as well as demographic information, such as age, sex, income level, and educational and racial/ethnic background (“Demographic Information”).
Online Reporting Tool
Additionally, in connection with our online reporting tool at ort.purchased.com, we collect data on client users (not general consumers or participants in research studies), including how often they access different pages and how often they log in. We also provide this data to our clients so they can see how they use the reporting dashboards.
Automatic Collection via Cookies
No Requirement to Submit Personal Information
You may choose not to provide us with any Personal Information; however, if you do so you may not be able to access and use all of the Services. The results that we send to our clients and/or provide to research participants do not include Personal Information.
HOW DOES PURCHASED USE YOUR PERSONAL INFORMATION?
We may use Personal Information held about you for a number of purposes, included but not necessarily limited to the following: (a) to ensure that content is presented in the most effective manner; (b) to provide you with information, products or services that you request from us or which we feel may interest you; (c) to provide you with email newsletters, if you have requested them; (d) to allow you to participate in interactive features of our Services; (e) to notify you about changes to our Services; (f) to administer and operate Incentives; (g) to screen for and prevent undesirable or abusive activity; and (h) to help our clients better understand how to communicate with and/or serve you.
If we contact you, we generally do so for one of the following purposes: (a) to invite you to participate in Surveys; (b) to confirm the details of Surveys you have agreed to take part in; (c) to conduct Surveys with you; (d) to validate answers/views you gave in a recent Survey (if you have consented to us doing so); (e) to answer any inquiries you have sent us or our client about the Survey; (f) to update and to ensure that our records of your Personal Information are correct; and (g) to ask you about how we can improve your experience with us.
We may use Demographic Information provided by registered users to analyze similarities, differences or trends among registered users, and we may share such information with third parties. Personal Information may be shared with our business partners but only after permission to do so has been obtained from the registered user.
Legally Required Uses
WHAT STEPS DOES PURCHASED TAKE TO PROTECT PRIVACY?
We take reasonable steps to safeguard Personal Information we collect from unauthorized access or disclosure, or accidental loss, alteration or destruction. Personal Information is encrypted during transmission using secure socket layer technology (“SSL”), and is also encrypted while at rest. Unfortunately, no data transmission or electronic storage is guaranteed to be 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.
SHARING OF PERSONAL INFORMATION WITH THIRD PARTIES
Awarding of prizes from Incentives may result in your contact details being passed onto a third party (e.g., Amazon or PayPal) in order for the prize to be sent out to you electronically.
Except as otherwise stated herein, we will not rent, sell, or otherwise release your Personal Information to third parties without your explicit permission.
Through the use of cookie technology or otherwise, we also gather and store certain information automatically. This information includes IP addresses, browser types, Internet service providers, operating systems, and access dates/times (collectively “Traffic Data”). Except for IP addresses, Traffic Data is anonymous information that does not personally identify you, but Traffic Data may be linked to Personal Information that you provide through other means. We use this Traffic Data to design and arrange our web pages in the most user-friendly manner, to continually improve our Services, and to validate other information the user provides about the conversation. We may also use Traffic Data to analyze trends, administer the Services, track user’s movement, and gather Demographic Information for aggregate use. Traffic Data and Demographic Information may be shared with third parties.
Cookies may also be placed on your computer as a result of our use of Google Analytics. Google collects and stores Traffic Data and also information about how you got to the Site. Read more about Google Analytics here.
DOES PURCHASED USE WEB BEACONS OR GIF FILES?
We may access and set cookies using web beacons (or similar technologies) also known as single-pixel GIFs which are invisible graphical images. Our Site may contain web beacons that allow us to count users who have visited the Site and to deliver services. We may include web beacons in e-mail messages, newsletters or the like, in order to determine whether they have been opened and/or acted upon. Some of these web beacons, including persistent cookies, may be placed on your computer by our service providers to help determine the effectiveness of our research or e-mail communications. This allows the service provider to recognize your computer each time you visit certain pages or e-mails and compile anonymous information in relation to those page views, which in turn enables us and our service providers to learn which e-mail communications bring you to our Services and how you use our Site.
DOES PURCHASED TRACK ONLINE ACTIVITIES?
We may collect information about online activities on our Mobile Apps. If you conduct a search by entering a search term using our mobile apps then we may capture the search term(s) you entered and the first link you tapped, if any. Your search data will not be sent to us beyond the Survey participation period. We will not share your search data on an individually identifiable basis. You have the ability to not have this search data tracked by opting out of the Survey.
DO NOT TRACK SIGNALS
Some browsers have a “do not track” feature that lets you tell websites you do not want to have your online activities tracked. Because these features are not yet uniform, we do not presently respond to “do not track” signals.
HOW LONG DOES PURCHASED RETAIN INFORMATION?
If you fill out a Survey on a third-party website, we will retain Personal Information you submit through that Survey for three (3) years, so that the client can follow up with you about your Survey responses and also to detect for fraudulent Surveys. We also retain information in anonymized form indefinitely for benchmarking purposes (i.e., so that we can compare Survey results against aggregate data), and in pseudonymized form for the purpose of associating an initial survey with a follow-up survey. If you register as a Shopalong user, we keep your registration information, including Personal Information, for as long as your account is active. We do this to administer Incentives, to facilitate your repeated participation in Surveys, and for fraud detection services. If you wish to cancel your account or request that we no longer use your information, contact us using the “Contact Information” below. Notwithstanding the foregoing, we reserve the right to retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
HOW DO USERS UPDATE THEIR INFORMATION?
If you wish to delete, correct, or update information previously provided to us, you may do so by logging into your account and changing the information, or by contacting us at the information in the “Contact Information” section below. We commit to responding to your request for access to modify or delete your information without undue delay, and in any event within thirty (30) days.
We are concerned about the safety and privacy of children, and are committed to protecting their online privacy. In accordance with the Children’s Online Privacy Protection Act, we will not knowingly collect any personally identifiable information from or provide any services to children under the age of 13. In addition, minors are not eligible to participate in any of our Incentives.
Our Site offers publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your Personal Information from our blog or community forum, contact us at the “Contact Information” below. In some cases, we may not be able to remove your Personal Information, in which cases we will let you know why we are unable to do so.
SOCIAL MEDIA AND WIDGETS
Our Site includes certain social media features, such as the Facebook Like button, as well as widgets, such as “share” buttons or other interactive mini-programs that run on our Site. These features may collect your IP address, or which page you are visiting on our Site, and may set a cookie to enable the feature to function properly. Your interactions with these features and widgets are governed by the respective privacy policies of the companies providing them.
This Services may contain links to third-party web sites. The linked sites are not under our control, and we are not responsible for the contents or use of any linked site. We provide these links as a convenience only, and a link does not imply endorsement or sponsorship of, or association or affiliation with, the linked site. If you decide to access linked third-party web sites, you do so at your own risk.
Purchased is registered under the EU-U.S. Privacy Shield Framework (“Privacy Shield”), and accordingly is committed to the EU-U.S. Privacy Shield Principles and is under the enforcement authority of the Federal Trade Commission. For a list of all companies participating in Privacy Shield, see here: https://www.privacyshield.gov/list.
Purchased shall remain liable under the EU-U.S. Privacy Shield Principle of Accountability for Onward Transfer if its sub-processors process your Personal Information in a manner inconsistent with the Privacy Shield Principles, unless we prove we are not responsible for the event giving rise to the damage.
If you are visiting this website from a country other than the country in which our servers are located, your communications with us will result in the transfer of information across international boundaries. By visiting this website and communicating electronically with us, you consent to such cross-border transfers. In the case of data transfers from the European Economic Area the EU-U.S. Privacy Shield Framework applies.
Your Information may be transferred to and maintained on servers located outside of your country where the privacy/data protection laws may not provide the same protection level as those in your jurisdiction. If you are located outside the United States and choose to provide Information to us, we might transfer Personal Information to the United States and process it there. To ensure the safety of this transfer and the compliance with the applicable European data law, we utilize EU Model Contracts, the EU-U.S. Privacy Shield (if applicable) and express consents (Data Transfer Agreements) in relation to Personal Information originating the European Union or the United States.
Individuals in the EU
Purchased has further committed to refer unresolved privacy complaints under the EU-U.S. Privacy Shield Principles to the Insights Association Privacy Shield Program, a non-profit alternative dispute resolution provider located in the United States and operated by the Insights Association. These dispute resolution services are provided at no cost to you.
If your complaint is not resolved after following the recourse mechanisms described above, you may have the ability to invoke binding arbitration. Additional information is available here.
Please note that, in addition, you also have the right to lodge a complaint with the supervisory authority in the relevant EU Member State.
Individuals Outside the EU
Attn: Privacy Department
1330 Beacon Street, Suite 209
Brookline, MA 02446 USA
CLASS ACTION WAIVER
NOTICE TO RESIDENTS OF CALIFORNIA AND CANADA
If you are a California resident, you have the right to request and receive information about the Personal Information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of Personal Information that was shared and the names and addresses of all third parties with which we shared the Personal Information.
If you are a Canadian resident, please note that any Personal Information you provide to us may be transferred to our offices in the U.S. You agree that by providing us with your Personal Information, your Personal Information may be subject to U.S. laws, regulations and/or court orders and may be disclosed to third parties or U.S. authorities in complying with U.S. laws, regulations and/or court orders.