Bizrate Insights Privacy Policy

Effective Date: June 4, 2025

At Bizrate Insights, we take privacy seriously and we respect the privacy concerns of our community of users. This Privacy Policy (the “Privacy Policy”) describes how Bizrate Insights Inc. (the “Company,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our websites (the “Sites”), mobile applications (the “Apps”), and the related content, services, products, and other features and functionality offered on or through those Sites and Apps (collectively, the “Services”).

Manage Your Information

Email Preferences

Opt-out of marketing e-mails by clicking on the following link and filling out the form accordingly. Update Email Preferences

Delete Your Data

Permanently delete your information. Update Data Preferences

Control Over Your Data

For additional ways to delete, opt out, or manage your information, please see the “What Controls Do I Have Over My Information?” section of this Privacy Policy.

What Personal Information Do We Collect?

Information You Provide to Us

The personal information we collect from and about you may vary depending on how you engage with our Services and the information you provide voluntarily. We may collect personal information directly from you or otherwise in connection with your use of the Services, such as:

• Contact Information, including your name, contact details (such as a postal address and email address), event or conference registration and related information (including dietary restrictions or photos and videos taken at events), and communication preferences.
• Inquiry Information, including messages sent through forms, to our email addresses, or via phone. This also may include information provided when you sign up for our newsletters.
• Account Information, including name, username, account ID, date of birth, contact information, profile information (e.g., demographic information or other information we have received when you participate in one of our panels), saved, “liked,” bookmarked items, and webinars or other courses enrolled in or completed.
• Demographic Information, including age, gender, race, income, occupation, marital status, and information about your household/family status, including your household size and the length of time at your residence.
• Health- or Fitness-Related Information, including exercise and activity levels, weight-loss objectives, dietary preferences, and other health and wellness information.
• User-Generated Content, including personal information you choose to provide about yourself when you participate in forums or discussions on the Services, post comments or reviews, and participate in any Services. Please be aware that information you post may be viewed, used, or captured by anyone who visits the Services; therefore, you should avoid posting sensitive personal information that you would not want to be available to the public.
• Contest, Sweepstakes, and Survey Information, including information provided when you enter a contest or sweepstakes, information included in any responses submitted through surveys or questionnaires (e.g., feedback on post-sale transactions, offers that you indicate you may or may not be interested in or have redeemed), or the content of any testimonials.
• Inferences About Your Interests, Preferences, and Other Behavioral Data, including hobbies, interests, and characteristics (e.g., subscriptions or other purchases, or recipes, consuming tendencies, and health and fitness information).

Information Automatically Collected

General

As is true of many digital properties, we and our third-party partners may automatically collect information you provide to us and information about your device and use of the Service when you visit or interact with our Services.

The type of information automatically collected includes:

• Device data, including internet protocol (IP) address, device or other digital IDs, operating system, device type and version, browser type and version, browser id, the URL entered and the referring page/campaign, date/time of visit, other user agent string data, the time spent on our Services, and any errors that may occur during the visit to our Services. Device data may overlap with the other categories of data listed below.
• Analytics/Usage data, including the path taken to our Services, through our Services, and when exiting our Services, usage and activity on or in connection with our Services (e.g., pages visited, whether you have visited or left a third-party property, links clicked, videos watched, offers viewed, clicked, or redeemed, other “conversion” data such as actions taken in response to ads or whether surveys have been completed or abandoned), metrics on how many emails we send are actually opened and which attachments or links are opened, clicked, or viewed. We may also use third-party tools to collect information you provide to us or information about how you use the Services, including mouse movements, scrolling, clicks, and keystroke activity on the Services and other Browse, search, or purchasing behavior (e.g., shopping cart abandonment). These tools may also record information you enter when you interact with our Services or engage in chat or other features through our Services.
• Location data, including geographic location we or our third-party providers may collect, such as via permissions within the app operating system or browser functionality.

Note that we and our third-party partners may combine information that each of us collects automatically with other information about you, including information you choose to provide.

See the “What Controls Do I Have Over My Information?” section below to learn more about how you may limit or disable cookies or certain other tracking technologies on your device.

Third-Party Sources

We also obtain personal information from third parties, which we often combine with personal information we collect either automatically or directly from an individual. For example, we may receive the same categories of personal information described above from the following third parties:

• Other Users who Interact with our Services: We may receive your information from other users who interact with our Services.
• Business Partners: We may receive your information from our business partners, such as companies that offer their products or services on our Services or on other properties (e.g., digital properties, offline locations) or marketing/advertising and analytics partners.
• Social Media Networks: When an individual interacts with our Services through various social media networks, such as when someone logs in through a social network, “Likes” us on Facebook, or follows us or shares our content on Google, Facebook, Instagram, Twitter, or other social networks, we may receive some information from those social networks including your profile information and any other information you permit the social network to share with third parties. We use this information to allow you to log into your account, to communicate or interact with individuals on the social network, to better understand the demographics of our visitors, and to personalize content and advertising. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information or linking or connecting them to other services.
• Service Providers: Our service providers that perform services on our behalf, such as payment processors or survey providers and third parties who conduct marketing/advertising and analytics activities on our behalf, collect personal information and may share some or all of this information with us.
• Information Providers: We may, from time to time, obtain information from third-party information providers to correct or supplement personal information we collect. For example, we may obtain updated contact information from third-party information providers to reconnect with an individual or obtain demographic information (e.g., interests, preferences).
• Other Sources: We may also collect personal information about individuals that we do not otherwise have from, for example, publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.

How Do We Use Personal Information?

We may use your information for various purposes, including:

• To fulfill your requests and provide our Services to you. This includes:
  • Making our Services available to you;
  • Coordinating access to your account;
  • Responding to requests, suggestions, questions, and comments, and providing other types of user support;
  • Sending you service/transaction-related messages, such as changes to your account; and
  • Communicating about, and administering your participation in, events, programs, contests, surveys, polls, questionnaires, and other offers or promotions.
• To personalize your experience on our Services: This includes providing you with content or other products or services you might be interested in and de-emphasize content you’ve already read or viewed.
• For marketing purposes: We may send you email or other marketing/advertising communications about our or others’ features, updates, products/services, and special offers. We may also use individual and aggregate information about you to inform our, and our third-party partners, marketing and advertising campaigns more broadly. For more information on your choices about marketing communications, see the “What Controls Do I Have Over My Information?” section of this Privacy Policy.
• To communicate with you: For example, we may communicate with you about your account activities, such as by providing you transaction confirmations or alerting you when a subscription is up for renewal. If you register with us, we may enroll you in our email newsletters or other periodic electronic communications and may also send you user surveys and promotional communications. We may communicate with you by email, postal mail, telephone, text message, or other means. We may use push notifications on Apps to your mobile device. For more information on how to adjust your communications preferences, see “What Controls Do I Have Over My Information?” below.
• To monitor, improve, and develop our products and services: We may use your information to understand our users and to tailor or optimize our Services. For example, we may analyze statistics and trends to make our Services better and to develop or better personalize the Services or new services or features.
• To protect the security and integrity of our business, comply with legal requirements and obligations, or as otherwise permitted by law: We may use your information to protect our company, our affiliates, our customers, and our Services. We may also use information in order to comply with laws, regulations, court orders, or other legal obligations or to assist in an investigation, protect and defend our rights and property or the rights or safety of third parties, enforce our Terms of Service, Terms of Use, this Privacy Policy, or agreements with third parties, detect and prevent fraud or for crime-prevention purposes, or for any other reason permitted by law. We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets and may use information in connection with or as an asset in such a corporate business transaction. Personal information may also be used in the event of insolvency, bankruptcy, or receivership.
• For any other purposes with your consent, at your direction, or where notice is provided: We may use your personal information for any other purposes with your consent, at your direction, or where notice is otherwise provided.

How Do We Share Personal Information?

We may also disclose personal information to third parties, including:

• Third Parties At Your Request: You may choose to share your activities on the Services with your friends through email, text, or on various social media networks.
• Promotional Partners: We may share information with third parties with whom we partner to provide contests, surveys, and sweepstakes, or other joint promotional activities.
• Marketing and Strategic Business Partners: We may share information with marketing/advertising, analytics, and other business partners (such as those that provide panel-related services, generative AI integrations, or products or services on other properties) for purposes such as providing you with information, undertaking marketing/advertising-related activities, informing business analytics, or for other business or commercial purposes as may be further described in their privacy policies or our privacy policy.
• The Public: When you provide feedback or post user content on our Services (e.g., if you post a comment on an article or comment on our social media sites), your information (e.g., your first name, last initial, state of residence, and your comments) may be displayed on our Services or on our social media pages. When you engage with us on social media, we may tag your social media account or the social media account of others (e.g., to give photo credit to another user).
• With Your Consent, At Your Direction, or Where Notice is Provided: In addition to the sharing described in this Privacy Policy, we may share information about you with third parties whenever you consent to or direct such sharing or where notice is otherwise provided.
• Service Providers and Advisors: Personal information may be shared with third-party vendors and other service providers who perform services for us or on our behalf. This may include certain vendors and providers who engage in marketing or advertising activities, analytics, or provide mailing or email services, tax and accounting services, product fulfillment, generative AI integrations, delivery services, payments processing, data enhancement services, fraud prevention, web hosting, panel-related services, or analytic services.
• Purchasers and Third Parties in Connection With a Business Transaction: Personal information may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of any or all of our company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by an affiliate or third party, or in the event of a bankruptcy, or related or similar proceedings.
• Law Enforcement, Regulators, and Other Parties For Legal Reasons: Personal information may be disclosed to third parties, as required by law or subpoena, or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement, (b) to enforce our Terms of Use or to protect the security or integrity of our Services, or (c) to exercise or protect the rights, property, or personal safety of our organization, our visitors, or others.

In connection with any of the above, we may share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you.

What Controls Do I Have Over My Information?

You may control your information in the following ways:

Access to, Modification of, or Deletion of Your Information:

You have the right to request access to your personal information, amendment/correction of inaccurate/incomplete personal information, or deletion of your personal information. In order to better protect the security of your personal information, we will seek to confirm your identity as part of our processing of any request. Under certain circumstances, we may not fulfill your request, such as where we, in our discretion, deem that your identity has not been reasonably verified or that such information is subject to legal/regulatory, internal audit, record-keeping, or other requirements or legal exceptions such that the request should not reasonably be granted (or should be granted in part). In any event, we will respond to your request within a reasonable timeframe. In order to make such a request of us, please contact us by using one of the following methods:

• for United States residents, please use this form.
• for individuals located in the European Economic Area, Switzerland, or the United Kingdom, please use this form.
• by emailing at privacy@bizrate.com and indicating in the subject line the type of request (e.g., Access, Modification, or Deletion)

Marketing E-mail Preferences:

You can manage your opt-out preferences by:

• using the unsubscribe link at the bottom of such messages or
• Further, you may opt-out of marketing e-mails by clicking on the following link and filling out this form accordingly.

Please note that you cannot opt out of transactional or administrative e-mails (e.g., renewal notifications, orders placed).

Cookies and Other Tracking Technologies:

To manage cookies, an individual may have the ability to change their browser settings to (for example): (i) notify them when they receive a cookie, so the individual can choose whether or not to accept it; (ii) disable existing cookies; or (iii) automatically reject cookies (or certain types of cookies, such as cookies set by third parties). Note that similar controls may exist for other tracking technologies, such as pixels, SDKs, and local Storage. Please check your device or browser settings and related documentation for more information.

Further, note that restricting the use of these technologies might negatively impact an individual’s experience using our Services, as some features or offerings may be less personalized or may not work as otherwise intended. Depending on an individual’s device and operating system, the individual may not be able to delete or block all cookies or other tracking technologies described in this Privacy Policy. In addition, if an individual wants to reject cookies across all browsers and devices, the individual will need to do so on each browser and device they use. You may also have options within your email client to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our emails and performed certain actions with respect to such emails (e.g., URL clickthroughs).

How Do We Protect Personal Information?

We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. That said, no security system is impenetrable and we cannot guarantee the security of our systems at all times. Thus, you assume some risk with regard to the security of information you provide through any digital property, including our Services. To request an invite to our bug bounty program to submit reports on vulnerabilities found on our Sites, you may contact us by emailing security@dotdashmdp.com.

What About Links to Third-Party Websites or Services?

Our Services may provide links to other digital properties that are controlled by third parties. Linked digital properties may have their own privacy notices or policies, which we suggest you review. We are not responsible for the content, usage, terms, privacy policies, or digital properties of third parties.

What’s Our Policy With Respect to Children’s Personal Information?

Our Services are not designed or intended for use by children, and we do not knowingly collect or solicit personal information from children under the age of 16 (or the equivalent age of a child in your jurisdiction) on the Services. If we become aware that we have inadvertently collected personal information from a child under the age of 16 (or the equivalent age of a child in your jurisdiction), we will endeavor to delete any such information promptly. If you believe that we may have collected information from a child under 16 (or the equivalent age of a child in your jurisdiction), please contact us using the contact information below.

What’s Our Policy for Users Outside the United States?

Your personal information may be stored in, transferred to, and processed in the United States and in any other country in which the Company or other Company affiliates or service providers maintain facilities. The data protection laws in these countries may provide a different standard of protection for your personal information than the country in which you are located or your country of residence. If you have questions or wish to obtain more information about the international transfer of your personal information or the implemented safeguards, please contact us using the contact information below.

Where Can I Find Your Region-Specific Disclosures?

We may choose or be required by law to provide different or additional disclosures about our data privacy practices depending on your state or country of residence:

• California, Colorado, Connecticut, Utah, and Virginia: If you are a California, Colorado, Connecticut, Utah, or Virginia resident, please see the ‘U.S. State Privacy Notice’ section below.
• European Economic Area, United Kingdom, or Switzerland: If you are located in the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland, or otherwise engage with our European operations, please see the ‘European Privacy Notice’ section for additional European-specific privacy information, including what constitutes your personal data, the lawful bases we rely on to process your personal data, and your rights in respect of your personal data.

How Will We Inform You About Changes to This Privacy Policy?

We may update this Privacy Policy periodically to reflect changes to our privacy practices. If we make any material changes to our privacy practices, we will indicate at the top of the Privacy Policy the date when it was most recently updated and you shall be bound to such changes when accessing the Services that are linked to the updated Privacy Policy. We may also provide notice of such material changes in other manners at our discretion. We encourage you to periodically review this page for the latest information on our privacy practices.

How Can You Contact Us?

If you have questions about this Privacy Policy or about our privacy practices, you may contact us by emailing privacy@bizrate.com. If you are a California, Colorado, Connecticut, Utah, or Virginia resident inquiring about your privacy rights under your respective State Privacy Law, please include “U.S. Privacy Rights Request” in the subject line of your email. If you are a resident of the European Economic Area inquiring about your rights under the General Data Protection Regulation (“GDPR”), please include “GDPR Privacy Rights Request” in the subject line of your email. You may also write to: 225 High Ridge Road, East Building, Stamford, CT 06905

U.S. State Privacy Notice

For residents covered under the State Privacy Laws, this U.S. State Privacy Notice supplements the information contained in our Privacy Policy by providing additional information under such laws. The term “State Privacy Laws” means, as applicable, the California Consumer Privacy Act (the “CCPA”), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act.

Your Privacy Rights

Depending on your state of residency, you may exercise the following rights under the State Privacy Laws in relation to the personal information about you that we have collected about you (subject to certain limitations under such laws, such as exceptions in the State Privacy Laws or the inability to verify your identity):

Right	Description
The Right to Access	Under the State Privacy Laws, you have the right to obtain confirmation regarding whether we are processing your personal information and to access that personal information. You also have the right to access that personal information in a portable, readily usable format, unless not technically feasible to provide in such a format. Specifically with respect to the CCPA’s right to access, you have the right to request the following: (a) the specific pieces of personal information the business has collected about you and (b) the categories of personal information collected, the sources of collection, the business/commercial purpose for collecting or "selling/sharing" personal information, and the categories of third party to whom the business discloses personal information.
The Right to Deletion	You have the right to request the deletion of PI we have collected from you, subject to certain exceptions under the State Privacy Laws.
The Right to Correction	You have the right to request that inaccuracies in your PI be corrected, taking into account the nature of the personal information and the purposes of the processing of your personal information.
Opt-Out Rights	Under State Privacy Laws, you have the right to opt-out of “sales” and “shares” of personal information, “targeted advertising,” and certain use/disclosure of “sensitive” personal information. We do not “sell” or “share” your personal information or process your personal information for “targeted advertising.” We process "sensitive" personal information only for the limited purposes specified under the CCPA that do not require a corresponding opt-out right. For purposes of the other State Privacy Laws, we do not process “sensitive” personal information except to provide goods/services that you request or as otherwise permitted under those laws without requiring consent. We are not responsible for, and we encourage you to check, the privacy policies of third parties with whom you may direct us to disclose information to, or with whom you may interact, regarding any of their own practices related to “sales,” “shares,” “targeted advertising, and “sensitive” personal information. We do not have actual knowledge of “selling” or “sharing” PI of consumers under sixteen (16) years of age.

To Exercise Your Privacy Rights

To submit a request to exercise your right to access, deletion, or correction, please use this form. Unless otherwise prohibited by the State Privacy Laws, we may need to verify your identity and confirm your residency before processing your request. In order to verify your identity, we will generally either require the successful authentication of your account or the matching of sufficient information you provide us to the information we maintain about you in our systems. This process may require us to request additional personal information from you, including, but not limited to, your email address, phone number, or date of last transaction in connection with our Services. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we cannot comply with a request, we will explain the reasons in our response.

Non-Discrimination and Appeals

You have the right to not receive “discriminatory” treatment for exercising the rights discussed in the table above. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner. Further, under Colorado, Connecticut, and Virginia’s State Privacy Laws, you may appeal our decision to not take action on your rights request. All appeals should be submitted by emailing privacy@bizrate.com, along with a copy of the decision that you are appealing.

Authorized Agents

In certain circumstances under the State Privacy Laws, you are permitted to use an authorized agent to submit requests on your behalf (using the mechanisms for submitting requests above), where we can verify the authorized agent’s authority to act on your behalf. Specifically, under the CCPA, for requests to access, delete, or correct personal information, we require the following for verification purposes:

1. (a) a power of attorney from you or your authorized agent that is valid under the laws of the applicable state where you reside; or
2. (b) sufficient evidence to show that you have:
   1. provided the authorized agent signed permission to act on your behalf; and
   2. verified your own identity directly with us or directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.

Deidentified Information

Where we process “deidentified information” (as such term is defined under the State Privacy Laws) and are required to keep such information deidentified, we commit to maintain and use the information in deidentified form and will not attempt to reidentify the information, except in instances where necessary for determining whether the deidentification process we used satisfies the requirements under applicable law.

Notice at Collection (CCPA)

The following additional disclosures apply to residents covered under the CCPA.

• Categories/Use of PI: In the last 12 months, please see the list below for the categories of personal information we have collected. Further, please see “How Do We Use Personal Information?” for the purposes for which such personal information is used.
  • Identifiers, such as your name, email address, date of birth, or other similar identifiers.
  • California Customer Records (Cal. Civ. Code § 1798.80(e)), such as birth date and contact information.
  • Protected Classification Characteristics, such as age and gender.
  • Commercial Information, such as purchase history.
  • Internet/Network Information, such as device information, logs, and analytics data.
  • Geolocation Data, such as location information from your device or generated based on IP address or Wi-Fi.
  • Profession/Employment Information, such as your employer, company, or school if your subscription is tied to an employer or school account.
  • Other Personal Information, such as information you post on our social media pages or otherwise provide to us.
  • Inferences, such as predictions about your interests and preferences.
  • Sensitive Personal Information, such as account username and password or data that may concern your health, race/ethnic origin, sexual orientation, or religious or philosophical beliefs. Sensitive Personal Information is used for the limited purposes specified under the CCPA that do not require a corresponding opt-out right.
• Sales/Shares: We do not “sell” or “share” your personal information under the CCPA. We are not responsible for, and we encourage you to check, the privacy policies of third parties with whom you may direct us to disclose information to, or with whom you may interact, regarding any of their own practices related to “sales” and “shares.”
• Data Retention: We retain the categories of personal information above as reasonably necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. In many situations, we must obtain all, or a portion, of your personal information to comply with legal obligations, resolve disputes, enforce our agreements, protect against fraudulent, deceptive, or illegal activity, or for another one of our business purposes.

California and Colorado Loyalty Disclosures

CCPA Notice of Financial Incentives:

We may offer you financial incentives for the collection, sale, retention, and use of your PI as permitted by the CCPA that can, without limitation, result in reasonably different prices, rates, or quality levels. The material aspects of any financial incentive will be explained and described in its program terms. Please note that participating in incentive programs is entirely optional, you will have to affirmatively opt-in to the program and you can opt-out of each program (i.e., terminate participation and forgo the ongoing incentives) prospectively by following the instructions in the applicable program description and terms. We may add or change incentive programs or their terms by posting notice on the program descriptions and terms linked to above, so check them regularly.

Each price or service difference related to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to our business, such as by calculating the expense related to the offer, provision, or imposition of the financial incentive or price or service difference or revenue generation or expense related to the collection or retention of consumers’ personal information.

Colorado Loyalty Program Disclosure:

We do not “sell” or process for “targeted advertising” the personal data that we collect with respect to a “bona fide loyalty program” that we provide under Colorado’s State Privacy Law. As part of these programs, we may work with loyalty partners, such as (i) those third parties from whom you wish to receive a reward (e.g., magazine subscription services, subscription streaming services) as part of your direct relationship with them or (ii) our third-party rewards providers who administer rewards on our behalf (e.g., gift cards). If you choose to delete your personal data with us, you will not be eligible for future rewards unless you sign up or otherwise participate in our program again. Where we request “sensitive” personal information from you as part of such program, you may withdraw your consent for such “sensitive” personal information, though you may not be able to participate in certain activities (e.g., surveys) that request this type of information as part of their market research or similar activities.

With respect to CCPA financial incentives or Colorado Loyalty Programs, please note that some services may also be provided in conjunction with third parties that you interact with in the context of these incentives/programs. These third parties have separate privacy policies regarding their use of your data. We are not responsible for, and we encourage you to check, the privacy policies of those third parties.

European Privacy Notice

This European Privacy Notice supplements the information contained in our Privacy Policy and applies solely to individuals located in the EEA, the UK, or Switzerland (“you”) and to the Services available in the EEA, UK, and Switzerland that link to this European Privacy Notice:

Controller of Your Personal Data

The controller of your personal data under this European Privacy Notice is Bizrate, with an address of 225 High Ridge Road, East Building, Stamford, CT 06905. Our local representative with respect to the GDPR can be contacted at privacy@dotdashmdp.com.

Legal Basis for Using Personal Data

We process your personal data only if we have a legal basis to do so, including:

• to comply with our legal and regulatory obligations;
• for the performance of our contract with you or to take steps at your request before entering into a contract;
• for our legitimate interests or those of a third party;
• where you have given consent to our specific use.

The purpose for which we use and process your information and the legal basis on which we carry out each type of processing is further explained below.

Purposes for which we will process the information & legal basis for such processing

• To provide products and services you request: It is necessary for us to process your personal data in order to deliver the services and process transactions according to the applicable contract between us (or take necessary steps relating thereto).
• To respond to requests, questions, and comments, and provide other types of user support: It is necessary for us to respond to requests, questions, and comments, and provide other types of user support in order to take steps at your request or according to the applicable contract between us.
• To offer you products and services in marketing communications, or direct you to portions of this Site or other websites, that we believe may interest you: We may send electronic marketing communications to you if you have consented to these communications. It is in our legitimate interest to market out products and services to you by other means and to direct you to portions of this Site or other websites that we believe may interest you. We consider this use to be proportionate and will not be prejudicial or detrimental to your rights and freedoms.
• To communicate about, and administer your participation in, events, programs, contests, and other offers or promotions: We will send electronic communications to you if you have consented to these communications, where such consent is required by applicable law. With respect to other communications, it is in our legitimate interest to communicate to you and administer your participation in, our events, programs, contests, and other offers or promotions. We consider this use to be proportionate and will not be prejudicial or detrimental to your rights and freedoms.
• To carry out, evaluate, and improve our business (which may include developing new features for the Services; analyzing and enhancing the user experience on the Services; optimizing and assessing the effectiveness of our marketing and advertising; and managing our communications): It is in our legitimate interests to process your personal data to carry out these activities. We consider this use to be proportionate and will not be prejudicial or detrimental to your rights and freedoms.
• To perform data analytics regarding usage of the Services (including market and customer research, trend analysis, financial analysis, and pseudonymization or anonymization of personal data): It is in our legitimate interests to process your personal data to carry out these activities. We consider this use to be proportionate and will not be prejudicial or detrimental to you.
• To serve advertising, content, and offers to you based on your interests and online activities, from us or third parties: We will serve you advertising, content and offers to you based on your interests and online activities if you have consented to this processing.
• To enable our affiliates or service providers to perform certain activities on our behalf: It is necessary for us to process your personal data in this manner in order to deliver the services and process transactions according to the applicable contract between us. It is also in our legitimate interest to enable our service providers and affiliates to perform certain activities on our behalf. We consider this use to be proportionate and will not be prejudicial or detrimental to your rights and freedoms.
• To notify you of any changes to the Services that may affect you: It is necessary for us to process your personal data in order to deliver the services and process transactions according to the applicable contract between us.
• If we are required to do so by law, regulation, or legal process (such as a court order or subpoena); in response to requests from government agencies, such as law enforcement authorities, including to meet national security requirements; if we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity; and in the event we sell or transfer all or a portion of our business or assets (including a reorganization, dissolution, or liquidation). In such an event, we will seek to provide you with commercially reasonable notice, e.g., via email and/or notice on our Sites, of any change in ownership, incompatible new uses of your personal data, and choices you may have regarding your personal data: We conduct this processing to comply with our legal obligations and to protect the public interest.
• Guard against, identify, and prevent fraud and other criminal activity, claims, and other liabilities; and comply with applicable legal requirements, law enforcement requests, and our company policies: We conduct this processing to comply with our legal obligations and to protect the public interest.

International Transfers

Some of our processing of your data will involve transferring your data outside the EEA, UK, or Switzerland. Some of our external third-party service providers are also based outside of Europe and their processing of your personal data will involve a transfer of data outside of Europe. This includes the United States. Where personal data is transferred to, stored in, or processed in a country not determined by the European Commission as providing adequate levels of protection for personal data, we take steps to provide appropriate safeguards to protect your personal data, including, when appropriate, entering into standard contractual clauses approved by the European Commission.

Retention of Personal Data

We will retain your personal data only for as long as necessary for the purposes it was retained, such as to enable you to use the Services. In some instances, we may retain data for longer periods in order to comply with applicable laws (including those regarding document retention), resolve disputes with any parties, and otherwise as necessary to allow us to conduct our business.

Data Subject Rights

If you are located in the EEA, the UK, or Switzerland, you have the following rights in respect of your personal data that we hold:

• Right of access: You have the right to ask us for confirmation on whether we are processing your personal data, and access to the personal data and related information.
• Right to correction: You have the right to have your personal data corrected, as permitted by law.
• Right to erasure: You have the right to ask us to delete your personal data, as permitted by law.
• Right to withdraw consent: You have the right to withdraw consent that you have provided.
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority in the member state of your habitual residence.
• Right to restriction of processing: You have the right to request the limiting of our processing under limited circumstances.
• Right to data portability: You have the right to receive the personal data that you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit that information to another controller, including to have it transmitted directly, where technically feasible.
• Right to object: You have the right to object to our processing of your personal data, as permitted by law, under limited circumstances.

To exercise any of these rights, please:

• Submit a request through the European Rights Request Form.

Please note that the above rights are not absolute and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply. You also have the right to lodge a complaint to your local data protection authority. Further information about how to contact your local data protection authority is available at: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

How to Contact Us

We are located at: 225 High Ridge Road, East Building, Stamford, CT 06905

All feedback, questions, and comments in connection with our privacy practices and our privacy policies should be directed to: privacy@bizrate.com.