This privacy policy (the “Privacy Policy”) describes how AtData, LLC (“AtData,” “we” or “us”) collects, uses and shares personal information. It applies to personal information that we collect through atdata.com and AtData technologies (the “Site”), as well as personal information received directly from third parties, including our customers who procure our email validation, data enrichment, fraud prevention and related services (collectively, the “Services”).

Privacy laws in your location may require additional information or impose different requirements regarding the handling of your personal information. Where this is the case, we have included jurisdiction-specific information in dedicated sections in this Privacy Policy for individuals in the European Economic Area, Switzerland and the United Kingdom, and the United States.

---

Information Collection

What personal information do we collect?
We collect the following categories of personal information:

Category of personal information	Further detail
Personal and contact details	Name, email address, telephone number, mailing address
Account and login information	Username, email address and password
Commercial or transactions information
Information we collect about your interactions with us, including digital and/or behavioral information	Browser type, email opens, IP address, pages visited and other activities on websites, device type
Other personal information that you choose to make available to us from time to time	Information provided in a communication to us, in a complaint, in a response to a survey or as part of an enquiry

 

Where do we collect your personal information from?
We obtain your personal information from the following sources:

• Information provided by you. We collect information that you provide to us voluntarily, when you sign up to our mailing list, create an account, complete a survey, request information, place an order or otherwise communicate or interact with us;
• Cookies and similar technology. We automatically collect information related to your interactions with our Sites, as well as with other websites and apps through the use of cookies and other technologies with a similar purpose;
• Our customers. We receive personal information about you from our customers, who are businesses that procure our Services in order to process and verify data relating to their own customers or contacts; and
• Third parties. We receive information from companies that collect and supply consumer data, including information derived from public sources, our marketing partners, and other third parties who assist us in providing our Services such as website content providers.

---

Information Use

What do we use your personal information for?
We use the information we collect for the following purposes:

• Managing your account with us. We use your personal information to create and manage your user account.
• Providing our Services. We offer a variety of services to our customers, including email validation, fraud prevention, data enrichment and data licensing. to help them market to or otherwise engage with their own customers and prospective customers. These Services may involve collecting and using your personal information, and how we do that varies across our Services. For more information about how your personal information may be collected and used in relation to specific Services, see the table set out in the “Our Services” section below.
• Communicating with you (excluding promotional content and marketing). We use your personal information in order to respond to you, e.g. when you submit an enquiry to us, and communicate with you.
• Delivering promotional content and marketing. We use your personal information to send you updates, promotions, and marketing materials that may be of interest to you. We also combine, link, or aggregate the information we collect to provide our Services, including by linking a unique identifier based on a website visit with other information about a consumer, sometimes called “identity resolution,” to deliver cross-context advertising over the internet, another device, or email or direct mail promotions.
• Optimizing our Services. We use your personal information to help us create new services as well as to operate, improve, personalize, and improve our Site and Services.
• Analytics. We use your personal information for analytics, market research and product development purposes.
• Security. We use your personal information to maintain the security of our Site and Services, including fraud prevention services.
• Legal rights and obligations. We use your personal information to comply with the law and our policies and procedures, including the enforcement of our terms and conditions.
• Corporate transactions. In the event that AtData undergoes a merger, consolidation, restructuring, the sale of stock and/or assets, or other corporate change or financing transaction (a “Corporate Transaction”) we will share your personal information as part of that Corporate Transaction or proposed Corporate Transaction.

Our Services

Service	Use of personal information	Relevant jurisdictions
SafeToSend An email validation service provided to our customers in connection with their email marketing and data quality activities.	Our customers engage us to validate the email addresses included in their marketing database. To do this, we process your email address to confirm whether it is a valid email address.	Our SafeToSend email validation service operates globally.
Fraud API A fraud prevention service provided to our customers to generate an overall risk score associated with a specific email address	Our customers engage us to assess the fraud risk associated with individuals interacting with their platforms or services. To do this, we process your email address to generate an overall risk score based on data signals linked to that email address. Where our customer elects to provide additional personal information, we will also process your name, postal address, phone number, and/or IP address to inform that assessment.	Our Fraud API operates globally.
Data Enrichment and Identity Matching A data enrichment service provided to our customers in connection with their marketing and customer data set intelligence	Our customers engage us to enhance their first party data with additional attributes such as alternate email address or demographic information. To do this, we match your email address or name and postal address to our database.	Our Data Enrichment service operates only in the United States.
Data Licensing A data service provided to our customers in connection with their marketing, customer data set intelligence, or fraud prevention activities.	Our customers engage us to procure datasets of email address and name and postal address.	Our Data Licensing service operates only in the United States.

---

Information Sharing

Who do we share your personal information with?
We share the information we collect with the following third parties:

• Service providers. We share your personal information with the following service providers to help us deliver the services you request or we provide:
  • credit card processors;
  • cloud computing infrastructure companies; and
  • data quality service providers.
• Partners who help us deliver our Services. We share your personal information with TMT Analysis who we engage to provide phone number validation services to us to help deliver our Fraud API Service.
• Customers. We share your information with our customers in order to provide our Services.
• Marketing partners, advertising providers, and platforms. We share your personal information with DemandBase, Google Ads, and LinkedIn, and other similar partners (together, our “Advertising Providers”) to market AtData’s Services. For more information, see the “Digital Advertising & Analytics” section of this Privacy Policy
• Members of our corporate group. We share your personal information with our affiliated or subsidiary companies
• Potential purchasers, their affiliates and advisors. We will share your personal information in connection with any Corporate Transaction or proposed Corporate Transaction. For example, where it is needed for the due diligence process.
• Legal and regulatory bodies, including our legal representatives. We will share your personal information if we believe that such disclosure is necessary to (a) comply with relevant laws or to respond to subpoenas, warrants, or law enforcement and government agency requests provided to us; or (b) to protect or otherwise defend the rights, property or safety of AtData or any other party.

We may share information that has been de-identified or aggregated without limitation.

---

Data Retention

How long do we keep your personal information for?
We retain the data that we control for as long as is necessary or appropriate to fulfill the purpose for which the data was collected as described in this Privacy Policy. This includes for the purposes of satisfying any legal, regulatory, accounting and reporting requirements, to provide our Services and for the establishment or defense of legal claims.

To determine the appropriate retention period for personal information, we consider its amount, nature, sensitivity, potential risks, processing purposes, possible alternative methods, and legal requirements. If you would like to know more about the retention periods we apply to your personal information, please contact us using the details provided in the “Contact Us” section below.

---

Data Transfer

Do we transfer your personal information abroad?
The personal information that we collect will be transferred to and maintained by AtData on servers or databases located in the United States.

AtData, and our subsidiary XVerify LLC, comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. AtData has certified to the U.S. Department of Commerce that it adheres to:

• the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal information received from the European Economic Area in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF; and
• the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal information received from Switzerland in reliance on the Swiss-U.S. DPF.

If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (“DPF”) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

For more information about AtData’s compliance with the DPF program, please visit our Data Privacy Framework Notice.

---

Digital Advertising & Analytics

To assist in the marketing of AtData’s Services, we partner with our Advertising Providers that serve ads on behalf of AtData on non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Site and other sites or apps over time, including information about relationships among different browsers and devices. This type of advertising is known as interest-based advertising.

To learn more about this type of advertising you can visit the DAA Webchoices tool at https://youradchoices.com/.

Our Advertising Providers are members of either the Digital Advertising Alliance (“DAA”) or the Network Advertising Initiative (“NAI”). These are self-regulatory frameworks and allow you to opt-out of advertising by participating companies via the following websites:

• DAA: https://youradchoices.com/ (DemandBase, Google Ads, LinkedIn)
• DAA (mobile applications): https://youradchoices.com/appchoices

Additionally, you may click here to opt-out of AtData’s sharing of information about you with partners and customers for marketing purposes.

If you browse the web from multiple browsers or devices, you will need to opt out from each browser and/or device. Similarly, if you use a new device, change browsers or delete all of your cookies, you need to exercise your choices again. Note that electing to opt out will not stop advertising from appearing in your browser or applications. It may make the ads you see less relevant to your interests.

We also work with third parties that collect data about your use of the Site and other sites or apps over time for non-advertising purposes. AtData uses Google Analytics and other third-party services to improve the performance of the Site and for analytics purposes. For more information about how Google Analytics collects and uses data when you use our Site, visit https://policies.google.com/technologies/partner-sites, and to opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

Your browser may also offer tools to limit the use of cookies or to delete cookies. However, if you disable the use of cookies in your web browser, some features of our Site and other services may be difficult to use or become inoperable.

---

Your Choices

What choices can you make regarding our processing of your personal information?
Email marketing: To opt out of our email marketing, you can use the link provided at the bottom of each marketing message. If you opt out of our email marketing, we will still send you messages related to our transactions and relationship with you, such as order confirmations.

Account: For AtData customers, when you have an account with us, you may review, change, or update your account information by logging into your account.

---

How to exercise your rights

You have rights with respect to the personal information collected by AtData. The rights available to you vary depending on which jurisdiction you live in. We have set out a summary of your rights within the jurisdiction-specific sections.

To exercise your rights, you may:

• Submit your request in respect of your jurisdiction-specific rights using our Privacy rights form.
• Visit our opt-out page to opt-out of the sale or sharing of your personal information in relation to our marketing and advertising activities.
• Otherwise, contact us by email (at [email protected]), by post (at AtData, Attn: Privacy Officer, 770 Legacy Place, 2nd Floor, Dedham, MA 02026 or by calling us (on 833-293-0973)

Verification Process and Required Information. We will request additional information from you as required to verify your identity or clarify the scope of your request. We will require you to provide, at a minimum, your full name and email address.

Authorized Agents. You may also designate an agent to make requests to exercise your rights. We will take steps both to verify the identity of the person seeking to exercise their rights as listed above, and to verify that your agent has been authorized to make a request on your behalf by providing us with a signed written authorization or a copy of a power of attorney.

If you are not satisfied with our response to your request, we hope you will reach out to us first at [email protected].

If you are still unhappy, you have the right to lodge a complaint with your data protection authority as follows:

Jurisdiction	Data protection authority contact details
European Economic Area	The contact details of each supervisory authority in the EEA are available here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
Switzerland	Website: https://www.edoeb.admin.ch/en/submitting-a-complaint Address: Feldeggweg 1, 3003 Berne, Switzerland
United Kingdom	Website: https://ico.org.uk/make-a-complaint/data-protection-complaints/ Call: 0303 123 1113

---

Third-Party Links

Are we responsible for any third party websites linked on our Site?

The Site may provide links to third-party websites. AtData is not responsible for the privacy practices of these other sites or companies. You should review the privacy policies of other websites or apps that you use to learn about their data practices.

---

State Privacy Notice

Under California, Colorado, Connecticut, Nevada, Utah, Virginia, New Hampshire, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Jersey, Oregon, Rhode Island, Tennessee, and Texas privacy laws, AtData is required to inform residents about the categories of personal information we collect about you, the purposes for which we use this information, and with whom such information may be shared.

Texas Data Broker Disclosure. AtData is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website at https://www.sos.state.tx.us.

For information about exercising your rights under all relevant laws, please refer to the “How to exercise your rights” section below.

Categories of Information We May Collect and Disclose. In the preceding 12 months, AtData collected, disclosed, and sold or shared for targeted advertising purposes the following categories of personal information to third parties for business or commercial purposes:

Category	Disclosed for business purposes to the following categories of third parties:	Sold or shared for targeted advertising purposes to the following categories of third parties:
Personal and online Identifiers, e.g., name, postal address, IP address, telephone number, email address, or similar identifiers.	All categories listed below.	Data compilers and consumer data resellers, business-to-consumer organizations, business-to-business companies, advertising networks, data analytics providers, and social networks (referred to below as “Customer Categories”).
Categories of personal information described in CA Civil Code § 1798.80(e), as described in “Personal and online Identifiers” above	All categories listed below.	Customer Categories.
Characteristics of protected classifications under California or US law, e.g., gender and marital status	All categories listed below.	Customer Categories.
Commercial or transactions information, e.g., categories of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	All categories listed below.	Customer Categories.
Internet or other electronic network activity information, e.g., online interests, such as information about categories of consumer interests derived from online usage	All categories listed below.	Advertising Networks Data Analytics Providers
Geolocation information, e.g., zip code and IP address	All categories listed below.	No.
Professional or employment-related information, when you apply for a job with AtData	All categories listed below.	No.
Inferences drawn from some of the information above, e.g., gender and behavioral tendencies.	All categories listed below.	Customer Categories.

We do not knowingly collect personal information from minors under 16 years of age.

AtData does not collect sensitive personal information, as that term is defined under certain U.S. state privacy laws.

Categories of Sources. We collect personal information from the following categories of sources:

• You;
• Our service providers;
• Our customers;
• Background check services;
• Data compilers;
• Data brokers;
• Consumer data resellers;
• Affiliate networks;
• Advertising networks,
• Advertising technology companies; and
• Business-to-business companies.

Purposes for Processing Personal Information. We use and disclose the personal information we collect for our commercial and business purposes, as further described above in the “What do we use your personal information for?” section of this Privacy Policy.

Disclosure of Personal Information. We disclose the categories of personal information we collect to the categories of third parties listed in the “Who do we share your personal information with?” section of this Privacy Policy for commercial and business purposes.

Click here for a list of third parties (parties other than a consumer, controller, processor, or affiliate of a controller or processor) with whom we share or disclose personal information.

---

Your rights within the US

Within certain states in the United States, you have the following rights with respect to the personal information collected by AtData.

• Right to know the categories and specific pieces of personal information  that we collect, use, or sell about you; the categories of sources from which we collected personal information about you; our purposes for collecting or selling personal information about you; the categories of personal information about you that we have sold or disclosed for a business purpose; and the categories of third parties with which we have shared personal information.
• Right to receive a portable and readily usable copy of the personal information we have collected about you, to the extent feasible.
• Right to correct inaccuracies in the personal information we have collected about you.
• Right to request deletion of personal information we have collected or is associated with you.
• Right to opt-out of (i) the sale or sharing of personal information associated with you; (ii) sale, sharing, or use of personal information for targeted advertising or cross-context behavioral advertising; or (iii) to the extent applicable, opt out and limit the collection, processing, and disclosure of sensitive information associated with you. Please note that if you opt out of certain practices, we may be unable to provide you with some services. Additionally, we do not knowingly sell or share personal information of individuals under 16, or collect sensitive information as defined under applicable state laws.
• Right to nondiscrimination for the exercise of the above privacy rights.

---

Annual User Rights Request Metrics

The CCPA requires certain businesses to compile and disclose metrics on an annual basis regarding their compliance with the CCPA and consumer rights requests. The metrics must be posted by July 1 of each year. AtData has elected to report the required metrics on a calendar year basis for the period of January 1, 2025 through December 31, 2025. During the previous calendar year, AtData facilitated the following requests from California residents who submitted requests via our online portal, by phone or mail:

AtData
	Requests to Know or Access	Requests to Delete	Requests to Opt-Out or Limit Use
Total Requests Received	13	11,988	467,307
Number of requests complied with	12	11,543	386,877
Number of requests denied due to inability to verify consumer (unreturned Certification Form)	1	441	10,494
Number of duplicate requests	0	4	69,936
Mean number of days to substantively respond	16	15	1
Median number of days to substantively respond	10	1	1

If our information practices change, we will post these changes on this page. We encourage you to visit this page periodically to learn of any updates.

---

European Economic Area, Switzerland, and United Kingdom Visitors

This section of the Privacy Policy describes how AtData collects and uses your personal information in its capacity as a controller of that personal information, in accordance with our obligations under data protection laws in the European Union and United Kingdom.

This section applies to individuals from the European Economic Area, Switzerland, or the United Kingdom.

The legal basis for processing your information
The table below sets out the different ways in which we collect, use and disclose your personal information, which categories of personal information are processed for each of these purposes and the legal basis that we rely on for such processing.

Where you do not provide us with the personal information that we request, this may affect our ability to provide our Services to you, or to otherwise engage with or communicate with you.

Purpose	Categories of personal information used	What is the legal basis for us to process your personal information in this way?
Creating and managing your user account, or otherwise communicating with you (excluding promotional material)	Personal and contact details Account and login information Commercial or transactions information Other personal information that you choose to make available to us from time to time	Performance of a contract This type of processing is necessary for the performance of a contract with you to enable your use of your AtData account. Legitimate interest We also process personal information to further our legitimate interests in the effective management of our relationship with you, including responding to your queries or complaints.
Providing our Services	Personal and contact details of our customers Commercial or transactions information of our customers Depending on the Service, name, email address, mobile phone number, postal address, IP address of our customers’ end users Other personal information that you choose to make available to us from time to time	Performance of a contract If you are a customer of AtData, this type of processing is necessary for the performance of a contract with you, to enable us to provide our Services to you. Legitimate interest If we process your personal information received from our customers to provide our SafeToSend Service and Fraud API Service to you, we do so on the basis of our legitimate interests in providing those Services to support our customers to maintain the accuracy and integrity of their customer data and detecting and preventing fraudulent activity in their business operations. These are the only Services that we offer that involve the processing of your personal information, as an individual who resides in the European Union, Switzerland or United Kingdom.
Delivering promotional content and marketing	Personal and contact details Information we collect about your interactions with us, including digital and/or behavioral information	Legitimate interest This type of processing is necessary for our legitimate interests in promoting our Services, and maintaining relationships with our customers. You have an absolute right to object at any time to any processing of your personal information for direct marketing purposes, regardless of the legal basis on which we rely for that processing. Consent (electronic marketing) Where we send you electronic marketing communications or use cookies and similar tracking technologies to deliver marketing to you, we rely on your consent. You can withdraw your consent at any time by using the unsubscribe link in any communication we send you, adjusting your cookie preferences or contacting us directly.
Optimizing our Services	Personal and contact details Commercial or transactions information Information we collect about your interactions with us, including digital and/or behavioral information Other personal information that you choose to make available to us from time to time	Legitimate interest We process your personal information where it is necessary for our legitimate interests in developing and improving our Services.
Analytics, market research and product development	Commercial or transactions information Information we collect about your interactions with us, including digital and/or behavioral information Other personal information that you choose to make available to us from time to time	Legitimate interest This type of processing is necessary to further our legitimate interests in the effective management of our business, including undertaking website administration and internal operations, and conducting marketing and research activities.
Maintaining the security of our Site and Services	Personal and contact details Account and login information Commercial or transactions information Information we collect about your interactions with us, including digital and/or behavioral information Other personal information that you choose to make available to us from time to time	Legitimate interest This type of processing is necessary for our legitimate interests in maintaining the security of our physical properties and information technology networks.
Compliance with the law and our policies and procedures, including the enforcement of our Terms and Conditions	Personal and contact details Account and login information Commercial or transactions information Information we collect about your interactions with us, including digital and/or behavioral information Other personal information that you choose to make available to us from time to time	Legal obligation This type of processing is necessary for the purpose of complying with legal and regulatory requirements to which we are subject.
Corporate Transactions	Personal and contact details Account and login information Commercial or transactions information Information we collect about your interactions with us, including digital and/or behavioral information Other personal information that you choose to make available to us from time to time	Legitimate interest This type of processing is necessary for our legitimate interests in supporting changes to the ownership of our assets or business.

 

Automated decision-making
Some of our Services involve the use of machine learning models. However, our use of these models does not constitute solely automated decision-making within the meaning of the GDPR as it does not produce legal effects or similarly significant effects for the relevant individuals, and any subsequent decisions are made by AtData’s customers, not AtData.

 

Transfers of your personal information abroad
The personal information that we collect will be transferred to and maintained by AtData on servers or databases located in the UnitStates.

We only transfer your personal information in accordance with applicable data protection laws, including putting appropriate safeguards in place to protect your personal information where required by applicable law. This means that we only transfer your personal information where:

• the European Commission, the Federal Council or the UK Government (as applicable) has determined that the destination country provides an adequate level of protection for personal information. See above for the specific adequacy framework that applies to transfers to the United States in the “Do we transfer your personal information abroad?” section;
• we have entered into appropriate safeguards with the recipient of your personal information. These safeguards will typically be standard contractual clauses approved by the European Commission, or, for transfers from the United Kingdom, the International Data Transfer Addendum to the EU standard contractual clauses approved by the United Kingdom, which are both sets of contractual obligations governing how your data is protected and used; or
• we can rely on another basis under the law, such as the sharing of personal information being necessary for the purpose of a court case, investigation or to protect our legal rights.

You may obtain a copy of, or access to, the relevant safeguards we have put in place for transfers of your personal information by contacting us using the contact details set out in the “Contact Us” section below.

 

Rights available to you
Your rights with respect to the personal information collected by AtData within these jurisdictions include:

• Access: You may request a copy of your personal information that we hold about you. This is also commonly referred to as a data subject access request or a DSAR.
• Rectification: You may ask us to correct anything you think is wrong with the personal information we hold about you. We may need to verify the accuracy of the new personal information that you provide to us.
• Erasure (or right to be forgotten): In certain circumstances, you can ask us to delete the personal information we hold about you. We may not always be able to comply with your request for deletion for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object: You may object to us using your personal information. This right is not an absolute right and, in some circumstances, despite your objection, we will be permitted to continue using it. However, your right to object to us using your personal information for direct marketing purposes is absolute. See our “How to exercise your rights” section above for more information on how to opt-out from your personal information being used in this way.
• Restriction of processing: You may ask us to restrict how we use your personal information: (a) if you want us to verify the accuracy of the personal information we hold about you; (b) where our use of the personal information is unlawful but you do not want us to erase it; (c) where you need us to hold the personal information even if we no longer require it as you need it to establish, exercise, or defend legal claims; or (d) if you have objected to our use of your personal information but we need to verify whether we have overriding legitimate grounds to use it.
• Portability: You may request that we provide to you, or a third party you have chosen, your personal information in an easy-to-read format.
• Withdraw consent: Where we have used your personal information on the basis of your consent, you may withdraw your consent at any time. This will not affect the lawfulness of our use of the personal information before consent is withdrawn. If you withdraw your consent, we may not be able to provide certain Services to you. We will advise you if this is the case at the time you withdraw your consent.

If you are engaging with us in the United Kingdom, your rights include the right to make a data protection complaint to us. If you wish to make a complaint to us, please contact our Data Protection Officer using the details immediately below.

 

Data Protection Officer
If you have questions related to this Privacy Policy or regarding AtData’s processing of your personal information, or if you wish to make a complaint, you may contact our Data Protection Officer at [email protected]

---

Canadian Visitors

This section of the Privacy Policy describes how AtData collects and uses your personal information in accordance with our obligations under Canadian data protection laws.

This section applies to individuals residing in Canada and supplements the other sections of this Privacy Policy. Nothing in this section is intended to bind AtData in respect of the personal information of any other individual.

Rights available to you
Depending on where you reside in Canada, you may have the following rights with respect to your personal information:

• Right to information. You have the right to ask us about our processing of your personal information, including about the categories of persons who have access to your personal information within our organization and the applicable retention period.
• Right to access. You have the right to access the personal information we hold about you. Depending on the laws applicable in the province or territory in which you reside, you also have the right to ask us to communicate to you the personal information you have provided us in a structured, commonly used technological format, as well as to a third party upon your request.
• Rectification/correction. You have the right to request that any incomplete, outdated or inaccurate personal information that we process about you is amended.
• Withdrawing consent. If we rely on your consent to process your personal information, you have the right to withdraw consent at any time, to the extent permitted by law and our contractual obligations. However, you understand that in such a case, you may no longer be able to benefit from our Services.
• Automated decision making. Where we render a decision based exclusively on automated processing of your personal information, you may have the right to obtain details related to the processing of your personal information to render the decision, including to obtain the reasons and the principal factors and parameters that led to the decision.

To make a request in relation to the above rights, please contact our Privacy Officer at [email protected].

 

How we protect your personal information
We implement the following measures to protect your personal information, including:

• Internal policies and procedures that define the roles and responsibilities of our employees, representatives, and service providers throughout the life cycle of personal information and limit their access to that information on a “need-to-know” basis;
• Physical, electronic and procedural safeguards that comply with relevant standards to protect personal information;
• If the information is collected or stored electronically, technical safeguards such as encryption, firewalls, passwords, anti-virus software and similar measures;
• A designated Privacy Officer to monitor our compliance with applicable privacy laws;
• Procedures for receiving, investigating, and responding to complaints or inquiries about our information handling practices; and
• Contractual protections to ensure that service providers with whom we share personal information maintain adequate protections and security standards.

For more information about our practices with respect to the use of service providers outside of Canada, please contact our Privacy Officer at [email protected].

 

Do we transfer your personal information abroad?
The personal information that we collect will be transferred to and maintained by AtData on servers or databases located in the United States, which may not guarantee the same level of protection of personal information as the one in which you reside. As a result, your personal information may be made accessible to law enforcement and national security authorities of these jurisdictions under laws applicable in these jurisdictions.

---

Changes to this Privacy Policy

We may modify this Privacy Policy from time to time by publishing updates on our website. We encourage you to check our website periodically to ensure you are aware of our current Privacy Policy.

---

Contact Us

If you have questions related to this Privacy Policy or regarding AtData’s processing of your personal information, or if you wish to make a complaint, please contact us at:

Privacy Officer
AtData
770 Legacy Pl
Dedham, MA 02026
[email protected]