Website and Platform User Privacy Policy
Last Updated and Effective: September 22, 2023
By using our website (www.stackadapt.com or www.stackadapt.com/login) “Website”, you acknowledge and agree to the terms of this Website Privacy Policy. If you do not agree to the terms of this Website Privacy Policy, please do not use our Website. If you do not understand, or if you have questions about this Website Privacy Policy, please contact us before using, or continuing to use, our Website.
Types of Personal Information We Collect
In this Website Privacy Policy, we use the term “personal information” to mean the directly and indirectly identifiable information we collect about you. The terminology of the applicable data protection law in your jurisdiction may use an equivalent term, like personal data, and we use personal information to mean the same thing.
Specific Pieces of Personal Information Collected. When you provide information directly to us via our website by making an inquiry through one of our forms, in one of our booths at an event where we are participating as a vendor, communicate with us in a web conference or telephone call, or reach out to one of our employees or representatives, we may collect one or all of the following directly identifiable pieces of personal information, depending on the manner in which you contacted us:
- Name (first and last)
- Business email
- Phone number
- Company name
- Job title
- Country and/or region
- Contents of your message or communication
- Cookie identifier
- IP address
When we obtain your information from third parties to whom you provided your information, we collect the following pieces of personal information:
- Name (first and last)
- Business email
- Phone number
- Intent data that may be associated with the above contact information
You can visit and browse our Website without providing directly identifiable information to us. When you browse our Website; however, we automatically collect certain indirectly identifiable information that is linked to your computer or device, such as your IP address, pixel tags and cookie identifiers, browser type, and timestamp. We use this information in the normal course of our business to administer our Website, and, in certain instances, to comply with applicable data protection law.
When you access our platform “Platform” as a user, as described and defined in StackAdapt Platform Terms of Use, we collect technical information including your login information (e.g., user identifier and password), and certain indirectly identifiable device and usage information, such as your IP address, location (e.g., state, province, country), cookie identifiers, browser type and version, time zone setting, operating system and platform, or information about your internet connection, the equipment you use to access our Website, and information regarding your interaction with our Platform to help us improve our services (e.g., which content, buttons, and features you interact with; and control inputs, such as mouse click and other related browser information).
To learn more about how we process cookies or how you can opt out, review our Cookie Policy.
Categories of Personal Information Collected. The above-described personal information collected can be categorically described as follows:
- Identifiers (indirectly identifiable or pseudonymous)
- Contact information
- Information related to the management of our business relationship
Legal Basis for Processing. For personal information subject to the General Data Protection Regulation (“GDPR”), we process personal information on the basis of consent provided either directly to us or obtained directly by our third-party source. If you have provided consent to the processing of your personal information, you can withdraw it at any time by following the opt-out instructions referenced herein. When we process your directly identifiable personal information, we do so as a controller.
How We Collect Personal Information
We seek to minimize the amount of directly identifiable personal information we collect from you and we only collect this information from you in the following limited ways:
1. Directly From You. We collect information directly from you when you request more information about our advertising services, Platform, or our company. We may also collect personal information from you if you attend a meeting hosted by StackAdapt. This may occur when you complete a form on our website, visit our booth at a conference or event, reach out to one of our sales representatives, or contact us in a similar manner.
2. Automated Collection. When you visit our website, we automatically collect certain indirectly identifiable information that is linked to your computer or device using pixel tags and first-party cookies.
- Pixel tags are small bits of code that provide a method of delivering information on our webpage. They allow us to collect the IP addresses of the users on our page.
- Cookies are small text files, stored on your browser, that uniquely identify your browser and provide information back to us. Many websites send cookies to browsers that are visiting their sites, and many browsers are initially configured to accept cookies. You can change the browser settings to refuse cookies or to alert you when a cookie has been placed on your browser. You can also view our Cookie Policy for more information.
3. Third Parties. We may collect personal information from other sources, such as the internet, our partners, or third parties with whom you’ve shared your information. This Website Privacy Policy does not cover the practices of third parties.
How We Use Your Personal Information
We primarily use your personal information to provide, maintain, and improve our Website, but we may also use personal information to do any or all of the following:
- Contact you regarding our products and services;
- Provide you with marketing materials and other content or contact you regarding events, offers, and promotions;
- Respond to your requests, communications, suggestions, comments, and inquiries (including your feedback about our Website);
- Tailor or personalize your experience while visiting our Website, for example by enabling you to view and download information from our Website;
- Administer our relationship with you, including creating and managing your Platform user account;
- Analyze the accuracy and effectiveness of our Website;
- Develop new products, features, and services, including those that analyze and understand our customers and their needs;
- Ensure our systems and premises are secure;
- Develop and manage relationships with our business partners;
- Respond to legally binding requests from law enforcement, supervisory or regulatory authorities, or other third parties;
- Defend, protect, or enforce our rights or applicable terms of service or to fulfill our legal or contractual obligations;
- Manage any dispute and accidents, and take legal or other professional advice; or
- For any other purpose with your consent.
How We Share Your Personal Information
We do not sell directly identifiable personal information collected via our Website, as the term sale, sell, or selling is defined in applicable data protection law. In the ordinary course of our business, we may share certain information with third parties to continue to improve our Website and service offerings as follows:
- We may share your directly identifiable personal information with our sub-processors in order to facilitate the uses described in the How We Use Your Personal Information section;
- We may share your contact information with our business and promotional partners to send you information by email, telephone, or other means about products and services you may like. You may opt out of receiving communications at any time by following the instructions in the promotional messaging you receive.
- We may also transfer or assign personal information to third parties as a result of, or in connection with, a sale, merger, consolidation, change in control, transfer of assets, bankruptcy, reorganization, or liquidation.
- If we are involved in defending a legal claim, we may disclose personal information about you that is relevant to the claim to third parties as a result of, or in connection with, the associated legal proceedings.
In the last 12 months, we may have shared certain categories of personal information, as listed and described in the Types of Personal Information We Collect section, with the following categories of third parties for the specified purposes:
- Accountants and auditors: In connection with our business operations, we may provide information related to our clients that includes the company name and address along with the contact name (first and last), if known, to our external auditors and accountants.
- StackAdapt entities: We may share any of our client information, including personal information, with and among the StackAdapt entities for the purpose of offering our programmatic advertising services.
- StackAdapt subprocessors: Our subprocessors may have limited access to client information including IP address, business email, and other usage information for the purpose of supporting our programmatic advertising services and business operations.
Use of Artificial Intelligence “AI” in the Platform. We may use generative AI offered by third-party service providers to integrate with and enhance our service offerings. The providers of the generative AI may receive certain relevant data about you or from your StackAdapt account, depending on the nature and purpose of such integration.
Your Choices
We work with third parties who collect information on our Website, Services, and elsewhere through the use of cookies and similar methods in order to serve you with relevant advertisements on other services or to determine that you have seen advertisements on other services. This method of advertising is sometimes called “Interest-Based Advertising.” To learn more about Interest-Based Advertising, your choices with respect to it, and to opt out of advertising programs that track your activities across multiple websites to deliver personalized advertising content to you, please visit:
- For Canada: Digital Advertising Alliance of Canada Opt-Out Page (StackAdapt is a member of the Digital Advertising Alliance of Canada (DAAC) and we abide by their Self-Regulatory Principles for Online Behavioural Advertising.)
- For Canada and U.S.: NAI Opt-Out Page
- For Canada and U.S.: Ad Choices Opt-Out Page
- For European Residents: Your Online Choices | EDAA
International Transfers of Personal Information
StackAdapt is a global business headquartered in Canada. As such, it is necessary for us to transfer personal information abroad. We also transfer information to a number of companies who provide business application and marketing services to us. These providers are primarily located in the United States, but may also be located in other jurisdictions. Wherever we transfer personal information, we seek to ensure that it receives a materially similar degree of protection as provided in its country of origin.
Data Originating in the European Economic Area “EEA”. Data originating in the EEA is subject to certain protections under the General Data Protection Regulation “GDPR” and individuals in the EEA are afforded additional privacy rights. The European Commission has the power to determine whether a country outside of the European Union “EU” offers an adequate level of data protection. This is referred to as an “adequacy decision”. In certain cases, there may not be an adequacy decision by the European Commission and/or United Kingdom authorities with respect to a country to which we transfer your personal information.
When transferring personal information from the EEA to a country without an adequacy decision, organizations are required to implement valid transfer mechanisms which may include binding corporate rules, approved codes of conduct, derogations for specific situations, and most commonly, the Standard Contractual Clauses (or any equivalent clauses approved by the authorities in the United Kingdom). You can find a copy of the Standard Contractual Clauses as approved by the European Commission Implementing Decision (EU) 2021/914 of 4 June 2021 here.
Protection, Storage, and Retention of Personal Information
Protection of Personal Information. We’ve designed industry standard technical, organizational, and contractual measures to protect against the unauthorized access, disclosure, modification or destruction of the personal information we collect and process. While we are committed to ensuring the security of the information we collect and process, no protection measure can provide a 100% guarantee of security. Consequently, we do not warrant or guarantee the security of any information we collect or process. If you suspect an unauthorized use or security breach of your personal information, please contact us immediately at privacy@stackadapt.com.
Storage of Personal Information. StackAdapt may process and store personal information anywhere our servers are located. For more information about our servers and storage of personal information, please contact us.
Retention of Personal Information. Except as otherwise permitted or required by applicable law, we only retain your information for as long as necessary or relevant for the listed purposes in this Privacy Policy, including, for legal, regulatory, backup, archival, accounting, and/or audit purposes.
Your Regional Privacy Rights
If you have provided your information to us and would like to opt out of inclusion in our marketing or email campaigns, you can remove yourself by clicking “unsubscribe” at the bottom of an email we send you, or by contacting us using one of the methods listed below.
Depending on the country you are in, you may have rights in relation to the personal information we collect and process about you. If you make a privacy rights request to us, we will ask you a few questions to verify it is really you making the request. This may include asking for your contact information and your location of residence. We may also collect information related to your browser to verify your identity in connection with a request. We will respond to your request, subject to any applicable exceptions, within 30 days. If we need an extension, we will give you the reasons why.
To exercise your rights, contact us at privacy@stackadapt.com or fill out this web form. Below are a few things to know before you make your request.
- Only you, or a person who can legally represent you, may make these requests. If you use an authorized agent, you must provide the authorized agent written permission to do so, and we may require that you verify your identity directly with us. You may also make a request on behalf of your minor child.
- The request must be in writing and include your contact information and describe your request with sufficient detail that allows us to properly understand and respond to it. In addition, you should provide sufficient information that allows us to reasonably verify that you are the person about whom we collected the personal information or an authorized representative.
- We do not charge a fee to process or respond to individual rights requests unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Your privacy rights will vary depending on the country, province, state, or region in which you reside.
Residents of California, Colorado, Virginia, Connecticut, Utah, and Iowa have specific rights with respect to the personal information we collect and process.
Access Request. You can request a copy of the personal information we may hold about you. Where required, we may ask you to verify your identity. If we are unable to verify your identity, we will not be able to provide you with access to the requested personal information.
Correction Request. You can request that we correct any incomplete or inaccurate personal information we hold about you. Because the data in our Platform is pseudonymous and not directly identifiable, we may not have the technical ability to correct your personal information. In that case, we will delete the incomplete or inaccurate personal information instead.
Right to Request Deletion. You have the right to request that we delete the personal information that we collected from you and retained, subject to certain exceptions. For example, we may deny your deletion request if retaining your information is necessary for us to be able to recover payment, detect security incidents, or protect against illegal activity.
Right to Data Portability. You have the right to receive personal information that you have provided directly to us, for example, through opening an account, in a commonly-used and machine-readable format. You have this right so that you may transmit your information to another organization without hindrance.
Exercising Your Rights. To exercise these rights, please email us your request at privacy@stackadapt.com or fill out this web form.
Right to Appeal. To appeal a decision we have made about a request you submitted, contact appeals@stackadapt.com using the subject “Appeal.” This will lodge a complaint with our Data Protection Officer who will review your case. Depending on where you reside, you may also have the right to contact the applicable data protection authority, attorney general, or similarly situated regulatory body.
Right to Non-discrimination. You will not receive discriminatory treatment by StackAdapt for the exercise of any of the above rights.
Authorized Agents. Some states allow you to use an authorized agent to make requests on your behalf. If you use an authorized agent to exercise a right on your behalf, you must provide the authorized agent written permission to do so, and we may deny the request if the authorized agent does not submit sufficient proof that they have been authorized by you to act on your behalf.
California Privacy Rights
If you reside in California, under the California Consumer Privacy Act “CCPA” you have rights in addition to the above regarding your personal information.
Right to Know. You have the right to request that we disclose the personal information we have collected, used, disclosed, sold and/or shared about you over the past 12 months. To obtain this information, you can complete an access request. If we are able to verify your identity, we will provide the following:
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information has been collected.
- Our business or commercial purpose for collecting, selling, or sharing that personal information.
- The categories of third parties with whom or to whom we have shared or sold that personal information.
- The specific pieces of personal information we have collected about you.
Right to Non-discrimination. You have the right not to receive discriminatory treatment by StackAdapt for the exercise of your privacy rights under CCPA.
Exercising Your Rights. To exercise these rights, please fill out this web form, contact us toll free at (650) 999-3764 ext. 101, or email us at privacy@stackadapt.com. Depending on the rights you’ve requested, we may take steps to verify your identity. Most likely, we will be able to complete your request within 45 days; however, if we require an extension, we will inform you of the length and the reasons why.
Under the General Data Protection Regulations “GDPR”, if you reside in the European Union “EU” or in the EEA, you have the following specific individual rights.
Right to Access. You can request access to the personal information we may hold about you. Before we provide you with access, we will ask you a few questions to verify it is really you making the request. In giving you access, we will tell you our purposes for processing the information; the categories of personal information we process; the types of organisations we’ve shared your information with, in particular if they are located internationally; where possible, how long we plan to store your personal information; and if the personal information wasn’t collected from you, the source of the information.
Right to Rectification. You can request that we correct any inaccurate personal information we hold about you.
Right to Erasure. You have the right to request that we erase the personal information that we have collected about you and retained.
Right to Restriction of Processing. If your data is inaccurate, or your data is being processed unlawfully, such as without your consent because you had opted out, or where we no longer need your personal data for the purposes of the processing you have the right to request that we restrict the processing of that data.
Right to Data Portability. The right to data portability means you have the right to receive personal information that you have provided directly to us, for example, through opening an account, in a commonly used and machine-readable format. You have this right, so that you may transmit your information to another organization without hindrance.
Right to Object to the Processing of Your Data. You have the right to object at any time of the processing of your personal data for direct marketing purposes and profiling.
Automated Processing Rights. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
Exercising Your Rights. To exercise these rights, please fill out this web form, contact us toll free at 1-844-467-8225 (1-844-GO-STACK), or email us at privacy@stackadapt.com. Depending on the rights you’ve requested, we may take steps to verify your identity. Most likely, we will be able to complete your request within 30 days; however, if we require an extension, we will inform you of the length and the reasons why.
Right to Lodge a Complaint with a Privacy or Data Protection Authority. You can also lodge a complaint with the privacy or data protection authority in the country where you live, work or where an alleged infringement of the applicable data protection law took place. Useful links:
- A list of EU data protection authorities and their contact details.
- Information on how to contact the Irish Data Protection Commission.
- Information on how to contact the UK Information Commissioner’s Office.
Contact Us
If you have any questions about our Website Privacy Policy, here’s how you can get in touch:
Email: privacy@stackadapt.com
Mail:
StackAdapt Inc.
6D – 7398 Yonge St, Unit # 2161
Thornhill, ON L4J 8J2, Canada
Or fill out our Consumer Rights Web Form.
