Privacy Policy

Introduction

Surfside Solutions Inc. (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your Personal Information. We are a technology company that provides retail-media, advertising, marketing, measurement, analytics, and data-enabled technology solutions to businesses that engage us (“Clients”). Using our proprietary advertising technology and related data capabilities (the “Technology”), we help Clients develop and manage marketing strategies; create, activate, and measure advertising campaigns; and use technology, audience, analytics, and measurement solutions (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and retain Personal Information when you:

• visit or interact with www.surfside.io (our “Website”);
• visit, use, or interact with a website, application, advertisements, email, or other digital property where our Technology is deployed or our Services are provided, including retailer, brand, publisher, or other third-party digital properties; or
• otherwise interact with us or the Services.

This Privacy Policy does not apply to the privacy practices of Clients or other third parties, including their collection or use of information through their own websites, applications, products, or services. Please review their privacy policies for information about their practices.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. It does not include information that applicable law excludes from the definition of personal information, such as certain publicly available, de-identified, or aggregated information. Where we maintain information in de-identified form, we will maintain and use it in de-identified form and will not attempt to re-identify it, except as permitted by applicable law.

Please read this Privacy Policy carefully. It explains our privacy practices and the choices available to you. Depending on applicable law and our processing activities, you may have rights regarding your Personal Information, including the right to opt out of certain processing, such as the sale or sharing of Personal Information or the use of Personal Information for targeted advertising. See “Your Privacy Rights and Choices” below.

We may update this Privacy Policy from time to time. If we do, we will post the updated Privacy Policy on the Website and update the “Last Updated” date. Where required by applicable law, we will provide additional notice of material changes.

Children’s Privacy

Our Website and Services are not directed to children under 16 years of age. We do not knowingly collect Personal Information from children under 16 through websites, applications, or other digital properties that are directed to children. If you are under 16, please do not submit Personal Information to us through the Website. We do not knowingly provide our Services on child-directed websites or applications. If we obtain actual knowledge that we have collected Personal Information from a child under 16, or that our Technology has been deployed on a child-directed website or application, we will take appropriate steps to address the information and deployment in accordance with applicable law. We do not knowingly sell or share the Personal Information of consumers under 16 years of age or process their Personal Information for targeted advertising without affirmative authorization where required by applicable law. If we have actual knowledge that a consumer is under 16, we will comply with applicable requirements relating to the consumer’s Personal Information. If you believe we may have collected Personal Information from or about a child under 16, please contact us at privacy@surfside.io.

Information We Collect and Sources

We collect Personal Information directly from you, automatically through the Website and our Technology, and from retailers, brands, Clients, service providers, data providers, and other third parties in connection with the Services. The Personal Information we collect depends on how you interact with us, our retail and brand partners, the digital properties on which our Services are available, and advertisements or other content delivered through our Services.

The categories of Personal Information we may collect include:

• Identifiers and customer information – such as name, email address, telephone number, postal address, customer, account, or loyalty-program identifier; cookie identifiers; mobile advertising identifiers; device identifiers; IP addresses; hashed or other pseudonymous identifiers; online identifiers; and other persistent identifiers.
• Internet, electronic, and network activity information, such as browser type, device type, operating system, internet connection, pages viewed, search activity, links clicked, referring and exit pages, dates and times of activity, and interactions with websites, applications, advertisements, emails, or other online content.
• Commercial transaction and customer relationship information – such as products or services purchased, viewed, searched for, added to a cart, considered, returned, or otherwise interacted with; transaction, order, and loyalty-program information; purchase amounts; product categories; customer relationship management data; and other information about shopping or purchasing activity.
• Location information – such as approximate location derived from an IP address or other device or network information; store or geographic-area information associated with a transaction, shopping activity, or device interaction, including location information derived from GPS coordinates.
• Demographic information – such as age, gender, and other demographic attributes.
• Professional information – such as business contact information, employer, title, and professional role, when you contact us or interact with us in a business capacity.
• Inferences, profiles, and audience information – such as audience segments, predictive scores, and inferences about likely interests, product preferences, shopping patterns, purchase propensities, and other characteristics derived from information described above.
• Information you provide directly to us -- such as information contained in inquiries, requests, or other communications submitted through the Website.

We collect Personal Information from the following sources:

• You, including when you contact us, submit information through the Website, or otherwise communicate with us.
• Retailers and our other Clients, including information from retailer websites, mobile applications, loyalty programs, point-of-sale systems, ecommerce systems, customer relationship management systems, and other Client systems, subject to applicable law and our agreements with those Clients.
• Your browser, device, and online activity, including when you visit or interact with the Website or with retailer, brand, publisher, or other third-party digital properties, advertisements, or other online content where our Technology is deployed.
• Brands, advertising partners, and other campaign participants, including information relating to advertising campaigns, advertising delivery and engagement, campaign activity, and measurement or attribution.
• Data providers and data partners, from which we may purchase, license, or otherwise receive Personal Information and data-derived insights, including identifiers, demographic information, location information, shopping or transaction information, audience information, and other information used in connection with the Services.
• Service providers and technology partners, including advertising networks and exchanges, demand-side platforms, ad servers, measurement and analytics providers, identity-resolution providers, cloud and infrastructure providers, security providers, and other vendors that support the Website, Technology and Services.
• Our affiliates and related entities.

Our Use of Cookies and Similar Technology

We use cookies, pixels, web beacons, software development kits (“SDKs”), application programming interfaces (“APIs”), server logs, and similar technologies to collect information automatically and to support the Services.

• Cookies are small text files placed on your browser or device that help recognize your browser or device, remember preferences, and measure activity.
• Pixels and web beacons are small pieces of code or electronic files that can help us and our partners understand when a page, advertisement, or email has been viewed or interacted with.
• SDKs and similar technologies may be incorporated into mobile applications to collect information about app and device activity.
• APIs, server-to-server integrations, and server logs may be used to receive information from retailers, brands, and other partners, including information used for campaign activation, measurement, attribution, and reporting.

Your Choices. Depending on applicable law and the nature of the processing, you may have the right to opt out of the sale or sharing of Personal Information or the processing of Personal Information for targeted advertising. You may exercise available choices through https://www.surfside.io/do-not-sell. We also honor opt-out preference signals, such as Global Privacy Control, where required by applicable law. See “Your Privacy Rights and Choices” below.

How We Use Personal Information

We may use Personal Information to provide, operate, support, measure, improve, and protect the Website and Services. The ways we use Personal Information depend on the nature of our relationship with you, the Services involved, and the information at issue.

To provide and operate our retail-media and advertising services. We may use Personal Information to:

• Develop, manage, deliver, and optimize retail-media and advertising campaigns for retailers, brands, and other Clients across retailer-operated digital properties, third-party websites and applications, and, where applicable, in-store and other offline channels.
• Create, maintain, activate, and manage audiences, including customer audiences, location-based audiences, and look-alike audiences, using identifiers, customer or loyalty information, shopping activity, transaction information, online activity, location information, demographic information, and inferences.
• Use analytics, research, statistical methods, artificial intelligence, machine learning, and other modeling techniques to develop, validate, maintain, and improve audience segments, predictive scores, lookalike audiences, campaign-delivery and optimization tools, measurement and attribution capabilities, and other features of the Services.
• Identify, link, or associate devices, browsers, accounts, and other identifiers for advertising delivery, frequency management, audience suppression, attribution, measurement, reporting, and related Services, where permitted by applicable law.
• Measure, attribute, analyze, and report on campaign performance, including by assessing whether advertising impressions, engagements, or other campaign activity are associated with purchases, transactions, or other conversion events.
• Conduct analytics, research, and reporting relating to advertising, shopping activity, transactions, audiences, campaign performance, and the effectiveness of the Services.

To maintain and improve the Website and Services. We may use Personal Information to administer and support the Website and Services; troubleshoot and debug; monitor performance; conduct testing, research, analysis, and quality assurance; develop and improve our Technology, products, and services; and understand how the Website and Services are used.

To communicate and respond to requests. We may use Personal Information to respond to inquiries, communicate with you about the Website or Services, provide requested information, manage our relationship with Clients and business contacts, and send administrative or service-related communications.

To protect our business and comply with law. We may use Personal Information to:

• Protect the security, integrity, availability, and functionality of the Website, Services, Technology, systems, networks, databases, and other assets.
• Detect, investigate, prevent, and respond to fraud, security incidents, malicious or deceptive activity, violations of our agreements or policies, and other illegal activity.
• Establish, exercise, or defend legal claims; comply with legal obligations; respond to lawful requests from law enforcement, regulators, courts, or other governmental authorities; and enforce our agreements.

For other disclosed or permitted purposes. We may use Personal Information for another purpose that is disclosed to you at the time of collection, with your consent where required by applicable law, or as otherwise permitted by applicable law.

How We Disclose Personal Information

We may disclose Personal Information to the following categories of recipients for the purposes described in this Privacy Policy:

• Retailers, brands, and other Clients. We may disclose identifiers; shopping and transaction information; online activity; advertising and campaign information; audience segments and inferences; and, where applicable, location information to provide and support the Services, including campaign delivery, measurement, attribution, optimization, analytics, and reporting.
• Advertising and technology partners. We may disclose identifiers; device, browser, and online activity information; advertising and campaign information; audience segments and inferences; and, where applicable, shopping, transaction, or location information to advertising exchanges, publishers, ad servers, identity-resolution providers, measurement and analytics providers, and other partners. We do so to buy media, activate audiences, deliver and measure advertising, manage frequency and suppression, prevent fraud and provide reporting.
• Service providers and contractors. We may disclose Personal Information to vendors that provide services for us, such as hosting, storage, infrastructure, security, analytics, communications, customer support, professional services, auditing, and billing support to operate, secure, improve, and administer the Website, Technology, and Services.
• Professional advisers and transaction parties. We may disclose relevant Personal Information to advisors and to actual or prospective purchasers, investors, lenders, and their advisers, in connection with a corporate transaction, such as a merger, financing, restructuring, sale of assets, bankruptcy, or similar transaction.
• Legal, security, and safety purposes. We may disclose relevant Personal Information to comply with law or legal process; enforce our agreements; protect the rights, property, safety, security, or integrity of the Company, our Clients, individuals, or others; detect, investigate, prevent, or respond to fraud, security incidents, or unlawful conduct.
• Other recipients. We may disclose Personal Information at your direction, with your consent, or as otherwise disclosed when the information is collected.

We may use, disclose, and otherwise process aggregated information and de-identified information for any lawful purpose.

In some circumstances, we process and disclose Personal Information on behalf of a retailer, brand, or other Client in accordance with that Client’s instructions and our agreement with the Client. The Client’s privacy notice may provide additional information about its information practices.

Your Privacy Rights and Choices

Depending on where you live and the nature of our processing of your Personal Information, you may have certain rights regarding your Personal Information. Subject to applicable law, these rights may include the right to:

• Know and access. Confirm whether we process your Personal Information and request access to, or information about, the Personal Information we collect, use, disclose, sell, or share, including the categories of Personal Information, sources, purposes of processing, and categories of recipients, as applicable.
• Correct. Request correction of inaccurate Personal Information we maintain about you.
• Delete. Request deletion of Personal Information, subject to applicable legal exceptions.
• Portability. Obtain a portable copy of certain Personal Information, where applicable.
• Opt out of sale, sharing, and targeted advertising. Opt out of the sale or sharing of Personal Information, or the processing of Personal Information for targeted advertising, as applicable. In connection with such advertising, we may share the following categories of personal information with marketing partners: (a) device information and identifiers, such as unique advertising identifiers and cookies, and IP address; (b) usage information, such as shopping and transaction data, and browsing history; (c) location information; and (d) inference data. We do not otherwise sell your personal information, and we have no actual knowledge of selling or sharing personal information of minors under 16 years of age to non-affiliated third parties without affirmative consent.
• Limit certain uses and disclosures of Sensitive Personal Information. Request that we limit certain uses and disclosures of Sensitive Personal Information, where applicable.

We will not discriminate against you for exercising rights available to you under applicable privacy law.

How to Submit a Request

You, or an authorized agent acting on your behalf, may submit a privacy-rights request by:

• Emailing us at privacy@surfside.io; or
• Calling us at (917) 512-1743.
• For opt-outs relating to targeted advertising, sale, or sharing, you may also use https://www.surfside.io/do-not-sell.

To protect Personal Information and prevent fraudulent requests, we may need to verify your identity before processing certain requests. Our verification procedures may vary based on the type of request, the sensitivity of the Personal Information involved, and the nature of our relationship with you.

An authorized agent may submit a request on your behalf, subject to verification of the agent’s authority and, where permitted by applicable law, verification of your identity. You may also submit a request on behalf of your minor child, where permitted by applicable law.

If we deny your request, you may appeal our decision by emailing privacy@surfside.io with “Privacy Rights Appeal” in the subject line. We will respond to an appeal in accordance with applicable law. If we deny your appeal, you may have the right to contact the attorney general or other regulator in your state of residence.

We will respond to verified requests within the time period required by applicable law. Where applicable law allows an extension, we may extend the response period and will provide any required notice of the extension.

Where required by applicable law, we recognize and honor opt-out preference signals, such as Global Privacy Control, as a request to opt out of the sale or sharing of Personal Information and the processing of Personal Information for targeted advertising, as applicable.

You may also control certain tracking technologies through browser or device settings. For example, many browsers allow you to block or delete cookies, and mobile-device settings may allow you to reset or limit the use of mobile advertising identifiers. These controls may apply only to the browser or device on which you use them and may not prevent all online advertising.

You may be able to opt out of certain interest-based advertising from participating companies through industry programs, including the Network Advertising Initiative and the Digital Advertising Alliance. These industry tools apply only to participating companies and generally apply only to the browser or device on which you make your selection.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect Personal Information against accidental, unlawful, or unauthorized destruction, loss, or use. Our safeguards are designed to be appropriate in light of the nature and sensitivity of the Personal Information we process and the risks associated with our processing activities. No method of transmitting information over the internet or storing information is completely secure, and we cannot guarantee absolute security.

Third-Party Websites and Services

The Website and Services may link to, integrate with, or otherwise interact with websites, applications, platforms, and services operated by third parties, including retailers, brands, advertising platforms, publishers, and other business partners. This Privacy Policy does not apply to the privacy practices of third parties that we do not control.

We encourage you to review the privacy policy of each third party before providing Personal Information or using its website, application, platform, or service. A retailer’s or brand’s privacy policy may provide additional information about its collection, use, and disclosure of Personal Information in connection with its own website, application, store, loyalty program, or other services.

Data Retention

We retain Personal Information for no longer than reasonably necessary and proportionate to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

We determine retention periods based on the nature and sensitivity of the Personal Information; the purposes for which the information was collected or processed; the need to provide, support, secure, measure, attribute, analyze, report on, and improve the Services; our contractual obligations to retailers, brands, service providers, and other business partners; applicable legal, regulatory, tax, accounting, and recordkeeping requirements; and the need to establish, exercise, or defend legal claims.

When Personal Information is no longer needed for the purposes described above, we will delete, de-identify, aggregate, or otherwise dispose of it in accordance with applicable law and our retention practices.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated Privacy Policy on the Website and revise the “Last Updated” date at the top of the Privacy Policy.

If we make material changes, we will provide additional notice as required by applicable law. We encourage you to review this Privacy Policy periodically to remain informed about our privacy practices.

Contact Information

If you have questions or comments about this Privacy Policy and our privacy practices, contact us at: privacy@surfside.io.