PRIVACY POLICYINTRODUCTIONDoce LLC (“doce”) works to ensure that your privacy is protected when using our Services. We therefore have a policy setting out how your Personal Data will be processed and protected. Please stay updated on any changes to this Privacy Policy by visiting our websites and mobile applications (“Platform”).This Privacy Policy only concerns doce’s Customers and users of our Platform and Services.WHAT INFORMATION DO WE COLLECT?doce collects information to operate our business and provide you with opportunities to send gifts. We collect both Personal Data and Other Information in support of these efforts."Personal Data" is information that can be used, directly or indirectly, alone or together with other information, to identify you as an individual Customer. This may include your precise Location Data. We also collect birthdate for birthday gifting purposes and to make sure the user is of a certain age. We DO NOT collect any credit card information. The payment processing provider, Stripe will collect Name, Email Address, Credit Card information, Billing Address and phone number (optional). For further information, please see Stripe’s Privacy Policy.We collect Personal Data in the following ways:When you use the app, we collect registration and demographic details, e.g., your name, your email address, the gift recipient’s name, and the message the recipient receives.When we collect Personal Data directly from you, you voluntarily provide us with the Personal Data in order to use the Platform.HOW DO WE USE YOUR PERSONAL DATA?We use the data we collect to operate our business and improve our existing Platform, develop new services and to improve your experiences interacting with us. We also use your Personal Data to communicate with you.We will use your Personal Data for the following purposes:Operate our business and run our Services.We use your Personal Data to process your orders.We do not respond to or honor “do not track” (a/k/a DNT) signals or similar mechanisms automatically transmitted by web browsers for which we are cannot evaluate your choice.WHERE IS YOUR PERSONAL DATA STORED?The data that we collect from you is stored within our AWS database.FOR HOW LONG IS YOUR PERSONAL DATA STORED?doce will retain your Personal Data for as long as you use doce or as needed to provide you the Services. We will also retain and use your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We will retain your Personal Data until 5 years after the end of the year in which you delete your Account in order to comply with our legal obligations.WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?doce is the controller of the Personal Data you submit to us and responsible for your Personal Data.WHO HAS ACCESS TO YOUR PERSONAL DATA?Your data may be shared within doce. We never pass on, sell or swap your data for marketing purposes to third parties outside the doce. HOW DO WE PROTECT YOUR PERSONAL DATA?We have taken technical and organizational measures to protect your data from loss, manipulation and unauthorized access. We continually adapt our security measures in line with technological progress and developments. To make card purchases with us as secure as possible, all information is sent in encrypted form. This means that the information is passed through a secure connection and that external parties cannot read your Personal Data. For card purchases, we work with PCP compliant Payment Service Providers that help us to check directly with your bank that the card is valid for purchases. Our Payment Service Providers process your card details according to the international security standards PCI DSS, which was developed by the card companies VISA, MasterCard, Diners, American Express and JCB. This means that your card details are processed with a very high level of security. When you pay by card, we reserve the right to carry out an identity check.WHAT ARE YOUR RIGHTS?RIGHTS FOR CALIFORNIA USERSCalifornia law provides California residents with specific rights regarding their personal information. The California Consumer Privacy Act of 2018 (“CCPA”) defines “personal information” as information that identifies, relates to, describes, references, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. This section describes the rights that California residents have with respect to such personal information and explains how to exercise those rights, subject in all cases to any limitations set forth in the CCPA. Please refer to the section entitled “What Information Do We Collect” above for more detail about the types of information collected, the purposes for which and sources from where we collect personal information, and the third parties with whom we share personal information.California Specific Rights, Choices, and Opt-Outs: The CCPA provides California residents with specific rights regarding their personal information. The subsections that follow describe the rights that you have under CCPA if you are a California resident and explain how you can exercise those rights.Right to Know About Personal Information Collected, Disclosed, or Sold. You have the right to request that we disclose certain information to you about our collection, use, disclosure, or sale of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Your Right to Know or Delete), and subject to certain limitations described below or set forth in the CCPA, we will disclose such information to you. You have the right to request any or all of the following:The categories of personal information we collected about you.The categories of sources from which the personal information is collected.Our business or commercial purpose for collecting or selling that personal information.The categories of personal information about you that we have sold or disclosed for a business purposes.The categories of third parties to whom the information is sold or disclosed for a business purpose.The specific pieces of personal information we collected about you.Deletion Request Rights. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Right to Know or Delete), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.
Exercising Your Right to Know or Delete. To exercise your right to know or delete, please submit a request to us by emailing us at getdoce@gmail.com. Only you, or a person or business entity registered with the California Secretary of State that you authorize to act on your behalf (an “authorized agent”), may make the requests set forth above. The request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide sufficient information that allows us to reasonably verify that you are the person about whom we collected the personal information or an authorized representative of that person. For more information about verification, see Response Timing and Format immediately below.Response Timing and Format. In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The method used to verify your identity will depend on the type, sensitivity, and value of the information, including the risk of harm to you posed by any authorized access or deletion. Generally speaking, verification will be performed by matching the identifying information provided by you to the personal information that we already have.Any disclosures we provide will only cover the 12-month period preceding our receipt of your request (and will not be made more than twice in a 12-month period). If we cannot comply with a request, or cannot fully comply with a request, the response we provide will also explain the reasons we cannot comply.Personal Information Sales Opt-Out and Opt-In Rights. We do not “sell” personal information, as that term is defined in the CCPA.
Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.RIGHTS FOR OTHER USERSYou have the right to request information about the Personal Data we hold on you at any time. If your Personal Data is incorrect, incomplete or irrelevant, you can ask to have the information corrected or removed. You also have the right to request the processing of your Personal Data restricted and in some circumstances to data portability. We cannot remove your Personal Data when there is a legal storage requirement, such as accounting rules or when there are other legitimate grounds to keep the data, such as unsettled debts. You can withdraw your consent to us using the Personal Data for marketing purposes at any time. You can contact us emailing us at doceapp.help@gmail.com.