Brand Atlas Privacy Policy

October 2024

This Privacy Policy ("Privacy Policy") explains how Brand Atlas and/or its subsidiaries ("Brand Atlas," "we," "our," or "us") collect, use, and protect your personal data. This policy applies when we act as a data controller in relation to your personal data.

1. Scope

This Privacy Policy outlines how we collect, use, and process your personal data when you use the Brand Atlas website ("Site") and our services. We are committed to maintaining lawful and transparent data practices. Your consent must be given explicitly through affirmative action (such as registration or agreement to terms) to allow us to process your data. This Privacy Policy becomes effective upon such action and applies to all global users, subject to applicable laws.

2. Collection of Personal Data

You may browse our Site without identifying yourself or revealing personal data. However, once you share personal data, you are no longer anonymous to us. We may collect and process the following categories of personal data:

Contact Information: Includes email address, physical address, and phone number (where applicable).

Transactional Data: Related to your activities on the Site, such as buying, selling, content generation, or other account-related interactions.

Payment and Billing Information: Includes billing and shipping addresses and any additional data needed to complete purchases or shipments.

Communications: Includes chats, dispute resolutions, and correspondence exchanged on the Site.

Technical Data: Such as IP addresses, device identifiers, page views, traffic data, ad data, cookies, and standard web log information.

Data from Third Parties: Such as demographic and traffic information or data from credit bureaus for verification purposes.

Other Supplementary Data: We may request additional information, such as a government-issued ID or utility bill, to verify your identity as needed.

Providing personal data is voluntary, but not doing so may prevent us from delivering our services effectively or fully addressing your inquiries. When data is required for us to provide our services to you, it will be indicated during the data collection process.

Responsibility for Third-Party Data If you provide Brand Atlas with personal data of third parties (e.g., sharing a friend’s contact details), you must ensure that you have obtained the necessary permissions to share that information with us. Brand Atlas is not responsible for verifying third-party consent; this responsibility lies solely with you as the data provider.

3. Use of Personal Data

We collect and process your personal data to provide a secure, efficient, and personalised experience. The purposes of data collection include:

Service Provision: To deliver services, customer support, and transactions you request.

Dispute Resolution and Compliance: For resolving disputes, collecting fees, and preventing prohibited or illegal activities.

Service Improvement: To customise, measure, and improve our services and advertising.

Marketing: To send updates, promotions, and service-related communications based on your preferences.

Verification: To ensure data accuracy and verify information with third parties, where necessary.

Legal Basis for Processing Brand Atlas processes personal data based on one or more of the following legal grounds:

Consent: When you have given explicit consent for one or more specific purposes.

Contractual Necessity: When processing is necessary for the performance of a contract with you or for any pre-contractual obligations.

Legal Obligation: When processing is required for compliance with a legal obligation.

Public Interest: When processing is carried out in the public interest or in the exercise of official authority vested in Brand Atlas.

Legitimate Interests: When processing is necessary for the purposes of the legitimate interests pursued by Brand Atlas or a third party, provided such interests are not overridden by your rights and interests.

We may rely on your consent, our legitimate interests, or legal obligations as the lawful basis for processing your personal data. You have the right to withdraw consent at any time

If you have any questions regarding the specific legal basis for processing your data, please contact us.

4. Marketing and Communication Preferences

We do not sell or rent your personal data to third parties for marketing purposes without your explicit consent. We may use your data to personalise our content and services. You can manage your communication preferences through your account settings or by following unsubscribe instructions in our communications. Even if you opt out of marketing emails, we may still send essential service-related communications.

5. Sharing of Personal Data

We may share your data within our corporate family or with selected external service providers for specific purposes, including:

Service Providers: To fulfil requests, improve services, and respond to inquiries.

Compliance and Legal Requirements: To comply with regulatory obligations and respond to lawful requests.

Protection Against Illegal Activities: To prevent fraud, intellectual property infringement, and other violations.

Emergency Situations: To protect the safety, rights, or property of individuals.

Our primary third-party providers include (but are not limited to):

Amazon Web Services
Google (Analytics, Tag Manager, AdSense, etc.)
Facebook Pixel
Dossier
Hubspot

When undertaking data from outside the EEA, we ensure compliance with relevant data protection regulations.

We do not "sell" personal information as defined under the California Consumer Privacy Act. However, we may share personal data with trusted third parties to provide services or for business-related purposes. If we change this policy, we will provide notice and allow you to exercise any applicable rights under the law.

We aim to respond to all data subject requests within one month, as required by GDPR, and within 45 days for California residents under CCPA. In specific regions, fees may apply for certain requests, such as excessive or repeated requests, as allowed under relevant laws.

6. User Rights

You have several rights regarding the processing of your personal data:

Right to Information: You have the right to be informed about our data processing activities.

Right to Access and Rectify: You can access, correct, or update your personal data at any time.

Right to Data Portability: You may request a copy of your data in a structured format or have it transmitted to another controller.

Right to Erasure ("Right to be Forgotten"): Under certain conditions, you can request that we delete your data.

Right to Restrict Processing: You may limit how we process your data in specific situations.

Right to Object: You can object to certain data processing, including for direct marketing.

Right to Complain: You may file a complaint with a supervisory authority regarding our data processing.

Right to Withdraw Consent: You can withdraw your consent for data processing at any time.

Rights Related to Automated Decision-Making: You can request human intervention if affected by automated decisions.

In certain regions, such as California, Canada, and Australia, additional privacy rights may apply. For instance, California residents may have the right to opt out of the "sale" of their personal information under the CCPA. For Canadian users, we comply with PIPEDA requirements, and in Australia, we adhere to the Privacy Act 1988.

You can exercise these rights by contacting us through the "Contact Us" form on our Site.

7. Security of Personal Data

We treat your personal data as an asset that must be protected against unauthorised access and disclosure. We use encryption, access controls, and other security measures to safeguard your data. While we strive to protect your personal data, we cannot guarantee absolute security.

Internal and External Access to Data 

Access to your Personal Data is restricted to authorised Brand Atlas employees and trusted third-party service providers who need it to fulfill their roles, such as administrative, sales, marketing, legal, IT, and customer support. These third-party providers are carefully selected and bound by confidentiality agreements, ensuring your data is processed securely and in accordance with this Privacy Policy.

8. Retention of Personal Data

Brand Atlas retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Specific retention periods are as follows:

Contractual and Service-Related Data: Retained for the duration of the contract or until services are fully rendered.

Legitimate Interests: Retained as long as necessary to achieve the purpose, or until you object to such processing.

Consent-Based Data: Retained until you withdraw your consent or as otherwise specified at the time of collection.

Legal Obligations: Retained as long as required by applicable law or upon the order of a regulatory authority.

After the applicable retention period, your Personal Data will be securely deleted. Once data is deleted, your rights to access, rectify, or port data can no longer be exercised for that data.

9. Cookies and Tracking

We use cookies to enhance your experience on our Site. Cookies help us analyse site usage, customise content, and deliver targeted advertising. You can manage your cookie preferences through your browser settings, but blocking cookies may limit your access to certain features.

10. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information promptly.

11. International Data Transfers

As a global platform, we may transfer your data across international borders, including outside the EEA.

Data Processing Location Your Personal Data may be processed at Brand Atlas offices or at secure third-party facilities. Depending on your location, data transfers may involve transferring your data to a country different from your own. Brand Atlas implements appropriate safeguards for any international transfers in compliance with applicable data protection laws.

13. Third-Party Links

Our Site may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these third-party sites. This Privacy Policy applies only to information collected by Brand Atlas. We encourage you to review the privacy policies of any third-party sites you visit.

14. Updates to This Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in our practices, services, or legal obligations. When we make changes, we will revise the "Last Updated" date at the top of this document. In the event of a significant update, we will provide more prominent notice, such as posting a notification on our Site or sending an email. We encourage you to periodically review this policy to stay informed about how we protect your information.

15. Contact Information

If you have questions or concerns about this Privacy Policy or our data processing practices, please contact us via the Brand Atlas Site Contact Form

We are committed to addressing any concerns you may have and will respond promptly to your inquiries.16. Jurisdiction and Governing Law

This Privacy Policy and any disputes related to our privacy practices are governed by the laws of Singapore, without regard to its conflict of law principles. You agree to submit to the jurisdiction of the courts of Singapore for any claims or disputes arising from or related to this Privacy Policy.

17. Acknowledgment and Consent 

By using our Site and services, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms. If you do not agree with this Privacy Policy, please refrain from using our Site and services.

Jurisdiction-Specific Rights

Rights of Swiss Users under the Swiss Federal Act on Data Protection 

Users in Switzerland have specific rights under Swiss law, including:

The right to access their Personal Data.

The right to restrict or object to the processing of their Personal Data, including the right to request deletion or prevent certain disclosures.

The right to receive their Personal Data in a portable format and transfer it to another controller.

The right to request corrections to inaccurate Personal Data.

How to Exercise Your Rights Users in Switzerland can exercise these rights free of charge by contacting us at the contact details provided in this policy. We will respond promptly in compliance with Swiss law.

Brazilian Users and the Lei Geral de Proteção de Dados (LGPD) 

For Brazilian Users, this section explains the grounds under which we process your data:

Based on your consent.

To fulfil legal or regulatory obligations.

For contractual purposes or legitimate interests.

For health, safety, or credit protection.

Brazilian Privacy Rights Users in Brazil have rights under the LGPD, including the right to:

Confirm if their data is being processed.

Access their data and rectify inaccuracies.

Request deletion or anonymisation of unnecessary data.

Withdraw consent at any time and request data portability.

How to Exercise These Rights Users may submit requests to exercise these rights free of charge using the contact details in this policy. We will strive to respond promptly in accordance with LGPD requirements, including notifying any third parties with whom data has been shared.

Data Transfers Outside Brazil Data transfers outside of Brazil are only allowed under specific circumstances, such as international legal cooperation, contractual necessity, or public policy purposes, as permitted by the ANPD.

Rights of U.S. Users under State Privacy Laws 

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana have specific privacy rights, which may include:

The right to access, correct, and delete Personal Information.

The right to opt out of targeted advertising or the sale of Personal Information.

The right to non-discrimination for exercising these rights.

Additional Rights by State

California: Right to limit the use of Sensitive Personal Information and to opt out of cross-context behavioral advertising.

Virginia, Colorado, Connecticut, Texas, Oregon, Montana: Right to opt out of profiling and targeted advertising.

Utah: Rights to opt out of targeted advertising and sensitive data processing.

How to File a Request and Our Response Users can exercise these rights free of charge by contacting us via the contact information provided in this policy. We will verify identity as required by law and respond within the applicable legal timeframe. In some cases, requests may incur a fee if excessive or manifestly unfounded.

Opt-Out Options To opt out of the sale or sharing of Personal Information, or to exercise other opt-out rights, users can follow the instructions provided on this application or use a global privacy control setting, such as the Global Privacy Control (GPC), if supported.

This Privacy Policy provides a complete outline of our practices in managing, securing, and using personal data. Please review it carefully, and contact us if you have any questions.