EXpambit privacy policy

The categories of personal data we collect under CCPA are: personal information; geolocation data, professional or employment related information; and internet or other similar network activity. For more information about the CCPA categories of personal information, see Your Country Rights.

 

3. How long we will keep your information

 

We will keep your personal data for as long as is necessary for the relevant service, in accordance with our legal obligations. After this time, your personal data will either be securely deleted or anonymised so that it can be used for analytical purposes. You may request further information via the contact details given in this Privacy Notice.

 

4. How we secure your information

 

We maintain appropriate organisational and technological safeguards to help protect against unauthorised use, access to or accidental loss, alteration or destruction of personal data. We also seek to ensure our service providers do the same.

 

5. Information Sharing and Disclosure

 

Information shared with our third-party service providers, We use a number of third parties to perform business functions on our behalf, such as sending our newsletters and hosting our online services and customer relationship management. We will only disclose the information necessary to enable these third parties to perform their services. Our service providers are contracted to comply with our instructions and we require that they do not use your personal data for their own business purpose.

 

Information shared with other parties

 

Where required or permitted by law, personal data may be provided to others, such as regulator and law enforcement agencies, for example in response to a court order or a subpoena, or in response to a law enforcement agency’s request, or where we believe it is necessary to investigate, prevent or take action regarding illegal activities, and as otherwise required by law.

 

We do not sell or rent any personal data about you to any third party.

 

All of the categories of personal information under CCPA may be shared within the EXPAMBIT llp group of companies. We do not sell or rent any personal data about you to any third party, and have not done so within the past 12 months.

 

6. International and group company transfers

 

EXPAMBIT is a trading division of EXPAMBIT llp pvt. ltd., which is within the EXPAMBIT llp group which is a globally operating media group consisting of multiple companies. Therefore, we may from time to time disclose your personal data within our group of companies. Access will always be controlled on a need-to-know basis, and only provided where it is necessary to provide you with requested services or to allow us to perform any necessary or legitimate functions. Some of our group companies are located outside the European Union, but we always ensure the security of such disclosures and transfers in accordance with the applicable privacy and data protection laws.

 

We will only transfer your personal data outside the EU, where we are satisfied that adequate levels of protection are in place to protect the integrity and security of any information being processed and compliance with applicable privacy and data protection laws. These measures may include the use of standard contractual/data protection clauses adopted by the European Commission, or appropriate data sharing mechanisms that may be in force from time to time. Where we transfer personal data between our group companies, we have covered these transfers by entering into standard contractual clauses adopted by the European Commission.

 

You may request further information on the measures used for such transfers via the contact details given in this Privacy Notice.

 

7. Your rights

 

Object to our processing of your personal data where we are relying on legitimate interest (or those of a third-party), and you want to object to processing on this ground, as you feel it impacts on your fundamental rights and freedoms. You also have a right to object where we are processing your personal data for the purposes of direct marketing or profiling. You can object at any time and we shall stop processing the information you have objected to, unless we can show compelling legitimate grounds to continue that processing.

 

Access your personal data. If you make this kind of request and we hold personal data about you. We are required to provide you with information on it, including a description and copy of the personal data and why we are processing it. We will require you to prove your identity before granting access to your personal data. We will process your request within the timeframe required under the relevant law.

 

Request the transfer of your personal data. We will provide to you or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note, this right applies to the personal data you have provided to us; and if we use your personal data on the basis of consent or where we used the information to perform a contract with you.

 

Request erasure (deletion) of your personal data. You have a right to ask us to delete or remove your data where you have successfully exercised your right to object (see above), or where we are required to erase your personal data to comply with local law. Please note, we may be required to retain certain information by law and/or for our own legitimate business purpose. But when we do so, we will inform you

 

Request correction or updating of your personal data. This enables you to have any incomplete or inaccurate data we hold about you corrected.

 

Request the restriction of our processing of your personal data in some situations. If you request this, we can continue to store your personal data but are restricted from processing it while the restriction is in place.

 

Withdraw your consent. Where you have provided your consent to our processing of your personal data you can withdraw your consent at any time. If you do withdraw consent, that will not affect the lawfulness of what we have done with your personal data before you withdrew consent.

 

Make a Complaint. We will do our best to resolve any complaint. However, if you feel we have not resolved your complaint, you have a right to make a complaint to your local data protection authority. For example, in the UK, the local data protection authority is the UK Information Commissioner's Office.

 

If you exercise the rights above and there is any question about who you are, we may require you to provide information from which we can satisfy ourselves as to your identity.

 

8. Our responsibility for website links

 

This Privacy Notice is limited to the personal data collected by EXPAMBIT, a trading division of EXPAMBIT llp pvt. ltd.. We do provide links within this site to other websites, including social media sites such as Facebook, Twitter and LinkedIn. If you follow these links, you should use these sites in conjunction with their applicable user and privacy notices as their data practices fall outside the scope of this Privacy Notice.

Further, we can have no responsibility for or control over the information collected by any third-party website and we cannot be responsible for the protection and privacy of any information which you may provide on such websites.

 

9. Updates

 

This Privacy Notice may be updated from time to time to reflect changes in law, best practice or a change in our practices regarding the treatment of personal data. The date of the most recent revision will appear at the top of this page. If you do not agree to the changes, please do not continue to use our services and please refrain from sharing your personal data with us. You should check this notice frequently for updates.

 

10. Contact us

 

If you have any questions about this Privacy Notice, our approach to privacy or you would like to exercise any of the rights mentioned in this Privacy Notice you can contact our Data Protection Officer in any of the following ways:

 

Address: Data Protection Officer, EXPAMBIT llp, 907, New Palam Vihar, 122017

 

Email: data@expambit.com

 

SUPPLEMENTARY INFORMATION

 

In this Supplementary Information section, we explain some of terminology used in this Privacy Notice.

 

“data controller” – the person or company that controls the purposes and means of processing personal data.

 

"personal data" – any information that relates to you (or from which you can be identified).

 

 “processing” – means doing anything with data. For example, it includes collecting it, holding it, disclosing it and deleting it.

 

“profiling” - using automated means to process personal data in order to work out certain things about people, like analysing or predicting their performance at work, reliability, economic situation, personal preferences, interests, behavior, location, or movements.

 

"transfer" – sending personal information outside the European Economic Area (e.g. by storing it on equipment located outside the European Economic Area), or allowing someone from outside the European Economic Area to access the personal information.

 

Your California Rights

 

This section describes the rights that residents of California have and in other jurisdictions as provided by local law, and how to exercise such rights.

 

Right to Know about Personal Information Collected, Disclosed or Sold

 

You have the right to request that we disclose certain information to you about our collection, use, disclosure or sale of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Access and Deletion Rights), and subject to certain limitations that we describe below, we will disclose such information. You have the right to request any or all of the following:

 

The categories of personal information we collected about you.

 

The categories of sources from which the personal information is collected.

 

Our business or commercial purpose for collecting or selling that personal information.

 

The categories of third parties with whom we share that personal information.

 

The specific pieces of personal information we collected about you (also called a data portability request).

 

Right to Request Deletion

 

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.

 

Exercising Access and Deletion Rights

 

To exercise the access and deletion rights described above, please submit a request to us by emailing us at contact.privacyus@amnetgroup.com or via the following toll-free number: (877) 570-1441.

Only you, or a person or business entity registered with the California Secretary of State that you authorize to act on your behalf (an “authorized agent”), may make the requests set forth above. You may also make a request on behalf of your minor child.

 

The request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide adequate information that we can reasonably verify that you are the person about whom we collected the personal information (including information that enables us to verify the identifying information we possibly maintain about you).

 

We will respond to consumer requests in a reasonably timely manner. If we require extra time to respond, we will inform you of the reason and extension period in writing. In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The method used to verify your identity will depend on the type, sensitivity and value of the information, including the risk of harm to you posed by any authorized access or deletion. Generally speaking, verification will be performed by matching the identifying information provided by you to the personal information that we already have.

 

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request (and will not be made more than twice in a 12-month period). If we cannot comply with a request, or cannot fully comply with a request, the response we provide will also explain the reasons we cannot comply.

 

Non-Discrimination

 

We will not discriminate against you for exercising any of your CCPA rights, including, but not limited to, by:

Denying you goods or services.

Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

 

Providing you a different level or quality of goods or services. Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.