DataDome
Privacy policy

DataDome Solutions, Inc. and its affiliates (DataDome, we/us/our) are committed to safeguarding the privacy of our customers and users (you/your) who visit our websites (including https://datadome.co, https://app.datadome.co and any other websites that we may publish and manage), or use services available through our online platform, including the vulnerability scan, the dashboard, documentation, any software made available such as software development kits and application programming interfaces, our advertisements, and other products and services (collectively, the Services). This Privacy Policy (the Privacy Policy) sets out our personal information collection and sharing practices for the Services and is intended to inform you of the ways in which the Services collect personal data, the uses of that personal data, the ways in which we will share any personal data you choose to provide to us, and your choices regarding your personal data. We follow this Privacy Policy in accordance with applicable law.

Further notices highlighting certain uses we wish to make of your personal data, together with the ability to opt in or out of selected uses, may also be provided when we collect personal data from you.

BY ACCESSING OR USING OUR SERVICES, CREATING AN ACCOUNT, CHOOSING TO SUBMIT PERSONAL DATA TO US THROUGH THE SERVICES, OR CLICKING A BUTTON OR CHECKING A BOX MARKED “I AGREE”, “SIGN UP”, “JOIN NOW” (OR SOMETHING SIMILAR), YOU SIGNIFY THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THE TERMS OF THIS PRIVACY POLICY. 

The Services may contain links to sites or platforms not owned or controlled by us. If you follow a link to any of those third-party sites or platforms, please note we are not responsible for the privacy practices of those sites or platforms. The information we collect is covered by this Privacy Policy and the information the third-party site or platform collects is covered by that third-party site’s or platform’s privacy policy. Privacy choices you make on the third-party site or platform will not apply to our use of information we have collected directly through our Services. Be aware when you leave our Services and be sure to read the privacy policies of other sites or platforms that may collect your information.

This Privacy Policy is intended to explain our privacy practices and covers the following areas:

1. Information we may collect
2. How we collect information
   • Cookies and other tracking technologies
   • Targeted Advertising
   • Opt out preference signals
3. How we use collected personal data
4. Sharing your information with other parties
5. Your privacy choices and rights
   • U.S. State data privacy rights
   • Canadian data privacy rights
   • EU, EAA, UK and Swiss data privacy rights
   • Other jurisdictions
6. How to submit a request regarding your personal data
7. How we protect your personal data
8. Storage limits
9. Children’s privacy
10. Changes to our Privacy Policy and Cookies Policy
11. Conflicts
12. Contact Us

INFORMATION WE MAY COLLECT

We collect and process all or some of the following personal information about you, depending on the Service:

• Personal Identifiers: personal data that you provide to us, such as when you create an account with us, complete a form on our Services, sign up to receive information from us, communicate with our customer service department, or participate in a survey or personal data that we may receive from a third party, such as our clients or service providers, including: 
  • your first and last name, email address, postal address, phone number
  • job title, the company you work for, the industry you work in
  • your username, password, password hints, and other information used to authenticate you and allow you to access your account
  • profile picture

• Commercial information: including:
  • information you provide when you subscribe to one of our Services, such as your postal address or telephone number
  • transaction history, including products or services viewed, considered, or purchased, tendencies and preferences

• • Internet or other electronic network activity information : Information about your visits to the Services, interaction with our advertisements, and information collected through cookies and other tracking technologies, such as:
    • your IP address and domain name, your browser version and operating system, browser language, access time, traffic data, location data, web logs, movements on the Services, referring web site addresses and other communication data 
    • we may also collect information about the pages you view within the Services and other actions you take while visiting us. In addition, we may also use such technologies to determine whether you’ve opened an e-mail or clicked on a link contained in an e-mail

• Geographic Location. Your geographic location (city, state, country), where we are permitted by law to process this information
• Employment Information. We may also receive information on your education and work experience in connection with a job opening at DataDome for which you wish to be considered 
• Information we obtain from third parties, including our clients, service providers, and third parties from whom we purchase information about our users or potential users, including:
  • Customers can connect DataDome Ad Protect with their Google Ads account. The link is made through the Google API. DataDome does not transfer any data collected from Google to any other third-party app and therefore no AI models employed by third-party tools or platforms. Processing of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

 

For purposes of this Policy, “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include “anonymized data” (meaning information that doesn’t directly or indirectly, and can’t reasonably be used to, identify a specific individual), “de-identified data” (information that can’t be used to identify an individual without the use of additional information), or “aggregate data” (meaning information about groups of people that doesn’t identify and can’t reasonably be used to identify individuals), or public information lawfully available from governmental records.

HOW WE COLLECT INFORMATION

We collect information from or about you when you use or access the Services, request information from us, participate in surveys, questionnaires, or promotions, or participate in activities on our Services. We also obtain information about you from third parties. We protect this information according to this Privacy Policy and any additional restrictions required by the party who has provided us with that information. Applicable law or your agreement with the third party may require that you authorize the third party to share your information with us before we can acquire it. These third party sources vary over time and include:

 

1. 1. • our service providers 
      • our clients. When we are performing services on behalf of a client, they may provide us with your personal data. In this circumstance, the applicable client’s privacy policy and agreements with you regarding the use of your personal data will apply and not this Privacy Policy. We will comply with our client’s instructions and the data privacy and security requirements in the agreement between us and that client
      • data brokers from which we purchase data to supplement the data we collect
      • publicly accessible sources, such as academic, commercial, and public sector data sources

Cookies and other tracking technologies

We and our service providers may use cookies and other online tracking technologies (“tracking technologies”) to collect information about your activities on our Services or on your devices. We may collect this tracking data whether or not you are logged in or have registered for an account on our Services and, if you have provided us with your personal data (such as by registering for an account on our Services), we may associate this tracking data with your personal data, in which case we will treat that tracking data as your personal data. 

Advertisers and other third parties may also collect tracking data on third party sites and applications and from your devices and applications. This tracking data may be used to decide which ads you see on third-party sites and applications.

To find out more about how we use cookies and other tracking technologies and your choices regarding these technologies, please see our Cookies Policy.

Targeted Advertising

We participate in ad networks. These service providers may place their own tracking technologies on your devices. These third-party tracking technologies collect information about your device and online activities over time and across different websites and services in order to provide you with relevant ads on other parties’ websites and online services. Ad networks may share this information with the advertisers using their network. We prohibit these types of service providers from collecting or accessing information on our Services that directly identifies you (such as your name or email address). 

We may provide social media and other platforms with limited personal information, such as certain identifiers, which they match with their customers’ profiles. Based on this, the platform may show you our ads, look for other users who may enjoy our ads, suppress our ads for you, and provide us insights on how to optimize and better target our advertising.

To find out more about how we participate in ad networks and your choices regarding the use of your personal data in that context please see our Cookies Policy.

To learn how to opt out of ad network interest-based advertising in the United States, please visit the Digital Advertising Alliance’s website YourAdChoices and the Network Advertising Initiative’s website Opt Out of Interest-Based Advertising. 

Even if you disable tracking, you may still receive targeted advertising due to information about you that had previously been disclosed to third parties and you may still receive advertising from third parties, though such advertising may not be based on your interests and preferences. 

Opt out preference signals

Some browsers allow you to enable the Global Privacy Control, a universal tool that automatically communicates your opt-out preferences with regarding to the sale or sharing of your personal data. We will process such signals as a request to opt out.

Most web browsers include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

HOW WE USE COLLECTED PERSONAL DATA

Subject to applicable law and the choices and controls on the use of your personal data that may be available to you, we may use the personal data that we collect from and about you or the devices associated with you for any of the following purposes:

1. 1. • Services Provision. To provide the Services to you and our clients, including processing payments for subscriptions; to improve, troubleshoot, debug, and repair the Services; to provide customer support. We may also share information with third parties when it is required to do any of the foregoing;
      • Authentication. To provide you with access to restricted Service areas, such as your dashboard; to authenticate your profile information and that the person accessing or using your account is you;
      • Communication. To communicate with you, including to respond to your contact / free trial / demo requests and inquiries; to send you important information regarding our Services, changes to our terms, conditions, and policies, or other administrative information; to request feedback or completion of a survey; to otherwise communicate with you; or to carry out our obligations arising from any agreements entered into between you and us;
      • Personalization. To personalize your experience on our Services; to collect statistics about our Services’ usage and effectiveness with various technologies and personalize your experience while you are on our Services, as well as tailor our interactions with you. Please see “Your privacy choices and rights” and “Cookies and other tracking technologies” sections of this Privacy Policy for more information
      • Marketing and Advertising. To advertise and market to you, including sending you promotional communications, email alerts, updates, offers, and invitations to our events, customizing the marketing and advertising that we show you; and presenting you with relevant offers from us and our selected business partners; to run advertising on other websites and applications through our advertising partners. Please see “Your privacy choices and rights” and “Cookies and other tracking technologies” sections of this Privacy Policy for more information
      • Analytics. To operate, develop, analyze, and improve the Services, including through surveys and other user research and analytics tools, in order to better understand our clients’ services and marketing requirements; to better understand our business and develop our products and services
      • Our Business Purposes. For our business purposes, such as to meet our contractual and legal obligations, identify usage trends, further relationships, determine the effectiveness of our promotional campaigns, operate and improve on our lawful business activities, and detect and prevent misuse of our products and services and activities that may violate our policies, pose safety issues, or be fraudulent or illegal, reorganize or make changes to our business.

SHARING YOUR INFORMATION WITH OTHER PARTIES

We will not disclose your personal data to third parties other than as described below or as permitted or required by applicable law. All of our disclosure of your personal data will also be subject to applicable law. The third parties with whom and the purposes for which we may share your personal data include:  

1. 1. • DataDome Entities. To fulfil your requests and carry out our activities, we or you may need to share your personal data with more than one DataDome entity, which entity might be based in a different country
      • Our Service Providers. When companies perform services on our behalf, such as fulfilling transactions, monitoring compliance with and enforcing our agreements, auditing interactions and transactions with users, detecting and preventing fraud, addressing security issues, fixing errors, helping us with advertising and marketing, maintaining accounts, providing customer service, helping with our internal research and development, verifying product and service quality or safety, and performing any of the other actions or activities allowed under this Privacy Policy. These companies must comply with our data privacy and security requirements and may not use your personal data for purposes other than those we request or as required or permitted by law
      • Our Clients.
      • When we are performing services for a client and collecting your personal data on their behalf, such as if you visit or use a third-party website protected by our Services against bot or fraud. In this circumstance, the applicable client’s privacy policy and agreements with you regarding the use of your personal data will apply and not this Privacy Policy. We will comply with our client’s instructions and the data privacy and security requirements in the agreement between us and that client. Applicable law or your agreement with our client may also require that you authorize our client to allow us to share your information with it before we do so. To obtain further information on this processing, please refer to the concerned website’s privacy policy.
      • At Your Direction. When you direct us to share your personal data with another party. Please note that once we share your personal data with another party at your direction, the information received by the other party is controlled by that party and becomes subject to that party’s privacy practices, not this Privacy Policy. Please see “Your privacy choices and rights” section of this Privacy Policy
      • Analytics. To analyze the Services and their use, including to understand how you use the Services, determine how you access the Services, and improve the Services 
      • To Reorganize or Make Changes to Our Business. In the event that we: (i) are subject to negotiations for the sale of our business or part thereof to a third party; (ii) are sold to a third party; or (iii) undergo a re-organization, we may need to transfer some or all of your personal data to the relevant third party (or its advisors) as part of any due diligence process for the purpose of analyzing any proposed sale or re-organization. We may also need to transfer your personal information to that re-organized entity or third party after the sale or reorganization for them to use for the same purposes as set out in this policy
      • Compliance With Law. We may process your personal data to comply with our regulatory requirements or communicate with regulators, as applicable, which may include disclosing your personal information to third parties, the court service and/or regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so. Where permitted, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime
      • Anonymized, De-identified, and Aggregate data. We can disclose anonymized data, de-identified data, and aggregate data to any party for any purpose. Our agreements with third parties require that they not attempt to reidentify anonymized data or de-identified data with an identifiable individual.
      • Other Reasons With Your Consent. For any other purpose for which you provide your consent to us or request that we process your information

You can choose not to disclose certain information. Please see “Your privacy choices and rights” section of this Privacy Policy

YOUR PRIVACY CHOICES AND RIGHTS

You have choices as to the information you share with us. When you are asked to provide personal data, you can say “no”. However, some of the features of our Services require certain personal data from you in order to operate. If you choose not to provide that information, you will be unable to use those features or they may not be personalized to you. If applicable law requires us to collect certain personal data from you or we need it in order to be able to enter into an agreement with you or perform an agreement with you and you don’t provide that personal data, we will not be able to enter into that agreement or may need to suspend or cancel the Services that are affected by you not providing that information. We will notify you if this is the case at that time. 

U.S. State Data Privacy Rights

Several states have enacted data privacy laws that give state residents certain rights with respect to their personal data. These rights are listed below; however, not all states provide their residents with all of these rights and the scope of these rights vary somewhat from state to state. You may exercise these rights at least once (or if you are a resident of certain states, twice), in any twelve month period free of charge.

1. 1. • right to know whether we are processing your personal data. If you are a California resident, you also have the right to know the categories of personal data we have collected about you, the categories of sources of such information, the purposes for the collection, selling, or sharing of such personal data, and the categories of third parties with whom such personal data is shared
      • right to access that personal data, subject to certain exceptions under applicable law. If you are a California resident, you also have the right to access the specific pieces of personal data we have collected about you
      • right of portability to obtain, to the extent technically feasible, a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format that allows you to transmit the data to another entity without hindrance. If you are a California resident, you can make this request up to twice a year, free of charge
      • right to correct inaccurate personal data we have maintained about you, taking into account the nature of the personal data and the purposes of the processing
      • right to delete personal data that we have collected about you, subject to certain exceptions
      • right to right to opt-out of processing of your personal data for:
        • (a) targeted advertising (“cross context behavioural advertising” under California law). Your personal data is used for targeted advertising if it is used to display an ad to you where the ad is selected based on a profile that has been built of you using personal data collected from your activities online over time across non-affiliated websites and applications
        • (b) sale. Your personal data is “sold” if we provide it to a third party for monetary consideration (or also for other valuable consideration under California law). A “sale” does not occur when we disclose your personal data at your direction, to our service provider, or when otherwise permitted under applicable law
        • (c) automated profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. We do not process your personal data for such automated profiling
      • right of no retaliation if you exercise your privacy rights, we will not provide you with different features, quality of services, or pricing except as reasonably related to the scope of information you have provided us or as otherwise permitted by applicable law. For example, if you opt out of providing information required to customize your experience with certain features of our Services, those features will not be customized to you.

Additional Rights of California Residents

1. 1. • right to limit use or disclosure of sensitive personal information if we use or disclose sensitive personal information for reasons other than those set forth in section 7027(m) of the CCPA’s regulations or we disclose it for the purpose of inferring characteristics about you. We do not use or disclose sensitive personal information for reasons other than those set forth in section 7027(m) of the CPRA Regulations and do not disclose it for the purpose of inferring characteristics about you. 
      • right to receive disclosures regarding third party direct marketing. You have the right under California Civil Code Section 1798.83 (the Shine the Light Law) to request certain information regarding the disclosure of your personal data to third parties for such third parties’ direct marketing purposes. We do not share your personal information with third parties for such purposes unless you request that we do so.

Canadian Data Privacy Rights

Canada provides its residents with the following data privacy rights. Exercise of some of these rights may involve a minimal charge. Please note that these rights are not absolute and certain exemptions may apply to specific requests that you may submit to us: 

1. 1. • right to know whether we are processing your personal data, where we obtained it, and how we are using it 
      • right to access that personal data 
      • right to correct inaccurate personal data that we have maintained about you, taking into account the nature of the personal data and the purposes of the processing
      • right to delete personal data that we have collected about you 
      • right of portability, a right to ask that we transfer the personal data you gave us from one organization to another or give it to you
      • right to withdraw consent to our use of your personal data

You may submit a request to exercise your privacy rights, appeal our decision on your request, or ask questions about our processing of your personal data by contacting us through any of the means described here “How to submit a request regarding your personal data” section of this Privacy Policy.

CROSS-BORDER TRANSFERS OF PERSONAL DATA

Personal data that you provide while in Canada may be transferred to the United States and may be transferred to other countries. The laws in these other jurisdictions may not be as protective of your privacy as those in Canada and your personal data may be accessible to law enforcement and national security authorities of those jurisdictions. If we transfer personal data from Canada, we will comply with PIPEDA’s Fair Information Principles and any other applicable Canadian laws with respect to the personal data transferred.

EU, EAA, UK and Swiss Data Privacy Rights

This section of our Privacy Policy provides certain required information to persons located in the European Union (“EU”), a European Economic Area (“EEA”) member state, or the United Kingdom (“UK”), and to persons with respect to whom the processing of their personal data may have actual or potential effects in Switzerland (collectively, “Europe” and such persons, “Europeans”). Before we collect any personal data, you are entitled under the General Data Protection Regulation (“GDPR”), all laws relating to data protection, the Processing of Personal Data, privacy and/or electronic communications in force from time to time in the UK, including the UK GDPR (as defined in section 3 of the Data Protection Act 2018) and the Data Protection Act 2018, as amended (“UK-GDPR”) and the revised Swiss Federal Act on Data Protection (“revFADP”) to the information in this Privacy Policy.

LEGAL BASES FOR PROCESSING PERSONAL DATA

With respect to Europeans, we will only process your personal data when we have a lawful basis for doing so. The table below describes the legal bases for our processing of your personal data under European data protection laws. See “How we use collected personal data” section of this Privacy Policy for a more detailed description of the purposes for which we process personal data. We may also seek your prior consent or rely on some other lawful basis to process your personal data.

 

Purpose	Legitimate Interests
Services Provision	Contract performance; developing, operating, monitoring and securing our Services and business operations generally
Authentication	Contract performance; securing your account and our Services and business operations generally
Communication	Contract performance; establishment, development, maintenance and management of our commercial relationships; enabling the effective provision and use of our Services
Personalization	Consent; developing, operating, improving, and monitoring our Services; enabling the effective provision and use of our Services
Marketing and Advertising	Keeping our customers and potential customers informed about our and our business partners’ products and services.
Analytics	Developing, operating, analyzing, improving, and securing our Services and business operations generally
Our Business Purposes	Developing, operating, monitoring and securing our Services and business operations generally, the management, administration, development and transformation of our business
Legal and Safety Purposes	Ensuring the security of network and information systems, the protection of our Services and organization, the protection of others, the protection and assertion of legal rights, compliance with legal and contractual obligations
Anonymized Data, Pseudonymized Data, Aggregate Data.	Developing and improving our Services and business operations generally
Other Reasons With Your Consent	You have expressly consented to the use

 

RIGHTS OF INDIVIDUALS LOCATED IN EUROPE

If you are European, the laws in your jurisdiction grant you certain rights with respect to your personal data. A list of these rights is below. Please note that certain exceptions apply to the exercise of these rights and so you will not be able to exercise them in all situations. In addition, these rights will vary slightly between jurisdictions. For instance, in France, in addition to the rights listed below, you also have the right to define directives as to how you wish your personal data to be used after your death. If you wish to exercise any of these rights, we will check your entitlement and respond within applicable timescale.

 

Right	What you can do
Know	You have the right to know why we are processing your personal data, how it will be used, with whom it will be shared
Access	You have the right to ask us for copies of your personal data. When making a request, please provide an accurate description of the personal data to which you want access. We may charge a reasonable fee based on administrative cost
Rectification	You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete
Erasure	You have the right to ask us to erase your personal data in certain circumstances and as required by applicable law
Object to Processing	You have the right to object to the processing of your personal data based on legitimate interests. If you make such an objection, we will cease to process such personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests or your rights and freedoms or can demonstrate the processing is for the establishment, exercise, or defence of legal claims.
Restrict Processing	You have the right to ask us to restrict the processing of your personal data in certain circumstances, including: (i) when its accuracy is brought into question or (ii) when we no longer need to process such personal data but you require us to retain such personal data and restrict its processing in connection with the establishment, exercise, or defense of a legal claim with which you are involved
Data Portability	You have the right to ask that we transfer your personal data from one organization to another or give you a copy
Complain to a Supervisory Authority	You have the right to complain about our processing of your personal data to your supervisory authority. A list of supervisory authorities is available here: https://edpb.europa.eu/about-edpb/about-edpb/members_en. If you believe your rights under the UK-GDPR have been violated, the UK-GDPR gives you the right to file a complaint with the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/data-protection-complaints/personal-information-complaint/. If you believe your rights under the revFADP have been violated, you have the right to enforce your claims in court or to file a complaint with the competent data protection authority
Withdraw Consent	If we obtain your written consent to collect and process your personal data, you can subsequently withdraw that consent as to any further processing of such personal data
Opt Out of Automated decision-making	To the extent that we engage in decision-making based solely on automated processing (including profiling) which produces legal effects concerning you or which significantly affects you, you have the right not to be subject to such decision-making. We do not engage in such decision making.

 

You may submit a request to exercise your privacy rights, appeal our decision on your request, or ask questions about our processing of your personal data by contacting our DataDome Protection Officer at privacy@datadome.co.

To submit a request, we are required to verify your identity. You will be required to provide the primary email address listed on your account. A verification email will then be sent to that email address in order to verify your identity. We may need to contact you to confirm your request.

You may use an authorized agent to submit your request. If you are an authorized agent and a consumer has given you written, signed permission to submit a request on their behalf, you must submit a copy of that permission to us in order to submit the consumer’s request. We will require the consumer to verify their identity and directly confirm with us that they have provided you with permission to submit the request. You may submit such requests by contacting our European representative set forth directly above. 

If we refuse your request, we will provide you with the reason for the refusal.

CROSS-BORDER TRANSFERS OF PERSONAL DATA

Personal data that you provide will be transferred outside the EU, EEA, UK, and Switzerland. The GDPR, the UK-GDPR, and the revFADP permit such transfer when necessary for the performance of a contract between you and us, if we obtain your explicit consent to such transfer, or if it is in our legitimate interest to transfer the personal data. The laws in these other jurisdictions may not be as protective of your privacy as those in your location. 

Where we transfer personal information from inside the European Economic Area (the EEA) to outside the EEA, we may be required to take specific additional measures to safeguard the relevant personal information. Certain countries outside the EEA have been approved by the European Commission as providing essentially equivalent protections to EEA data protection laws and therefore no additional safeguards are required to export personal information to these jurisdictions (see the full list here). In countries which have not had these approvals, we will establish legal grounds justifying such transfer, such as EU Commission-approved model contractual clauses, or other legal grounds permitted by applicable legal requirements.

Please contact us as set out in “Contact Us” section of this Privacy Policy if you would like to see a copy of the specific safeguards applied to the export of your personal information.

Other Jurisdictions

If you are a resident of another country, that country may provide you with similar rights; however, not all jurisdictions provide their residents with the same rights and the scope of rights provided may vary somewhat from country to country. You can find information about whether your jurisdiction offers you data privacy rights by conducting an Internet search.

HOW TO SUBMIT A REQUEST REGARDING YOUR PERSONAL DATA

We will respond to all requests to control your personal data within the time period required by applicable law and as required by applicable law. If we require additional information or time to process your requests, we will contact you. In some circumstances, your ability to access or control your personal data will be limited, as required or permitted by applicable law. 

If you have questions about the specific personal data about you that we process or retain or your rights regarding that personal data, please contact us at privacy@datadome.co. In case you have any questions in relation to legal or contractual topics, please contact us at legal@datadome.co.

You may exercise your data privacy rights by contacting our Data Protection Officer at submitting a form on our website or by email at privacy@datadome.co. If you wish to request to receive disclosures regarding third party direct marketing, you may do so by emailing us at privacy@datadome.co.

With respect to your personal data that has been provided to us by or on behalf of our client, please contact our client, if you wish to exercise your privacy rights with respect to that data.

To respond to a request, we are required to verify your identity. You will be required to provide the primary email address listed on your account. A verification email will then be sent to that email address in order to verify your identity. We may need to contact you to confirm your request.

Certain states allow residents to use an authorized agent to make opt-out requests; California allows residents to use authorized agents to submit any data rights request. If you are an authorized agent and an individual has given you written, signed permission to submit a request on their behalf, you must submit a copy of that permission to us in order to submit the individual’s request. We will require the individual to verify their identity and directly confirm with us that they have provided you with permission to submit the request. You may submit such requests by emailing us at  privacy@datadome.co.

We will respond to your requests based on the data privacy laws of your jurisdiction that apply to us as of the effective date of those laws. If we do not act on your request (such as, because there is an exception under applicable law or we cannot verify your identity), we will explain our reasons why.  

How to appeal our decision on your request

You may appeal our decision on your request by emailing us at privacy@datadome.co within 30 days after you receive our decision.

HOW WE PROTECT YOUR PERSONAL DATA

No data transmission over the Internet or our Services can be guaranteed to be secure from intrusion. However, we maintain commercially reasonable physical, electronic and procedural safeguards to protect your personal data collected by the Services from accidental or unlawful destruction, loss, or alteration, and from unauthorized access, use, or disclosure in accordance with data protection legislative requirements. You should use caution whenever submitting information through or in connection with the Services and take special care in deciding which information you provide to us.

 

STORAGE LIMITS

Some or all of the personal data we collect may be stored or processed on servers located outside of your country, including in the United States, whose data protection laws may differ from those where you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to laws in those jurisdictions. Subject to applicable laws in such other jurisdictions, we will use reasonable efforts to ensure that appropriate security processes are in place to maintain protection over the personal data we collect.

We will retain your personal data for as long as reasonably necessary for the purposes outlined in this Privacy Policy, while we have a legitimate business need to do so in connection with your user account (if you have one), or as required by law (for example, for legal, tax, or accounting purposes), whichever is longer. 

If you have elected to receive email communications from us, we retain information about your email preferences until you opt out of receiving email communications from us and in accordance with our policies.

To determine the appropriate retention period for the categories of your personal data, we consider the amount, nature, and type of personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we use your personal data, whether we can achieve those purposes through other means, and applicable legal requirements.

CHILDREN’S PRIVACY

Our Services are not intended for use by children and we do not knowingly collect personal data from children. If you have reason to believe that we may have accidentally received personal data from an individual under age 18, please immediately email us at privacy@datadome.co.

 

CHANGES TO OUR PRIVACY POLICY AND COOKIES POLICY

If our Privacy Policy or Cookies Policy changes, we will post these changes on our Services with the date of revision. Unless otherwise stated, any modifications to this Privacy Policy or Cookies Policy will go into immediate effect after they have been posted. We encourage you to review our Privacy Policy and Cookies Policy periodically. Your continued access to and/or use of the Services after any such changes constitutes your acceptance of, and agreement to be legally bound by, this Privacy Policy and the Cookie Policy, as revised. If our privacy practices, including the ways we use your personal data, materially change from the time you created an online profile, we will notify you about such changes before they take effect and allow you to delete your information as described above, should you disagree with such changes.

CONFLICTS

If any of the terms of this Privacy Policy conflict with any of the terms of our Terms of Use, the terms of this Privacy Policy shall control with respect to the subject matter of this Privacy Policy.

CONTACT US

If you have any questions about this Privacy Policy, please contact our Data Protection Officer by one of the following methods: 

1. 1. • You may email us at privacy@datadome.co
      • You may visit our Site to submit a form
      • You may call us at: +1 646-893-0048 (US); +33 1 76 42 00 66 (EU); +65 3158 7080 (Asia)
      • You may write to us at: DataDome, 76 Greene Street, 4th Floor, New York, New York 10012, Attention: Data Protection Officer

CALIFORNIA NOTICE AT COLLECTION

We collect the following categories of personal data when you interact with us: personal identifiers, including contact information, job title and the company you work for; commercial information, including payment and other information you provide when you subscribe to one of our Services; Internet or other electronic network activity information, including about your use of our Services, advertisements, and the Internet, including your IP address, browser and device type, and information about your interactions with us online; information we obtain from third parties about your use of our Services, including information used to augment the information we have collected about you; and employment information if you are applying for a job with us, including your education and work experience. We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the California Consumer Privacy Act’s regulations. For more information about the types of information we collect, see “Information we may collect” section of this Privacy Policy. We do not knowingly collect, use, “sell” or “share” personal data of individuals under the age of 18 for any purpose. 

We and our service providers may use cookies and other online tracking technologies to collect information about your activities on our Services and the Internet, and about your devices. This data collection may be considered a “sale” or “sharing” or be considered “targeted advertising” under certain data privacy laws. We “sell to” or “share” (as defined by such laws) Internet or other electronic network activity information with certain of our service providers, including those who provide marketing and advertising, analytics, or data augmentation services to us, and with social networks, such as Facebook and LinkedIn.

We use the information we collect for the purposes described in: “How we use collected personal data” section of this Privacy Policy, including to provide the Services to you or our clients, to communicate with you, to personalize your experience on our Services, to analyze the use and performance of our Services, and to market and advertise to you. In order to accomplish these purposes, we may share your information in each category described in this notice with our clients, service providers, and other parties as described in “Sharing Your Information with other Parties” section of this Privacy Policy.

We will retain your personal data for as long as reasonably necessary for the purposes outlined in this Privacy Policy, while we have a legitimate business need to do so in connection with your user account (if you have one), or as required by law (for example, for legal, tax, or accounting purposes), whichever is longer.

Please see “Privacy Policy” for more information as to what personal data we collect, how we collect and use it, and your rights and choices with respect to these activities.