LAST UPDATED: MAY 8, 2018
2. Information Collection
General Use. We collect, process, and retain information from you and any devices (including mobile devices) you may use when you: register for an account with us; update or add information to your account; post content to or participate in discussions or dispute resolution; engage or communicate with us, other users or third parties in connection with the Services; upload content or complete transactions using the Services; or otherwise access, use or download any part or whole of the Services. Such information includes without limitation:
- identifying information such as your name, address, telephone number and email address;
- geographic or location information, which data may be precise or imprecise;
- content of your communications via the Services;
- financial information in connection with the Services;
- information relating to the performance of the Services you experience;
- screenshots and other images that you upload or provide access to in connection with the Services
- information you provide via web form, community discussion, chats and dispute resolution.
Automatic Collection. By using the Services, we may automatically collect information about how you use the Services, the areas of the Services that you visit, as well as information about your computer or mobile device, such as your Internet protocol (IP) address, device ID, physical location, browser and operating system type, resolution of your screen, language settings in your browser, referring URLs, and other technical information. This information is necessary for providing personalized and location-based content and services, as well as for analyzing web traffic, troubleshooting problems, preventing fraud, and improving the Services.
Third Party Data. We may obtain data from third parties. We protect data obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the data and applicable laws. These third-party data sources vary over time, but may include without limitation: data brokers from which we purchase demographic data to supplement the data we collect; social networks when you grant permission to us to access your data on one or more networks, service providers that help us determine a location based on your IP address in order to customize certain products to your location, and partners with which we offer co-branded services or engage in joint marketing activities.
Feedback. Any suggestions or comments for improving or modifying the Services that are included in your communications with us (“Feedback”) will be deemed to be non-confidential and non-proprietary to you, and you agree that: (a) Diffy is therefore not subject to any confidentiality obligations with respect to the Feedback; (b) the Feedback is not confidential or proprietary information of any third party and you have all of the necessary rights to disclose the Feedback to us; (c) Diffy may irrevocably freely use, reproduce, publicize the Feedback; and (d) you are not, nor is any other party, entitled to receive any compensation or reimbursement of any kind from us in relation to the Feedback
3. Information Use
You hereby consent to our using any of the information we collect on you (the “Information”), which includes without limitation your Personal Information:
to deliver our Services to you;
to improve our Services in order to better serve you;
to provide you with a personalized experience when using our Services;
to provide targeted advertising to you;
to appropriately respond to your communications and provide you with customer service;
to contact you about feature updates and informational and service-related communications;
for internal statistical, marketing or operational purposes, including without limitation generating sales reports and measuring and understanding demographic, user interest, purchasing and other trends among our customers; and
for legitimate business purposes that do not materially impact your rights, freedom or interests.
4. Information Disclosure
Stripe. We may disclose your Personal Information to Stripe, Inc. (“Stripe”) and its corporate family (or any other Payment Processor determined by us in our sole discretion from time to time) for any purpose relating to its services provided to Diffy in connection with the Services, including without limitation: to process transaction payments, to prevent, detect, mitigate, and investigate potentially illegal acts, fraud and/or security breach, and to assess and manage risk, including to alert you if fraudulent activities have been detected on your Diffy or Stripe accounts; to provide customer services, including to help service your account or resolve disputes (e.g., billing or transactional disputes); and to facilitate shipping and related services for purchases you made using Stripe.
International Transfer and Storage. Your Information may cross international borders in order to facilitate the Services. In some cases, your Personal Information may be disclosed, processed, and stored outside Canada, and therefore may be available to government authorities under lawful orders and laws applicable there.
5. Information Security
We protect your Personal Information using technical and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. Some of the safeguards we use are firewalls and data encryption, and information access authorization controls. If you believe your account has been abused, please contact us. Diffy follows generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security.
6. Third Party Policies
We cannot guarantee the privacy or security of your Personal Information once you provide it to a third party and we encourage you to evaluate the privacy and security policies of each such third-party before any such engagement or disclosure.
The Services may contain links to third party websites or applications that are not owned, maintained or operated by Diffy. Any such links are provided solely as a convenience to you and not as an endorsement by Diffy. Diffy is not responsible for the content of such linked third-party websites or applications and does not make any representations, warranties or guarantees regarding the content or the privacy practices of such third parties. For certainty, Diffy disclaims any liability associated with your access to, use of, download of, or reliance on, such third-party websites or applications and their content. If you decide to access, use or download any such third-party website, application or content, you do so at your sole risk.
If you do not wish to accept cookies, you have the option of blocking or disabling cookies. Your computer provides you with the ability to clear all cookies that have been stored onto your hard drive, should you wish to do so. However, please be aware that you may be unable to access certain parts of the Services if you block or disable our cookies.
8. Marketing & Advertising
The Services are not intended for, nor does Diffy knowingly collect information from, children under the age of fourteen (14). If we learn that we have collected Personal Information from a child under fourteen (14), we will take steps to delete the information as soon as possible. If you are aware of a user under the age of fourteen (14) using the Services, please contact us immediately.
10. Withdrawal of Consent & Changes to Personal Information
Diffy takes reasonable steps to help ensure that the Personal Information we collect from you is accurate, complete and current. You may request access to your Personal Information and request that erroneous or inaccurate Personal Information be updated.
11. Data Retention
Diffy retains Personal Information for as long as necessary to provide the Services and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly.
After it is no longer necessary for us to retain your Personal Information, we dispose of it in a secure manner according to our data retention and deletion policies. We are not responsible for any liability or loss you experience as a result of our disposal of Personal Information.
12. 1. General Data Protection Regulation
Diffy acknowledges that the European Union’s General Data Protection Regulation (the “GDPR”) may apply to how Diffy handles information collected from users located in the European Union. Therefore, in circumstances where the GDPR does apply, Diffy shall comply with requests made pursuant to the GDPR, including requests by users to have their Personal Information held by Diffy deleted.
13. Contact Us
If you have any questions about Diffy’s privacy and data management policies, contact our Privacy Officer at firstname.lastname@example.org.