MOSCOT Privacy Policy

This Privacy Policy sets out how Moscot.com LLC and its subsidiaries and affiliates (“Moscot,” “we,” “us” or “our”) use and protect any personal information we collect when you use our website or purchase our products or services. We may change this Policy from time to time by updating this page.

How We Protect Your Information

The security of your personal information is important to us. Moscot has implemented various security features to help prevent any unauthorized release of personal information. Our features include technical and physical security measures to guard against unauthorized access to systems where we store personal data. When you enter sensitive information (such as credit card number and/or social security number) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). Be advised that while Moscot has endeavored to make a secure reliable Site for its users, the privacy and confidentiality of communications transmitted to/from Moscot via this Site or through email cannot be guaranteed. As such, Moscot is not held responsible for the security of any data transmitted via the Internet to/from our website.

The security of your account also depends on keeping your account password confidential and you should not share your account name or password with anyone. If you do share your account information with a third party, they will have access to your account and your personal information.

Updating Your Personal Information

You have the ability to edit or update your personal information held on this site. You may do so by logging into your profile and changing any user information stored on file there. To the extent that such information is stored in our databases, we will respond to your changes as soon as reasonably possible. Please note that although you may delete this information from your profile, the information may remain stored indefinitely in our backup and archival records. While your personal information is protected as outlined above, we reserve the right to use, transfer, sell, and share aggregated, anonymous data about our users as a group for any business purpose, such as analyzing usage trends and seeking compatible advertisers and partners.

Third Party Links

Occasionally, at our discretion, we may include or offer third party products or services on our site. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Site and welcome any feedback about these sites.

Age Restrictions

We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act), as we do not collect any information from anyone under 18 years of age. Our website, products and services are all directed to people who are at least 18 years old or older. If you are under the age of 18, please do not submit any personal information through the Site.

Changes to This Policy

Please note that this Privacy Policy may change from time to time. We will post any Policy changes on this page. Each version of this Policy will be identified at the top of the page by its last updated date.

If you have any privacy-related questions, please send them to privacy@moscot.com.

We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:

In-Store Customers

• Personal Identifiers, including name, email address, postal address, and telephone number
• Commercial Information, including purchases
• Financial Information, including credit or debit card number
• Physical and Audio Data, including physical characteristics or descriptions, video recordings, and photos
• Protected Classifications and Other Personal Characteristics, including age

Visitors/Email Database/Customers/Patients

• Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
• Internet Activity
• Commercial Information, including purchases
• Financial Information, including credit or debit card number
• Location Information, including general location data
• Protected Classifications and Other Personal Characteristics, including age
• Health Data, including data related to physical or mental health

B2B Customers - Wholesale INTL

• Personal Identifiers, including name, email address, postal address, and telephone number
• Commercial Information, including purchases
• Financial Information, including credit or debit card number and bank or other financial account number

Browser Cookies

How long we keep your data

We do not retain data for any longer than is necessary for the purposes described in this Policy.

Why we process your information

We process personal information for the following business and commercial purposes:

• Conducting Surveys
• Creating Customer Profiles
• Delivering Targeted Ads
• Sending Promotional Communications
• Tracking Purchases & Customer Data

We may disclose personal information about you for business and commercial purposes when you purchase our products or visit our website:

We value your privacy and the information you consent to share in relation to our SMS marketing service. We use this information to send you text notifications (for your order, including abandoned checkout reminders), text marketing offers, and transactional texts, including requests for reviews from us. Opt-in data and consent for text messaging will not be shared with any third parties except for messaging partners, for the purpose of enabling and operating our text messaging program.

Opt-in data and consent for text messaging will not be shared with any third-parties except for messaging partners, for the purpose of enabling and operating our text messaging program. As described above, our website uses cookies to keep track of items you put into your shopping cart, including when you have abandoned your checkout. This information is used to determine when to send cart reminder messages via SMS.

Updated on 26th February 2025

Dear customer,

“MOSCOT Holdings LLC” and its affiliated companies in Europe, Switzerland and United Kingdom (together “MOSCOT”, “we” or “us”) respect your concerns about privacy and recognize the importance of being transparent regarding the personal information collected about you.

“MOSCOT Holdings LLC” participates in the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the “DPF”) administered by the U.S. Department of Commerce. MOSCOT commits to comply with the DPF Principles (as defined below) with respect to consumer Personal Data the company receives from the EU, UK and Switzerland in reliance on the DPF.

Specifically, MOSCOT Holdings LLC complies with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF as set forth by the U.S. Department of Commerce.

MOSCOT Holdings LLC has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. MOSCOT Holdings LLC has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

This Policy Notice also describes how MOSCOT implements the DPF Principles for Personal Data. If there is any conflict between the terms in this Privacy Notice and the DPF Principles, the DPF Principles shall govern.

To learn more about the DPF Program, and to view our certification, please visit: https://www.dataprivacyframework.gov

MOSCOT will use your Data (as defined below), whether obtained on-line or in person, to manage your registration as a User (as defined below), to purchase products or services, to respond to your questions, and, if you wish, to send you personalized communications. Indeed, this Privacy Notice applies to Data collected in connection with our products and services, for example when you visit our website (“Website”) and or any store operated by MOSCOT under any brand in the European Economic Area, Switzerland and United Kingdom (“Stores”) or when you contact our customer service.

“MOSCOT Holdings LLC” is the Data Controller (as defined below) and is responsible for the processing of this information. Each of MOSCOT Holdings LLC affiliated companies in Europe, Switzerland or United Kingdom also act as Data Controller in relation to the Data collected in the Store you visit, to process your purchases and requests and to improve your customer experience.

This Privacy Notice describes the types of personal information we collect about you, how we may use that information, with whom we may share it and the rights you have regarding our use of that information. This Privacy Notice also describes the measures we take to protect the security of the Data, how long we retain it and how you can contact us to exercise your rights.

This Privacy Notice may change from time to time, any changes will be posted on the website or notified to you by e-mail. Each version of this Privacy Notice will be identified at the top of this page.

DEFINITIONS USED IN THIS PRIVACY NOTICE

Terms with capital letters used in this Privacy Notice and not otherwise defined shall have the same meaning as given to them in the GDPR.

The terms below shall have the following meanings:

Confidential Data: with reference to this Privacy Notice, this refers to data relating to your health in case of an optometric check or in case of a prescription inherent to an optometric examination conducted by your ophthalmologist.

Data: this refers, alternatively or jointly, depending on the case, Personal Data and Confidential Data.

Data Controller: is a legal or natural person, an agency, a public authority, or any other body who, alone or when joined with others, determines the purposes of any Personal Data and the means of processing it.

Data Processor: means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.

Data Subject or User: means the natural person to whom the Data subject to processing refers.

DPF Principles; means the Principles and Supplemental Principles of the DPF.

Personal Data: means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. It is understood that the terms defined in this paragraph may be used indifferently in the singular or plural form, retaining the meaning ascribed to them under the relevant definition.

DATA WE COLLECT

This section explains, for each situation, what Data we may collect directly from you (either on a voluntary basis or through automated means) and what Data may be collected (or we may receive) from other sources.

At the moment of collection, we will inform you whether the provision of personal information is optional or mandatory for us to provide a particular product or service. Where the collection is mandatory, we may not be able to provide you with the product or service you requested if you choose not to provide that information to us.

MOSCOT does not intentionally collect personal information from minors. Should any information about minors be inadvertently recorded, we will promptly delete information from our records.

When you purchase our products or use our services online or in-store

• We will collect your credit card numbers and other payment information. We will keep your shopping history (what you bought, when and where you bought it and how you paid for it) if we can relate the purchase to your account.
• If you make an online purchase, we will also collect your contact information including your name, billing and shipping address, e-mail address, telephone number. For certain countries to which orders are internationally shipped through our global e-commerce partner Global-e, your personal information will be collected and controlled by Global-e under the https://www.global-e.com/consumer-privacy-policy privacy policy.
• If you are in contact with our customer assistance in connection with our products or services, we will record our calls for security and training purposes, and to improve the services we provide to you. We may also collect additional information through your correspondence with us.
• If you purchase an item or gift card or ask us to deliver your purchase to someone else, we will collect the recipient’s name, postal address and email address to send the item or gift card to the recipient.
• If you use our “Virtual Frame Fitting & Styling Appointments”, we will collect names and contact details to book an appointment for you. We may also collect product sizes and fits and any other information you may voluntarily provide to offer you an enhanced service and personalize your experience with MOSCOT.
• In the case of an optometric check-up or in the case of a prescription for an optometric examination carried out by your ophthalmologist, we may collect Confidential Data relating to your health.

When you visit our Website

• We obtain certain information by automated means when you visit our Website, such as through cookies and web beacons. Cookies are bits of text that are placed on your computer’s hard drive when you visit certain websites. Cookies may enhance your online experience by saving your preferences while you are visiting a particular site. The information we collect in this manner may include the IP address of the device you use to connect to the Internet, information regarding your browsing behavior (such as the date and time of your visit, the time you spend on each page, the ads you click on or the website you link from) or the contents of your virtual shopping bag between visits.
• Cookies and web beacons are only used if you have accepted them on your first visit by continuing your navigation on our Website. Visit the page https://privacy.moscot.com/#eeaukch-gdpr to know more about our use of cookies, web beacons and similar technologies and how to manage your settings and preferences at any time.
• We may also collect information about your online activities from third-party websites on which our ads are served. You may see certain MOSCOT ads on other websites because we work with advertising partners (including advertising networks) to engage in remarketing and retargeting activities and to show you advertisements tailored to your individual interests.
• If you decide to register to "my account", we will collect your name, e-mail address, username and password. You may also choose to store billing and shipping information as well as credit card information on a voluntary basis. We will also give you the opportunity to opt in to receive MOSCOT marketing communications.
• Our Website may contain links to other websites or offer third party services applying their own privacy policies to the collection of other personal information. These websites or services may be operated by companies not affiliated with MOSCOT. We strongly recommend you to read their privacy policies if you visit any of these websites or use any of these third-party services. We are not responsible for the content of any website or third-party service not affiliated with MOSCOT.
• For example: When shopping on our Website, you may use the services of “Perfect Corporation” to obtain personalized size and fit recommendations. Any personal information you provide to “Perfect Corporation” is collected by the latter and subject to the Perfect Corporation privacy policy. None of this information is transmitted back to MOSCOT.

When you visit our Stores

• We may collect your image on CCTV which our Stores use for the prevention and detection of crime and for protecting the safety of our customers. We may also use CCTV technology for traffic counting without collecting personally identifiable data about you.
• If you subscribe to the MOSCOT in-Shop postcard, we may also collect your full name, date of birth, postal address, e-mail address and telephone number. Specifically, you may also choose to provide us with your birth date and your e-mail address and telephone number on a voluntary basis. We will also give you the opportunity to opt-in to receive MOSCOT marketing communications.
• We may collect information relevant to you (such as your contact information, purchase history, product or lifestyle preferences, important dates or events, etc.) to offer you highly personalized shopping experiences in our MOSCOT Shops.

When you contact us or we contact you

• When you contact or are contacted by our Customer Service, we may collect information such as your name, address, e-mail address, telephone number, payment information, shopping history and records of correspondence.
• When we contact you by e-mail, we may use cookies and web beacons to know when you have clicked and opened our e-mail. Visit the page https://privacy.moscot.com/#eeaukch-gdpr to know more about use of cookies, web beacons and similar technologies and how to manage your settings and preferences at any time.

HOW WE USE YOUR DATA

We will use and process your Data for the purposes described in this section. The above-mentioned Data are treated for contractual purposes and are collected, depending on the case, (i) at the time of the purchase at our Stores or on our Website; or (ii) during the optometric visit.

Please note that one or more purposes may apply simultaneously to the same personal information.

✓To provide our products and services

• We will process the relevant Data described in the previous section to provide you the products and services you have requested.
• We rely on the contract we have with you as the lawful basis to process your personal information for such purpose. If you choose not to provide the information, we have requested from you, we may not be able to perform properly our contractual obligations. You have the full right to revoke at any time his consent to the treatment, without affecting the lawfulness of the treatment provided before such revocation.

✓To communicate and interact with you

• If you have given us your consent through an appropriate mechanism such as ticking a box, managing technical settings or any other action indicating clearly your consent, we will use your contact information to send you offers, news and updates about our products, services and events via the channel you have chosen (such as e-mail or mobile phone). We will personalize and tailor these communications to your preferences and interests based on our legitimate interest to improve your customer experience as explained in the next section.
• You can choose at any time to unsubscribe from marketing e-mails by clicking on the unsubscribe link included in each e-mail (or by contacting our Customer Service if the unsubscribe link is not available). If you have opted in to receive text messages, you may opt out at any time (for example, by sending a ‘STOP’ text) free of charge (except the cost of sending the message).
• Based on our legitimate interest to do so, we may use your contact information to send you marketing communications by postal mail (you may opt out of receiving postal communications at any time by contacting Customer Service). We may also contact you about our services, for example to ask you to provide feedback about your experience in our Stores or to participate in a survey.
• We may send you communications required by law or which are necessary to inform you about our changes to the services we provide you (for example, updates to this Privacy Notice, product recall notices and legally required information relating to your orders). These messages will not include any promotional content and do not require your prior consent when sent by email or text message. If we do not use your personal information for these purposes, we will be unable to comply with our legal obligations.

✓To improve our products and services and personalize your experience with MOSCOT

• We may use your Data to understand your preferences, offer you products and services which are more relevant to you, deliver content and show you advertisements tailored to your interests, and send you personalized communications (if you have opted-in to marketing communications).To process your information, we rely on our legitimate interest to improve our products and services and personalize your customer experience.
• If you have accepted the use of cookies on you first visit by continuing your navigation on our Website, we may use the personal information collected to: (i) offer you a customized browsing experience and provide you with a great shopping experience, for example by capturing the pages you have browsed or products you have viewed and remembering your choices and preferences (through functionality cookies); (ii) show you interest-based advertising on third party websites after you have shown interest in our products or services (through third party advertising cookies).
• Visit the page https://privacy.moscot.com/#eeaukch-gdpr to know more about use of cookies, web beacons and similar technologies and how to manage your settings and preferences at any time.
• Based on our legitimate interest, we may also share limited personal information about you (such as your e-mail address) in an encrypted format with strategic partners (such as Facebook) to allow you to receive targeted advertising when you are visiting other websites.
• We may finally use your personal information to conduct analytics and research based on our legitimate interest to understand our business, customers shopping patterns, trends and behaviors.

✓To provide customer support

We may process your Data if you contact our Customer Service (or we contact you through our Customer Service). We will collect and process your Data to perform our contractual obligations in relation with the products or services you have requested and to provide you the best service we can or to comply with our legal obligations.

✓To identify and prevent fraud and other criminal activities

We use some of the Data we collect from you based on our legitimate interest or where necessary to comply with our legal obligations to prevent and detect fraud and other criminal activities.

WHO WE SHARE YOUR DATA WITH - ACCOUNTABILITY FOR ONWARD TRANSFER OF PERSONAL DATA

We do not sell or otherwise disclose your Data except as described in this section.

We may disclose your Data without offering an opportunity to opt out and may be required to disclose your Data, (i) to third-party Processors the company has retained to perform services on its behalf and pursuant to its instructions, (ii) if it is required to do so by law or legal process, or (iii) in response to lawful requests from public authorities, including to meet national security, public interest or law enforcement requirements.

✓  With other MOSCOT companies

We may share your Data with our affiliated companies for the purposes described in this Privacy Notice.

✓  With our service providers

The Data collected in this way will not be disseminated, but we may share Data with our service providers processing your Data on our behalf for the purposes described in this Privacy Notice.

Examples of service providers we may share your Data with:

• subjects appointed internally by MOSCOT as Data Processors;
• subjects who can access the Data by means of provisions of law, regulation, or community legislations, within the limits provided by such norms;
• subjects who need access to the above-mentioned Data for purposes auxiliary to the relationship between the User and MOSCOT, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them (for example, tax and labour consultants, etc.);
• consultants of MOSCOT, limited to the task undertaken and subject to the signing of obligations and constraints of confidentiality and security in the treatment of Data;
• subjects managing electronic documents as provided for by the new regulations in terms of accounting and electronic invoicing;
• transportation companies delivering products purchased on our Website to our customers;
• companies providing technical support and infrastructure for our Website.

With respect to transfers of Personal Data to third-party Processors, (i) MOSCOT enters into a contract with each relevant Processor, (ii) MOSCOT transfers Personal Data to each such Processor only for limited and specified purposes, (iii) MOSCOT Holdings LLC ascertains that the Processor is obligated to provide the Personal Data with at least the same level of privacy protection as is required by the DPF Principles, (iv) MOSCOT Holdings LLC takes reasonable and appropriate steps to ensure that the Processor effectively processes the Personal Data in a manner consistent with MOSCOT’s obligations under the DPF Principles, (v) MOSCOT Holdings LLC requires the Processor to notify MOSCOT if the Processor determines that it can no longer meet its obligation to provide the same level of protection as is required by the DPF Principles, (vi) upon notice, including under (v) above, MOSCOT Holdings LLC takes reasonable and appropriate steps to stop and remediate unauthorized processing of the Personal Data by the Processor, and (vii) MOSCOT Holdings LLC provides a summary or representative copy of the relevant privacy provisions of the Processor contract to the Department of Commerce, upon request. MOSCOT Holdings LLC remains liable under the DPF Principles if the company’s third-party Processor onward transfer recipients process relevant Personal Data in a manner inconsistent with the DPF Principles, unless MOSCOT Holdings LLC proves that it is not responsible for the event giving rise to the damage.

✓  Other reasons for sharing Data

We may also disclose personal information about you (1) if we are required to do so by law or legal process (such as court order) or (2) in response to a request by law enforcement authorities.

HOW WE PROTECT YOUR DATA

Security safeguards

We maintain appropriate administrative, technical and physical safeguards to protect the Data you provide on this website against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use and other unlawful forms of processing.

We use TLS 1.2 (SSL) to technology via Shopify and Shopify’s Checkout which serves as a PCI DSS service provider to protect the transmission over the Internet of your payment card data. You can check the security of your connection by looking at the URL line of your browser. When accessing a secure site, the first characters of the site address change from “http” to “https.” If you are using a web browser or firewall that does not permit communications through secure sites, you will not be able to make purchases on our site.

DATA RETENTION PERIOD

We keep the personal information we collect for the duration of our relationship with you, plus a reasonable period to take into account the applicable legal retention requirement or statute of limitation period, or otherwise as required for our business purposes described above.

If you consent to receive marketing communications, we will keep the information necessary to send you these communications for a period of two (2) years following the end of our customer relationship or following their collection, if you are a prospective customer.

At the end of the retention period, your Data will be deleted completely or anonymized so that it can be used in a non-identifiable way for statistic and analytical purposes.

RIGHTS YOU HAVE OVER YOUR DATA

Subject to applicable law, you may (1) request access to the personal information we maintain about you, (2) request that we update, correct, amend, or erase your personal information where it is inaccurate or (3) request the restriction of our use of your personal information.

In addition and also subject to applicable law, you may receive, in a structured, commonly used and machine-readable format, the personal information that you have provided to us about you.

You also may object at any time to the use of your personal information, on grounds relating to your situation, where we use that information based on our legitimate interests as described above.

If we use your personal information to send you marketing communications, you may object at any time and without providing any reason (e.g., by clicking in the unsubscribed link in our marketing emails or by contacting our customer assistance), and we will apply your preferences going forward. You also may withdraw any consent you previously provided to us. If you do so, this will not affect the lawfulness of our use of your information based on your consent before its withdrawal.

Specifically, also in accordance with the provisions of the GDPR, the User may exercise towards MOSCOT the following rights:

• to have access to Personal Data;

• to obtain the rectification or cancellation (oblivion) of the same or the limitation of the treatment of the same;

• to object the treatment;

• to ask for data portability;

• to withdraw the consent; and

• to propose a complaint to the control authority (see below).

✓ Recourse, enforcement and liability
MOSCOT Holdings LLC has mechanisms in place designed to help assure compliance with the DPF Principles. MOSCOT Holdings LLC conducts an annual self-assessment of its Data practices to verify that the attestations and assertions MOSCOT makes about its DPF privacy practices are true and that MOSCOT’s privacy practices have been implemented as represented and in accordance with the DPF Principles.

You may file a complaint concerning MOSCOT Holdings LLC’s processing of your Personal Data. MOSCOT Holdings LLC will take steps to remedy issues arising out of its alleged failure to comply with the DPF Principles.

You may contact MOSCOT Holdings LLC as specified below about complaints regarding MOSCOT Holdings LLC’s consumer Personal Data practices.

If your complaint cannot be resolved through MOSCOT Holdings LLC’s internal processes, MOSCOT will cooperate with the alternative dispute resolution provider, JAMS, pursuant to the JAMS DPF Program, which is described on the JAMS website at: https://www.jamsadr.com/dpf-dispute-resolution

JAMS mediation may be commenced as provided for in the JAMS rules. Following the dis-pute resolution process, the mediator or the consumer may refer the matter to the U.S. Fed-eral Trade Commission, which has DPF investigatory and enforcement powers over MOS-COT Holdings LLC. Under certain circumstances, you also may be able to invoke binding arbitration to address complaints about MOSCOT Holdings LLC’s compliance with the DPF Principles.

If you wish to exercise these rights, please contact, by registered letter with return receipt or e-mail, “MOSCOT Holdings LLC”, registered office in Farmingdale, New York.

MOSCOT e-mail address: moc.tocsom@ycavirp.

You will be notified of the execution of his request/exercise of his right within 30 (thirty) days of the request.

If you are not satisfied by our response or if you consider your privacy rights have been breached, you may lodge a complaint with a data protection authority, in particular in the EEA country of your habitual residence, place of work or place of our alleged infringement of the European data protection rules (see section above). 

===============================================================================

This section provides additional information for people in the European Economic Area (EEA), United Kingdom (UK) and Switzerland (CH).  The terms used in this section have the same meaning as in the General Data Protection Regulation and the UK Data Protection Act (GDPR). The term “personal information” as used in this notice has the same meaning as “personal data” in the GDPR.

===============================================================================

Collection and Disclosure of Personal Data

The personal data we collect and how we share it is described above in our Privacy Policy.

We may disclose your personal information to the following third party controllers for business purposes: Shipping Address Validator by RoboTurk, Criteo Dynamic Retargeting, Affirm, Amazon Pay. To understand how these parties handle your data, please refer to their respective privacy policies.

Cookie Notice

We use cookies to improve your experience on our site and to allow us and third parties to personalize the marketing content you see on other websites and social media. Website visitors from European Privacy Law regions can control cookie settings. Manage your region specific consent settings here.

Essential Cookies

We use these cookies for things like security, logins, site errors, and processing payments. We can't turn these necessary cookies off, but you can control them in your browser.

Analytics Cookies

These cookies tell us how you use our sites and apps, and provide information to help us improve your experience.

Personalization Cookies

We use these cookies to enhance functionality and personalize content for you. For example, they allow us to remember you when you return to our website or app. If you do not allow these cookies then some or all of these services may not function properly.

Advertising Cookies

These cookies help us decide which products, services and offers may be relevant for you. We use this data to customize the marketing content you see on websites, apps and social media, and to measure your interactions with that content. We might use these cookies to advertise our products to you when you visit other websites.

Lawful Bases and Legitimate Interests

We process personal data on the following lawful bases:

• Complying with legal obligations
• Fulfilling contracts
• Consent
• Legitimate interests

Where we process personal data on the basis of our legitimate interests, we pursue the following interests: Conducting Surveys, Creating Customer Profiles, Delivering Targeted Ads, Tracking Purchases & Customer Data, and Sending Promotional Communications.

International Data Transfers

We may send the personal data of individuals in the EEA/UK to third countries, including the United States, where it may be stored or processed, for example on our service providers’ cloud servers. When we transfer personal data, we rely either on Adequacy Decisions as adopted by the European Commission (EC) or the UK Information Commissioner's Office (ICO) on the basis of Article 45 of Regulation (EU) 2016/679 (GDPR), Standard Contractual Clauses (SCCs) issued by the EC or International Data Transfer Agreements (IDTAs) approved by the ICO. Data protection authorities have determined that the SCCs and IDTAs provide sufficient safeguards to protect personal data transferred outside the EEA/UK. You may read more about international data transfer mechanisms at the following links:

• https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
• https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-data-transfer-agreement-and-guidance/

Privacy Rights

Individuals in the EEA/UK have the following rights regarding their personal data. Make a Privacy Request by clicking here. Once you submit a request, we will verify your identity and process your request in most cases within 30 days.

Right to access. You have the right to request a copy of the personal data we hold about you.

Right of portability. You have the right to ask us to transfer your data to another party.

Right to rectification. You have the right to request that we rectify any incorrect information we have about you.

Right of erasure. You have the right to request that we erase (delete) any personal information we hold about you.

Right to withdraw consent. You have the right to withdraw your consent at any time when we rely on your permission to process your personal data.

Right to object. You have the right to object to our use of data about you.

Right to lodge a complaint with a supervisory authority. You have a right to lodge a complaint with a supervisory authority. For more information, you can visit the Information Commissioner’s Office website at https://ico.org.uk/, or see a list of EU Data Protection Authorities at https://www.gdprregister.eu/gdpr/dpa-gdpr/.

Inquiries

Controller contact information

Moscot

moc.tocsom@ycavirp

Updated on 26th February 2025