Privacy Policy

EFFECTIVE AS OF SEPTEMBER 1, 2023

This is the Privacy Policy of the format.com website (and any successor or other domains that we operate) and all content, services and products, including our mobile applications, that we provide (collectively, the “Application”). The Application is owned and operated by Ideaform Inc. (together with our affiliates and subsidiaries, “Ideaform”, “we”, “us”, “our” and terms of similar meaning). It describes the personal information that we collect from users of our Application as part of the normal operation of our Application, and how we use and disclose this information. Capitalized terms used but not defined in this Privacy Policy have the meanings in our Terms of Service.

In this Privacy Policy, when we refer to “Users”, we mean our customers who use our Services to create their own Portfolios or who use Format Prints to sell their media on products, and when we refer to “End Users” we mean the users, visitors and customers of our Users’ Portfolios and of their media on products through Format Prints.

This Privacy Policy describes what we do with personal information that we collect and use for our own purposes (i.e., where we are a controller), such as User Account information and information about how you use and interact with our Services, including information you submit to our customer support as well as certain information relating to End Users.

We host and process Content for our Users, for their own use and for the use of their End Users. Our Users tell us what to do with their Content in relation to the Service, and in accordance with the Agreement and the operation of our Service we follow their instructions. If you are an End User of one of our Users’ Portfolios and want to know how that User handles your information, you should check its privacy policy. See also our Data Processing Policy.

We use cookies and similar technologies. Our Cookie Policy describes what we do in that regard.

By accepting this Privacy Policy in registration or by using our Services, you expressly consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Service. The personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to servers in the United States, and by using our services you expressly agree to such transfer of data to the United States.

How We Use Your Information

We use personal information in the file we maintain about you, and other information we obtain from your current and past activities on the Application, to provide to you the services offered by the Application including to fulfil the orders that you place for products on Format Prints and communicate with you regarding those purchases; resolve service disputes; troubleshoot problems; measure consumer interest in our products and services; inform you about online and offline offers, products, services, events and updates; deliver information to you that, in some cases, is relevant to your interests, such as product news; customize your experience; detect and protect us against error, fraud and other criminal activity; enforce our Terms of Service;; provide you with system or administrative messages, and as otherwise described to you at the time of collection.

We may also use personal information about you to improve our marketing and promotional efforts, to analyze Application usage, to improve our content and product offerings, and to customize the Application’s content, layout, and services. These uses improve the Application and better tailor it to meet your needs, so as to provide you with a smooth, efficient, safe and customized experience while using the Application.

Please see below under “How we Retain your Personal Information” for information on what we do to account information when you terminate your account with us.

What Information Do We Collect?

Our primary purpose in collecting personal information from you is to provide you with a safe, smooth, efficient, and customized experience. This allows us to provide services and features that most likely meet your needs, and to customize our service to make your experience safer and easier. We only collect personal information about you that we consider necessary for achieving this purpose.

In general, you can browse the Application without telling us who you are or revealing any personal information about yourself. Once you become a User or purchase products using Format Prints, we require you to provide various contact and identity information and other personal information as indicated on the relevant forms on the Application, and you are no longer anonymous to us. Where possible, on these forms we indicate which fields are required and which fields are optional. In addition, as you use the Application, you can from time to time enter or send to us personal information.

You always have the option to not provide information by choosing not to become a User or by not using the particular feature of the Application for which the information is being collected.

We also automatically track certain information about you based upon your behaviour on our Application. We use this information to do internal research on our users’ demographics, interests, and behaviour to better understand, protect and serve you and our community. This information may include the URL that you just came from (whether this URL is on our Application or not), which URL you next go to (whether this URL is on our Application or not), your computer browser information, your IP address and your location.

If you are an End User of our Users’ Portfolios, or you visit Format Prints, we also get information about those interactions, though we use this in anonymous, aggregated or pseudonymized form which does not focus on you individually. We use this data to evaluate, provide, protect or improve our Services (including by developing new products and services).

Some of this information is collected automatically using cookies and similar technologies when you use our Services and our Users’ Portfolios. We let our Users control what cookies and similar technologies are used through their Portfolios (except those we need to use to provide the Services properly, such as for performance or security related reasons). You can read more about our use of cookies in our Cookie Policy. Some of this information is similarly collected automatically through your browser or from your device.

Please be aware that we use cookies and other tracking technologies within the Application to monitor and record any and all activities and communications to, from, and on, the Application in order to safeguard, improve, and analyze usage of, the Application, and for the other purposes listed in this Privacy Policy. For the avoidance of doubt, you hereby acknowledge, agree, and consent to, such monitoring and recording. 

We may deploy on our Application certain types of “Non-Cookie Technologies” provided by our service providers to support our digital advertising programs.  These technologies often include browser cache, locally stored objects, or the creation of a statistical identifier wherein an identifier, much like a cookie identifier, is calculated based on the characteristics of a browser or device that distinguishes it from other browsers or devices. These identifiers are calculated either from the data your browser or device shares automatically or with additional data specifically requested from your browser or device. For more information, see https://thenai.org/wp-content/uploads/2021/07/NAI_BeyondCookies_NL.pdf.

We also use Twitter’s Conversion Tracking and Tailored Audiences product – by using the Application you are permitting Twitter to collect non-identifying data for analytics purposes. We use this data to improve upon our services and audience; this anonymous data is only used to understand our user base and to assess features and potential advertising content to enhance the Application experience. At no point in time is your personal information tied to this analytics data by Twitter. More information about how you can opt out of this program, including through the Do Not Track functionality in your web browser, is available here.

If you use a Third Party Service (such as Google) to register for an Account, the Third Party Service may provide us with your Third Party Service account information on your behalf, such as your name and email address (we don’t store passwords you use to access Third Party Services). Your privacy settings on the Third Party Service normally control what they share with us. Make sure you are comfortable with what they share by reviewing their privacy policies and, if necessary, modifying your privacy settings directly on the Third Party Service.

We do not collect or save your credit card information when you use your credit card to subscribe to our Application or to purchase from Format Prints – when you do so, the payment processors that we use handle all credit card information. However, if you do so we do obtain limited information about your payment card from our payment processors, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processors are Stripe, Braintree, and PayPal. Please consult their terms of use and privacy policies for more information about how they use your personal information.

Following your registration on the Application, you can review and change your information in your account area. If you disclose personal information on the Application and wish to have it removed, please contact us at the support contact information posted on the Application.

Our Disclosure of Your Information

We will not sell or rent your personally identifiable information to third parties without your explicit consent. The following describes some of the ways that your information may be disclosed in the normal scope of business to provide our services:

Anonymized Aggregated Data. We aggregate and anonymize data and use and disclose such information for a variety of purposes. However, in these situations, we do not disclose any information that could be used to identify you personally.

End Users. We may share with our Users data regarding usage by End Users of their Portfolios or their areas on Format Prints. For example, we may provide a User with information about what web page the End User visited before coming to their Portfolios or their areas on Format Prints, and how their End Users interacted with those areas of the Application. This is so Users can analyze the usage of their Portfolios and their areas on Format Prints, and improve their services.

Public Areas of the Application. All of your activities in the public areas of the Application will be identifiable to your User ID, and other people can see your published content.

Subsidiaries and Affiliates; Service Providers. We may from time to time use the services of affiliates, subsidiaries and unrelated service providers in the operation of the Application, and may disclose personal information to them in the course of our use of their services. For example, we may use the services of third-party hosting companies to host the operation of the Application. This may involve the hosting of data, including personal information, on servers operated by those hosting companies. We provide the necessary information to our fulfilment partners to enable them to fulfil orders placed with us. We also partner with third party publishers, advertising networks and service providers to manage our ads on other sites. Our third party partners may set cookies on your device or browser to gather information about your activities on the Services and other sites you visit, in order to provide you with Ideaform ads. For example, if you visit us and also use a social media platform, you may see a Ideaform ad in your social media newsfeed or timeline. See our Cookie Policy for more information. We take care to use only service providers that we believe are reputable and able to live up to our and your expectations, including about the handling of confidential information.

Legal Requests; Emergencies; Jurisdictions. We cooperate with law enforcement inquiries and demands for information that are made under force of law. We are also cognizant of the need to address emergencies. Therefore, we may disclose User and End User personal information (a) to any governmental authority as part of an investigation to determine our compliance with any applicable law, rule, or regulation (including privacy laws, rules, and regulations), (b) in response to a court order, subpoena, discovery request, or other lawful judicial or administrative proceeding, (c) as otherwise required under any applicable law, rule, or regulation, and (d) in good faith, to protect or defend our rights or property or those of other users or End Users.

We may also disclose personal information to the acquiror or its agents in the course of the sale of our business. If we do this, the disclosure will be subject to confidentiality arrangements customary in such transactions.

Security

Ideaform Inc. strives to protect your personal information. For security of transactions, we use the Secure Sockets Layer (SSL) protocol, which encrypts any personal information you enter into registration forms on the Application. The encryption process protects your information, by scrambling it before it is sent to us from your computer. We also make commercially reasonable effort to ensure the security of your personal information on our system. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot warrant the security of any information you transmit to us.

How We Retain Your Personal Information

We retain personal information regarding you or your use of the Services for as long as your Account is active or for as long as needed to provide you or our Users with the Services. We also retain personal information for as long as necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes and to enforce our agreements and to protect our and others’ interests.

The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. Factors we consider in determining these periods include the minimum required retention period prescribed by law or recommended as best practice, the period during which a claim can be made with respect to an agreement or other matter, whether the personal information has been aggregated or pseudonymized, and other relevant criteria. For example, the period we keep your email address is connected to how long your Account is active, while the period for which we keep a support message is based on how long has passed since the last submission in the thread.

As Users may come back to us after an Account becomes inactive, we don’t immediately delete your personal information when a trial period expires or you cancel all paid Services. Instead, we keep your personal information for a reasonable period of time, so it will be there for you if you come back.

You may delete your Account by contacting us at privacy@format.com and we will delete the personal information it holds about you (unless we need to retain it for the purposes set out in this Privacy Policy).

Please note that in the course of providing the Services, we collect and maintain aggregated, anonymized or de-personalized information which we may retain indefinitely.

Other Information Collectors

Except as otherwise expressly included in this Privacy Policy, this document only addresses the use and disclosure of information we collect from you. To the extent that you disclose your information to other parties through the Application, including Third Party Services, different rules may apply to their use, collection and disclosure of the personal information you disclose to them. Since we do not control the information use, collection or disclosure policies of third parties, you are subject to their privacy policies. We encourage you to ask questions before you disclose your personal information to others.

End Users’ Personal Information

Users who have created a Portfolio using the Services are responsible for what they do with the personal information they collect, directly or through our Services, about their End Users. This section is directed to our Users concerning their End Users.

  1. Your Relationship with End Users

If you’re one of our Users, you may collect personal information about your End Users. For example, during an eCommerce checkout you may ask your End Users to provide their name, address, email address and payment information so that you can complete their orders. You may also use cookies and similar technologies to analyze usage and other trends.

You’re solely responsible for complying with any laws and regulations that apply to your collection and use of your End Users’ information, including personal information you collect about them from us or using our functionality or cookies or similar technologies.

We’re not liable for your relationship with your End Users or how you collect and use personal information about them (even if you collect it from us or using our functionality or cookies or similar technologies) and we won’t provide you with any legal advice regarding such matters. If applicable law requires, you must provide and make available legally compliant privacy policy with respect to the personal information of End Users that you collect using the Application and the Services.

  1. End User Payment Information

Your End Users’ payment information may be processed via third party eCommerce Payment Processors with which you integrate your Account, in accordance with such eCommerce Payment Processors’ terms and policies. We transmit your End Users’ complete payment information when they initially provide or update it only so that we can pass it along to the eCommerce Payment Processors you agree to use. We don’t collect or store your End Users’ payment information except as described above.

Your Rights and Choices

Canada Privacy Rights. Personal data (as the term is defined in the Personal Data Protection and Electronic Documents Act of Canada (“PIPEDA”) will be collected, stored, used and/or processed by us in accordance with this Privacy Policy and our obligations under PIPEDA and other applicable Canadian provincial laws. Pursuant to these Canadian laws, you have a right to request access to your personal information and to request that inaccurate personal information be corrected. If you have submitted personal information to us and would like to have access to it, or have it corrected, please contact us in accordance with the “Questions” section listed below. When requesting access to, or correction of, your personal information, we will require that you verify our request via email, and we will request specific data from you to enable us to confirm the authenticity of the request and your identity, and to enable us to search our records and databases. We may charge you a fee to access your personal information, provided that we advise you of any such fee in advance. Your right to access personal information is not absolute, and we may not be able to allow you to access certain personal information in certain circumstances (e.g., if the information contains personal information of other persons or it is subject to legal privilege). In the event that we cannot provide you with access to, or the ability to correct, your personal information, we will use reasonable means to inform you of the reasons why, subject to any legal or regulatory restrictions. To delete your name from our electronic contact lists (text or email), please contact us in accordance with the “Questions” section listed below. If you have concerns with our data processing, you may file a complaint with the Office of the Privacy Commissioner of Canada. For more information about the Office of the Privacy Commissioner of Canada, please access its website.

California Privacy Rights. Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), California residents are entitled to certain data privacy rights:

  • Right to Know (Specific Pieces of Personal Information). You have the right to know the specific pieces of your personal information that we have collected about you.
  • Right to Know (Categories of Personal Information). You have the right to know (i) the categories of personal information we have collected from you; (ii) the categories of sources from which the personal information is collected; (iii) the categories of your personal information we have sold or disclosed for a business purpose; (iv) the categories of third parties to whom your personal information was sold or disclosed for a business purpose; and (v) the business or commercial purpose for collecting or selling your personal information.
  • Right to Delete. You have the right to request that we delete your personal information that we have collected and retain. 
  • Right to Correct. You have the right to request that we correct inaccurate personal information that we have collected and retain.
  • Nondiscrimination. You have the right not to be subject to discrimination for asserting your rights under the CCPA. 

Submit a Privacy Request. To submit a privacy request, you (or your authorized agent) may contact us using the “Questions” section below. An authorized agent must be registered with the California Secretary of State to conduct business in California. 

Privacy Request Verification Process. If you (or your authorized agent) make any request related to your personal information, we will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, we will, to the extent required or permitted by law, require you (or your authorized agent) to verify your request via email, request certain contact information or government identifiers, and we will match at least two pieces of such personal information with data that we have previously collected from you before granting you access to, erasing, or correcting, specific pieces or categories of personal information, or otherwise responding to your request. We may require written documentation that demonstrates a third party is authorized to serve as your agent for the purposes of submitting the requests set forth herein, unless you have provided the authorized agent with power of attorney pursuant to California Probate Code §§ 4121 to 4130. None of the CCPA’s rights are absolute, and such rights are subject to legal and regulatory exceptions and exemptions. For more information about the CCPA, please see https://oag.ca.gov/privacy/ccpa. 

Opt-Out Rights / Do Not Sell My Personal Information. California residents have the right to opt out of the “sale” of their personal information. However, we do not sell your personal information to third parties for profit or monetary or other valuable consideration, and therefore we do not provide opt-out request processes for the sale of personal information (because we do not undertake such activities).

Opt-Out Rights / Do Not Share My Personal Information. California residents have the right to opt out of the “sharing” of their personal information. We use third-party analytical and targeted advertising features on our Application and similar web tools provided by our marketing partners, and such features, tools and marketing relationships involve the disclosure of your personal information to third parties and may constitute the “sharing” of your personal information for CCPA purposes. To learn more on how you can opt-out from these features and tools, please see our Cookie Policy. 

Children. The Application is not directed at, and should not be used by, minors under the age of sixteen (16), and therefore we do not knowingly sell or share the personal information of minors under sixteen (16) years of age.

Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for reasons other than those set forth in the CCPA, and therefore we do not provide individuals with the ability to limit how we use or disclose such sensitive personal information.

California “Shine the Light”. Under California Civil Code Section 1798.83 (“Shine the Light”), California residents have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties; however, we do not disclose personal information to third parties for their direct marketing purposes.

Colorado Privacy Rights. Pursuant to the Colorado Privacy Act (CPA), Colorado residents are entitled to the following data privacy rights:

  • To confirm whether or not we are processing your personal information and access such personal information, unless such confirmation or access would require us to reveal a trade secret.
  • To correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of your personal information.
  • To delete personal information provided by, or obtained about, you.
  • To obtain a copy of your personal information processed by us, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.

Submit a Privacy Request. To submit a CPA privacy request, please contact us in accordance with the “Questions” section below. If you would prefer, you may designate an authorized agent to submit a CPA privacy request on your behalf.

Privacy Request Verification Process. If you make any request related to your personal information, we will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, before granting you access to, erasing, or correcting, specific pieces or categories of personal information or otherwise responding to your request, we  will, to the extent required or permitted by law, (i) require you (or your authorized agent) to verify your request via email, (ii) request certain contact information or government identifiers, and (iii) match at least two pieces of such personal information with data that we have previously collected from you. None of your privacy rights are absolute, and such rights are subject to exceptions and exemptions. For more information about the Colorado Privacy Act, please see https://coag.gov/resources/colorado-privacy-act/. 

Privacy Requests Appeals Process; Complaints. If you would like to appeal a decision we have made with respect to your privacy request, please email us in accordance with the “Questions” section listed below, with the subject line “ATTN: Privacy Appeals,” and describe the nature of your request, and the reason for requesting an appellate review. You may file privacy complaints with the Colorado Attorney General at: https://coag.gov/file-complaint/.

Opt-Out Rights / The Sale of Personal Information. Colorado residents have the right to opt out of the “sale” of their personal information. However, we do not sell your personal information to third parties for monetary consideration or other valuable consideration, and therefore we do not provide opt-out request processes for the sale of personal information (because we do not undertake such activities).

Opt-Out Rights / Targeted Advertising. Colorado residents have the right to opt out of having their personal information used for targeted advertising purposes. We use third-party analytical and targeted advertising features on our Application and similar web tools provided by our marketing partners. To learn more on how you can opt-out from these features and tools, please see our Cookie Policy.  

Opt-Out Rights / Profiling. Colorado residents have the right to opt out of having their personal information used for profiling in furtherance of decisions that produce legal or similarly significant effects. However, we do not engage in such activities. 

Connecticut Privacy Rights. Pursuant to the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, also known as the Connecticut Data Privacy Act (CDPA), Connecticut residents are entitled to the following data privacy rights:

  • To confirm whether or not we are processing your personal information and access such personal information, unless such confirmation or access would require us to reveal a trade secret.
  • To correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of your personal information.
  • To delete personal information provided by, or obtained about, you.
  • To obtain a copy of your personal information processed by us, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means, provided we shall not be required to reveal any trade secret.

Submit a Privacy Request. To submit a CDPA privacy request, please contact us in accordance with the “Questions” section below. If you would prefer, you may designate an authorized agent to submit a CDPA privacy request on your behalf.

Privacy Request Verification Process. If you make any request related to your personal information, we will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, before granting you access to, erasing, or correcting, specific pieces or categories of personal information or otherwise responding to your request, we  will, to the extent required or permitted by law, (i) require you (or your authorized agent) to verify your request via email, (ii) request certain contact information or government identifiers, and (iii) match at least two pieces of such personal information with data that we have previously collected from you. None of your privacy rights are absolute, and such rights are subject to exceptions and exemptions. For more information about the Connecticut Data Privacy Act, please see https://portal.ct.gov/AG/Sections/Privacy/The-Connecticut-Data-Privacy Act. 

Privacy Requests Appeals Process; Complaints. If you would like to appeal a decision we  has made with respect to your privacy request, please email us in accordance with the “Questions” section listed below, with the subject line “ATTN: Privacy Appeals,” and describe the nature of your request, and the reason for requesting an appellate review. You may file privacy complaints with the Connecticut Attorney General at: https://portal.ct.gov/DCP/Complaint-Center/Consumers—Complaint-Center.

Opt-Out Rights / The Sale of Personal Information. Connecticut residents have the right to opt out of the “sale” of their personal information. However, we do not sell your personal information to third parties for monetary consideration or other valuable consideration, and therefore we do not provide opt-out request processes for the sale of personal information (because we do not undertake such activities).

Opt-Out Rights / Targeted Advertising. Connecticut residents have the right to opt out of having their personal information used for targeted advertising purposes. we use third-party analytical and targeted advertising features on our Application and similar web tools provided by our marketing partners. To learn more on how you can opt-out from these features and tools, please see our Cookie Policy. 

Opt-Out Rights / Profiling. Connecticut residents have the right to opt out of having their personal information used for profiling in furtherance of decisions that produce legal or similarly significant effects. However, we do not engage in such activities. 

Nevada Privacy Rights. We do not currently conduct “sales” of personal information for purposes of Nevada law. Notwithstanding the foregoing, Nevada residents may submit a request directing us to not sell personal information we maintain about them to third parties who will sell or license their information to others. If you would like to exercise this right, please contact us in accordance with the “Questions” section listed below.

Virginia Privacy Rights. Pursuant to the Virginia Consumer Data Protection Act, Virginia residents are entitled to certain data privacy rights:

  • To confirm whether or not Ideaform is processing your personal information, and to access such personal information.
  • To request Ideaform correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
  • To request Ideaform delete your personal information.
  • To obtain a copy of the personal information that you previously provided us in a portable and, to the extent technically feasible, readily usable format that allows it to be transmitted to another entity without hindrance, where the processing is carried out by automated means.

Submit a Privacy Request. To submit a privacy request, you may contact us using the “Questions” section below. 

Privacy Request Verification Process. If you make any request related to your personal information, we will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, before granting you access to, erasing, or correcting, specific pieces or categories of personal information or otherwise responding to your request, we  will, to the extent required or permitted by law, (i) require you (or your authorized agent) to verify your request via email, (ii) request certain contact information or government identifiers, and (iii) match at least two pieces of such personal information with data that we have previously collected from you. None of Virginia’s privacy rights are absolute, and such rights are subject to exceptions and exemptions. For more information about the Virginia Consumer Data Protection Act, please see https://lis.virginia.gov/cgi-bin/legp604.exe?211+ful+SB1392ES1. 

Privacy Requests Appeals Process; Complaints. If you would like to appeal a decision we have made with respect to your privacy request, please email us in accordance with the “Questions” section listed below, with the subject line “ATTN: Privacy Appeals,” and describe the nature of your request, and the reason for requesting an appellate review. You may file privacy complaints with the Virginia Attorney General at https://www.oag.state.va.us/contact-us/contact-info.

Opt-Out Rights / The Sale of Personal Information. Virginia residents have the right to opt out of the “sale” of their personal information. However, we do not sell your personal information to third parties for monetary consideration, and therefore we do not provide opt-out request processes for the sale of personal information (because we do not undertake such activities).

Opt-Out Rights / Targeted Advertising. Virginia residents have the right to opt out from having their personal information used for cross-contextual/targeted advertising purposes. we use third-party analytical and targeted advertising features on our Application and similar web tools provided by our marketing partners. To learn more on how you can opt-out from these features and tools, please see our Cookie Policy 

Opt-Out Rights / Profiling. Virginia residents have the right to opt out of having their personal information used for profiling in furtherance of decisions that produce legal or similarly significant effects. However, we do not engage in such activities.

European Union (EU), Switzerland, and United Kingdom (UK). If you are located in the EU, Switzerland, or the UK, you have the following data protection rights:

  • Right to Know. The right to know about what personal information we collect and processes about you, including the types and categories of personal information we collect and process, the sources of such personal information, our retention criteria, with whom we share your personal information, cross-border data transfers, and how to file complaints and inquiries. Such information is set forth in this Privacy Policy.
  • Automated Decision Making.  We do not engage in any activity that subjects our customers, Application users, survey participants, or others to a decision based solely on automated processing, including profiling, which produces legal effects, or similarly significantly results, impacting them.
  • Access Rights. You may ask us whether we process any of your personal information and, if so, receive access to such personal information. When complying with an access request, we will also provide you with additional information, such as the purposes of the processing, the categories of personal information concerned as well as any other information necessary for you to exercise the essence of this right.
  • Rectification. You have the right to have your personal information corrected/rectified in case of inaccuracy or incompleteness. Upon request, we will correct inaccurate personal information about you and, taking into account the purposes of the processing, update any incomplete personal information, which may include the provision of a supplementary statement.
  • Erasure. You have the right to have your personal information erased, which means the deletion of your personal information by us and, where possible, any other controller to whom your data has previously been disclosed. However, your right to erasure is subject to statutory limits and prerequisites (e.g., where your personal information is no longer necessary in relation to the initial purposes for which it was processed, your personal information was processed unlawfully).
  • Restriction of Processing. You have the right to obtain the restriction of the processing of your personal information, which means that we suspend the processing of your personal information for a certain period of time. Circumstances which may give rise to this right include situations where the accuracy of your personal information is contested, but we need time to verify the inaccuracy (if any) of your personal information.
  • Data Portability. You have the right to request us to provide you with your personal information in a structured, commonly used and machine-readable format and to have such data transmitted directly to another controller, where technically feasible.
  • Right to Object. You have the right to object to the processing of your personal information, which means you may request us to no longer process your personal information. This only applies in case the “legitimate interests” ground (including profiling) constitutes the legal basis for processing (see below “Legal Basis for Processing”). However, at any time (and free of charge) you can object to having your personal information processed for direct marketing purposes.
  • Withdrawing Consent. You also may withdraw your consent at any time if we are solely relying on your consent for the processing of your personal information. However, this will not impact our legal basis to process such personal information prior to the withdrawal of your consent.

To exercise any of these data privacy rights, please contact us, or have your designated agent contact us, in accordance with the “Questions” section listed below. To the extent permitted by law, we will need to verify your identity (or the identity of your agent) and ensure the authenticity of your request.

Legal Basis for Processing. We process your personal information in accordance with the legal bases set forth in law. For example, our processing of personal information (as described herein) is justified based on the following legal grounds:

  • Consent. Processing is based on your consent (e.g., you register to receive our marketing materials, you voluntarily contact us).
  • Legitimate Interests. Processing is necessary for our legitimate interests as set out herein (e.g., monitoring your use of the Application and your compliance with the terms and conditions governing the same, improving our Services).
  • Contract Undertaking. Processing is necessary for the performance of a contract to which you are a party (e.g., you purchase or consider purchasing our Services).
  • Legal Compliance. Processing is required to comply with a legal or statutory obligation (e.g., tax disclosures).

Complaints. In the event you have concerns about our data processing, you have the right to file a complaint with your data protection authority.

If you are subject to EU data protection laws, we suggest you lodge any such complaints with our lead supervisory authority:

Irish Data Protection Commissioner

Office of the Data Protection Commissioner

Canal House, Station Road, Portarlington, Co. Laois, R32 AP23, Ireland

Phone +353 57 868 4757

Fax: +353 57 868 4757

Email: info@dataprotection.ie

We would, however, appreciate the opportunity to deal with your concerns before you approach a data protection authority with a complaint, and invite you to contact us in the first instance. 

Updating Your Information. You can access, update, change or delete personal information (or that of your End Users) either directly in your Account or by contacting us at privacy@format.com to request the required changes. You can exercise your other rights (including deleting your Account) by contacting us at the same email address. Please note that, for technical reasons, there is likely to be a delay in deleting your personal Information from our systems when you ask us to delete it. We also will retain personal Information in order to comply with the law, protect our and others’ rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.

Email Marketing and Your Rights. You have the right to opt out of receiving email marketing communications from us. You can elect not to receive marketing communications by changing your preferences in your Account or by following the unsubscribe instruction in such communications.

End User of one of our Users’ Portfolios Rights. If you are an End User of one of our Users’ Portfolios, you should contact them to exercise your rights with respect to any information they hold about you.

Data Transfers

Personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to servers in the United States. We also store personal information locally on the devices you use to access the Services.

Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

In such cases, we continue to protect the information with appropriate safeguards, but it may be subject to the legal jurisdiction of those countries and governmental authorities in those countries.

Persons with Disabilities

We strive to ensure that every person has access to information related to our Services, including this Privacy Policy. Please contact us if you would like this Privacy Policy provided in an alternative format, and we will seek to meet your needs

Do-Not-Track Signals

Some web browsers may transmit “do-not-track” signals to the website with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they are even aware of them. Unless otherwise required by law, we currently do not take action in response to these signals.

Changes to the Policy

We reserve the right to amend this Privacy Policy at any time. We will notify you if this Privacy Policy is amended by updating the “EFFECTIVE AS OF” section listed above. It is your responsibility to periodically review the Privacy Policy to determine whether any amendments have been made hereto. Your use of the Services, and continued use of the Services after any amendments are made to this Privacy Policy, signifies your consent to this Privacy Policy and any amendments hereto. We may, in our sole discretion, provide you communications, including via email or text messages, about changes to our Privacy Policy; however, such communications do not abrogate or otherwise limit your responsibility to periodically review the Privacy Policy to determine whether any amendments have been made hereto.

Questions?

It is our goal to make our privacy practices easy to understand. If you have questions, concerns or if you would like more detailed information, please email our privacy officer at privacy@format.com.

Our Address:
Ideaform Inc. C/O Stikeman Elliott, 199 Bay St. Suite 5300, Commerce Court West, Toronto, Ontario M5L 1B9

Try Format free. No credit card required.

Get Started