Privacy Policy

Last Updated Feb 5, 2025
Data - All Your Data

DEFINITIONS

Below are key definitions referenced in our Privacy Policy. Terms include plural versions as applicable.

  • Privacy Policy,” “Policy”: Refers to this Privacy Policy.
  • Cypress North,” “we,” “us,” or “our”: Refers to Cypress North Corp and its affiliates.
  • Services”: Refers to our products and services. This may include, but is not limited to our websites, social media pages, marketing and promotional materials, and business relationships.
  • First-Party”: Refers to Cypress North and its affiliates.
  • Third-Party”: Refers to third-party vendors, service providers, services, contractors, or agents who perform services for us, with us, or on our behalf.
  • Process, Processing”: Refers to accessing, collecting, storing, using and/or sharing information.

1 WHAT INFORMATION WE PROCESS

We process information through various channels based on how you interact with our Services. Below, we outline the types of information that may be processed during your use of our Services.

 

1.1 PERSONAL INFORMATION YOU PROVIDE TO US

We process personal information that you voluntarily provide to us. The type of information we process depends on the nature of your interactions with our Services. This information may include, but is not limited to:

  • Name
  • Phone number
  • Email address
  • Mailing address
  • Job information
  • Contact preferences
  • Cookie and targeting preferences
  • Contact or authentication information
  • Billing address
  • Payment information

Please ensure all personal information you provide to us is true and complete. Additionally, we ask that you notify us of any changes to such personal information.

 

1.2 SENSITIVE INFORMATION

When necessary for the security of our Services, with your explicit consent, or as permitted by applicable law, we may process the following categories of information that may be classified as sensitive personal information by certain data privacy laws:

  • Precise geolocation information
  • Specific contents of mail, email, or text

 

1.3 INFORMATION WE AUTOMATICALLY PROCESS

We may automatically process certain information when you interact with our Services. This information does not contain personal information and can not be used to directly identify you. We use this information to understand how our Services are used and improve the functionality of our Services. This information may include, but is not limited to:

  • Date and time you used our Services
  • Movement and activity within our Services
  • Web pages visited before and after using our Services
  • Browser, device, and operating system characteristics
  • Language preferences
  • Imprecise geolocation

Additionally, our servers and security software may automatically process certain information when you interact with our services. We use this information to maintain the security and operation of our Services. This information may include, but is not limited to:

  • IP address
  • Browser, device, and operating system characteristics

 

1.4 GOOGLE’S API SERVICES

We comply with Google’s API Services User Data Policy, including the Limited Use Requirements, regarding any information received from Google’s APIs.

 

1.5 INFORMATION PROCESSED FROM OTHER SOURCES

We may process your information from other sources such as public databases, joint marketing partners, business partners, affiliate programs, data providers, social media platforms, and other third parties to enhance our ability to provide relevant marketing, offers, services, and update our records. This information may include, but is not limited to:

  • Name
  • Phone number
  • Email address
  • Mailing address
  • Job information

 

1.6 INFORMATION PROCESSED FROM MINORS

We do not knowingly process, solicit, or market data to individuals under 18 years of age, nor do we sell such information.

By using our Services, you confirm that you are at least 18 years old. If we discover that we have processed personal information from users under 18, we will promptly take reasonable steps to delete it from our records.

If you become aware of any information we have collected from children under 18, please contact us at [email protected].

2 WHY DO WE PROCESS YOUR INFORMATION

We may process your information for a variety of purposes, depending on how you interact with our Services. This may include, but is not limited to:

  • Maintaining the functionality of our Services;
  • Protecting our Services from fraud or other malicious actions;
  • Delivering our Services;
  • Delivering administrative information;
  • Delivering marketing and promotional materials;
  • Delivering targeted advertisements;
  • Determining the effectiveness of our marketing activities;
  • Identifying usage trends to understand how our Services are functioning and being utilized;
  • Identifying preferences regarding communication or tracking technologies;
  • Enabling communication if you choose to engage with any of our Services that allow for communication;
  • Responding to inquiries or other requests;
  • Managing business relationships;
  • Complying with applicable laws, regulations, and lawful requests;
  • Protecting an individual's vital interests;
  • Supporting any other purpose we disclose to you at the time we collect your information.

 

2.1 SENSITIVE INFORMATION

We may process information that may be classified as sensitive personal information by certain data privacy laws. This information will only be processed when necessary for the security of our Services, with your explicit consent, or as permitted by applicable law.

3 WHAT TECHNOLOGIES DO WE USE TO PROCESS YOUR INFORMATION?

We, and/or certain Third Parties acting on our behalf, process information through various First-Party and Third-Party tracking technologies. These technologies may include, but are not limited to:

  • Cookies
  • Session replay
  • Web beacons
  • Advertising pixels
  • Analytics technologies

 

3.1 FIRST-PARTY TRACKING TECHNOLOGIES

We utilize First-Party tracking technologies to understand how our Services are functioning and being utilized, allowing us to further optimize the user experience, identify aggregated usage trends, maintain the stability of our Services, and provide customized exploratory recommendations.

 

3.1.1 ANONYMETRICS

We utilize our custom First-Party performance measurement technology (“Anonymetrics”) to understand how our Services are functioning and being utilized, allowing us to further optimize the user experience, identify aggregated usage trends, and maintain the stability of our Services.

 

3.1.1.1 WHAT INFORMATION ANONYMETRICS PROCESSES

Anonymetrics processes limited, fully anonymous, and aggregated data available from browsers via an HTTP POST request. This information may include, but is not limited to:

  • Date
  • URL
  • Page
  • Referrer
  • Limited device and browser information
  • Time on page
  • Scroll depth

 

3.1.1.2 ANONYMETRICS PRIVACY COMPLIANCE

Anonymetrics provides performance insights without processing any data that could identify individuals. From the start, all data remains fully anonymous—no unique identifiers, no tracking, no profiling. Since this data is purely anonymous and cannot be used to identify any individual, directly or indirectly, it does not fall under the scope of privacy regulations that govern personal information. As such, you are not able to opt out of this First-Party technology.

If you do not agree with our policies and practices, please do not use our Services.

  • No Personal Information: Anonymetrics does not process any personally identifiable information (PII) and cannot be used—on its own or in combination with other information—to identify any individual.
  • No Identifiable Information, Even Indirectly: Anonymetrics does not process any information that could identify a unique user, either directly or indirectly.
  • No Persistent Identifiers: Anonymetrics does not process cookies, fingerprints, user IDs, session IDs, IP addresses, or any other unique markers.
  • No Profiling or Behavioral Targeting: The information Anonymetrics processes cannot be used to build user profiles or track individuals across sessions, devices, or websites. It is strictly aggregated and used for high-level performance measurement.
  • No Retargeting or Audience Segmentation: The information Anonymetrics processes cannot be used to target individuals or groups of users for advertising, personalization, or any other purpose.
  • No Third-Party Selling or Sharing: The information Anonymetrics processes is never sold or shared with Third Parties.
  • Anonymous by Design: The information Anonymetrics processes is inherently anonymous at the point of collection and never requires de-identification—it was never identifiable to begin with.
  • Not Subject to Data Subject Rights: Since no personal information is processed in any way, requirements for access, correction, deletion, or opt-out under privacy laws are not able to be applied.
  • No Consent Required: Because Anonymetrics processes only anonymous, aggregated data and does not identify or distinguish individual users in any way, it is not subject to consent requirements under privacy laws. As such, you are not able to opt out of this First-Party technology.
  • In Accordance with Our Privacy Policy: The information Anonymetrics processes is strictly used in accordance with our Privacy Policy. It is only used for high-level performance measurement and optimization of our Services, ensuring a better experience and maintaining stability.

 

3.1.2 SMART SUGGEST AI

We utilize our custom First-Party machine-learning technology Smart Suggest AI (“Smart Suggest”). Smart Suggest leverages AI predictive analytics and machine learning to enhance your experience by providing customized exploratory recommendations tailored to your interactions with our Services.

 

3.1.2.1 SMART SUGGEST PRIVACY COMPLIANCE

Smart Suggest does not collect any personally identifiable information (PII) and processes data in strict accordance with our Privacy Policy.

  • No PII Collected: Smart Suggest processes non-personally identifiable information (non-PII) related to your interactions with our Services to generate recommendations. No personally identifiable information is involved in the process.
  • Data Usage: The information processed by Smart Suggest is only processed for the purpose of providing personalized recommendations to improve your experience within our Services. It is used solely within the scope defined in our Privacy Policy.
  • No Third-Party Selling or Sharing: The information processed by Smart Suggest is never sold or shared with Third Parties.
  • Opt-Out: If you prefer not to receive personalized recommendations, you have the option to opt out of Smart Suggest at any time through our integrated OneTrust consent management solution. Please note that opting out may result in a less personalized experience with our Services. For details on opting out of Smart Suggest, please refer to Section 7 of our Privacy Policy.

 

3.2 THIRD-PARTY TRACKING TECHNOLOGIES

We utilize various Third-Party tracking technologies for different purposes based on how you interact with our Services. These platforms help us measure performance, deliver targeted advertising, and manage customer relationships. The categories of Third-Party tracking technologies we use include:

  • Strictly Necessary: We utilize certain Third-Party tracking technologies that are strictly necessary for the delivery, functionality, and security of our Services. These technologies may collect personally identifiable information (PII) based on your interactions with our services.
  • Analytics: We utilize certain Third-Party tracking technologies to track and analyze how you interact with our Services to improve the user experience and understand usage trends.
  • Marketing: We utilize certain Third-Party tracking technologies to measure the performance of our targeted ads to improve our advertising efforts and understand usage trends.

As our Services evolve, we may employ additional Third-Party tracking technologies. However, you will always have the option to opt out of non-strictly necessary Third-Party tracking technologies. These technologies will always be used for one of the three purposes outlined above (analytics, marketing, or necessary). Should we introduce any new tracking technologies outside the scope of these purposes, we will update this Privacy Policy accordingly.

 

3.2.1 SELLING AND SHARING YOUR INFORMATION

Certain laws may classify the use of Third-Party tracking technologies by our Services as a “sale” or “sharing” of information. The types of Third Parties with whom we may share information include:

  • Ad networks
  • Cloud computing services
  • Data analytics services
  • Data storage service providers
  • Data extraction services
  • Testing tools
  • Sales & marketing tools
  • Retargeting tools
  • Social networks
  • Payment processors
  • Communication & collaboration tools

You can opt out of Third-Party tracking technologies that are not essential for the security and core functionality of our Services. For details on how to opt out of Third-Party tracking technologies used by our Services, please refer to Section 7 of our Privacy Policy.

 

3.2.1.1 SELLING AND SHARING YOUR INFORMATION WITH GOOGLE ANALYTICS

One of the Third Parties we may share your information with is Google Analytics, which helps us track and analyze the use of our Services. The Google Analytics Advertising Features we may use include:

  • Remarketing with Google Analytics
  • Google Display Network Impressions Reporting
  • Google Analytics Demographics and Interests Reporting

For information on opting out of Google Analytics and other tracking technologies used by our Services, please see Section 7 of our Privacy Policy.

For alternate means to opt out of being tracked by Google Analytics, visit Google Analytics Opt-out. You can also opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt-out options include Network Advertising Initiative Opt-out and NAI Mobile Opt-out.

For more information on Google’s privacy practices, please visit the Google Privacy & Terms page.

 

3.3 OPTING OUT OF TRACKING TECHNOLOGIES

You may directly opt out of the following categories of tracking technologies via our integrated OneTrust consent management platform:

  • Analytics: Smart Suggest AI and Third-Party analytics technologies.
  • Marketing: Third-Party marketing and targeting technologies.

Please note that opting out of these tracking technologies may result in a less personalized experience within our Services.

Additionally, under certain privacy laws, you may have the right to request to exercise your privacy rights regarding your personally identifiable information (PII). For more details on how to opt out of select tracking technologies and submit Data Subject Access Requests to exercise your privacy rights, please see Section 7 of our Privacy Policy.

4 WHO DO WE SHARE YOUR INFORMATION WITH?

We may share your information with Third Parties for various reasons. This may include:

  • Service Providers: We may share your information with Third Parties who perform services for us or on our behalf and require access to such information to do that work. These Third Parties are only authorized to use your information as necessary to fulfill the scope of their agreement with us. Third-Party service providers may include, but are not limited to:
    • Website hosting service providers;
    • Security services;
    • Customer relationship management services;
    • Analytics services;
    • Testing tools;
    • AI platforms;
    • Advertising networks;
    • Retargeting platforms;
    • Social media platforms and plugins;
    • Cloud computing services;
    • Data storage services;
    • Communication and collaboration tools;
    • Financial and accounting tools;
    • Payment processors.
  • Business Transfers: We may share or transfer your information in connection with or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Legal Obligations: We may share your information when it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
  • Consent: We may share your information with your consent for a specified purpose. You can withdraw your consent at any time.

 

4.1 SELLING YOUR INFORMATION

Certain laws may classify the use of Third-Party tracking technologies by our Services as a “sale” of information. You may opt-out of Third-Party tracking technologies that are deemed to be a “sale” of information under applicable data privacy laws. 

For more information on opting out of tracking technologies and exercising your privacy rights, please refer to Section 7 of our Privacy Policy

5 HOW LONG DO WE RETAIN YOUR INFORMATION?

We retain your information for as long as needed to fulfill our obligations as described in Section 2 of our Privacy Policy unless a longer retention period is required or allowed by law. When we no longer have a legitimate business interest for processing your information, we will either delete or anonymize it. If deletion or anonymization is not feasible, we will securely store the information and isolate it from further processing until deletion becomes possible.

6 HOW DO WE SECURE YOUR INFORMATION?

We have implemented appropriate technical and organizational security measures to protect the information we process. However, despite these safeguards, no electronic transmission or data storage system is completely secure, and we cannot guarantee that unauthorized parties will not be able to breach our security to access, steal, or modify your information.

The transmission of information to and from our Services is at your own risk. We recommend accessing the Services only within a secure environment.

7 WHAT ARE YOUR PRIVACY CHOICES?

We offer all users the ability to exercise the following privacy choices:

  • Opting Out of Third-Party Analytics Cookies and Tracking Technologies: We give all users the ability to opt out of all Third-Party analytics cookies and tracking technologies that are not strictly necessary for the functionality or security of our Services. For more detailed information on these technologies, please refer to Section 3 of our Privacy Policy. To opt out of this category, please utilize our OneTrust consent management platform by clicking the cookie icon in the bottom left corner of your screen. From here, choose to deactivate Analytics” technologies.
  • Opting Out of First-Party AI Cookies and Technologies: We give all users the ability to opt out of Smart Suggest AI, our custom First-Party machine-learning technology. For more detailed information on this technology, please refer to Section 3 of our Privacy Policy. To opt out of this category, please utilize our OneTrust consent management platform by clicking the cookie icon in the bottom left corner of your screen. From here, choose to deactivate Analytics” technologies.
  • Opting Out of Third-Party Advertising Cookies and Tracking Technologies: We give all users the ability to opt out of all Third-Party advertising cookies and tracking technologies that are not strictly necessary for the functionality or security of our Services. For more detailed information on these technologies, please refer to Section 3 of our Privacy Policy. To opt out of this category, please utilize our OneTrust consent management platform by clicking the cookie icon in the bottom left corner of your screen. From here, choose to deactivate “Marketing” technologies.
  • Opting Out of Marketing or Promotional Communications: We give all users the ability to opt out of all marketing and promotional communications. You may click on the “unsubscribe” link in a marketing or promotional email to opt out of these communications.
  • Submitting Data Subject Access Requests (DSAR): We give all users the ability to submit Data Subject Access Requests to understand or erase what personally identifiable information (PII) we have collected about them. We will consider and act upon any request in accordance with applicable data protection laws. Upon receiving your request, we may need to verify your identity to determine you are the same person with whom we have the information in our system. We will only use the information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide written and signed permission from you to submit such request on your behalf. To exercise your privacy rights, please submit a request via our Data Subject Access Request form. For questions or alternative means of exercising your rights, please contact us directly at [email protected].

Please understand that opting out of these technologies may result in a degraded experience within our Services.

For questions or concerns about your privacy choices, or assistance with exercising your rights, please contact [email protected].

 

7.1 GLOBAL PRIVACY CONTROL / DO NOT TRACK

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) or Global Privacy Control (“GPC”) feature or setting you can activate to signal your privacy preference to not have data about your online browsing activities monitored and collected. At this time, we can not guarantee that the tracking technologies used by our Services will respect a global DNT or GPC signal.

Please use our integrated consent management platform (OneTrust) or our Data Subject Access Request form to exercise your privacy rights. For questions or concerns about your privacy choices, or assistance with exercising your rights, please contact [email protected].

8 WHAT ARE YOUR PRIVACY RIGHTS?

You may have certain rights under applicable data protection laws.

 

8.1 UNITED STATES OF AMERICA

This section applies to you if you are a permanent resident of a State within the United States of America that grants you legal protections over your personal information via an applicable data privacy law.

 

8.1.1 CALIFORNIA

This section applies to you if you are a permanent resident of California.

The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), collectively known as the CCPA, grants you certain rights over your information, as defined in the CCPA. You may have the right to:

  • Request access and obtain a copy of your information;
  • Request rectification or erasure of your information;
  • Restrict the sharing and sale of your personal information;
  • Limit the use and disclosure of your sensitive personal information;
  • Disclose Third Parties that have received your information for direct marketing purposes;
  • Nondiscrimination if you choose to exercise any of your rights.

You may make requests two times within a twelve-month period. If you use an authorized agent to submit a request on your behalf, we may require written proof of permission, identity verification from you, and/or proof of power of attorney. We may deny any request from an authorized agent that does not submit proper verification.

Additionally, we may offer incentives for providing us with your information. To the extent these incentives constitute a financial incentive, the categories of information required may include:

  • Full name;
  • Contact information (email address or phone number);
  • Other information you voluntarily provide.

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.1.2 VIRGINIA

This section applies to you if you are a permanent resident of Virginia.

The Virginia Consumer Data Protection Act (VCDPA) grants you certain rights over your information, as defined in the VCDPA. You may have the right to:

  • Request access and obtain a copy of your information;
  • Request rectification or erasure of your information;
  • Restrict and/or opt out of the processing of your information for targeted advertising, the processing of your information for profiling, or the sale of your information;
  • Nondiscrimination if you choose to exercise any of your rights.
  • Appeal our denial of any request you make. We will inform you of our decision in writing within 60 days of your appeal. You may contact the Virginia Office of the Attorney General if we deny your appeal.

You may make one request within a twelve-month period. 

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.1.3 COLORADO

This section applies to you if you are a permanent resident of Colorado.

The Colorado Privacy Act (CPA) grants you certain rights over your information, as defined in the CPA. You may have the right to:

  • Request access and obtain a copy of your information;
  • Request rectification or erasure of your information;
  • Restrict and/or opt out of the processing of your information for targeted advertising, the processing of your information for profiling, or the sale of your information;
  • Nondiscrimination if you choose to exercise any of your rights.
  • Appeal our denial of any request you make. We will inform you of our decision in writing within 45 days of your appeal. You may contact the Colorado Office of the Attorney General if we deny your appeal.

Additionally, we may offer incentives for providing us with your information. You have the right to withdraw consent from the incentive at any time, including any potential financial incentives–but please note this could disqualify you from receiving the incentive.

Please note that any time we process sensitive data, we do so with your consent.

You may make one request within a twelve-month period. If you use an authorized agent to submit a request on your behalf, we may require written proof of permission, identity verification from you, and/or proof of power of attorney. We may deny any request from an authorized agent that does not submit proper verification.

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.1.4 CONNECTICUT

This section applies to you if you are a permanent resident of Connecticut.

The Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA) grants you certain rights over your information, as defined in the CTDPA. You may have the right to:

  • Request access and obtain a copy of your information;
  • Request rectification or erasure of your information;
  • Restrict and/or opt out of the processing of your information for targeted advertising, the processing of your information for profiling, or the sale of your information;
  • Nondiscrimination if you choose to exercise any of your rights.
  • Appeal our denial of any request you make. We will inform you of our decision in writing within 60 days of your appeal. You may contact the Connecticut Office of the Attorney General if we deny your appeal.

You may make one request within a twelve-month period. If you use an authorized agent to submit a request on your behalf, we may require written proof of permission, identity verification from you, and/or proof of power of attorney. We may deny any request from an authorized agent that does not submit proper verification.

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.1.5 UTAH

This section applies to you if you are a permanent resident of Utah.

The Utah Consumer Privacy Act (UCPA) grants you certain rights over your information, as defined in the UCPA. You may have the right to:

  • Request access and obtain a copy of your information;
  • Request rectification or erasure of your information;
  • Restrict and/or opt out of the processing of your information for targeted advertising, the processing of your information for profiling, or the sale of your information;
  • Nondiscrimination if you choose to exercise any of your rights.

You may make one request within a twelve-month period.

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.1.6 TEXAS

This section applies to you if you are a permanent resident of Texas.

The Texas Data Privacy and Security Act (TDPSA) grants you certain rights over your information, as defined in the TDPSA. You may have the right to:

  • Request access and obtain a copy of your information;
  • Request rectification or erasure of your information;
  • Restrict and/or opt out of the processing of your information for targeted advertising, the processing of your information for profiling, or the sale of your information;
  • Nondiscrimination if you choose to exercise any of your rights.
  • Appeal our denial of any request you make. We will inform you of our decision in writing within 60 days of your appeal. You may contact the Texas Office of the Attorney General if we deny your appeal.

Please note that any time we process sensitive data, we do so with your consent.

You may make two requests within a twelve-month period. If you use an authorized agent to submit a request on your behalf, we may require written proof of permission, identity verification from you, and/or proof of power of attorney. We may deny any request from an authorized agent that does not submit proper verification.

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.2 EUROPEAN UNION (EU), EUROPEAN ECONOMIC AREA (EEA), UNITED KINGDOM (UK), SWITZERLAND, AND CANADA

This section applies to you if you are a permanent resident of the EU, EEA, UK, Switzerland, or Canada. 

 

8.2.1 DATA SUBJECT ACCESS REQUEST (DSAR)

In relation to your personal data, as defined by GDPR or other applicable legislation, you may have the right to:

  • Request access and obtain a copy of your personal data;
  • Request rectification or erasure of your personal data;
  • Restrict the processing of your personal data;
  • Object to the processing of your personal data;
  • Not be subject to automatic decision-making.

For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.2.2 WITHDRAWING CONSENT

If we are relying on your consent to process your personal data, as defined by GDPR or other applicable legislation, which may be express and/or implied consent depending on the applicable legislation, you have the right to withdraw consent at any time. Please note that withdrawing your consent will not affect the lawfulness of the processing before its withdrawal nor when applicable law allows will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.

For more information on withdrawing consent for various tracking technologies and marketing or promotional communications, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.2.3 INTERNATIONAL INFORMATION TRANSFERS

We, and/or certain third parties acting on our behalf, store Personal Data on servers located in the United States. If you access our Services from outside the United States, please note that your information may be transferred to, stored in, and processed in the United States or other regions.

 

8.2.4 DATA RETENTION

We retain your Personal Data only for as long as necessary to fulfill the purposes laid out in our Privacy Policy. This may depend on:

  • If your Personal Data is necessary to provide our Services;
  • If we require your Personal Data to comply with our legal obligations;
  • If we require your Personal Data for a legitimate business interest.

You may request the deletion of your Personal Data at any time, subject to any legal obligations.

 

8.2.5 LEGAL BASIS

We process your Personal Data only to fulfill the purposes laid out in our Privacy Policy. This may include:

  • Processing your Personal Data on the basis of our legitimate business interests;
  • Processing your Personal Data when required for the performance of a contract;
  • Processing your Personal Data on the basis of freely given consent;
  • Processing your Personal Data to comply with our legal obligations.

You may request the deletion of your Personal Data at any time, subject to any legal obligations. 

 

8.2.6 UNLAWFUL PROCESSING

If you are located in the EEA or UK and believe we are unlawfully processing your personal data, as defined by GDPR or other applicable legislation, you have the right to complain to your Member State data protection authority or UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

 

8.3 AUSTRALIA

This section applies to you if you are a permanent resident of Australia.

We process your personal information under the obligations and conditions set by Australia’s Privacy Act 1988 (Privacy Act). This Privacy Policy satisfies the notice requirements as defined in the Privacy Act, in particular:

  • What personal information we collect from you;
  • From which sources do we collect personal information from you;
  • For which purposes do we collect personal information from you;
  • What other recipients receive your personal information.

If you do not wish to provide personal information necessary to fulfill its applicable purpose, it may affect our ability to provide our Services. Particularly offering you the Services you requested or responding to communications and other requests.

 

8.3.1 DATA SUBJECT ACCESS REQUEST (DSAR)

At any time, you have the right to request access to or correction of your personal information. For more information on exercising your privacy rights, please refer to Section 7 of our Privacy Policy or contact us directly at [email protected].

 

8.3.2 UNLAWFUL PROCESSING

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner.

9 PRIVACY POLICY UPDATES

We may update this Privacy Policy from time to time. The updated version will be indicated by the date at the top of this Privacy Policy, labeled “Last Updated”. 

If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

For any questions or concerns, please contact [email protected] or submit a request via our Data Subject Access Request form.

10 CONTACT INFORMATION

Please contact us through one of the following means for any questions or concerns about the Privacy Policy, or if you require assistance with exercising your rights. 

Email: [email protected]

DSAR Form: Data Subject Access Request form

 

Cypress North Corp

211 Hertel Ave

Buffalo, NY 14207