HANDWRYTTEN PRIVACY POLICY

Last Updated: 05/21/2018

Handwrytten offers a range of services to customers to send handwritten notes and associated gift cards to people on the customer’s behalf. You may interact with Handwrytten and provide us information through our our online platform at www.Handwrytten.com (and all associated subdomains) (the “Website”), the API, the applications for iPhone and Android, or by speaking with our employees and other representatives in support of your writing project (collectively, the “Services”). Handwrytten (“Handwrytten” or “we” or “us”) has created this Privacy Policy to explain to you our privacy practices regarding the information we gather from you when you visit Website and utilize the Services.

This Privacy Policy aims to give you information on how Handwrytten collects and processes your personal data through your use of the Website and our Services for our own purposes (i.e., where we are the Controller). It is intended to meet our duties as a Controller of Transparency under European data protection legislation known as the “GDPR” or “General Data Protection Regulation”. This Privacy Policy does not describe how we process personal data on our customer’s or any other person’s instructions (i.e., where we act as a Processor).

This Privacy Policy is subject to occasional revision, and if we make any material changes in the way we use your personal data, we may notify you by sending you an e-mail to the last e-mail address you provided to us and/or by prominently posting notice of the changes on our Website. Any changes to this Privacy Policy will be effective upon the earlier of thirty (30) calendar days following our dispatch of an e-mail notice to you or thirty (30) calendar days following our posting of notice of the changes on our Website. These changes will be effective immediately for new users of our Services. Please note that at all times you are responsible for updating your personal data to provide us with your most current e-mail address. In the event that the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice. If you do not wish to permit changes in our use of your personal data, you must notify us prior to the effective date of the changes that you wish to deactivate your Account with us. Continued use of our Website or Services, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.


What Information Do We Collect?

We collect information about you in various ways when you use our Website and Services.

Information You Provide

We collect the information you voluntarily provide to us. For example:

Information Collected Via Technology

We collect certain information automatically via various technological means. We collect information via technology in the following ways:

No Special Categories of Personal Data

We do not collect any “Special Categories of Personal Data” about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.


How Do We Use Your Personal Information?

General Use.

We will only use your personal data for the purposes for which we collected it as listed below, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use your personal data for an unrelated purpose, we will update this Privacy Policy and we will explain the legal basis which allows us to do so.

What is our “legal basis” for processing your Personal Data?

In respect of each of the purposes for which we use your personal data, the GDPR requires us to ensure that we have a “legal basis” for that use. Most commonly, we will rely on one of the following legal bases:

We use your personal information in the following ways:

User Testimonials. We often receive testimonials and comments from users who have had positive experiences with our Services. We occasionally publish such content. When we publish this content, we may identify our users by their first and last name, company name and may also indicate their home city. We obtain the user’s consent prior to posting his or her name along with the testimonial.

Creation of Anonymous Data. We may create anonymous information records from your Specifications and any personal information we collect by excluding information (such as your name) that makes the information personally identifiable to you. We use this anonymous information to analyze request and usage patterns so that we may enhance the content of our Website and improve our Services, including our pricing algorithms. We reserve the right to use anonymous information for any purpose and disclose anonymous information to third parties at our sole discretion.


What happens when you do not provide necessary personal data?

Where we need to process your personal data either to comply with law, or to perform the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. For example, we may not be able to provide you with the functionalities of the Website (e.g., setting up your account or providing a quote) or we may not be able to respond to or fulfil a request you make of us (e.g., for a demonstration of the products).

In this case, we may have to suspend your Account but we will notify you if this is the case at the time.


Do We Share Your Information With Any Third Parties?

We disclose your personal information as described below and as described elsewhere in this Privacy Policy.


How we keep your Personal Data secure.


How long we store your Personal Data.


Your Rights Relating to Your Personal Data

Under certain circumstances, by law you have the right to:


How to exercise your rights.

If you want to exercise any of the rights described above (except Consent Withdrawal, on which see below), please contact us by e-mail at contact@handwrytten.com or you can reach us by telephone at 888-284-5197.

We rely on our Legitimate Interests as the legal basis for the processing of your personal data that is involved in sending you marketing communications. If you wish to exercise your right to object to the processing of your personal datafor this purpose, you may do so by following the opt-out processes outlined in the marketing email you received or by contacting us directly (please see contact information below). Following your exercise of your right to object, we will promptly cease processing your personal data for the purpose of sending you marketing communications. Despite your indicated e-mail preferences, we may send you service related communications, including notices of any updates to our Terms of Use or Privacy Policy.

Typically, you will not have to pay a fee to access your personal data (or to exercise any of the other rights outlined above). However, except in relation to Consent Withdrawal, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.


Complaints

If you would like to make a complaint regarding this Privacy Policy or our practices in relation to your Personal Data, please contact us at: contact@handwrytten.om We will reply to your complaint as soon as we can.

If you feel that your complaint has not been adequately resolved, please note that the GDPR gives you the right to contact your local data protection supervisory authority.


Privacy and Third-Party Links

This Privacy Policy applies solely to information collected by our Website and Services. In an attempt to provide you with increased value, we may include third-party links on our Website. These linked sites have separate and independent privacy policies, and we do not have control over and do not review these linked sites. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Website and welcome any feedback about these linked sites (including if a specific link does not work).


Online Policy Only

This Privacy Policy applies only to information collected through our Website and Services and not to information collected by us offline.


Do Not Track Signals

Some web browsers may transmit “do not track” signals to the websites and other online services with which your web browser communicates. There is no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise our policy on responding to these signals.