U.S. Privacy Laws SupplementJuly 2023
“CCPA” means the California Consumer Privacy Act of 2018.
“CPRA” means the California Privacy Rights Act of 2020.
“CPA” means the Colorado Privacy Act of 2021, together with all implementing regulations.
“CTDPA” means the Connecticut Act Concerning Personal Data Privacy and Online Monitoring of 2022.
“VCDPA” means Virginia’s Consumer Data Privacy Act of 2021.
“UCPA” means Utah Consumer Privacy Act of 2022.
“U.S. Privacy Laws” means the U.S. State data protection and privacy laws that are applicable to our processing of your consumer data, such as CCPA, CPRA, CPA, CTDPA, UCPA, VCDPA and any other state or local laws in force and effect that apply to U.S. Residents' Data as may be amended, repealed, and replaced from time to time.
“U.S. Residents’ Data” means the U.S. residents’ data which is protected by the U.S. Privacy Laws.
2. Compliance with the U.S. Privacy Laws: We are aware of and will comply with the requirements of the U.S. Privacy Laws in connection with our services we provide to you.
3. Your instructions: Except as necessary to provide our services to you or unless otherwise permitted by the U.S. Privacy Laws:
we will not process, retain or use the U.S. Residents’ Data; and
we will not sell or disclose the U.S. Residents’ Data to any third party.
4. Invitation data: If the type of review invitation services we provide to you requires us to receive or process invitation data that is the U.S. Residents’ Data, then we process that invitation data in accordance with the Data Processing Agreement. You are solely responsible for ensuring that consumers' privacy requests are communicated to us, and for ensuring that consumers' privacy rights are complied with in accordance with the U.S. Privacy Laws.
5. Security practices: The security practices that we apply to the U.S. Residents’ Data, will be the same as those that we describe in the Security practices section of our Data Processing Agreement.
On your request, we will provide you with sufficient information to enable you to check that we are complying with these security practices.
6. Training and confidentiality: We will ensure that all persons who have access to the U.S. Residents’ Data in the course of providing services to you are informed of how the U.S. Residents’ Data must be handled under the U.S. Privacy Laws and are subject to a duty of confidentiality.
7. Consumer requests: You or we may receive requests from your consumers attempting to exercise their rights under the U.S. Privacy Laws in connection with your use of our services (“consumer requests”).
If we receive a consumer request, we will inform the requesting consumer that he/she should submit his/her request to you, given that you will be responsible for responding to these requests; and
If you receive a consumer request, we will provide you with reasonable assistance to respond to it as required by the U.S. Privacy Laws.