If this Policy changes in the future, we will post an updated version on our website at https://kiiah.com (the “Website”). We recommend that you check this Website periodically in order to review our current Policy. You can tell if this Policy has changed by checking the effective date that appears at the bottom of this Policy. Depending on the circumstances, we may also decide to send you a notice in other ways in our discretion, such as via email or other contact information you have provided that the Policy was changed. If you continue to use our Products after the Policy changed or notice of the change has been given, you will be deemed to have accepted such changes.
- Information We Collect
When you use our Products, we collect the following types of information:
- Account information: When you use our Products as a registered user, you need to create an account with us. In order to create a registered user account, you will need to provide us with login credentials (which include your email address and password), your name, and your date of birth and you may provide us with other information we request such as, a profile picture, wedding date, and baby due date.
When you use our Products as a donor, you may provide us with your name, email address and country.
- General usage data: When you use our Products we may collect technical properties of hardware and software utilized in conjunction with our Products. For example, we may collect the type and model of hardware and/or web browser you are using, referring or exit web pages, and the operating system version you are using. When you use our Products we may also collect information about your location (as described below under the heading “Location”), how long you use our Products for in each session, features you use in our Products, and the actions you take while using our Products (such as gifting to a registry or receiving gifts or abandoning a cart). If you have a registry on our Products, we may collect information about whether that registry is complete or is missing information (i.e. whether each item in the registry has a description and a picture), whether a third party payment processor is connected to it, and whether the registry is shared and, if it is the channels it is shared to (such as Facebook, Twitter, LinkedIn, SMS, instant messaging, and email).
- Purchase and Gift Information: While gifts made through our Products are processed through a third party, we may collect information to administer, manage, and fulfill the gifts you make. For example, we may collect your name, email address, account information, the amount of the gift, what the gift was attributed to in the registered users registry, the date and time of the gift, whether the gift was processed, the method of payment for the gift, the donors gifting history, and if the donor provides additional gifts.
- Location: When you use our Products on your computer, mobile device, or other device, the Internet Protocol address (IP address) information may be communicated to us. If we collect and subsequently store such information, it will be in a form that does not personally identify you.
- Quality assurance and customer service: Your customer service telephone calls and emails with us and our service providers, if any, may be recorded, logged, and/or monitored for quality assurance and customer service purposes such as to assist in addressing your inquiries, troubleshooting, training and analytics to identify trends and make improvements to our Products and customer service. As part of the recording and logging of the calls and emails, we will collect information like the identity of the caller or sender of email sender, the date and time of the call or email, and the subject and resolution of the issue.
Some of this information would not by itself identify you to us or be personally identifiable and is therefore considered non-personal information. If we combine any such non-personal information with other personal information available to us, the combined information will be treated as personal information in accordance with this Policy.
- Our Use of Information We Collect
We use the personal information we collect about you:
- to understand and meet your needs and preferences, and/or to provide you with our Products, for example:
- for purposes related to the billing, activation, provision, maintenance, support, troubleshooting, resolving of disputes, deactivation, upgrade, or update of Products;
- to process your transaction, send you emails to confirm your transaction status, and allow you to pay for Products you order;
- to ensure Products are technically functioning as intended and to help identify and troubleshoot issues;
- to fulfill or enforce any agreements or notices we provide and are associated with a particular Product (“Notices”);
- to manage or respond to your inquiries;
- to develop new and enhance existing Products including to communicate with you about them using various means, for example to make available or send to you upgrades or updates, or notices of upgrades or updates of Products;
- to manage and develop our business and operations, for example;
- to detect, monitor, investigate, mitigate or attempt to prevent fraud and technical or security issues or to protect our property;
- to allow for business continuity and disaster recovery operations;
- to enforce our legal rights;
- for statistical purposes;
- to meet legal and regulatory requirements and to respond to emergency situations, for example:
- to respond to court orders, warrants or other lawful requests or legal processes;
- to provide emergency assistance in situations that may threaten the life or physical safety of you or others; or
- for any other purposes for which you have consented, such as those that may be set out in Notices, and other purposes as permitted or required by any applicable law.
Notwithstanding anything to the contrary contained in this Policy, we may remove personal identifiers from your information and maintain and use it in a de-identified form that may be combined with other information to generate aggregated information. Such de-identified and/or aggregated information will be deemed to be owned by us and we shall have unrestricted title, rights, and interest to the de-identified and/or aggregated information which may include, without limitation, the right to use, distribute, transmit, transfer, license, trade, rent, share, assign, and sell the de-identified and/or aggregated information. We will retain your personal information as long as necessary for the fulfillment of the identified purposes or as otherwise necessary to comply with applicable laws.
You may update your communication preferences anytime by writing us at firstname.lastname@example.org.
To whom we Disclose your Personal Information
In accordance with this Policy, we may share your personal information:
- within the Company such as transfers amongst its various office locations including Canada and Argentina, and/or with our service providers such as a cloud service provider in Canada, the United States, and the European Economic Area for data storage;
- with our financial, insurance, legal, accounting or other advisors that provide professional services to us;
- if we have your consent;
- with third parties involved in providing our Products to you which may include merchants of record and payment processors;
- as necessary to complete any transactions while using our Products;
- respond to a subpoena, order, legal process, or government request;
- protect, establish or exercise our legal rights or defend against legal claims;
- investigate, detect, suppress, prevent or take action regarding illegal or prohibited activities, suspected fraud, situations involving potential threats to the reputation or physical safety of any person;
- as otherwise required by law; or
- if we are to be sold, merged, or amalgamated or substantially all of its assets are to be sold or disposed of, your personal information may be transferred to a potential purchaser if, and to the extent necessary, it is required for the purposes of deciding whether to proceed with the proposed transaction and completing it. If such a sale, merger, acquisition, or disposal is completed, we will use reasonable efforts to direct the transferee to use personal information you have provided to us in a manner that is consistent with this Policy. Following such a sale or transfer, you may contact the entity to which we transferred your personal information with any inquiries concerning the processing of that information.
- Your Decisions About Your Personal Information
At any time you can contact us to: stop receiving emails from us; review the personal information held by us in connection with your account; withdraw your consent for our use and disclosure of your information; request a list of third parties to which we may have provided your personal information; close your account; and amend your personal information where possible, by withdrawing consent in the “settings” of your account or by writing to us at email@example.com. You can always unsubscribe from receiving promotional emails from us by simply clicking the “unsubscribe” link provided at the bottom of every promotional email from us.
If you contact us to do any of the things listed above, we may require you to provide sufficient personal information to allow us to identify you and tell you about the existence, use and disclosure of your personal information and this personal information will only be used for this purpose. If you contact us about your personal information, we will respond to your request within a reasonable time and at minimal cost or no cost to you in accordance with applicable laws.
Generally, you may withdraw at any time your consent for us to collect, use, and disclose your personal information in accordance with this Policy, subject to legal or contractual restrictions and reasonable notice. As such, we may continue to collect, use, and disclose your personal information as may be required to provide you with our Products, and to the extent that we are contractually obligated to do so or as necessary to enforce any contractual obligations you may have with us. If you refuse to provide us with the information we require or later contact us to withdraw your consent for us to use and disclose your personal information, we may no longer be able to provide you with our Products.
When you visit the Website, we collect certain information by automated means, such as through server log files, cookies (text files sent to and stored on your device when you access the Website), web beacons (also known as clear GIFs and pixel tags, which may be used to transmit information back to the Website), and embedded scripts (programming code that is designed to collect information about your interactions with the Website, such as the links you click on, and which is active only when you are accessing the Website).
The information we collect in this manner may include details about the computer, mobile phone, or other device used to access the Website (such as browser type, operating system, and IP address), referring URLs and information on actions taken or interaction with our digital assets.
We may use third-party web analytics services to help us analyze how visitors use the Website. We may permit these third parties to operate directly on the Website, use their own technology (such as cookies or web beacons), and collect information about you on our behalf.
The information we collect in this manner is collected to enhance your user experience. For example, this information allows us to pre-fill form fields as well as provide you with contextual recommendations while using the Website.
When you visit our Website, we may allow some third parties (such as advertising networks and data analytics companies) to collect information about your online activities over time and across different websites. Your browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. However, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” visit http://www.allaboutdnt.com.
In some instances, we may also combine information we receive about you from third parties with information we collect through the Website.
We aim to provide you with a safe experience. We have in place certain physical, technical, and administrative safeguards designed to appropriately protect the security and privacy of your personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. Please note, however, that we cannot guarantee that the measures we maintain will guarantee the security of the information.
We limit access to your personal information within the Company to individuals with a need to know.
Your personal information may be collected, used, processed, transferred, and retained in multiple countries including Canada, the United States, the European Economic Area, and Argentina which may be outside the region in which you are situated and may have different privacy or data protection legislation, and may therefore be subject to the laws of these countries. If you are a resident of the European Economic Area or a country which restricts data transfers outside of that jurisdiction or region without your consent, by using our Products, you consent to your personal information being transferred outside of the European Economic Area or your country for processing or storage by or on behalf of us.
- Links to Other Sites
- Children’s Online Privacy Protection
The Website and Products are not intended for use by children under 18 years of age. We do not knowingly collect or use any personal information from any children under 13 years of age. If we become aware that we have unknowingly collected personal information from a child under the age of 13, we will make commercially reasonably efforts to delete such personal information from our database.
- Questions or Comments
If you have any questions or comments or wish to make a complaint about this Policy, please feel free to contact us by delivery in person, by courier or by the mail, to us at Kiiah Blu Corporation, 20 Camden St. Suite 200 M5V 1V1 Toronto, Ontario Canada, or by calling us at 1.800.604.1454. If you contact us about your personal information, we will respond to your request within a reasonable time and at minimal cost or no cost to you in accordance with applicable laws. Depending on the circumstances and applicable laws, we may refuse to process certain access requests (for example, access requests that are unreasonably repetitive or systematic, would be extremely impractical or require disproportionate technical effort).
Effective Date: 11/18/2016