At POST AR Design Marketplace (together with “we,” “us,” and “our,” “POST”), we care about privacy. We believe in transparency, and we are committed to being upfront about our privacy practices, including how we use and share your personal information. We know that you care about your privacy too, so we provide settings that allow you to choose how certain information is shared or used by POST. 

POST provides the POST mobile device application and the website, http://www.iwepost.com or any affiliated websites, (collectively, the “App”) for services such as uploading and downloading content, including one or more photographs, illustrations, images, or other pictorial or graphic work (collectively referred to as “Work”) onto or from the App.  This policy does not apply to the practices of third parties who may also collect or receive data in connection with your use of our services. 

1.  The Privacy Policy 

We process your personal information to run our business and provide our users with the Work and Services. By accepting our Terms of Use (and in some jurisdictions, by acknowledging this policy), you confirm that you have read and understand this policy, including how and why we use your information. If you don’t want us to collect or process your personal information in the ways described in this policy, you shouldn’t use the Services. We are not responsible for the content or the privacy policies or practices of any of our members or third-party websites and apps. 

POST’s Terms of Use require all account owners to be at least 18 years of age.  Designers must be at least 18 years of age. Minors under 18 years of age and at least 13 years of age are permitted to use POST’s Services only if they have permission and direct supervision by the owner of the account. Children under age 13 are not permitted to use the Services. You are responsible for any and all account activity conducted by a minor on your account. We do not knowingly “sell,” as that term is defined under applicable law, including the California Consumer Privacy Act, the personal information of minors. 

By using the Services, you acknowledge that POST will use your information in the United States, Canada, and any other country where POST operates. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal information, may differ from those that apply in the country in which you reside. We will transfer personal information only to those countries to which we are permitted by law to transfer personal information as more fully described in the “Transfers” Section of this policy. 

2.  Data We Collect and Receive 

In the course of providing any Work or Services, we collect or receive your personal information in a few different ways. We obtain the categories of personal information listed below from the following sources: directly from you, for example, from forms you complete, during registration, add or update information in your POST account, participate in online community discussions or otherwise interact with us; indirectly from you based on your activity and interaction through Work or in providing our Services, or from the device or browser you use to perform Work or access the Services; from our vendors and suppliers that help provide POST services you may interact with (such as, for example, for payments or customer support), and from our third party advertising and marketing partners. In most cases, you choose what information to provide, but sometimes we require certain information for Work or to provide Services to you. POST uses the personal information it receives and collects in accordance with the purposes described in this policy.

You can also choose to provide information to a third party via POST’s API. POST does not have a direct partner relationship with these third parties and their processing of information is subject to their own privacy policies. You should understand the privacy and security practices of any third party before you share information with them. 

Registration, Account Setup, Service Usage: In order to use the App, you will need to register and submit a name associated with your account, which can be modified through your account settings. Additional information, such as billing and payment information (including billing contact name, billing address, telephone number, credit card information), a telephone number, and/or a physical postal address, may be necessary in order for you to register as well. For example, we need a physical postal address because you are buying something from POST for delivery. As a POST seller, if you choose to use our payment service, POST requires your full name, social security number, identification ID or tax ID, date of birth, bank account information, credit card information, and/or other proof of identification in order to verify your identity, to provide this service to you, and comply with applicable law. For example, in certain markets, POST Sellers’ imprint (including trade name or individual name as applicable), may be displayed to buyers in the App in order to comply with local legal requirements. For both buyers and sellers, POST requires this information from you in order to provide you with access for Work or Services (including to verify ownership of an account, to mitigate fraud and abuse, to comply with regulatory obligations, or to complete a transaction as a buyer or seller). We may store credit card information and other information provided to us during checkout, for billing and payment purposes, and to process your transaction. Members in certain countries can elect to save their credit card information to facilitate checkout for future purchases. POST may contact individual Sellers confidentially to request more information about their items listed on the App or may request information from buyers to ensure compliance with our policies and applicable law. 

Profile: You may provide your name and other personal information (such as birthday, gender, location) in connection with your account and activity. You can edit or remove this information through your account settings. The name associated with your account (which you may modify in your account settings) is publicly displayed and connected to your POST activity. Other members may see the date you joined; ratings, reviews and information relating to items you review, and related photos for items you purchased or sold; your profile information; items you listed for sale; sold item listings and the number of items sold; and information you decide to share via social networks. For Designers, we may collect and use information about you in order to feature you in marketing, and to feature you on and off the platform, as provided for in POST’s Terms of Use. From time to time, we may also ask you about certain demographic information, such as your race or sexual orientation in relation to specific marketing and campaigns. Providing this demographic information is entirely voluntary and at the time we ask we will also seek your consent to use it. You may also choose to enable the App to access your mobile device’s camera to upload photographs to POST. 

Automated Information: POST automatically receives and records information from your browser or your mobile device when you visit or use the App, such as your IP address or unique device identifier, email addresses, cookies, log file information, Bluetooth signals, Wi-Fi access points and cell towers, web beacon information, browser type, operating system, photo folders or albums, images or videos needed to use the App, mobile operator, language, time zone, purchase and content use history, mobile phone number, mobile device IDs including advertising identifiers, connection speed, page hits, number of uploads from a Designer, number and type of licenses purchased, profile changes, content changes, registered user comments and likes, data about which pages you visit and how you interact with those pages, and other similar information, in order to allow us to operate and provide the Services or allow Work. This information is stored in log files and is collected automatically. POST may also receive similar information (like, for example, IP addresses and actions taken on the device) provided by a connected Internet of Things device such as a voice-activated assistant or Smart TV. We may combine this information from your browser or your mobile device with other information that we or our advertising or marketing partners collect about you, including across devices. This information is used to prevent fraud and to keep the App secure, to analyze and understand how it works for members and visitors, and to provide advertising, including across your devices, and a more personalized experience for members and visitors. 

We also automatically collect device-specific information when you install, access, Work, or use our Services. This information can include information such as the hardware model, operating system information, app version, app usage and debugging information, browser information, IP address, and device identifiers. For more information about these online tools and how we use them, see our separate Cookies Policy and “Using, Sharing, & Disclosing Information” Section below. 

Data from POST Vendors and Suppliers: We also receive information from our vendors and suppliers about you. This information can include customer service interactions, payments information, and shipping information. 

Data from Advertising and Marketing Partners: As described below, POST receives information from our advertising and marketing partners about you. This information can include attribution information via cookies and UTM tags in URLs to determine where a visit to POST comes from, responses to marketing emails and advertisements, responses to offers, and audience information from partners who you have given consent to share that information with us. 

Location Information: We collect information about your Work or use of Services for advertising, for analytics, to serve content, and to protect the App. This can include your IP address, browser information (including referrers), device information (such as iOS IDFA, IDFV for limited non-advertising purposes, Android AAID, and, when enabled by you, location information provided by your device). When you use the App, you can choose to share your geolocation details with POST in order to use functions like our store and maps (although you don't need to share these details). You can choose to publish your location when you sell on POST. 

We obtain location information you provide in your profile or your IP address. With your consent, we may also determine location by using other information from your device, such as precise location information from GPS or information about wireless networks or cell towers near your mobile device. We use and store information about your location to provide features and to improve and customize the App, for example, for POST’s internal analytics and performance monitoring; localization, regional requirements, and policies for Work and Services; for local content, search results, and recommendations; for shipping and mapping services; and (using non-precise location information) marketing. If you have consented to share your precise device location details but would no longer like to continue sharing that information with us, you may revoke your consent to the sharing of that information through the settings on the App. Certain non-precise location services, such as for security and localized policies based on your IP address or submitted address, are critical for the App to function. We will only share your geolocation details with third parties (like our mapping, payments, or, to the extent applicable, advertising providers) in order to provide you with the Services.

Analytics Information: We use data analytics software to ensure App functionality and to improve the Work and Services. This software records information such as how often you use the App, what happens within the App, aggregated usage, performance data, app errors and debugging information, and where the App was downloaded from. We do not link the information we store within the analytics software to any personally identifiable information that you submit within the mobile application. For more information, go to POST’s Cookies Policy. 

Information from Third Parties: Some members or visitors may choose to connect to POST or register a POST account using an external third-party application, such as Facebook. Connecting your POST account to third-party applications or services is optional. If you choose to connect your account to a third-party application, it is subject to your agreements with that third party (like their Terms of Use and privacy notices), and POST can receive information from that application. We may also collect public information in order to connect with you, such as when we communicate with you over social media. We may use that information as part of the Work or providing the Services to you. You can also choose to share some of your activity on POST on certain social media networks which are connected to your POST account, and you can revoke your permission anytime in your account settings. Certain third-party applications that you use to create or sign in to your account may provide you with the option to discontinue receiving messages from us or allows you to forward those messages to another email address. If we are unable to send you critical messages about your account, we may suspend or terminate your account. 

Non-Member Information: POST receives or obtains information (for example, an email address or IP address) about a person who is not yet a registered POST member (a “non-member”) in connection with certain App features, such as when a member invites a non-member to visit the App, a member uploads non-member information using the contact uploader feature, or a member sends a gift card code to a non-member. Non-member information is used only for the purposes disclosed when it was submitted to POST, for purposes necessary to the functioning of the App or where POST has a legitimate interest, as disclosed in the “Using, Sharing, & Disclosing Information” Section below, or to facilitate action authorized by a member or the non-member. 

3.  Messages from POST 

On occasion, Post will need to contact you. Primarily, these messages are delivered by email or by push notifications for a variety of reasons, including marketing, transactions, and service update purposes. If you no longer wish to receive push notifications, you can disable them at device level. You can opt out of receiving marketing communications via email in your account settings or by following the unsubscribe link in any marketing email you receive. To ensure you properly receive notifications, we will need to collect certain information about your device, such as operating system and user identification information. Every account is required to keep a valid email address on file to receive messages. POST may also contact you by telephone to provide member support or for transaction-related purposes if you request that we call you. Additionally, and with your consent where required by applicable law, POST may send you an SMS (or similar) message, or reach out to you by telephone, in order to provide you with customer support, for research or feedback, or to provide you with information about products and features that you may find of interest. You can update your contact preferences in your account settings.

Some messages from POST are service-related and necessary for members. You understand and agree that POST can send you non-marketing emails or messages, such as those related to transactions, your account, security, or product changes. Examples of service-related messages include an email address confirmation/welcome email when you register your account, notification of an order, service availability, modification of key features or functions, and correspondence with POST’s Support team.

When you register for an account, you receive notice of and agree (in some jurisdictions and situations, by an additional unambiguous consent) to receive marketing emails and messages from us. You can unsubscribe at any time from marketing emails or messages through the opt-out link included in marketing emails or messages. Please note that some changes to your account settings may take a few days to take effect.

4.  Community Services 

Because POST is a community, we may engage certain third parties to assist in providing community services to you and, in the context of that relationship, we need to share some of your information with such third parties in order to provide that service. This may include, for example, information from your POST account that is publicly available, your account’s status, your POST username and/or shop name, the display name you have chosen to share publicly in your POST account, and avatar image. You are responsible for the personal information that you choose to post in community spaces through Work or the Services.

As a registered user, you may participate in POST’s comment sections or other forums.  These postings are visible to any guest or user of the App.  POST strongly discourages posting any information that you do not want others to see on these features.  The messages posted in comment sections or other forums may be retained as long as the App is operational. POST reserves the right to remove any obscene, inappropriate, or insensitive information it deems detrimental to users or its business.

5.  Using, Sharing, & Disclosing Information 

POST AR will not disclose your name, email address, or other personal information to third parties without your consent, except as specified in this policy or our Terms of Use.

You can control your privacy settings in your account settings privacy tab. Please note that some changes to your privacy settings may take a few days to take effect. We or our designers may advertise our Services or our sellers’ products through a variety of different mediums and rely on your consent to do so off-site

When you access or use the App, we collect, use, share, and otherwise process your personal information for the purposes described in this policy. We rely on a number of legal considerations to use your information in these ways, which include, but are not limited to, where:

®      Needed to perform the contractual obligations in our Terms of Use and in order to allow Work or to provide the Services to you;

®      You have consented to the processing, which you can change at any time;

®      Needed to comply with a legal or regulatory obligation, a court order, or to exercise or defend any impending or asserted legal claims;

®      Needed for the purposes of our or a third party’s legitimate interests, such as those of visitors, members, or partners (described in more detail below);

®      You have expressly made the information public;

®      Needed in the public interest, such as to prevent crime; and

®      When necessary, needed to protect your vital interests or those of others (in rare cases where we may need to share information to prevent loss of life or personal injury).

We principally rely on consent, which you can revoke at anytime, to send marketing messages, for third-party data sharing related to advertising, and, to the extent applicable, for the use of location data for advertising purposes. 

We rely on consent for targeted online and offline marketing including through tools such as Facebook Custom Audience and Google Customer Match. We or our designers may advertise our Services or our sellers’ products through a variety of different mediums and rely on your consent to do so off-site. As part of this, we may work with advertising partners such as Facebook, Google, and other partners disclosed in our Cookies Policy. These partners have their own privacy policies and consent mechanisms for their customers, in addition to POST’s controls. 

POST may also use first party data (e.g. your prior shopping and browsing patterns on our App), and may combine it with other data collected from you, such as your location, or publicly available information, to permit us to create targeted audiences based on your known or inferred demographic and/or interests to provide you with more relevant and useful advertising on our site, in our direct marketing channels (like email), or with our off site marketing partners, like Google and Facebook, subject to their terms and privacy notice you agreed to with such partners.

Where we process your information on the basis of other legitimate interests, we do so as follows:

Image and Camera Services: When you use our image and camera services, we use your input, images, videos, and other personal information to respond to your requests, provide the requested service to you, and improve our services.

Providing, personalizing, and Improving the Work or Services: We use your information to improve and personalize the Work or Services, including sharing your information for such purposes. This is also necessary to enable us to pursue our legitimate interests in understanding how the App is being used, and to explore ways to develop and grow our business. It is also necessary to allow us to pursue our legitimate interests in improving Work or Services, efficiency, interest in Work or Services for users, and obtaining insights into usage patterns of Work or Services. As a core part of our Services, we have a legitimate interest in customizing your on-site experience to help you search for and discover relevant items and recommended purchases. 

Communicate With You: We rely on our legitimate interest to send you marketing messages (where permitted independent of consent) and for POST’s advertising programs (including POST’s on-site advertising and marketing).  We also use your information to respond to you when you contact us.  

Promoting Safety and Security: We use your information for safety and security purposes, which can include sharing your information for such purposes, and we do so because it is necessary to pursue our legitimate interests or those of a third party in ensuring the security of the App, preventing harm to individuals or property, or crime, enforcing or defending legal rights, or preventing damage to POST’s systems, or those of our users or our partners. This includes enhancing protection of our community against spam, harassment, intellectual property infringement, crime, and security risks of all kinds. We use your information to provide and improve the App, for billing and payments, for identification and authentication, and for general research and aggregate reporting. For example, in accordance with our existing dispute resolution process, we may use information you provide to resolve disputes with POST or other members. 

Purchase and Delivery: We use your information to take and handle orders, deliver products, process payments, and to communicate with you about orders, products, and promotional offers.  We will also facilitate the sharing of information between the two members involved in the transaction, such as the other POST member’s shipping address and payment status. This can also involve us sharing your information with some of our third-party partners such as our shipping and payment partners to enable us to provide access for Work or Service to you. Such partners will process your personal information in accordance with their own privacy policies. In some instances, while they are subject to POST’s privacy and security requirements for vendors, these partners, not POST, are responsible for the protection of personal information under their control. By making a sale or a purchase with POST, you are directing us to share your information in this way. Since this is an important part of Work or Services we provide, we need to do this in order to perform our obligations under our Terms of Use. We expect you to respect the privacy of the member whose information you have received. As described in POST’s Terms of Use, you have a limited license to use that information only for POST-related communications or for POST-facilitated transactions. POST has not granted a license to you to use the information for unauthorized transactions or sending unsolicited commercial messages in violation of any applicable laws, including any consent requirements of the jurisdiction of the recipient. You should only add a member to your email or physical mailing list or otherwise use or store a member’s personal information in accordance with applicable laws, including any consent requirements that apply in that member’s jurisdiction. 

Product Reviews: You may choose to provide POST with ideas, suggestions, or proposals (“Feedback”).  If you do, POST may ask for certain information to validate your review, such as an email address and street address.  If you submit Feedback, POST may publish your geographic location or other anonymous information.  With that said, your email address will be kept confidential.  In addition, any personally identifiable information that you submit as part of your Feedback can be read or used by other visitors to the App. POST is not responsible for any personally identifiable information that you choose to submit, whether intentional or inadvertently, as part of your Feedback.  If you wish to update, edit, or remove a product review, you can do so by contacting POST at [EMAIL ADDRESS]. 

Site and App Customization: We may learn about the types of products that you are interested in from your browsing and purchasing behavior on (and off) the App and use such information to suggest potential purchases as a result. As a core part of our Services, we have a legitimate interest in customizing your on-site experience to help you search for and discover relevant items and recommended purchases, including using this information to help sellers find the best ways to market and sell their products through POST. 

Legal and Safety: POST may also retain, preserve, or release your personal information to a third party in the following limited circumstances: in response to lawful requests by public authorities, including to meet legitimate national security or law enforcement requirements; to protect, establish, or exercise our legal rights or defend against impending or asserted legal claims, including to collect a debt, or a material violation of our policies; to comply with a subpoena, court order, legal process, regulation, or other legal requirement; or when we believe in good faith that such disclosure is reasonably necessary to comply with the law, prevent imminent physical harm or financial loss, or investigate, prevent, or take action regarding illegal activities, suspected fraud, threats to our rights or property, or violations of POST’s Terms of Use. For example, if permitted due to the forgoing circumstances, your information may be shared with tax authorities or other governmental agencies. In the cases set out above, our use of your information may be necessary for the purposes of our or a third party’s legitimate interest in keeping the Work or Services secure, preventing harm or crime, enforcing or defending legal rights, or preventing damage. Such use may also be necessary to comply with a legal obligation, a court order, or to exercise or defend legal claims or to facilitate the collection of taxes and prevention of tax fraud. It may also be necessary in the public interest (such as to prevent crime) or to protect vital interests (in rare cases where we may need to share information to prevent loss of life or personal injury). 

If POST receives a lawful, verified request for a member’s records or information in one of the limited circumstances described in the previous paragraph, POST may disclose personal information, which may include, but may not be limited to, a member’s name, address, phone number, email address, company/trading name and, where appropriate, bank account and transaction details. 

Intellectual Property Rights: POST may track information relating to claims of Intellectual Property Right infringement through its membership management.  Information related to Intellectual Property Rights infringement claims may be stored by POST.  Intellectual Property Rights are intangible property rights    including but not limited to copyright, trademarks, patents, rights of privacy, rights of publicity, celebrity rights, moral rights, and other intellectual property rights. 

Affiliated Businesses: POST is affiliated with a variety of businesses and works closely with them for a variety of purposes, including assisting us to perform and improve the App. These businesses may sell items or services to you through the App or, with your consent, offer promotions (including email promotions) to you. POST also provides services or sells products jointly with affiliated businesses. When an affiliated business assists in facilitating your transaction, we may need to share information related to the transaction with that affiliated business in order to facilitate your transaction, and this forms part of the Work or Services we provide in accordance with our Terms of Use. We rely on consent (which can be revoked at any time) to send marketing messages and for third-party sharing relating to advertising. As part of this, we may work with advertising partners such as Facebook or Google, and we may use analytics aggregated from usage information including, for example, search keywords, favorites, browsing history, and purchase history. 

Aggregated Information: POST may share demographic information with business partners, but it will be aggregated and de-personalized so that personal information is not revealed. 

Service Providers: POST also needs to engage third-party companies and individuals (such as research companies, and analytics and security providers) to help us operate, provide, and market the App. These third parties have only limited access to your information, may use your information only to perform these tasks on our behalf, and are obligated to POST not to disclose or use your information for other purposes. Our engagement of service providers is often necessary for Work and the Services, particularly where such companies play important roles like helping us keep our Service or the ability to do the Work operating and secure. In some other cases, these service providers aren’t strictly necessary for us to provide Work or the Services, but help us make it better, like by helping us conduct research into how we could better serve our users. In these latter cases, we have a legitimate interest in working with service providers to make our Services or Work better. 

Third Parties: Third-party plug-ins also collect information about your use of the App. For example, when you load a page on POST that has a social plug-in from a third-party site or service, you are also loading content from that third-party site. That site may request cookies directly from your browser. These interactions are subject to the privacy policy of the third-party site. In addition, certain cookies and other similar technologies on the App are used by third parties for targeted online marketing and other purposes. These technologies allow a partner to recognize your computer or mobile device each time you use the App. Please be aware that when you use third-party sites or services, their own terms and privacy policies will govern your use of those sites or services. POST chooses and manages these third-party technologies placed on its App. However, these are third-party technologies, and they are subject to that third party’s privacy policy. For more information, see our Cookies Policy. We rely on your consent to drop and read these cookies when not technically necessary or when not required based on another purpose such as legitimate interest. 

This policy does not apply to the practices of third parties (such as other members who sell using the App, certain third-party providers on whom we rely to provide certain services, or API users) that POST does not own or control or individuals that POST does not employ or manage, except as otherwise provided for in the Terms of Use or as required by law. If you provide your information to such third parties in connection with your use of the App, different practices may apply to the use or disclosure of the information that you provide to them. While POST requests that these third parties to follow POST’s privacy and security requirements, POST AR does not control the privacy or security policies of such third parties. To the full extent applicable in your jurisdiction, POST is not responsible for the privacy or security practices of these sellers, API users, or other websites on the internet, even those linked to or from the App. We encourage you to read the privacy policies and ask questions of third parties before you disclose your personal information to them.

6.     Extraterritorial Use

POST controls and operates the App from United Arab Emirates.  In this regard, the data collected by POST may be stored and processed in United Arab Emirates.  By providing POST with data, whether by sharing it or by using the App, you are consenting to the storage, processing, and transfer of information in United Arab Emirates.  Access to the App from outside of United Arab Emirates is not intended to subject POST to the laws or jurisdiction of any sovereign state, province, country, or territory other than that of United Arab Emirates. The data you provide or that we collect may be stored and processed in any country where POST has facilities or in which it engages third party service providers, and by using the App, you consent to the transfer of information to countries outside of your country of residence, including but not limited to United Arab Emirates, which may have different data privacy rules and laws than your country.  

6.  Transfers

We share information globally, both internally within POST, and externally with our partners and with those you connect and share with around the world in accordance with this policy. Your information may, for example, be transferred or transmitted to, or stored and processed in the United Arab Emirates, the United States, or other countries outside of where you live for the purposes as described in this policy. These data transfers are necessary to provide the services set forth in the Terms of Use and to globally operate and provide the Services or Work to you. 

The United States, European Economic Area (“EEA”) Member States, and other countries all have different laws. When your information is moved from your home country to another country, the laws and rules that protect your personal information in the country to which your information is transferred may be different from those in the country in which you live. For example, the circumstances in which law enforcement can access personal information may vary from country to country. In particular, if your information is in the US, it may be accessed by government authorities in accordance with US law. 

To the extent that POST is deemed to transfer personal information outside of the EEA, we rely separately, alternatively, and independently on the following legal bases to transfer your information: 

Model Clauses 

The European Commission has adopted standard contractual clauses (also known as Model Clauses), which provide safeguards for personal information that is transferred outside of Europe. We often use these Model Clauses when transferring personal information outside of Europe. You can request a copy of our Model Clauses by [EMAIL].

Necessary for the Performance of the Contract between POST and its Members 

POST provides a voluntary service; you can choose whether or not to use the Services. As we operate in countries worldwide and use technical infrastructure in the U.S. to deliver the Services to you or access for Work, in accordance with the contract between us (our Terms of Use), we need to transfer your personal information to the U.S. and to other jurisdictions as necessary to provide the Services. Simply put, we cannot provide you with access to the App and perform our contract with you without moving your personal information around the world.   

7.  Security 

The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and after it is received, for example encryption is used for certain information (such as credit card numbers) using TLS/SSL (transport layer security/security sockets layer). Unfortunately, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

Your account information is protected by a password. It is important that you protect against unauthorized access to your account and information by choosing your password carefully and by keeping your password and computer secure, such as by signing out of the App. POST offers advanced security features and settings for members, such as two-factor authentication for signing in, and sign in history and notifications; you can view more information in your account settings.

If you have any questions about the security of your personal information, you can contact us at [EMAIL].

WAIVER OF LIABILITY.  POST HAS TAKEN CERTAIN SECURITY PROTECTIONS IN SAFEGUARDING YOUR PERSONAL INFORMATION.  HOWEVER, AS WITH MOST ELECTRONIC TRANSACTIONS, NO METHOD IS 100% SAFE.  WHILE POST STRIVES TO USE A COMMERCIALLY ACCEPTABLE MEANS TO PROTECT YOUR PERSONAL INFORMATION, POST AR CANNOT GUARANTEE ITS SECURITY.  BECAUSE OF THIS, POST ASSUMES NO LIABILITY REGARDING THE THEFT, LOSS, ALTERATION, OR MISUSE OF PERSONAL OR OTHER INFORMATION INCLUDING, WITHOUT LIMITATION, INFORMATION THAT POST GAS PROVIDED TO THIRD PARTIES, OR WITH REGARD TO THE FAILURE OF A THIRD PARTY TO ABIDE BY THE PRIVACY POLICY OR AGREEMENT BETWEEN POST AND A THIRD PARTY. 

8.  Retention 

POST will retain your information only for as long as is necessary for the purposes set out in this policy, for as long as your account is active (i.e., for the lifetime of your POST member account), or as needed for the Work or to provide the Services to you. If you no longer want POST to use your information to provide the Services to you or allow you access for Work, you may close your account. POST will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this policy. In addition, POST Designers may also be required to retain and use your information in order to comply with their own legal obligations. Please note that closing your account may not free up your email address, username, or store (if any) for reuse on a new account. We also retain log files for internal analysis purposes. These log files are generally retained for a brief period of time, except in cases where they are used for site safety and security, to improve site functionality, or we are legally obligated to retain them for longer time periods.

9.  Your Rights & Choices 

Certain privacy laws around the world, including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), provide users with rights related to their personal information. Consistent with those laws, POST gives you the choice of accessing, editing, or removing certain information, as well as choices about how we contact you. You may change or correct your POST account information through your account settings. You may also remove certain optional information that you no longer wish to be publicly visible through the Work or Services, such as your name. You can also request to permanently close your account and delete your personal information. Depending on your location, you may also benefit from a number of rights with respect to your information. While some of these rights apply generally, certain rights apply in limited cases inlcuding: 

You can access certain personal information associated with your account by visiting your account privacy settings. You can request a copy of your personal information in an easily accessible format and information explaining how that information is used.

You have the right to request that we rectify inaccurate information about you. By visiting your account settings, you can correct and change certain personal information associated with your account.

In certain cases where we process your information, you may also have the right to restrict or limit the ways in which we use your personal information.

In certain circumstances, you have the right to request the deletion of your personal information, except information we are required to retain by law, regulation, or to protect the safety, security, and integrity of POST.

If we process your information based on our legitimate interests as explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. Where we use your personal data for direct marketing purposes, you can object using the unsubscribe link in such communications or changing your account email settings.

Where we rely on consent, you can choose to withdraw your consent to our processing of your information using specific features provided to enable you to withdraw consent, like an email unsubscribe link or your account privacy preferences. If you have consented to share your precise device location details but would no longer like to continue sharing that information with us, you can revoke your consent to the sharing of that information through the settings on your mobile device. This is without prejudice to your right to generally permanently close your account and delete your personal information. 

The CCPA provides California residents with the following additional rights:

Right to Know: California residents may request disclosure of the specific pieces and/or categories of personal information that the business has collected about them, the categories of sources for that personal information, the business or commercial purposes for collecting the information, the categories of personal information that we have disclosed, and the categories of third parties with which the information was shared.

Right to Opt-Out: To the extent that POST “sells” personal information (as that term is defined under the CCPA), California residents are entitled to opt-out of the “sale” of data at any time (see below for more information).

If you would like to manage, change, limit, or delete your personal information, you can do so via your POST account settings. Alternatively, you can exercise any of the rights above by contacting us by submitting a message through our contact form or chat support. Once you contact us to exercise any of your rights, we will confirm receipt of your request.

Limiting use of, or deleting, your personal information may impact features and uses that rely on that information. However, we will not discriminate against you for exercising any of your rights, including otherwise denying you goods or services, providing you with a different level or quality of services, or charging you different prices or rates for services. If you need further assistance, you can contact POST through one of the channels listed below under “Contact”. We will respond to your request within a reasonable timeframe. 

Please note that we may verify your identity before we are able to process any of the requests described in this Section, and in our discretion, deny your request if we are unable to verify your identity. As a part of this process, government or other identification may be required. You may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government issued identification, and the authorized agent’s valid government issued identification, and we may verify the authenticity of the request directly with you. 

Email & Messages

You may also control the receipt of certain types of communications from POST AR in your account settings. POST AR may send you messages about Work or the Services or your activity. Some of these messages are required, service-related messages for members (such as transactional messages or legal notices). Other messages are not required, such as newsletters. You can control which optional messages you choose to receive by changing your account settings, and you can learn more in the “Messages from POST AR” Section of this policy. If you no longer wish to use the Services or receive service-related messages (except for legally required notices), then you may close your account. 

Cookies 

We use both technically necessary (for the functioning and security of the Services) and non-technically necessary cookies and similar technologies. A more detailed explanation of the technologies we use, and how to opt out when applicable, can be found in POST’s Cookies Policy. 

Additional Disclosures for California Residents 

Notice of Collection 

In addition to the Rights & Choices described above, the CCPA requires disclosure of the categories of personal information collected over the past 12 months. While this information is provided in greater detail in the “Information Collected or Received Section above, the categories of personal information that we have collected – as described by the CCPA – are:

Identifiers, including name, email address, shop name, IP address, and an ID or number assigned to your account.

Other individual records such as phone number, billing address, or credit or debit card information. This category includes personal information protected under pre-existing California law (Cal. Civ. Code 1798.80(e)), and overlaps with other categories listed here.

Demographics, such as your age or gender, or, where you have provided such information to POST voluntarily, demographic information about your race, ethnicity, sexual orientation, or gender identity, provided in relation to specific marketing and advocacy projects and campaigns. This category includes data that may qualify as protected classifications under other California or federal laws.

Commercial information, including purchases and engagement with Work or the Services.

Internet activity, including your interactions with the App for Work or Services and what led you to the App.

Sensory visual data, such as pictures posted on our App.

Geolocation data provided through location enabled services such as WiFi and GPS.

Inferences, including information about your interests, preferences and favorites. 

The Purposes for Our Collection 

We collect and use these categories of personal information for our business and commercial purposes described in the “Using, Sharing, & Disclosing Information” Section above, including providing and improving the Services, maintaining the safety and security of the Work or Services, processing purchase and sale transactions, and for advertising and marketing services.

Third Party Marketing and Advertising and Your Rights (Opt-Out of “Sale”) 

POST does not sell personal information to third parties for monetary value. However, the term “sale” is defined broadly under the California Consumer Privacy Act. To the extent that “sale” under the CCPA is interpreted to include interest based advertising or other data uses described in the “Information Uses, Sharing and Disclosure” Section above, we will comply with applicable law as to those activities. 

To opt-out of receiving interest-based advertising, you can exercise your choice by using your account privacy settings, or the general privacy settings link located at the footer of our homepage and most pages of the App. The right to opt-out of interest-based advertising is available to all POST users. 

Do Not Track Signals 

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no industry consensus as to what site and app operators should do with regard to these signals. Accordingly, unless and until the law is interpreted to require us to do so, we do not monitor or take action with respect to “Do Not Track” signals. 

Shine the Light 

California law entitles residents to ask for a notice describing what categories of personal information we share with third parties for their own direct marketing purposes. Other than to Sellers on POST (refer to the “Using, Sharing, & Disclosing Information” Section above), who must obtain your separate consent for their own marketing off of POST, or unless you request us to or consent to it, POST does not share any personal information to third parties for their own direct marketing purposes. If you have questions about these practices, you can contact us through one of the channels listed in the “Contact” Section below. 

Accessibility

If you have a disability and would like to access this policy in an alternative format, please contact us using one of the channels listed in the “Contact” section below.

10.      Your Responsibilities

If you sell using our Services or use an API, you may receive and determine what to do with certain personal information. Your privacy responsibilities, including when you act as an independent data controller (someone who decides what personal data to collect and the purpose you use the data for) are laid out in the POST’s Designer Policy.

11.   Privacy Policy Changes

We may amend or update this policy from time to time. If we believe that the changes are material, we’ll let you know by doing one (or more) of the following: (i) posting the changes on or through the Services, (ii) sending you an email or message about the changes, or (iii) posting an update in the version notes on the Apps’ platform. We encourage you to check back regularly and review any updates.

12.      Contact 

If you have any questions:

Contact POST‘s Support team via our Support Center. 

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, you may contact us (free of charge) at [EMAIL].