Privacy Policy

Last Updated: January 29, 2021


Introduction This Privacy Policy explains how Vertical Retail Limited and its affiliated companies (collectively, “Vertical”, “us”, “we” or “our”) collect, use, disclose, transfer, protect, store and otherwise process your personal information. It also explains your rights and options around our use of your information and how you can exercise these choices. From time to time, we will need to update this Privacy Policy and we encourage you to check it regularly so that you stay informed. If you have any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us using the information provided below.


Scope of privacy policy
Vertical is committed to protecting individuals' privacy. This Privacy Policy applies to personal information collected through our websites, mobile applications, products and services (collectively, "Services") that include a link to this Privacy Policy. In this Privacy Policy, personal information means any information that relates to an identified or identifiable natural person – either on its own or in combination with other information.

This Privacy Policy sets out how Vertical processes personal information about individuals that register for or use our Services ("Subscribers"). We collect this information so that we can provide our Services to those Subscribers. By registering for or using our Services, you acknowledge the collection, transfer, processing, storage, disclosure and other uses of your information as described in this Privacy Policy.

Please be aware that this Privacy Policy does not apply to "Customer Information", being personal information that relates to individuals with whom our Subscribers interact (such as customers of their stores). We process Customer Information under the direction of our Subscribers, and have no direct relationship with these individuals. For the purposes of privacy and data protection laws, we process Customer Information as a "data processor" (under the GDPR) or a "service provider" (under the California Consumer Privacy Act). Subscribers are solely responsible for establishing appropriate policies for and ensuring compliance with all applicable laws and regulations relating to the processing of personal information in connection with the use of our Services. If you are an individual who interacts with a Subscriber using our Services – for instance if you’re an employee or customer of a retail store – you should contact them directly for assistance with any requests or questions relating to your personal information.


Your Information
In registering for or using our Services, you provide us with certain information which we store securely. This includes your account and profile information, as well as other information that you choose to provide us with when you interact with features of our Services

ACCOUNT AND PROFILE INFORMATION
We collect certain information when you register for the Services, including:
Contact information, such as name, email address, mailing address, phone number and country
Profile information, such as a username, profile photo, and job role
Preferences information, such as notification and marketing preferences

OPERATIONAL DATA
We also store information that you choose to upload to or send to us through our Services, including:
Information about products and services the Subscriber sells (including inventory, pricing, sale, transaction, tax, and other data)
Information about the Subscriber or the Subscriber’s business (employee, customer, and contact data)

OTHER SUBMISSIONS
We also ask for and collect certain information from you when you submit web forms on our websites or when you participate in any interactive features of our Services (such as a survey, competition, promotion, activity or event), apply for a job, request customer support, download content, communicate with us via third party social media sites, or otherwise communicate with us.


What other information do we collect?
When you interact with or use our Services, we automatically collect certain information about your device and your use of our Services. This includes information such as your browser type, Internet Protocol (IP) address and other data about your device. We (or the third parties we work with) use standard tracking technologies (such as cookies and web beacons) to do this. For more information about our use of these technologies, please see the section below under "Cookies, web beacons and other tracking technologies". Finally, when you use and interact with our Services we may also collect certain information about you from third parties partners.

ACCESS LOGS
Like most websites and services delivered over the Internet, we gather certain information automatically when you interact with our Services and store it in log files. This information includes Internet protocol (IP) addresses as well as browser type, URLs of referring/exit pages, operating system, language and location preferences, time/date stamp, search history, device identification numbers and system configuration information. Occasionally, we connect information gathered in log files with other personal information that we hold, in order to improve our Services. If we do this, we treat the combined information in accordance with this Privacy Policy.

ANALYTICS INFORMATION
We collect analytics information when you use our Services to help us improve our products and services. We are always aiming to make Vertical a better experience for retailers and customers alike, and your information really helps us to do this! This analytics information consists of the function and feature of the Service being used, the Vertical subdomain name (or similar), the username and IP address of the individual who is using the function or feature (which will include any personal information incorporated into the username), and other information needed to detail the operation of the function and the parts of the Services that are being affected.
We use Google Analytics as one of our analytics providers. You can find out more information about Google Analytics here. Alternatively, to prevent analytics information from being sent to Google, you can use the Google Analytics Opt-out Browser Add-on.

ANALYTICS INFORMATION DERIVED FROM OPERATIONAL DATA
Analytics information also consists of data we collect as a result of running queries against Operational Data across our user base for the purposes of generating Usage Data. "Usage Data" is aggregated data about a category or group of features, services, or users that is not of itself personal information. It is also data about our Subscribers and their business.
We may incidentally come across sensitive or personal information when we compile Usage Data.

INFORMATION FROM THIRD PARTY SERVICES
We may also receive personal information from third parties such as social media, data enrichment or authentication services when, for example, you sign up to our Services, fill in forms on our Services or log onto our Services through such services. Any access we may have to such information is governed by the authorisation procedures of that service. By authorising us to connect with a third party service, you authorise us to access and store your name, email address(es), locale, profile picture URL, and other personal information that the third party service makes available to us, and to use and disclose it in accordance with this Privacy Policy. Please check your privacy settings on these third party services to learn and modify the information these services send to us.


Cookies, web beacons and other tracking technologies
We (and third party advertising and analytics partners that we work with) use cookies, web beacons and other technologies to collect some of the information described above. A cookie is a small text file that is stored on your hard drive or in device memory for record keeping purposes. We use cookies to give you a better and more personalised use of the Services, to save you logging in every time and to count the number of visits. Web beacons are objects embedded in our Services or in emails that assist us to check whether content has been accessed for web analytics. You may be able to opt out of receiving personalised advertisements as described below under "Your choices and privacy rights".

HOW VERTICAL USES YOUR INFORMATION
We use the information collected through our Services for the purposes described in this Privacy Policy or as disclosed to you in connection with our Services. We may use information about you for purposes such as:
- Enabling you to access and use our Services
- Creating your account and maintaining your profile information
- Sending you marketing, advertising, educational content and promotional messages and other information that may be of interest to you, including information about us, our Services, or general promotions for business partner campaigns and services. You can unsubscribe or opt-out from receiving these communications as described below under “Your Choices and Privacy Rights”
- Administering referral programs, rewards, surveys, sweepstakes, contests, or other promotional activities or events sponsored or managed by us or our business partners
- In the case of retail stores, to share the name of the retail store with potential customers to encourage them to use our Services
- Measuring, customising, optimizing and improving the Services and developing new products
- Sending to you service, support and administrative messages, reminders, technical notices, updates, security alerts and other information requested by you
- Facilitating software updates and automatically update the software on your device
- Protecting our Services from security incidents, investigating and preventing fraudulent transactions, unauthorised access to Services, and other illegal activities, and enforcing our terms of use
We may also use information we collect from or about you to create aggregated or de-identified data that does not specifically identify you.


Sharing & disclosure of your information
When you use the Services, we may share your information with the third parties described in this section.

VERTICAL BLOGS, FORUMS AND WIKIS
Our websites offer publicly accessible community services such as blogs, forums, and wikis. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. Your posts may remain even after you cancel your account. To request removal of your personal information from a Vertical community service, please contact us using the information listed below.

SERVICE PROVIDERS, BUSINESS PARTNERS AND OTHERS
We use and work with third party service providers and our trusted business partners to provide application development, hosting, website, infrastructure, maintenance, backup, payment processing, customer relationship management, marketing, accounting, human resources, business intelligence and analytics, data enrichment, customer support and other services for us. These service providers may have access to or process your information for the purpose of providing those services for us. Some of our pages use white-labelling techniques to serve content from our service providers while providing the look and feel of our site.

With your consent, we also share your contact information with select trusted business partners, such as our partners who integrate with Vertical services, to enable them to contact you about their services (as they relate to your Vertical Services). We also obtain contact information from select business partners to better understand your preferences and to deliver you more personalised marketing.

AFFILIATES
We may share your personal information with our affiliated companies in order to provide our Services to you and for the purposes described in this Privacy Policy. For more information, please see the section below under "Our global operations".

THIRD PARTIES YOU AUTHORISE
You can give third parties access to your and your end users’ information on the Services. For example, you may wish to integrate Vertical with a third party appointment scheduling service that requires access to the email addresses you collect from your end users, in order for that appointment service to send reminder emails on your behalf and at your direction. Just be aware that such third party’s use of this information will be governed by the terms and privacy policies of the third party.

LINKS TO THIRD PARTY SITES
Our Services may contain links to other sites. We have no control over, and take no responsibility for, the privacy practices or content on other sites. You are responsible for checking the privacy policy of any such sites so that you can be informed of how they handle personal information.

SOCIAL MEDIA WIDGETS
Our Services may include social media features, such as the Facebook “Like” button and widgets, and the “Share” button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing it.

COMPLIANCE WITH LAWS AND PROTECTION OF RIGHTS
In certain situations, we may be required to use and disclose your information (including personal information) to a third party if we believe the disclosure is reasonably necessary:

To comply with any applicable law, legal process (for example, subpoenas and warrants) or governmental request
To enforce and administer our agreements, policies and terms of use
To protect the property, rights, and safety of Vertical, our Subscribers or the public from harm or illegal activities
For fraud prevention, risk assessment, investigation, customer support, product development or debugging purposes
To protect the rights, property or personal safety of Vertical, its users or members of the public
To establish or exercise our legal rights or defend ourselves against any third-party claims or allegations

BUSINESS TRANSFERS
If Vertical undertakes or is involved in any merger, acquisition, reorganization, sale of assets or bankruptcy or insolvency event, then we may transfer or share some or all of our assets, including your personal information. In this event, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.

NON-IDENTIFYING OR AGGREGATED DATA
We may share aggregated or other non-personal information that does not directly identify you with third parties in order to improve our Services.


Your choices and privacy rights
UPDATING YOUR PERSONAL INFORMATION
You may access, change, or correct information about you by logging into your Vertical account at any time or by making a request to us using the contact details below, in which case we may need to verify your identity before granting access or otherwise changing or correcting your information.

DEACTIVATING YOUR ACCOUNT
If you wish to deactivate your Vertical account, you may do so by logging into your Vertical account and following these instructions or by emailing us using the contact details provided below.

OPTING OUT OF PROMOTIONAL COMMUNICATIONS
You may opt out of receiving promotional communications from Vertical by using the unsubscribe link within each email or contacting us via our home page or sales team. Even after you opt out from receiving promotional messages from us, you will continue to receive transactional messages from us regarding Services (e.g., account verification, purchase and billing confirmations and reminders, technical and security notices).

OPTING OUT OF PARTNER COMMUNICATIONS
If you have given us permission to share your information with our business partners for their own marketing purposes, you may opt out from such sharing at any time by emailing us using the contact details provided below. Please be aware that even after you opt out, you may continue to receive messages from the businesses that have already received your information – if you wish to opt out of from receiving these messages, you should contact the businesses directly.

OPTING OUT OF ADVERTIZING AND ANALYTICS
You may opt out of receiving cookies by instructing your browser to stop accepting cookies or to prompt you before accepting a cookie from websites you visit, by changing your browser options.

You also can learn more about cookies by visiting www.allaboutcookies.org, which includes useful information on cookies and how to block cookies on different types of browsers and mobile devices. Please note, however, that by blocking or deleting cookies used in Services, you may not be able to use all aspects of our Services.


Additional Information for California Residents
If you are a California resident, the following information also applies to you with respect to personal information collected through your use of our Services.

INFORMATION WE COLLECT AND SOURCES OF INFORMATION
This Privacy Policy already describes the information we collect and the sources of information – see the section above titled "Your Information". This section of the Policy organizes that information around the categories of personal information set out in the California Consumer Privacy Act (CCPA).

In the past 12 months, we have collected the following information for the following purposes:
Identifiers, including your name, email address, mailing address, Internet Protocol address and other Subscriber profile information. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our Services.
Internet or other electronic network activity information, including your browser type, operating system, language, device identification numbers and other information regarding your interactions with our Services. We obtain this information automatically in the course of your interactions with our Services.
Commercial information, including records of products and services that you sell and other information about your business. We obtain this information when you provide it to us.
Demographic information / protected classification characteristics, including your age and gender. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our Services.
Geo-location data, including your locale, zip code, and general geolocation information (based on your IP address). We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our Services.
Audio, video and other electronic Data, such as chat and any interaction that you may have with us (such as for customer service purposes) or any information you submit in forums, chat or message boards, and feedback or testimonials you provide about our Services. We obtain this information when you provide it to us or otherwise automatically in the course of your interactions with our Services.
Professional and employment-related information, including your job history and professional experience. We obtain this information when you provide it to us when applying for a role with Vertical.
Inferences: This includes inferences drawn from any of the information identified above to create a profile reflecting preferences and characteristics. We obtain this information automatically in the course of your interactions with our Services.

HOW WE USE AND SHARE INFORMATION
We collect and use personal information for the business and commercial purposes as described in the section above titled "How Verticalusers your information". You can also find information about how we share your personal information in the section above titled “Sharing & disclosure of your information”.

In the preceding 12 months, we have disclosed the following categories of personal information for a business purpose:
Identifiers, such as those set forth above;
Internet or other electronic network activity information;
Commercial information;
Demographic information / protected classification characteristics;
Geo-location data;
Audio, video and other electronic data;
Professional and employment-related information;
Inferences.
We do not "sell" your personal information for the purposes of the CCPA. While we use various service providers to provide our Services to you, these service providers are contractually bound to use the information we share only for the purposes of providing their service to us (and not for their own purposes). In addition, we only disclose your personal information to third parties for their own commercial purposes with your consent.

YOUR PRIVACY RIGHTS
You have the right to:
Request that we disclose to you the personal information we have collected, used and disclosed over the past 12 months, and information about our data practices;
Request that we delete the personal information that we have collected from you;
Be notified of any financial incentives offers and their material terms and opt-out of such incentives at any time;
Not be discriminated against for exercising any of these rights;
As stated above, we do not "sell" your personal information and do not currently offer any financial incentives.

You can exercise some of these rights by following section above titled "Your choices and privacy rights". You (or your agent authorized to exercise your rights under the CCPA) can also request to exercise any of these rights by emailing support@verticalhq.com

Please note that to protect your information, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID. Under the CCPA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. We may request that your authorized agent have written permission from you to make requests on your behalf and may need to verify your authorized agent’s identity.


Additional information for European Subscribers
If you are a resident of the European Economic Area, the United Kingdom or Switzerland, the following information also applies to you with respect to personal information collected through your use of our Services.

DATA CONTROLLER
Vertical Retail Limited is the data controller of your personal information.

LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
We collect, use and share your personal information on the following legal bases:
We process your information as necessary to perform our contract with you, for example to provide our Services, to maintain your account and to provide contests or promotions in which you have enrolled.
In certain cases, we process your information based on your consent, for example when we send you marketing about our Services.
We process your information where we have a legitimate interest to do so, for example to provide you with technical support, to improve our Services and for the establishment, exercise or defense of legal claims.
We may also process your information in order to comply with a legal obligation to which we are subject.

YOUR PRIVACY RIGHTS
You have the right to:
Know what personal information we hold about you, and to make sure it’s correct and up to date
Request a copy of your personal information or ask us to restrict processing of or delete your information
Request that we provide your personal information in a readily usable format so that it can be ported to another data controller
Object to our continued processing of your personal information
Withdraw your consent, where we rely on your consent to process your personal information
You can exercise some of these rights by following section above titled "Your choices and privacy rights". You can also request to exercise any of these rights by emailing support@verticalhq.com

In addition, if you’re not happy with how we are processing your personal information, you also have the right to complain to your local information protection authority. Your local data protection authority will be able to give you more information on how to submit a complaint.


Children’s use of the services
Our Services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact us at the email address listed below.


Security
We have adopted technical, administrative and physical procedures to collect, manage, maintain and store information in a manner designed to help protect your information from loss, misuse, unauthorised access, and alteration. Unfortunately, no security system is impenetrable and due to the inherent nature of the Internet as an open global communications vehicle, we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be absolutely safe from intrusion by others, such as hackers.
Where data is transferred over the Internet as part of the Services, the data is encrypted using industry standard TLS (HTTPS).


Our global operations (including transfers of data from your home country to another)
We operate globally and therefore, in order to provide you with our Services, your personal information may be transferred to, and processed in countries other than the country in which you live in, including, but not limited to, Australia, New Zealand, United Kingdom and the United States. These countries may have laws different to what you’re used to and, in some cases, less protective. Rest assured, wherever we transfer and process your information we put safeguards in place to ensure that your information remains protected.

For Subscribers who reside in the European Economic Area (EEA), Switzerland and the United Kingdom, when your personal information is transferred outside of your home country it will only be transferred to countries that have been deemed to provide an adequate level of protection for personal information, or to a third party where we have approved transfer mechanisms in place to protect your personal information – i.e., by entering into the European Commission’s Standard Contractual Clauses.

For Australian Subscribers, the third parties we share your information with do not control, and are not permitted to access or use your personal information, except for the limited purpose it was provided. This means that, for the purposes of Australian privacy legislation and Australian Subscribers, Vertical does not disclose personal information to third parties located overseas.

For Canadian Visitors and Subscribers, when you voluntarily and expressly provide Personal Data, an existing business relationship is created under Canada's Anti-Spam Law (CASL). We may use your Personal Data to provide you with information that is relevant to you or your business, such as newsletters, event invitations, or updated about Services. In some cases, we may collect, use or disclose Personal Data without your consent or knowledge (e.g we may use your Personal Data where it's been conspicuously published on a website or directory). While we offer you some control over marking communications, certain transactional, relationship and legally required communications will not be affected by the choices you have made about marketing communications. You have the right to revoke your consent to the collection, use and disclosure of your Personal Data and to unsubscribe to electronic communications at any time.
Electronic Messages to Canadians - Our Services allow Subscribers to collect and use the Personal Data of End-Users, through communications or transactions facilitated by Vertical. You may not use the Services to send your Canadian-based End-Users commercial electronic messages without first obtaining their express consent or otherwise complying with other legal requirements.


Information retention
We retain personal information we collect from you where we have an ongoing legitimate business need to do so (in connection with the purposes described in this Privacy Policy). For information about how long any of our Subscribers retain your personal information, please contact that Subscriber.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.


Updates to our privacy policy
Vertical reserves the right to change this Privacy Policy from time to time, and if we do we will post any changes on this page. Vertical will make every effort to communicate any significant changes to you directly.

Do You Have Questions?
Thanks for reading! If you have any questions about this Privacy Policy or Vertical's privacy practices, or would like to request a printable version of the Privacy Policy, please contact us at support@verticalhq.com.