We think that everyone has a fundamental right to privacy. We also believe that respect for privacy rights & consumer choice can coexist within an advertising ecosystem that accounts for consumer’s relevant and personalized interests and behavior. This data-driven ad ecosystem supports millions of small, medium, and enterprise-sized publishers that create valuable content and monetize it through advertising. The more relevant that advertising is, the more revenue these publishers generate, and the more free content they can create. Further, this advertising ecosystem creates highly skilled jobs not only at publishing & media companies, but also data & technology companies, and brands. If executed well, there is a clear path for the ad ecosystem to benefit consumers, publishers, and brands, in a privacy-centric way.
We were excited to build our business when the Mobile Advertising ID (MAID) was first introduced because it offered a privacy-safe way to map data to consumers. It gave consumers the flexibility to stop ad tracking or reset their MAID anytime they wanted. It was a needed and positive evolution from the privacy-fraught cookie infrastructure of web browsers.
As part of our commitment to privacy rights, TrueData welcomes the new crop of privacy regulations that started in Europe, US states, and that are now moving across the globe. We are advocates for national comprehensive privacy regulations, especially for the United States. Improved privacy regulations create a brighter future for those who create and consume content online. Consumers will be better informed about and have more control over how information about them is used. With clear and uniform privacy regulations, companies also benefit from shared rules of the road for operating and planning their businesses.
Effective as of October 1, 2023
You can access the previous version here.
TrueData Solutions, Inc. (“TrueData”) is a technology company that provides clients with proprietary data solutions, including those that help publishers drive ad revenue and brands find great customers. TrueData works with co-op providers (“Providers”) such as app publishers, brands, marketers, and data and technology companies that generate information about people and devices, such as app ownership, and app usage. TrueData offers data and technology solutions to publishers, brands, and other companies that use data for Advertising Services (defined below), Data Modeling (defined below), analytics, and other related purposes; as well as for non-advertising research and analysis of consumer behavior (“Customers”). Collectively, these activities are referred to as the “TrueData Services” or the “Services.”
2. TRUEDATA AS A DATA BROKER
As an entity whose principal source of revenue is derived from the collecting, processing, or transferring of personal data that the entity did not collect directly from an individual, TrueData is considered a “Data Broker” and is duly registered under the Texas Data Broker Law.
This TrueData Privacy Policy (“Privacy Policy”) covers the information that we collect or receive from the following sources:
This Privacy Policy also includes TrueData Data request form and web portal: “ACCESS, DELETION, AND RIGHTS“, “DO NOT SELL OR SHARE MY PERSONAL INFORMATION PAGE”.
This Privacy Policy covers the disclosures that are required by “Data Privacy Laws” governing the processing of personal and sensitive personal information by TrueData, which includes the following:
Law | Scope | Effectivity |
“GDPR”
General Data Protection Regulation |
Imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU. | May 25, 2018 |
“CCPA”
The California Consumer Privacy Act |
California state law that addresses the privacy rights of California consumers. It was updated, amended and expanded by California Privacy Rights Act (CPRA). In this Privacy Policy, CCPA means CCPA as amended by CPRA. | January 1, 2023 |
“VCPDA”
The Virginia Consumer Data Protection Act of 2021 |
Provides Virginia consumers with specific rights regarding their personal information. | January 1, 2023 |
“CPA”
Colorado Privacy Act of 2021. |
Applies to legal entities conducting business in Colorado or delivering products or services targeted to Colorado residents. | July 1, 2023 |
“CTDPA”
Connecticut Data Privacy Act of 2022 |
The act applies to those who conduct business in the state or who produce products or services targeted to Connecticut residents. | July 1, 2023 |
“UCDPA”
Utah Consumer Privacy Act of 2022 |
The Act regulates companies that conduct business in Utah or produces a product or
service that is targeted to consumers in Utah. |
December 31, 2023 |
Please note: third parties have their own privacy policies and this Privacy Policy does not apply to their chosen policies related to collection, use, storage, destruction, disclosure, and / or processing of any information the third parties handle.
We use some phrases in this Privacy Policy that are unique to our business or the technology underlying our data engine. Here are definitions of some of the key terms that you’ll need to know to make it easier to understand this Privacy Policy.
“Advertising Services”
Data services to marketers, brands, and other companies that use the information collected by TrueData for ad targeting, audience creation, measurement, analytics, and other purposes associated with advertising (regardless of medium or channel) via online or offline channels including display, mobile, social, email, direct mail, and video.
“Personal Information”
“Personal information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal Information does not include certain de-identified or aggregated information, information publicly available in government records, or certain other information excluded from the scope of applicable Data Privacy Laws.
“Sensitive Personal Information”
Depending on what is considered as sensitive personal information as provided under the applicable Data Privacy Law, sensitive personal information is that which reveals the following:
This also includes Special Categories of Data as defined under the GDPR: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
“Email Addresses”
We collect versions of email addresses that consumers have entered on our Partners’ registration, checkout, or other such forms.
“Mobile Advertising ID”
A “mobile advertising ID” or “MAID” is a unique identifier of a mobile device used in the mobile advertising ecosystem. This can be Android’s Ad ID (AAID) or Apple’s Identifier for Advertisers (IDFA).
“Data Modeling”
“Data Modeling” is a process that includes a broad set of probabilistic, inferential, or mathematical techniques used to turn raw data into useful insights, intelligence, scores, or predictions.
We collect data, including Personal and Sensitive Personal Information, from the following categories of sources.
A. From Your Internet-Connected Devices:
We collect or receive the following types of information, from websites, mobile apps, data aggregators, public sources and our technology (or other, similar means):
Note that some of our information we collect may fall into more than one of the above categories. For example, an IP address is both a unique identifier and device data.
B. From Third Parties and Aggregated Public Sources:
We may collect information from public and private sources of aggregated data (e.g. the Apple App Store and the Android Play Store), website crawling, or from other third parties or public sources that we use in providing the TrueData Services:
C. In Our Corporate Capacity and From our Site:
People who visit TrueData’s Site are generally representatives of businesses (such as for our Providers or our clients) that are interested in TrueData’s Services, not individual consumers.
When individuals visit our Site, they may choose to provide information to us, such as when they create or log in to their account with us, to contact us to request or provide information, or apply for a job. In addition, when you interact with our Site, we (and third parties) may collect technical information from your browser or device by automated means such as pixels, cookies, web beacons, local storage, JavaScript, API, and other similar technologies. We may also collect this kind of information when you interact with email messages we have sent you. As we and our service providers develop other technologies, we may also gather information through other methods.
We may collect the following categories of information from our Site:
We may also sometimes collect information through business channels and Events such as trade shows, or through marketing platforms that help us identify new customers.
6. HOW TRUEDATA USES THE DATA WE COLLECT
We use the information we collect under this Privacy Policy for the following purposes:
When we create certain databases (such as, to help companies market to consumers across various devices or methods), we may de-identify or otherwise obfuscate certain personal information for privacy or security reasons.
The below chart summarizes the categories of personal and sensitive personal information we collect, where we collect it from, how we use it, and who we share it with. The categories of personal information described below are retained and stored for as long as is necessary to effectuate the business and commercial purposes for which they have been collected, and otherwise as described in the Section 8 (Data Retention).
This chart is updated in an annual review and reflects the prior twelve (12) months from the date of last review in compliance with applicable Privacy Laws.
Personal Information | |||||
CATEGORIES COLLECTED | EXAMPLE DATA ELEMENTS | SOURCES WE COLLECT FROM | PURPOSES BEHIND COLLECTION, USE, AND SHARING | SOLD OR SHARED | CATEGORIES OF THIRD PARTIES WE DISCLOSE TO |
IDENTIFIERS | MOBILE ADVERTISING ID
IP ADDRESS EMAIL ADDRESS NAME (FIRST AND LAST) MAILING ADDRESS UIDV2.0 CTV IDS (IFA, IFA_TYPE) PHONE NUMBER COOKIES, COOKIE IDS, AND OTHER SIMILAR ONLINE IDS |
YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING LEGAL FRAUD OR DECEIT DETECTION |
YES | CORPORATE CUSTOMERS
OUR CORPORATE PROVIDERS |
DEMOGRAPHICS | AGE
GENDER LANGUAGE EDUCATION EMPLOYMENT ETHNICITY HOMEOWNER HOUSEHOLD INCOME AND SIZE EMPLOYMENT RELATED INFORMATION INDUSTRY MARITAL STATUS PRESENCE AND NUMBER OF CHILDREN TIMEZONE |
YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CORPORATE CUSTOMERS
OUR CORPORATE PROVIDERS |
GEOLOCATION DATA | LATITUDE
LONGITUDE TIMESTAMP COUNTRY CODE ADDRESS ALTITUDE SSID/WIFI ACCELEROMETER |
YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CORPORATE CUSTOMERS
OUR CORPORATE PROVIDERS |
COMMERCIAL INFORMATION | PURCHASE & TRANSACTION DATA | YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CORPORATE CUSTOMERS
OUR CORPORATE PROVIDERS |
DEVICE & SITE DATA | DEVICE CHARACTERISTICS
APP INSTALL DATA SITE VISITATION DATA TIMESTAMP PRIVACY SIGNALS AMBIENT SIGNALS |
YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CORPORATE CUSTOMERS
OUR CORPORATE PROVIDERS |
INFERENCES | DRAWN TO CREATE A PROFILE ABOUT A CONSUMER
SUCH AS PREFERENCES, CHARACTERISTICS, PSYCHOLOGICAL TRENDS, PREDISPOSITIONS, BEHAVIOR, ATTITUDES, INTELLIGENCE, ABILITIES, AND APTITUDES. |
YOUR DEVICE
OUR CORPORATE PROVIDERS BASED ON UNDERLYING DATASETS AND COMBINING DATASETS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | |
CROSS-DEVICE LINKING DATA | MOBILE ADVERTISING ID
CTV IDS (IFA, IFA_TYPE) DETERMINISTIC SHARED IDENTIFIERS HOME IP |
YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CORPORATE CUSTOMERS
OUR CORPORATE PROVIDERS |
Sensitive Personal Information | |||||
CATEGORIES COLLECTED | EXAMPLE DATA ELEMENTS | SOURCES WE COLLECT FROM | PURPOSES BEHIND COLLECTION, USE, AND SHARING | SOLD OR SHARED | CATEGORIES OF THIRD PARTIES WE DISCLOSE TO |
DEMOGRAPHIC | ETHNICITY
GENDER |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CUSTOMERS
OUR PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
GEOLOCATION DATA
(Sensitive Personal Information for California, Connecticut, Utah, Virginia) |
PRECISE AND NON-PRECISE LOCATION | YOUR DEVICE
OUR CORPORATE PROVIDERS |
ADVERTISING SERVICES
ANALYTICS DATA MODELING |
YES | CUSTOMERS
OUR PROVIDERS |
As to the personal information that we collect in the course of operating our Services, we may share and disclose such information as follows:
8. HOW TO CONTROL DATA COLLECTED ABOUT YOU
We recognize that your privacy is important to you, so we offer the following ways to give you control over the data that we collect from you.
Opting out of Tailored Advertising:
We recognize that your privacy is important to you, so we offer the following ways to give you control over the data that we collect from you.
Opting out of Tailored Advertising:
We use and share information we collect from both online and offline sources to inform the advertising you see online and to tailor it to your interests. This may include using information collected across the online applications you use (such as on mobile devices, web browsers, or internet-connected televisions), or information associated with hashed email addresses or other hashed identifiers.
The Network Advertising Initiative (NAI) maintains a site with tools and instructions for how to opt out of Tailored Advertising by NAI member companies. TrueData is a member of the NAI and adheres to the NAI Code of Conduct. To opt out of Tailored Advertising by TrueData and other NAI member companies, please visit:
https://optout.networkadvertising.org
If you are interested in CTV opt-out, please use the following link to visit NAI’s CTV opt-out page:
https://www.networkadvertising.org/internet-connected-tv-choices/
This Privacy Policy also includes TrueData Data request form and web portal: “ACCESS, DELETION, AND RIGHTS“, “DO NOT SELL OR SHARE MY PERSONAL INFORMATION PAGE”. If you use multiple devices or multiple email addresses, make sure you apply the opt out or data control mechanisms provided to all of the web browsers, internet-connected devices, and email addresses you use for a complete opt-out. Opting out using a single browser, device, or email address will not automatically opt out all browsers, devices, or email addresses you use.
Other companies’ opt outs or data control mechanisms may function differently than ours. Note that when you opt out of Tailored Advertising, you may continue to receive contextual ads which are ads based on the content of the web page or app on which they appear.
You may have additional rights in connection with the data we collect about you depending on the state where you reside. To learn more about these rights and how to exercise them, please refer to Section 11 (Additional Information for Certain Jurisdiction).
We may retain data for use with the TrueData Services for up to 30 months from the most recent date of receipt, or a shorter period where that is required by law. We may archive and store backups of those data for up to 10 years.
TrueData uses security controls designed to protect information from loss, misuse, and unauthorized access. TrueData has mature incident handling procedures to respond to any breach of our security controls.
Changes to this Privacy Policy will be posted on this page. If we make a material change to our privacy practices, we will provide notice on our Site or by other means as appropriate. If we are required by applicable data protection laws to obtain your consent to any material changes before they come into effect, then we will do so in accordance with law.
Additional Disclosure
A. Do-Not-Track Disclosure
TrueData does not recognize or respond to browser initiated Do Not Track (DNT) signals as a DNT standard has not been adopted to this day.
B. Behavioral Advertising
Our website allows third-party behavioral advertising and cross-context behavioral advertising.
Your Specific Rights Under the CCPA
The CCPA grants certain rights to residents of California regarding their personal information. If you are a natural person who resides in California (a “Consumer”), this section of the Privacy Policy applies to you. If you are not a Consumer, this section does not apply to you and you should not rely on it.
These rights are not absolute and may be subject to exceptions and verification. TrueData may be required or permitted by law to decline any request. Only you, a person that you authorize to act on your behalf, or an entity registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to accessing or deleting your personal information.
A. Right to Access
You can make a request to access the categories or specific pieces of personal and sensitive personal information TrueData collected, used, or shared about you in the past twelve (12) months. Along with your verified request, we will give you any categories of sources from which the personal or sensitive personal information is collected; the purpose for collecting, selling, or sharing, and any categories of third parties with whom we share such personal information.
B. Right to Delete
You can make a request to delete any personal and sensitive personal information TrueData has collected from you. Upon receiving a verified request, TrueData will notify you once your information has been deleted. We will also communicate your deletion request to our Customers and direct them to delete your information.
C. Right to Opt-Out of Sale
California Consumers have the right to opt out of “sales” of their personal information under the CCPA and under the California Data Broker Law. We honor opt-out requests in compliance with these laws.
The CCPA’s broad definition of “sale” may include using services to deliver targeted advertising on other sites or applications. This means that if you make a request to opt out of TrueData’s “sales” of personal information, it will likely have a direct impact on the types of advertisements you see online. TrueData will honor requests to opt out of “sales” of your personal information.
There are two ways to submit a “request to opt-out of the sale or sharing” of your personal information. First, submit a request at DO NOT SELL OR SHARE MY PERSONAL INFORMATION PAGE. Second, you can submit your request through the email at privacy@truedata.co. In the subject line, include “CCPA Consumer Request,” and note in the body of the email that you would like to opt-out of sale.
D. Right to Limit the Use or Disclosure of Sensitive Personal Information
California Consumers have the right to to limit the use of their sensitive personal information to only those purposes that are necessary for TrueData to provide products or services to the consumer.
There are two ways to limit the use of your sensitive personal information. First, submit a request at “DO NOT SELL OR SHARE MY PERSONAL INFORMATION PAGE“. Second, you can submit your request through the email at privacy@truedata.co. In the subject line, include “CCPA Consumer Request,” and note in the body of the email that you would like to limit the use of your sensitive personal information.
TrueData will notify you if at any point we intend to use your sensitive personal information for any additional purposes.
E. Right to Non-Discrimination
TrueData values giving consumers control over their privacy and personal information. If you choose to exercise any of your rights under the CCPA, we will not differentiate our services as a result of your decision. We also do not offer any financial incentives to opt-in to sell your personal information.
F. Right to Correct
You have the right to request the correction of any Personal and Sensitive Personal Information we maintain about you.
Your Data Subject Rights
The privacy laws and similar laws in other U.S. states (“Data Privacy Laws”) provide their consumers with specific rights regarding their personal information. To the extent that you are a resident of one of these states, this section describes your rights under the Data Privacy Laws and explains how you may exercise these rights.
The categories of personal information we process, our purposes for processing, the categories of personal information that we share with third parties, and the categories of third parties with whom we share it are detailed in Section 4. To the extent that our personal information processing activities are addressed by a separate privacy notice, please consult the terms of that privacy notice for detailed information about our data practices, including the categories of personal information that we collect and disclose.
A. Right to Know
You have the right to know whether we process your personal information.
B. Right to Access
You can make a request to access the categories or specific pieces of personal and sensitive personal information TrueData collected, used, or shared about you. Along with your verified request, we will give you any categories of sources from which the personal or sensitive personal information is collected, the purpose for collecting, selling, or sharing, and any categories of third parties with whom we share such personal information.
C. Right to Data Portability
You have the right to access and obtain a copy of your personal information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means. You may request such personal information up to twice annually, subject to certain exceptions.
D. Right to Delete
You have the right to delete personal information that you have provided by or that we have obtained about you. Please note that we may deny such a request if the requested deletion falls under an exception to this right set forth in Data Privacy Laws. Additionally, if you request deletion of your personal information and we have obtained such information from a third-party source, we may retain such data by keeping a record of the deletion request and the minimum data necessary to ensure that your personal information remains deleted from our records and that such retained data is not used for any other purpose, or we may opt you out of the processing of such personal information for any purpose except for those allowed under Data Privacy Laws.
E. Right to Opt Out of Selling or Sharing
You have the right to opt out of the processing of the personal information for purposes of: (i) targeted advertising; (ii) the sale of personal information; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you (provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services; decisions that have a foreseeable risk of unfair or unlawful treatment, financial or physical injury or other substantial injury).
As of the latest date of the Privacy Statement:
There are two ways to submit a “request to opt-out of the sale or sharing” of your personal information. First, submit a request at DO NOT SELL OR SHARE MY PERSONAL INFORMATION PAGE. Second, you can submit your request through the email at privacy@truedata.co. In the subject line, include “<Your State> Consumer Request,” and note in the body of the email that you would like to opt-out of sale.
We honor opt-out requests in compliance with the applicable Data Privacy Laws and data broker laws.
F. Right to Correct
You have the right to correct inaccuracies in the personal information we collect from you, taking into account the nature of the personal information and the purposes for which we process it.
G. Right to Nondiscrimination
TrueData values giving consumers control over their privacy and personal information. If you choose to exercise any of your data privacy rights, we will not differentiate our services as a result of your decision. We also do not offer any financial incentives to opt-in to sell your personal information.
H. Your Right to Appeal
For Colorado, Connecticut, Florida, Montana, Oregon, Texas and Virginia residents, if we decline to take action regarding a request that you have submitted, we will inform you of our reason for declining to take action and provide instructions for how to appeal the decision. In the event that we do not respond to a request that you make pursuant to one of the privacy rights set forth in this section, you have the right to appeal our refusal to take action within a reasonable period of time after you receive our decision. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, we will also provide you with an online mechanism, if available, or other method through which you may contact your state attorney general’s office to submit a complaint.
If you are a resident of one of many European countries, including the United Kingdom, an important European privacy law (or an equivalent counterpart to it) the General Data Privacy Regulation (the “GDPR”) provides you with certain rights, and places certain obligations on companies regarding how your “personal data” (as the GDPR uses that term) is used. We describe those rights and obligations below, and how and in what circumstances we honor them.
You may have similar rights in countries that have adopted statutes similar to the GDPR, such as Brazil and Turkey.
We set out our compliance with the GDPR and, to the extent applicable, those other laws, in this section.
Legal Basis
The GDPR requires us to tell you about the legal ground we’re relying on to process any “personal data” (as the GDPR uses that term) about you. The legal grounds for us processing your personal data for the purposes set out in Section 5 above will typically be because:
Your Data Subject Rights
A. Right to Delete, Restrict. or Object to the Processing and Rectify
You have the right to request that we delete your personal data (or where applicable, withdraw your prior consent to our processing of your data). You may also request that we correct (“rectify”), restrict, or delete your personal data.
You may exercise these rights by contacting us at privacy+international@truedata.co or through our website privacy portal located at INDIVIDUAL RIGHTS REQUEST. If you request that we delete your personal data, or withdraw your consent, we will customarily retain a copy of your data sufficient to suppress it from our active databases in the future: but if that is not what you wish, you may indicate that to us (in which case your information may be added to our database later, because we will not have “suppressed” it).
Moreover, when we delete your personal data, we may retain it (to the extent legally permissible) for certain important (but narrow) internal purposes such as legal, compliance, accounting or auditing purposes, and in some cases, for security purposes.
B. Personalized Online Advertising Opt-Outs
You may object to profiling by online advertising platforms with whom we sometimes partner to help generate (and measure or analyze) “personalized” online advertising. These platforms are generally separate third party “controllers” of your data. You may visit industry websites provided at [https://optout.aboutads.info) (by the Digital Advertising Alliance) and https://optout.networkadvertising.org/ (by the Network Advertising Alliance) or https://www.Youronlinechoices.eu/ (the European Digital Advertising Alliance) to do so, as to many of the largest platforms involved in personalized online advertising.
You may unsubscribe from marketing and other communications that we may send (on behalf of ourselves or others) by clicking the “opt-out” or “unsubscribe” link in the footer of those emails.
C. Your Right to Access
In some jurisdictions, you may have the right to request access to a copy of your personal data. You may request access to the personal data we hold about by visiting the web page at INDIVIDUAL RIGHTS REQUEST.
When you exercise your privacy rights to access, delete, rectify, or object to your information processing, we are required — for privacy and other important compliance reasons — to verify your identity in a legally sufficient manner: if we cannot do so, we will not be able to satisfy your access request.
Please note that as part of the verification process, we may not be able to sufficiently “verify” your identity in a manner sufficient to safeguard against the potential adverse privacy effects on disclosure of personal data to the wrong individual (or a person who is purposefully seeking the information of another). Because such improper disclosure would likely adversely affect the privacy rights and freedoms of a relevant data subject / consumer, we limit certain personal data we make available. In particular, we believe that in most cases we cannot verify to a sufficiently high degree that precise location data we have collected pertains to the person who has submitted the request, or whether either the person in possession of a device or the person requesting the information is the actual device owner. (For instance, some people may be temporarily in possession of another person’s phone – e.g., a partner, friend or work colleague – whether consensually or not, and many phones are not password-protected.) Where that is the case, we may provide a subset of the data that we hold.
Questions or Concerns
If you have a complaint or concern or question about how we handle your personal data, please contact us as at the below mentioned contact address, and we will seek to address any concerns you may have. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.
When We are a Processor
EU data protection law (and certain other data protection laws) makes a distinction between organizations that process personal data for their own purposes (known as “data controllers”) and organizations that process personal data on behalf of other organizations (known as “data processors”). TrueData sometimes acts as a data controller (for instance, when we make decisions about the data that comprises our own datasets) and sometimes acts as a processor (for instance, if we ingest information that belongs to a customer, such as to analyze it solely for their benefit and at their direction). We generally are only able to help data subjects exercise their rights as to data we are a data controller of. If you have a question or request as to data we’re a processor of, you should generally address that to the relevant Data Controller.
This provides for instructions on how you can exercise your rights as a resident of California, Virginia, Colorado, Connecticut, or Utah.
A. How to Exercise your Access, Correction and Deletion Rights
There are two ways to submit a request to access or delete your personal information. First, you may submit a request at “INDIVIDUAL RIGHTS REQUEST“. Second, you can submit your request via our toll-free number: (888) 868-5427.
We are unable to process faxed requests at the toll-free number provided; if you would like to submit your request to us using our toll-free number, please use a telephone to submit your request verbally. After the tone please very slowly state your name and email address and please also leave your telephone number as well, and we will contact you with the instructions on how to proceed with your request. When you finish recording you may hang up or press the pound key for more options.
To protect the privacy and security of your personal information, we will attempt to verify your identity before acting on your request. We may also ask for proof of residency, which may include a signed declaration under penalty of perjury that you are the individual whose personal information is the subject of the request. Your request must include details sufficient for us to properly understand, evaluate, and respond to the request.
Please also note that as part of the verification process, we’re required to consider:
(a) the difficulty of verifying whether data that we hold and data we have linked to it truly and solely belongs to the data subject making the request, along with; and
(b) the potential adverse effects on disclosure of personal data to the wrong individual (or a person who is purposefully seeking the information of another) because such improper disclosure would likely adversely affect the privacy rights and freedoms of the relevant data subject/consumer, we limit certain personal data we make available.
In particular, we believe that in most cases we cannot verify to a sufficiently high degree that precise location data we have collected pertains to the person who has submitted the request, or whether either the person in possession of a device or the person requesting the information is the actual device owner. (For instance, some people may be temporarily in possession of another person’s phone – e.g., a partner, friend or work colleague – whether consensually or not, and many phones are not password-protected).
B. Use of an Authorized Agent
For California, Colorado, and Connecticut consumers, an agent legally authorized to act on your behalf — may make a verifiable request related to your personal information. If you are making a request through an authorized agent, you must provide the authorized agent with written permission to do so, and a power of attorney that fulfills the requirements of the Data Privacy Laws. TrueData may request more information from the authorized agent (or from you) if needed to verify the authorized agent’s identity or to avoid any breach of security or instances of fraud.
C. Minors
We do not knowingly collect personal information of minors under the age of 16, nor are our Sites or Services developed for, offered to, or directed at children under the age of 16. If you believe that we have collected information of a child under the age of 16, please contact us and we will take appropriate action.
D. TrueData as a Service Provider
Sometimes we act as a “Service Provider” to other companies — for instance, when we help other businesses use their own customers’ information for marketing, analytics, or other services. As to personal information that we hold as a “Service Provider,” you would generally need to reach out to the business (our customer) to exercise your rights stated here.
If you have any questions regarding our Privacy Policy or our privacy practices, or about TrueData generally, you can contact us by any of the following methods:
Via email:
privacy@truedata.co
Via regular mail at the following address:
TrueData Solutions, Inc.
c/o TrueData Privacy Office
1 E Erie St, Suite 525-4083
Chicago, IL 60611