Privacy Policy

Welcome to Ice Cream Social, Inc. (“Ice Cream Social,” “we,” or “us”). This Privacy Policy (“Privacy Policy”) describes how we collect, use, and disclose Personal Data when you interact with our widget embedded on our Merchants’ websites (“Widget”), visit our website at www.icecreamsocial.io, including all content under the “icecreamsocial.io” domain name except icecreamsocial.events, which has its own privacy policy (collectively, the “Website“), request a demo, and/or engage us as a service provider for a Merchant. This Privacy Policy supplements and is included as a part of our Website Terms of Service. By interacting with our Widget, visiting the Website, requesting a demo, and/or engaging us as a service provider for a Merchant, you agree to our collection, use, and disclosure of your Personal Data as described in this Privacy Policy and in the Cookie Policy also referenced in Section 11 below.

The following definitions apply to this Privacy Policy:

• Visitor means any individual who visits the Website.
• Merchant means a business seeking to use our Widget and other business solutions we provide.
• Merchant User means an individual who uses the Website on behalf of a Merchant.
• Consumer means an individual seeking to purchase products or services from a Merchant.

You may have navigated to this Privacy Policy from our Widget. We provide a JavaScript- based Widget that may appear on a Merchant’s website or after a Consumer completes a purchase with the Merchant. The Widget allows a Consumer to opt in to our influencer network (“Influencer Network”) and receive a referral link to send to personal contacts—the Consumer can earn incentives if their personal contacts use the referral link to make qualifying purchases. By opting in to the Influencer Network, you enter a relationship with Ice Cream Social and agree that Ice Cream Social may collect (including from the Merchant), use, and disclose your Personal Data for its own purposes as described in this Privacy Policy. The Influencer Network is only available to U.S. residents. Please see Section 3 for more information about the Widget. You may opt out of participating in our Influencer Network at any time as described in Section 13.

You may have navigated to this Privacy Policy from our Website. The Website is intended for use by Merchant Users, and by Consumers who want to exercise their Consumer privacy rights, as described in Sections 13 and 14 below. No tickets or consumer products or services (together, “Consumer Products”)) are available for purchase on the Website, and individuals seeking Consumer Products should not create an account or request a demo. We may, however, collect internet or other similar network activity information (as described below) about all Visitors, as well as any other Personal Data the Visitor chooses to provide.

This Privacy Policy is subject to the provisions of applicable data protection and privacy laws.

1. Who Collects Your Information?

We do. We collect information that you submit on the Widget to opt in to the Influencer Network and, if you opt in, from the referring Merchant. We also collect information when you visit the Website, create an account, request a demo, and/or engage our services on behalf of a Merchant.

Merchants also collect information when you visit their website. This Privacy Policy does not govern the collection, use, disclosure, or other processing of Personal Data by Merchants. If you purchase a ticket, product, or service from or otherwise engage with a Merchant, please consult the Merchant’s privacy notice or policy, as this Privacy Policy does not apply to your transactions with Merchants.

We have appointed a Data Protection Officer to manage our privacy obligations. If you have questions about this Privacy Policy, or wish to exercise your rights regarding your Personal Data as described in this Privacy Policy, please contact our Data Protection Officer by emailing privacy@icecreamsocial.io.

2. What Information Do We Collect?

A. Personal Data.

As used in this Privacy Policy, “Personal Data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. It does not include publicly-available, aggregate, or de-identified information.

We may collect certain categories of Personal Data from all Visitors:

• Identifiers, such as IP address.
• Internet or other electronic network activity information, such as browsing history, referring and referral pages, search history, and information regarding interaction with the Website.
• Geolocation data. Real-time data derived from a device and used or intended to be used to locate a person within a geographic area.
• Personal Data that you choose to provide, via feedback or other messages to us.

In addition to the categories above, we may collect the following categories of Personal Data from Consumers:

• Identifiers, such as name, postal address, unique personal identifier, online identifier, email address, account name, and other similar identifiers.
• Commercial information, including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information, including browsing history, referring and referral pages, search history, purchase history, and information regarding interaction with the Website.
• Audio, electronic, and similar data, such as call recording for quality assurance.
• Inferences drawn from any of the information collected to create a profile about a person reflecting the person’s preferences or predispositions.

In addition to the categories above, we may collect the following categories of Personal Data if you register for an account or request a demo (only Merchant Users should do so), or if you are a Merchant User:

• Customer information, including categories listed in the California Customer Records statute, such as name, signature, address, telephone number, and employment.
• Professional or employment-related information, such as employer and title.

Please also see our Cookie Policy.

You may choose not to provide your Personal Data, but then you might not be able to take advantage of some of the features of our Website or participate in our Influencer Network.

We do not collect Special Category Data--sometimes called Sensitive Personal Information--as defined in the European Union General Data Protection Regulation, including as it has been incorporated into the laws of the United Kingdom, (together the "GDPR") and under various U.S. state laws. This includes the following information categories:

• Government identifiers, such as your Social Security number, driver’s license, state identification card.
• Complete account access credentials, such as user names, account numbers, or card numbers combined with required access/security code or password.
• Racial or ethnic origin.
• Religious or philosophical beliefs.
• Precise geolocation.
• Political opinions.
• Union membership.
• Contents of communications (mail, email, text) not directed to us.
• Genetic data.
• Biometric information.
• Health information.
• Sex life or sexual orientation information.
• Information about criminal convictions or offenses.

B. Non-Identifying Information.

We also collect information that does not identify you personally and is not linked to you or used to identify you specifically (“Non-Identifying Information”). This may include Internet protocol (IP) address if it does not identify you or your household, internet service provider, site access times, referring and referral websites, web pages within the Website visited, and general location information (e.g., city, state) based on IP address. We collect Non-Identifying Information in many ways, including through automated logging of activity on the Website. Please also see our Cookie Policy.

We may link Non-Identifying Information to Personal Data to help authenticate you or other data or information you provide, to prevent fraud, and to help ensure that the Website and the services we offer meet your needs. If we do, such linked information becomes Personal Data for purposes of this Privacy Policy.

3. Why Do We Collect Personal Data?

Personal Data collected through the Widget. We collect your Personal Data to provide insights to Merchants (who are our customers) about your purchases and conversion rates, and—if you are a U.S. resident and opt in—to add you to our Influencer Network to market and advertise events, products, or services in which you may be interested. If you are not a U.S. resident, we only collect your Personal Data on behalf of the Merchant and act only as a Processor. For more information, see Section 14 of this Privacy Policy. If you opt in to our Influencer Network, we will use your Personal Data to send you personalized advertisements for other events, products, or services based on the information collected. If you are a U.S. resident, by activating your offer to receive your referral link, you are opting-in to the Influencer Network.

Personal Data collected through the Website. We collect your Personal Data to respond to your requests for information/demonstrations or to be added to our emailing lists, to process your requests for access to accounts, and for payment for our services.

To the extent permitted by law, we collect and use your Personal Data for the following business and commercial purposes:

Business Purposes:

• Helping to ensure security and integrity.
• Debugging to identify and repair errors that impair existing intended functionality.
• Short-term, transient use.
• Performing services on our behalf.
• Providing advertising and marketing services, except for cross-context behavioral advertising, to you.
• Internal research for technological development and demonstration.
• Activities to verify or maintain the quality of our Website and services, and to improve, upgrade, or enhance our Website and services.
• Performing the services or providing the goods you request.
• Responding to your inquiries and feedback, and fulfilling your requests.
• Creating and maintaining your user account.
• Providing you with newsletters, articles, product or service alerts, new product or service announcements, and other information.
• Including you in market research, surveys, and promotions.
• Evaluating and enhancing your experience with the Website and our services.
• Keeping a record of our interactions with you.
• Sending administrative and transactional emails.
• Enabling you to interact with content service providers.
• Creating aggregated, pseudonymized, or anonymized information.
• Preventing, investigating, or providing notice of fraud, unlawful activity, or unauthorized access to or use of Personal Data, the Website, or our information systems.
• Enforcing and defending our legal rights and those of our employees, affiliates, and agents.
• Complying with our legal obligations.
• Engaging in corporate transactions requiring review of consumer and/or customer records.
• As permitted or required by applicable law.

Further details on why we collect Personal Data and our legal basis for doing so under GDPR (for EEA/UK/Swiss residents) are provided in Section 14, below.

4. From What Sources Do We Collect Personal Data?

We collect Personal Data primarily from you, both directly when you provide it to us, and automatically when you visit the Website. Information collected automatically may include usage details, IP address, and information collected through cookies, web beacons, and other web-based, automated technologies. If you opt in to our Influencer Network, you consent to us collecting your Personal Data from the Merchant with which our Widget is linked. We may also collect Personal Data from the following categories of sources:

• Operating systems and platforms.
• Web and data analytics companies.
• Contractors and service providers.
• Financial and payment technology providers.
• Outside organizations that provide data to support activities such as fraud prevention, underwriting, and marketing.
• Outside organizations in connection with providing products and services, completing transactions, supporting our everyday operations, business management, and development.

5. What Are Your Choices Regarding Our Marketing Materials?

When required under applicable law (including the GDPR), we will obtain your consent to send you marketing and advertising materials. In general, we will provide a button, checkbox, or other means for you to affirmatively opt in to receiving marketing emails or other communications from us. You can change your preferences, or ask us to stop sending you marketing messages and/or remove your email from our mailing list, by contacting us at privacy@icecreamsocial.io or by following the instructions in the marketing communications you receive.

6. Do We Disclose Your Personal Data to Third Parties?

We may disclose your Personal Data for one or more of the business or commercial purposes listed above to the following categories of third parties:

We may use and disclose Non-Identifying Information without restriction.

We may transfer your Personal Data to our successor-in-interest in the event of an acquisition, sale, merger, or bankruptcy. The new owner may then use and disclose your Personal Data as described in this Privacy Policy.

7. Data Processing by Merchants.

Each Merchant has its own privacy policy to describe how it processes Personal Data. This Privacy Policy does not apply to Merchants’ collection, uses, or disclosures of Personal Data. We have no control over the processing of Personal Data by any Merchant.

8. How Can You Request Access To and Control Your Information?

To request access to Personal Data that we have collected from you, and to correct errors or inaccuracies in your Personal Data, please send an email to privacy@icecreamsocial.io.

If you are a Merchant User and have registered for an account on the Website, you may also log in to the account and edit the Personal Data in your profile.

We will stop using the Personal Data we have collected from you, and remove it from our servers and databases, as required by law upon your verifiable email request.

To protect your privacy and security, we will take reasonable steps to verify your identity before granting access, making corrections, or removing your information. Please send an e-mail to privacy@icecreamsocial.io to make your request.

In some cases and as permitted by law, we may deny a request for access and/or to correct or delete Personal Data. If we do so, we will explain the reason why.

9. How Do We Store and Protect Your Information?

A. Personal Data Retention Periods.

In most cases, we will keep your Personal Data for only as long as is reasonably necessary for the purpose(s) for which we collected it. However, we may retain any or all categories of Personal Data for a longer time when subject to one of the following exceptions:

• When stored in our backup and disaster recovery systems. Your Personal Data will be deleted when the backup media on which your Personal Data is stored expires or when our disaster recovery systems are updated.
• When necessary for us to exercise or defend legal claims.
• When necessary to comply with a legal obligation.
• When necessary to help ensure the security and integrity of the Website

B. Safeguards.

We have physical, technical, and administrative procedures in place to safeguard and help prevent unauthorized access, maintain data security, and reasonably use the information we collect. Unfortunately, no data transmission over the Internet or data storage solution can ever be completely secure. Therefore, we cannot and do not ensure, represent, guarantee, or warrant the security of any information you transmit to or receive from us or that we store on our or our information systems.

If we discover an unauthorized use or disclosure of Personal Data, we will promptly assess our responsibilities under applicable law and take all required actions.

C. Server Location.

If you are using the Widget or visiting the Website from outside the United States, your connection will be through and to servers located in the United States. The information you provide will be transferred outside your local location (e.g., the EEA/UK), and will be securely stored in our web servers and internal systems located in the United States.

D. For EEA/UK/Swiss Citizens.

Whenever we transfer your Personal Data outside of the EEA, Switzerland, or the UK, we afford it a degree of protection similar to that of the EEA, Switzerland, or the UK by implementing at least one of the following safeguards:

• We will only transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data under EEA or UK laws.
• Where we use certain service providers, we may use specific contracts approved under EEA or UK laws which give Personal Data the same protection it has in EEA or UK.

10. Cookies And Other Network Technologies

Our Website may now or in the future use cookies and related information-gathering network technologies such as pixel tags, web beacons, and embedded links (for convenience, we refer to all such technologies as “Cookies”). Cookies can collect and store a variety of data and potentially identify individual persons. We do not use or set Cookies on Merchants’ websites or on the Widget. When visiting or using a Merchant’s website, be sure to read the Merchant’s privacy statement to understand how it uses Cookies.

You can learn more about our use of Cookies in our Cookie Policy.

11. Collection of Information by Others

Our Website may include links that take you to certain third party websites (“Linked Sites”). Linking to a Linked Site does not indicate our approval, association, sponsorship, endorsement, or affiliation with the linked resource unless specifically stated on the Website. We do not control Linked Sites and are not responsible for examining or evaluating, and we do not warrant the offerings of, any business or individual (including those owning or operating Linked Sites) or the content of their resources. We do not assume any responsibility or liability for the actions, products, services, and content of any third parties, including those owning or operating Linked Sites. Please check the privacy policies of these Linked Sites to learn how their owners and operators collect, use, store, and disclose information that you submit to them or that they collect.

12. Children and Young People’s Information

Although the Website and Widget do not contain objectionable content, they are intended for use by adults. We do not knowingly collect any information from minors, and we comply with all applicable privacy laws including the GDPR, CCPA, Children’s Online Privacy Protection Act (COPPA), and associated Federal Trade Commission (FTC) rules for collecting Personal Data from minors. Please see the FTC’s website (www.ftc.gov) for more information. If you have concerns about the Website or Widget, wish to find out if your child has provided Personal Data to us, or wish to remove your child’s Personal Data from our servers, please contact us at privacy@icecreamsocial.io.

Our Website and Widget do not knowingly accept Personal Data from anyone under 16 years old without consent of a parent or guardian. If we discover that a child under the age of 16 has provided Personal Data to us without consent of a parent or guardian, we will make reasonable efforts to delete the child’s information. If you believe that your child under 16 has accessed our Website without your permission, please contact us at privacy@icecreamsocial.io.

13. State Law (Including California) Privacy Addendum

California and other States’ laws enhance privacy rights and consumer protection for residents of those States. This section supplements the Privacy Policy and applies only to natural persons who reside in California; depending on your State of residence, it may also apply to you – please contact us if you would like to know. In accordance with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), if you are a resident of California, you have the rights described below. Depending on your State of residence, you may also have these rights. Any terms defined in the CCPA have the same meaning when used in this section.

A. Categories of Personal Data We Collect

We have collected Personal Data in the categories described in Section 2.A. of this Privacy Policy in the past 12 months.

B. Categories of Sources of Personal Data

We obtain Personal Data from the categories of sources described in Section 4 of this Privacy Policy.

C. Why We Collect Personal Data

We have collected the categories of Personal Data described in Section 2.A. for the business and commercial purposes described in Section 3 of this Privacy Policy.

D. Third Parties to Whom We Disclose Personal Data For a Business or Commercial Purpose

We may disclose your Personal Data to third parties for one or more of the business or commercial purposes described in Section 3 of this Privacy Policy. In the past twelve (12) months, we have disclosed the following categories of Personal Data for one or more of the business or commercial purposes to the following categories of third parties:

E. Selling and Sharing Personal Data

We do not sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate Personal Data to third parties in exchange for money. We do, however, disclose certain categories of Personal Data to third parties for cross-context behavioral advertising, also called “ad tracking” (“Share” the Personal Data).

Example: A Consumer opts in to our Influencer Network after purchasing a ticket from a Merchant for a live music event in Chicago scheduled for June. When the Consumer joins, we receive from the Merchant information related to that purchase, such as the type of event, the event location, the event date, and basic contact or account details. We may use this information to identify other events or experiences in which the Consumer may be interested (such as similar concerts, festivals, or entertainment events in Chicago or nearby cities at a later date), and to send or arrange for the sending of related marketing communications to the Consumer.

To deliver these offers, we may work with third-party platforms, such as Meta, to display ads or promotions on other websites or apps the Consumer uses. In doing so, we Share limited information with Meta under a contract that requires Meta to use the information only to provide advertising and measurement services on our behalf. When we Share Personal Data, it may be considered a “sale” under California or other State law to which we are subject, even though we do not receive money in return. To the extent Sharing Personal Data is considered selling, we will call it “Selling” here (with other grammatical forms of “selling” meaning the same thing).

In the past 12 months, we may have Sold or Shared Personal Data as follows:

Categories of Personal Data Sold or Shared:

• Identifiers
• Personal Data categories listed in the California Customer Records statute
• Commercial information
• Internet or other similar network activity information
• Inferences

Categories of Third Parties Recipients:

• Third parties and/or data brokers for marketing and advertising purposes

Business or Commercial Purpose for Selling or Sharing Personal Data:

• Identify product, service, and shopping preferences
• Deliver information about products, services, and promotions

You may opt out of our Selling and Sharing your Personal Data as described below.

We do not have actual knowledge that we Sell or Share Personal Data of individuals under 16 years of age.

F. Your Rights Regarding Your Personal Data

The CCPA provides California residents with specific rights regarding their Personal Data. Depending on your State of residence, applicable law may also provide you these rights – please contact us if you would like to know. We will honor requests received to the extent required by law and within the time provided by law. You may exercise these rights yourself or through your Authorized Agent.

(i) Right to Know/Access. You have the right to ask us to give you certain information about our collection and disclosure of your Personal Data during the past 12 months. This includes: (a) the categories of Personal Data we have collected about you; (b) the categories of sources from which that Personal Data was collected; (c) our business and commercial purposes for collecting, Selling, or Sharing the Personal Data; (d) the categories of third parties to whom we disclose the Personal Data; and (e) the specific pieces of Personal Data we have collected about you.
You have the right to ask for a copy of the specific pieces of Personal Data we have collected about you and maintain in the 12 months before your request.

(ii) Right to Correct. You have the right to ask us to correct any inaccurate Personal Data that we maintain about you, taking into account the nature of the Personal Data and the purposes for which we process it.

(iii) Right to Delete. You have the right to ask us to delete any Personal Data that we collected from you.

(iv) Right to Opt Out of Sale and Sharing. You have the right to opt out of our Sale or Sharing of your Personal Data.

When we receive a verifiable request to exercise these rights, we will respond within the time allowed by law. The law may limit or restrict these rights.

G. How to Exercise Your Data Protection Rights

You can submit a request to exercise your data protection rights using the methods below. Your request must:

• Provide enough information to allow us to reasonably verify you are the person about whom we collected Personal Data, or that person’s Authorized Agent. This may include verifying Personal Data that we may already have about you, such as your name, email address, telephone number, and other similar information.
• Describe your request with enough detail to allow us to properly understand, evaluate, and respond to it.

Making a request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Data associated with that specific account.

We will only use Personal Data provided in a request to verify the requestor’s identity or authority to make the request.

(i) Request to know/access, correct, or delete. You can make a request by:

• Submitting a webform by clicking here.
• If you are a Merchant with an account with us, you can review and correct certain Personal Data about yourself by visiting your dashboard and view “People – Administrators”.
• Call our toll-free number 855-22-ICECREAM (42327326)

(ii) Request to opt out of Selling/Sharing. You can make a request by:

• For disclosures via cookies, pixels, and other automated technologies on the browser you are using: Download a browser or extension that supports the global privacy control (GPC), and turn on the GPC signal for all or specific websites. When we receive the signal, we will register the browser request and opt your browser out of Selling and Sharing within the time required by law. Your opt-out will be specific to the browser you are using; however, we will also opt out (a) any profiles associated with that browser, and (b) you, if you are known to us. If you use a new browser to access the Website or clear cookies, please submit a new request.
  Some browsers have an outdated “do not track” feature that lets you tell websites not to track your online activities. This is a separate browser-based choice signal and is different from the GPC. We do not respond to the “do not track” signal
• For disclosures that do not involve browser-based automated technologies (for example, targeted advertising linked to your email address): Submit a webform by clicking here

H. Authorized Agents for Privacy Requests

You may authorize your agent to exercise your rights under the CCPA on your behalf. We may ask your Authorized Agent to provide proof of identity and/or authority to act on your behalf. We may deny a request from your Authorized Agent if they fail to provide enough information to verify their identity and authority.

I. Non-Retaliation/No Discrimination

We will not discriminate or retaliate against you for exercising your data protection rights. Unless permitted by applicable law, we will not do any of the following in response to your exercise of these rights: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (iii) provide you a different level or quality of goods or services; or (iv) suggest that you may receive a different price or rate for goods or services or a different level of quality of goods or services.

J. Changes to this California Privacy Addendum

We can amend this California Privacy Addendum at our discretion and at any time. When we make changes, we will post the updated addendum on the Website and update the addendum’s effective date. You are responsible for ensuring we have an up-to-date, active, and valid email address for you, and for periodically visiting our Website and this California Privacy Addendum to check for any changes. Your continued use of our Website and/or services after changes are posted means that you accept the changes.

K. Contact Information

If you have any questions or comments about this California Privacy Addendum, the ways in which we collect and use your information described above and in the Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: privacy@icecreamsocial.io.

14. Non U.S. Residents

A. Your Legal Rights - EEA/Switzerland/UK Residents

If you are resident in the European Economic Area (“EEA”) / United Kingdom (“UK”) / Switzerland, we will comply with the EU and UK General Data Protection Regulations (“GDPR”, as applicable) and/or other applicable data protection and privacy laws in the EEA or UK. For the purposes of the GDPR on the Website, Ice Cream Social is a data “Controller” and you are a “Data Subject” with certain protected privacy rights concerning your “Personal Data.”
Ice Cream Social’s Influencer Network is not available to persons located outside of the U.S. The Widget may exist on Merchant’s websites outside of the U.S., which allows Consumers to receive a referral code or link, but Ice Cream Social does not collect, receive, or disclose Personal Data of Consumers outside the U.S. for its own purposes, and does so only on behalf of the Merchant. Ice Cream Social will be a data “Processor” and the Merchant will be the data “Controller”. We do not control these third-party websites and are not responsible for their privacy statements. When you engage with a Merchant, we encourage you to read the privacy policy of the relevant Merchant.

If you are an EEA/Switzerland/UK resident, under the data protection laws that apply to you, you may contact us at privacy@icecreamsocial.io to exercise your rights to:

1. Request access to your Personal Data (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
2. Request corrections of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of any new data you provide to us.
3. Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons of which we will notify you, if applicable, at the time of your request.
4. Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party), and you object to this processing as you feel it impacts your fundamental rights and freedoms. You may also object to our processing your Personal Data for direct marketing purposes. In some cases, we may deny your objection if we can demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
5. Request restriction of processing of your Personal Data. You may request us to suspend the processing your Personal Data in the following scenarios: if you want us to establish the data’s accuracy; where our use of the data is unlawful but you do not want us to erase it; where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
6. Request the transfer of your Personal Data to you or to a third party. Upon request, we will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information that you initially consented for us to use, or that we used in performing our obligations under a contract with you.
7. Withdraw consent at any time where we are relying on consent to process your Personal Data. This withdrawal will not, however, affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
8. Make a complaint to a regulator. You have the right to make a complaint at any time to your local supervisory authority with regard to data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach any supervisory authority, so please contact us in the first instance.

B. Purposes/Legal Basis For Which We Will Use Your Personal Data

For EEA/Swiss/UK residents, data protection laws require us to explain to you our legal basis for using your Personal Data. Most commonly, we will use your Personal Data under the following legal bases:

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
• Where we need to perform our obligations under a contract we are about to enter into, or have entered into with you; and
• Where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your Personal Data although we will get your consent before sending direct marketing communications to you via email if we are contacting you using details other than your corporate email address. You have the right to withdraw consent to marketing at any time by contacting us.

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably determine that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your Personal Data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

C. Residents of Other Non-US Jurisdictions

We will collect Personal Data about you, and afford you rights regarding your Personal Data, as described in Section 14(A), for the purposes described in Section 14(B). If the data protection laws of your jurisdiction apply to us, you may have additional legal rights. Please contact us at privacy@icecreamsocial.io with any questions or to exercise your rights. Please specify your location when doing so.

D. Cookies

Please see our Cookie Policy for details.

15. Changes to this Policy

We may modify this Privacy Policy at any time, without individual notice to you. If at any time in the future we plan to collect, use, or disclose your Personal Data other than as described in this Privacy Policy, we will revise this Privacy Policy as appropriate. We will post the revised policy here, which will be effective as soon as it is posted. You should periodically review this Privacy Policy for any changes. Your continued use of the Website means that you accept the Privacy Policy changes.

16. Our Contact Information

If you have any questions or concerns about this Privacy Policy, please contact our Data Protection Officer via e-mail at privacy@icecreamsocial.io.

Copyright © Ice Cream Social, Inc. All rights reserved. The Website is the property of Ice Cream Social, Inc. and is protected by United States and international copyright, trademark, and other applicable laws. This includes the content, appearance, and design of the Website, as well as the trademarks, product names, graphics, logos, service names, slogans, colors, and designs.