Last updated: June 14, 2024
We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link below to jump to that section.
brandID is the launchpad to your latest video, article, recipe, tour, store, website, social post, and other content. We connect your audience to wherever you are online, and make your content more discoverable and easier to manage. Our Website (located at https://brandid.app/) and other digital properties (such as Developer Portal) (together our “Platform”) provides information about us and allows individuals and businesses to sign-up as brandID Users (to create a personalised, easily-customisable page), as Subscribers (to subscribe to and follow brandID Users), or as developers (to create functionality that interacts with our Platform) (together, the “brandID Services“).
The pages that brandID Users are able to create using the brandID Services are referred to in this Privacy Notice as “User Profiles“. User Profiles are accessible by the public.
This Privacy Notice only applies to personal information we collect as a controller from:
This Privacy Notice, applies to the processing of personal information by brandID as a controller. When we talk about brandID acting as a “controller”, we mean that brandID determines the purpose and the means of the processing (i.e. we make decisions about how we will handle your personal information). Because of the nature of our services, we can also act as a “processor” on behalf of brandID Users. This means that, when we are instructed by a brandID User, we can facilitate processing of Profile Visitors’ and Subscribers’ personal information on behalf of that brandID User (“Processor Services“). This Privacy Notice does not address Processor Services. If you are a Profile Visitor or Subscriber, and want to know how a brandID User handles your personal information, please get in touch with the brandID User directly and/or refer to any privacy notice on the relevant User Profile.
If you provide us with information about another person (if, for example, you are a representative of an individual), you must provide them with a copy of this Privacy Notice and let that other person know that we use their personal information in the ways set out in this Privacy Notice.
The personal information that we may collect about you broadly falls into the following categories:
In general, we will use the information we collect for the purposes described in this Privacy Notice or for purposes that we explain to you at the time we collect your personal information. These include:
Our legal basis for collecting and using personal information described above will depend on the personal information concerned and the specific circumstances in which we collect it.
However, we will normally collect personal information from you only where we have your consent, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect personal information from you, or may otherwise need the personal information to protect your vital interests or those of another person.
If we ask you to provide personal information to comply with a legal requirement we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). As indicated above, we require certain personal information to enter into a contract with you as a brandID User. Without your personal information, we will be unable to provide you with brandID Services available to brandID Users.
If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to develop and improve the brandID Services, to provide additional functionality, to ensure appropriate security or to implement sensitive content warnings and content moderation. We may have other legitimate interests, and if appropriate, we will make clear to you at the relevant time what those legitimate interests are.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact Us” heading below.
We may disclose your personal information to the following categories of recipients:
In order to facilitate paid products and/or services within the brandID Service, we use third party payment processors. We will not store or collect your payment card details. That information is provided directly to our third party payment processors whose use of your personal information is governed by their privacy policies and their own terms and conditions. These payment processors adhere to the standards set by payment card industry data security standards (“PCI-DSS”) as managed by the Payment Card Industry Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information. The payment processors we work with are:
Your personal information may be transferred to, and processed in, countries other than the country in which you are a resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective).
Specifically, brandID may transfer personal information to the United States and other countries in which we do business. brandID may also subcontract certain activities and share your personal information with third parties located outside of Canada (which is where we are headquartered).
The countries in which these organisations are located will vary, but, in the course of our business operations, we generally disclose personal information to organisations located in Canada, or the United States. Such transfers are made in order to provide the brandID Services and carry out the activities specified in this Privacy Notice.
However, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Notice and applicable data protection laws. These include entering into data transfer agreements between our group companies and these can be provided on request. We have implemented similar appropriate safeguards with our third party service providers and partners and further details can be provided upon request. No transfer of your personal information will take place to an organisation or another country unless we believe there to be adequate controls in place including the security of your data and other personal information. For more details please see the “How do we secure your personal information” section below.
We use cookies and similar tracking technology (collectively, “Cookies”) to collect and use personal information about you.
We will retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Notice and in each case in accordance with applicable legal and regulatory requirements in respect of permitted or required retention periods and limitation periods relevant to legal action.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition we limit access to your personal information to employees, agents, contractors and other third parties who have a business need for access. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Therefore, we have put in place procedures to deal with any suspected personal information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
You have the following data protection rights:
Depending on the country which you live in and the laws that apply to you, you may also have additional data protection rights. If you are resident in the UK or the European Economic Area, these rights include:
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
We take your privacy concerns seriously. If you have a complaint regarding our handling of your personal information or concerning our privacy practices, you may file a complaint with us using the contact details provided under the “Contact Us” heading below. We will confirm receipt of your complaint and, if we believe necessary, we will open an investigation.
We may need to contact you to request further details of your complaint. If an investigation has been opened following a complaint made by you, then we will contact you with the result as soon as possible. In the unlikely circumstances we are unable to resolve your complaint to your satisfaction, you may contact the local privacy and data protection authorities in your jurisdiction.
We may update our Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.
You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.
If you have any questions about this Privacy Notice, our privacy practices or if you would like to make a request about any personal information we may hold about you, including correction of personal information, please contact us:
The following section provides supplemental information to California residents, whose personal information we have collected. This section applies to the personal information we collected from California residents during the 12 months prior to the effective date of this Privacy Notice, depending on interactions with us.
(a) Categories of Personal Information We Have Collected:
(b) Categories of Sources of Personal Information that We Collect:
We may disclose the following categories of personal information to service providers for a business purpose, or, at your direction, with third parties such as sponsors of promotions, sweepstakes, or contests. We have disclosed the following:
We do not sell personal information and we do not believe that our sharing of information would qualify as a sale under California law.
For the avoidance of doubt, we also do not sell personal information of individuals under 16 years of age.
You have the right to request that we disclose to you the following information about personal information we collect from you:
You have the right to request the deletion of your personal information collected or maintained by us, subject to certain exceptions permitted by law.
As mentioned above, we do not sell personal information and we do not believe that our sharing of information would qualify as a sale under California law. Nonetheless, if you are a California resident who has purchased products or services from us, you may submit a request to record your preference to opt out by emailing us at [email protected].
You have the right to not be treated in a discriminatory manner for exercising your privacy rights. We do not use the fact that you have exercised or requested to exercise any privacy rights for any purpose other than facilitating a response to your request.
To exercise your rights, you can contact us:
Once we receive your request, we are required to verify that you are the person that is the subject of the request. This verification process consists of matching identifying information provided by you with the information we have about you in our records. Upon making a request, you will be asked to provide your name, email address, and request details. A confirmation email will be sent to the email address you provide to begin the process to verify your identity. If we cannot verify your identity, we will not be able to respond to your request.
You may designate an authorized agent to exercise any of the above privacy rights on your behalf, subject to the agent request requirements under California law.
Please note, for your safety and security, we will require authorized agents to provide proof of consent and designation of the authorized agent for the purpose of making the request, and will require authorized agents to provide information necessary to verify the identity of the individual who is the subject of the request. We may also require that an individual verify his/her own identity directly with us before we respond to an authorized agent’s request.
We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.
California law requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there currently isn’t an industry standard for recognizing or honoring DNT signals, we do not respond to them at this time.
We do not share personal information with third parties for their direct marketing purposes absent your consent as defined by California Civil Code Section 1798.83 (“Shine the Light law”). To opt-out of future sharing with third parties for their direct marking purposes, contact us at [email protected]. Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year.
We reserve the right to change this Supplemental Information for California Residents from time to time. Changes shall become effective on the date they are posted.