Legal

1.Definitions

Capitalised terms not specifically defined herein shall have the meaning ascribed there to in the Terms.

1.1 “Controller” means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of Personal Data.

1.2 “Customer” means the natural or legal person that has subscribed to Services by agreeing to the Terms.

1.3 “End-User(s)” means any person or entity other than the Customer or the Users whose data is transmitted by or on behalf of the Customer to the Services.

1.4 “Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.5 “Process/Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.6 “User” means a designated user within the Services, including an account administrator, employee, shareholder, auditor, lawyer, founder, and other designated users.

1.7 “Terms” shall mean the Terms of Service available here.

1.8 “Website(s)” means the websites that We operate.

2. HOW WE COLLECT, USE, AND SHARE YOUR PERSONAL DATA

2.1 PERSONAL DATA THAT YOU PROVIDE US

2.2. PERSONAL DATA THAT WE COLLECT NOT PROVIDED DIRECTLY BY YOU

If You provide Us with any Personal Data relating to other individuals, You represent that You have the authority to do so, and, where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Policy. If You believe that Your Personal Data has been provided to Us improperly, please contact Us by using the information in clause 12 below.

2.3 In addition to the details provided in the table above, We may also share Your Personal Data with

1. an entity to which we divest all or a portion of Our business, or otherwise in connection with a merger, consolidation, change in control, reorganisation or liquidation of all or a portion of Our business.

2. Law enforcement authorities, government authorities, courts, dispute resolution bodies, regulators, auditors, and any party appointed or requested by applicable regulators to carry out investigations or audits of Our activities.

3. Professional advisors who advise and assist Us in enforcing Our contracts and policies, handling Our claims, effective management of Our company and in relation to any disputes We may become involved in.

3. LEGAL BASIS FOR PROCESSING (EEA REGION)

3.1 If You are a data subject from the European Economic Area, Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which We collect it.
‍
3.2 We will normally collect Personal Data from You only where it is needed to perform a contract with You, where the Processing is in Our legitimate interests and not overridden by Your data protection interests or fundamental rights and freedoms, or where We have Your consent. In some cases, We may also have a legal obligation to collect Personal Data from You. If We Process Personal Data with reliance on Your consent, You may withdraw Your consent at any time.

3.3 If You have questions or need further information concerning the legal basis on which We collect and use Your Personal Data, please contact Us using the contact details provided under clause 12.

4. INTERNATIONAL TRANSFER

4.1 We mainly Process Personal Data in the United States. However, We may transfer Personal Data outside the United States only for the purposes referred to in clause 2. We will ensure that the recipient of Your Personal Data offers an adequate level of protection that is at least comparable to that which is provided under applicable data protection laws.
‍
4.2 If You are a resident of the European Economic Area and when Your Personal Data is Processed outside EEA, We will ensure that the recipient of Your Personal Data offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of Personal Data as approved by the European Commission (Article 46 General Data Privacy Regulation, 2016), or We will ask You for Your prior consent to such international data transfers.

5. SECURITY OF PERSONAL DATA

We use appropriate technical and organizational measures to protect the Personal Data that We collect and Process. The measures We use are designed to provide a level of security appropriate to the risk of Processing Your Personal Data. If You have questions about the security of Your Personal Data, please contact Us using the contact details provided under clause 12.

6. RETENTION OF PERSONAL DATA

6.1 We will retain Your Personal Data for as long as reasonably necessary to provide You with Our Services that You request, for marketing purposes unless You opt out as described in this Policy, or otherwise where permitted or required in accordance with applicable law. We will retain and use Your Personal Data as necessary to comply with Our legal obligations, resolve disputes, and enforce Our agreements.
‍
6.2 In the absence of a need to retain Personal Data under clause 6.1 above, We will either delete it or aggregate it or, if this is not possible then We will securely store Your Personal Data and isolate it from any further processing until deletion is possible.

7. YOUR PRIVACY RIGHTS

7.1 You have the right to opt out of marketing communications We send You at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails We send You. To opt out of other forms of marketing (such as postal marketing or telemarketing), please contact Us.

7.2 You are entitled to the following rights:

7.2.1 You can request access to your Personal Data.

7.2.2 You can request that We correct inaccurate Personal Data about You, subject to appropriate verification.

7.2.3 You may have the right to request that We delete Personal Data that We have collected from You, subject to certain exceptions.

7.2.4 If You are a resident of the EEA, UK, or Switzerland, You are also entitled to the following rights:  You can object to the Processing of Your Personal Data, ask Us to restrict the Processing of Your Personal Data, or request portability of Your Personal Data.

‍7.2.5 If We have collected and processed Your Personal Data with Your consent, then You can withdraw Your consent at any time. Withdrawing Your consent will not affect the lawfulness of any processing We have conducted prior to Your withdrawal, nor will it affect Processing of Your Personal Data conducted in reliance on lawful processing grounds other than consent.

‍7.3 You have the right to appeal a decision We have made in connection with Your privacy rights request by contacting Us using the contact information provided in Clause 12. You also have the right to complain to a data protection authority about Our collection and use of Your Personal Data. For more information, please contact Your local data protection authority as specified by the applicable data protection laws.

‍7.5 If You seek to exercise Your rights under this clause, please contact Us at the details provided in clause 12. We will verify any requests before acting on the request and respond to all requests We receive from individuals wishing to exercise their data protection rights within a reasonable timeframe in accordance with applicable data protection laws.

‍7.5.1 We will not discriminate against You if you decide to exercise Your privacy rights.

‍7.5.2 Please note that, when appropriate, We may decline a request if We are unable to verify Your identity (or an agent’s authority to make the request) and confirm the Personal Data We maintain relates to You.

‍7.5.3 Only You, or someone legally authorized to act on Your behalf. Where appropriate, You may authorize someone to make a request on Your behalf (an authorized agent). Authorized agents will need to demonstrate proof of authorization to act on Your behalf. We retain the right to request confirmation directly from You, confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity.

8. NOTICE FOR CALIFORNIA RESIDENTS

8.1 Clause 8 applies only to California residents and the Personal Information We collect as a Business. “CCPA” means the California Consumer Privacy Act of 2018 as amended by the CPRA. “CPRA” means the California Privacy Rights Act of 2020. For the purposes of this section, the terms “Business”, “Business Purpose”, “Consumer” “Personal Information”, “Sale/Sell”, “Service Provider” and “Sensitive Personal Information” and “Share” shall have the meaning given to them under the CCPA

8.2 The categories of Personal Information We have collected in the twelve (12) months prior to the Effective Date and We may collect include:

a. Identifiers such as a real name, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.

b. Personal Information such as education, employment, employment history.

c. Commercial Information such as transaction information, financial details, and payment information.  

d. Internet or other electronic network activity information and device information such as, Your usage of the Services, operating system, browser information, and Your session activity including page views, time spent on each page, scrolling activity, and data collected through cookies.

e. Geolocation data such as device location.
‍
8.3. Disclosure of Personal Information. We have disclosed the categories of Personal Information listed in clause 8.2 above for a Business Purpose (which is listed under “How We use Your Personal Data” section in clauses 2.1 and 2.2) in the twelve (12) months prior to the Effective Date and may disclose such Personal Information to service providers or contractors or to any other third parties who support our business (who are listed under “Whom We share Your Personal Data with” section under clauses 2.1 and 2.2). We shall not disclose further the Personal Information collected for verification of a consumer’s request or retain it longer than it is necessary for the purpose of verification.
‍
8.4. Sharing and Selling of Personal Information. We do not Sell or Share the Personal Information We collect without providing You a right to opt-out. We do not Sell or Share the Personal Information of minors of at least the age of thirteen (13) but less than sixteen (16) years without receiving such minor’s consent or the consent of the minor’s guardian if the minor is less than thirteen (13) years. We permit third parties (such as ad networks, analytics providers, or marketing providers) to collect information directly from Your browser or device through cookies or similar tracking technology when You visit or interact with Our Website or access Our Services. This information retrieved may include device information, browsing history, and location data that are used to undertake “cross-context behavioural advertising” that provides personalized advertisements to You on other websites or sites that You may visit or access.  This may be considered as a “Sale” or “Share” of Personal Information, You may opt-out of the Sale or Share by following the instructions provided under Clause 8.
‍

8.5. As a California resident, You have the following additional rights under the California Consumer Privacy Act (CCPA):

a. Right to Know: You have the right to request that We disclose the categories and specific pieces of Personal Data We have collected about You, the categories of sources from which the Personal Data was collected, the business or commercial purpose for collecting the Personal Data, and the categories of third parties with whom We share Personal Data.

b. Right to Delete: You have the right to request that We delete any Personal Data We have collected about You, subject to certain exceptions.

c. Right to Opt-Out: You have the right to opt-out of the sale of Your Personal Data. We do not sell Personal Data.

d. Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of Your rights under the CCPA.

8.6. To exercise any of these rights, please contact Us using the contact information provided under clause 12. We will respond to Your request in accordance with applicable laws and may require You to verify Your identity before responding to Your request.

9. COOKIE POLICY

9.1. Cookies are text files that are placed on Your computer to collect standard internet log information and visitor behaviour information by Us. When You visit the Website(s), We may collect Personal Data automatically from You through cookies or similar technology. We also set cookies to collect information that is used either in aggregate form to help Us understand how Our Website(s) is being used or how effective Our marketing campaigns are, to help customise the Website(s) for You or to make advertising messages more relevant to You.

9.2. Necessary Cookies: We set essential cookies that enable core functionality such as security, network management, and accessibility. You may not opt-out of these cookies. However, You may disable these by changing Your browser settings, but this may affect how the Website(s) functions.

9.3. Statistics, Preference, and Marketing Cookies: We set these cookies to help Us improve Our Website(s) by collecting and reporting information on how You use them. The cookies collect information in a way that does not directly identify anyone.

9.4. When You visit the Website(s), a cookie banner will be displayed providing additional information about cookies and options to opt out of non-essential cookies as required by applicable laws.

10. PRIVACY OF CHILDREN

We recognize the importance of children's safety and privacy. Our Services are not directed to individuals under the age of 16. We do not knowingly request, or collect, any Personal Data from children under the age of 16. If We become aware that an individual under 16 has provided Us with Personal Data, We will take steps to delete such data as soon as possible.  If a parent or guardian becomes aware that his or her child has provided Us with Personal Data, they should write to Us at the email address provided in clause 12.

11. NOTICE TO END-USER AND OTHER EXCLUSIONS

11.1. Our Services are intended for use by businesses. Except for the Personal Data collected from You for the purposes mentioned under clause 2, this Policy is not applicable to Our Processing of any Personal Data transmitted by the Customer as part of the Customer Data. We may receive End-Users’ Personal Data as a part of the Customer Data for which We will only act as a Processor and such Processing will be governed by the Terms. In such a case, the End User’s data privacy questions and requests should be submitted to the Customer in its capacity as a Controller. We are not responsible for Customers’ privacy or security practices which may be different from this notice. Customers of the Services are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements, or other obligations, relating to the collection of Personal Data in connection with the use of Services by the Customer or the Users.

11.2. Our Website(s) contain links to other Websites. Our Policy applies only to Our Website(s), so if You click on a link to another Website, You should read their privacy policy. We encourage You to review the privacy statements of any such other Websites to understand their Personal Data practices.

12. CONTACT INFORMATION

You may contact us if you have any inquiries or feedback on our data protection policies and procedures in the following manner:

Email Address: care@rocketlane.com

13. CHANGES TO THE POLICY

We may update this Policy from time to time in response to changing legal, technical, or business developments. When We update Our Policy, We will take appropriate measures to inform You, consistent with the significance of the changes We make. We will obtain Your consent to any material Policy changes if and where this is required by applicable data protection laws.You can see when this Policy was last updated by checking the “Last Updated” date displayed at the top of this Policy.