Privacy Policy

Introduction

Kidstory Inc. (“Kidstory”, “we”, “us” or “our”) owns and operates the Kidstory website: www.kidstory.life (the “Website”) and mobile application (the “App”) that provides parents, family and friends with a private platform to capture, access and share information, text, images, photographs, events, moments and other content from their children’s lives, including through a variety of category capture segments such as Favorites, Activities, Artwork, Quotes and Firsts (the “Services”). This Privacy Policy describes the personal information that Kidstory collects from or about you on or through the Website, App and Services as well as how we use and to whom we disclose that information. You acknowledge that this Privacy Policy is part of Kidstory’s Terms of Use (“Terms”). If you do not agree to abide by both this Privacy Policy and the Terms, please do not use the Website, App or Services. Unless you are based in the European Economic Area (EEA) or United Kingdom (UK), by accessing or using our Website, App or the Services, you signify your acceptance of this Privacy Policy and agree to be bound by its terms. You can withdraw your consent at any time, however, if you choose to do so, we may not be able to provide you with the access to and use of the Website, App and/or the Services. Residents of Quebec are not permitted to use or access the Website, App or Services. If you are a resident of Quebec, please do not use or access the Website, App or Services or submit any personal information on or through the Website, App or Services.

Scope of this Privacy Policy

In this Privacy Policy, “you” or “your” means any individual who has requested, applied for or been supplied with access or use of the Website, App or the Services, including any other individual for whom you have acted as agent, representative, parent or legal guardian.

Where this Privacy Policy is Effective

Kidstory is subject to the Personal Information Protection and Electronic Documents Act (Canada) and applicable Canadian provincial privacy legislation. Privacy laws vary by jurisdiction. You acknowledge and agree that access to the Website, App and the Services are provided via the Internet and that your information, including personal information, may be transferred across national borders and stored or processed in accordance with the terms and conditions of this Privacy Policy.

If you are based in the EEA or the UK, please see the EEA and UK section of this Privacy Policy. The EEA and UK section of this Privacy Policy concerns Kidstory’s processing of the personal information of the users of our Website, App and Services based in the EEA or UK, where Kidstory is offering goods or services to you in the EEA / UK or where our Website, App or Services may be used to monitor individual’s behavior as far as it takes place in the EEA / UK.

If you are based in the State of California, you have certain rights with respect to the collection, use and processing of your personal information under the California Consumer Privacy Act (“CCPA”). For further information on your rights under the CCPA, please see the section below entitled “California Privacy Rights”.

This Privacy Policy has a limited scope and application. Consequently, the rights and obligations contained in this Privacy Policy may not be consistent with privacy requirements for all jurisdictions.

Changes to this Privacy Policy

Kidstory may make changes to this Privacy Policy from time to time to reflect changes in its legal or regulatory obligations or in the manner in which we deal with your personal information. We will post any revised versions of this Privacy Policy on our Website and App. If we make any material changes we will notify you as required by law, but encourage you to check back often for updates. Your continued use of the Website, App or the Services after an update or amendment to this Privacy Policy means that you consent to the collection, use, and disclosure of your personal information as described in the updated Privacy Policy.

This Privacy Policy was last updated on April 21, 2020.

What is Personal Information?

For the purposes of this Privacy Policy, personal information is any information that identifies a specific individual, and under certain laws that may or may not be applicable to you, identifies a specific household or device.

Collection of Personal Information

We collect and maintain different types of personal information in respect of the individuals with whom we interact. When you use or access the Website, App or our Services, we may collect the following information from you:

contact and identification information, such as your name, email address, mailing address, phone number;
your payment, credit card, debit card and other banking information, such as your credit card number, debit card number and billing address;
your age, gender, location and other demographic information;
any personal information that contained or depicted in any User Content or Feedback (each as defined in the Terms);
any personal information that is contained in or on any accounts you have with third-parties that you use in connection with your access to or use of the Website, App or the Services (e.g., your Facebook or Instagram account).
If you are based in California and would like more information about the categories of personal information that we collect, please see the section entitled “California Privacy Rights” below.

Our Purposes for Collecting Personal Information

We only collect the necessary personal information to provide you with the Services available through our Website and App and which enables us to manage, maintain, and develop our operations. For example, we collect information in order to:

enable you to register, access and maintain an account with us and verify your identity as an authorized user of any accounts you create to access and use the Website, App and the Services;
establish, maintain, administer, and manage our relationship with you and your account with us, including by contacting you, so that we may provide you with any Services or communications that you have requested;
allow you to participate in, subscribe to or otherwise receive products, services and communications from us;
providing you with coupons, programs, promotional information, offers and other information that is personally tailored to your interests, use of our Website, App and Services, and purchase behavior;
sending you messages or push notifications by automated means or otherwise as more particularly described below;
allow you to share and display your User Content with individuals that you identify through the Website, App or Services;
process your payments and send you information about your purchases and transactions;
be able to comply with your requests (e.g., if you prefer to be contacted at a business or residential telephone number and advise us of your preference, we will use this information to contact you at that number);
understand your preferences and tailor communications and services to you and to send you information about our news, media coverage, events and other matters;
protect Kidstory against error, fraud, theft, and damage to our Website, App, Services, assets or other properties;
conduct research, surveys, analysis and evaluations to understand usage and trends, user needs and interests, and to improve our Website, App, Services, communications, and operations;
enable us to comply with applicable laws or regulatory processes; and
any other reasonable purpose to which you consent.

From time to time, we may ask for your consent to use your information for certain additional specific reasons. The consequences of granting your consent will be described should we request your consent to use your information for such additional purposes. You may withdraw your consent at any time by contacting us at the address provided at the end of this Privacy Policy.

Unless you are based in the EEA or UK, by consenting to our collection, use and disclosure of your personal information through the use of our Website, App or Services you allow us to fulfill the purposes for which we collect your personal information.

Research, Development, and Targeted Ads

When we collect your information for research and development purposes and to serve you and others targeted ads on or through our Website, App and Services and through third-party platforms. We ensure that any information used for our analysis, reports and serving targeted ads will be de-identified and aggregated in a manner that will not identify you. Please note that in connection with the foregoing, we may also use services provided by third-parties (such as social media platforms) to serve targeted ads to you and others on third-party platforms. We may do this by providing an aggregated and de-identified version of your personal information to the third-party for matching purposes.

For further information about how we use your personal information if you are based in the EEA or UK, including the legal bases we may rely on to process your personal information as an alternative to obtaining your consent, please see the EEA and UK section of this Privacy Policy.

When does Kidstory Email you, and why?

We will collect your express consent prior to sending you any commercial electronic messages, unless an exception to obtaining your opt-in consent applies under Canada’s Anti-Spam Legislation. You will have the opportunity to opt-out of receiving commercial electronic messages at any time. For clarity, by using and accessing or using our Website, App or Services you agree to receive transactional communications about your account and activities on or in connection with the Website, App and Services. For example, when you create an account or reset your password you will receive an email confirming your account details. You may opt-out of receiving certain of these transactional communications by contacting us at info@kidstory.life. In addition, you may choose to receive notifications regarding important dates and reminders that you can turn on or off in your account settings on the Website or App.

How we Collect Personal Information

As a general rule, Kidstory collects personal information directly from you. In most other circumstances where the personal information that we collect about you is held by a third-party, we will obtain your permission before we seek out this information from such sources (such permission may be given directly by you, or implied from your actions). For example, when you create an account with Kidstory through an existing account that you have with a third-party, such as Facebook or Instagram, we will receive certain of your personal information that is contained on that account. From time to time, we may also utilize the services of third parties and may also receive personal information collected by those third parties in the course of the performance of their services for us or otherwise.

In circumstances where we receive personal information from third parties, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose your personal information to us.

Use of Personal Information

We may use your personal information:

as permitted or required by applicable law or regulatory requirements;
to comply with valid legal processes such as search warrants, subpoenas or court orders;
during emergency situations or where necessary to protect the safety of a person or group of persons; and
for the purposes described in this Privacy Policy; and
for any additional purposes for which we have obtained your consent to the use or disclosure of your personal information.

Sharing of Personal Information

Your use of the Website, App and the Services

Since one of the purposes of the Website, App and Services is to facilitate the sharing of text, images, photographs, events, moments and other content with other users, Kidstory may share or disclose your public information, such as your public user profile and your public communications and interactions with others on and through the Website, App and Services. For example, when you choose to share your personal information by including it in any User Content or inviting your family, friends or other users to see and interact with your User Content, you agree that such persons may view or otherwise access the personal information that is shared with them and acknowledge that Kidstory cannot control and/or be liable for how such persons may use that information. In addition, by choosing to post any User Content on third party websites, application or social media platforms (e.g., Facebook, Instagram, Twitter, Pinterest), you are choosing to share your personal information with the general public. To the extent that submit, upload, post, share or otherwise make any personal information available on a third party website, application or social media platform, we will have no control over such personal information which will be subject to the relevant third party’s privacy policy. Neither you nor we can control what others do with your information once you share any of your personal information publicly, whether on or through the Website, App, Services or otherwise. You may choose to limit the audience for all or part of your Kidstory account for certain User Content or information about you, by managing your account settings. The management of your account settings will not apply to any third party website, application or social media platform.

Affiliates and Service Providers

We may also disclose your personal information to our affiliates and subsidiaries, and our respective employees, contractors, consultants service providers, and other parties who require such information to assist us with managing our relationship with you, including third parties that provide services to us or on our behalf. These third parties may assist us with various tasks, including but not limited to, data hosting and maintenance analytics, customer care, marketing, advertising, payment processing and security operations. For example, we use Google Firebase for web hosting services.

Business Transactions

Personal information may be disclosed or transferred to another party during the course of, or completion of, a change in ownership of or the grant of a security interest in, all or a part of Kidstory, its affiliates or subsidiaries through, for example, an asset or share sale, or some other form of business combination, merger or joint venture, provided that such party is bound by appropriate agreements or obligations and required to use or disclose your personal information in a manner consistent with the use and disclosure provisions of this Privacy Policy, unless you consent otherwise (or, if you are based in the EEA / UK, where we may notify you otherwise).

Other Disclosures

We may also disclose your information in the following circumstances:

as permitted or required by applicable law or regulatory requirements;
to comply with valid legal processes such as search warrants, subpoenas or court orders; and
for any additional purposes for which we have obtained your prior consent to do so (or, if you are based in the EEA / UK, where we may notify you otherwise).

Since we may share your personal information with third parties, as described in this Privacy Policy, your personal information may be collected, used, processed, stored or disclosed outside of your jurisdiction of residence, including in Canada and the United States. As such, your personal information may potentially be accessible to law enforcement and national security authorities of another jurisdiction where local laws provide for a different level of protection for personal information. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security agencies in those other countries may be entitled to access your personal information. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security agencies in those other countries may be entitled to access your personal information.

If you would like further information about our policies and practices regarding the third parties (including our service providers) to whom we disclose your personal information and how these third parties collect, use, disclose and store personal information, please contact our Privacy Officer using the contact details below. Unless you are based in the EEA or UK, by providing personal information to us, you consent to our disclosure of this information to our service providers (and other third parties) as described in this Privacy Policy, including those that may be located outside of your jurisdiction of residence.

If you are based in California, and would like to know more about your rights with respect to the collection, use and disclosure of your personal information, please see the subsection entitled “Individual Rights” located in the section entitled “California Privacy Rights”.

Other Information that is Collected when you use the Website, App and Services

In addition to the personal information you may provide to us as described above, we automatically collect certain device and statistical information to make our Website, App and Services work better for you. For example, we collect the IP address, network connection, the device domain used to access our Website or App, the operating system on your device, your device settings, the type and version of your browser, crash data, other unique device identifiers, the mobile application or website you came from to access the Website or App, the page you entered and exited at, any searches, pages or advertising within our Website or App that is viewed by that IP address and what country you are from. We use this information to monitor the performance of our Website, App and Services (such as number of visits, average time spent, page views) and for our business purposes such as working to continually upgrade our Website, App and Services.

Our Website and App use cookies and other technologies that are similar to cookies (“Cookies”). A Cookie is a small file of letters and numbers that we may set on your device to store and sometimes track information about you. Cookies and similar technologies we use are designed for “analytics”. This allows us to distinguish you from other users of the Website, App and Services. This helps us to provide you with a good experience when you use the Website, App and Services and allows us to improve our Website, App and Services.

First party Cookies are Cookies set by the website that you are visiting. Only that website can read them. In addition, a website might potentially use external services, which also set their own Cookies, known as third-party Cookies.

Persistent Cookies are Cookies saved on your computer and that are not deleted automatically when you quit your browser, unlike a Session Cookie, which is deleted when you quit your browser.

We use the following Cookies:

Strictly Necessary Cookies. These are Cookies that are required for the operation of our Website and App. They include, for example, Cookies that enable you to remember information you have typed into an online form.
Analytical/Performance Cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our Website and App when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Preference/Functionality Cookies. These are used to recognize you when you return to our Website or App. This enables us to remember your preferences.
Targeting/Marketing Cookies. These Cookies record your visit to our Website and/or App, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose

We also may use third party cookies from our third party service providers, such as Google Analytics, Google Adwords and Facebook, to monitor and manage your activity during a session on our Website or App. These cookies track information such as sessions, user inputs and user authentication. Our service providers may also use cookies to determine whether you navigated to the Website or App from an external website or link to track the effectiveness of external postings.

Kidstory also utilizes your IP information to help determine the city that you are in. Subsequent, location information is only collected if you input further details into your profile that is relevant to the activities for which you intend to use the Website, App and Services. In addition, Kidstory collects your transaction details, which include the type of service(s) you have ordered on or through the Website, App and Services, the date, time and price of such services and the method of payment.

Most internet browsers allow you to remove or manage Cookie functions and adjust your privacy and security preferences. For information on how to do this, access the “help” menu on your internet browser or visit https://www.aboutcookies.org/how-to-control-cookies/. Please note that disabling our Cookies may result in your inability to take full advantage of all of the features of our Website and Services.

Your Consent is Important to Us

It is important to us that we collect, use or disclose your personal information where we have your consent to do so, unless you are based in the EEA / UK, in which case we may rely on other legal bases for processing your personal information. Unless you are based in the EEA / UK, depending on the sensitivity of the personal information, your consent may be implied, deemed (using an opt-out mechanism) or express. We may collect, use or disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law or regulatory requirements.

Typically, we will seek your consent at the time that we collect your personal information. In certain circumstances, your consent may be obtained after collection but prior to our use or disclosure of your personal information. If we plan to use or disclose your personal information for a purpose not previously identified (either in this Privacy Policy or separately), we will endeavour to advise you of that purpose before such use or disclosure.

You may change or withdraw your consent at any time, subject to legal or contractual obligations and reasonable notice, by contacting our Privacy Officer using the contact information set out below. If you withdraw or vary your consent, we may not be able to provide you with the communications and/or Services you request through our Website and App. For example, if you would like to receive our newsletter, but are not willing to provide your email address, we will not be able to fulfil your request.

Unless you are based in the EEA or UK or you advise us otherwise, through the access and use of our Website, App, Services and communications, you have consented to the collection, use and disclosure of your personal information as explained in this Privacy Policy.

For further information about how we use your personal information if you are based in the EEA or UK, including the legal bases we rely on to process your personal information as an alternative to obtaining your consent, please see the EEA and UK section of this Privacy Policy.

Protection of Personal Information

Kidstory will endeavour to maintain physical, technical and procedural safeguards that are appropriate to the sensitivity of the personal information in question. These safeguards are designed to prevent your personal information from loss and unauthorized access, collection, use, disclosure, copying, modification, disposal or destruction. While we use all commercially reasonable efforts to protect the information you submit to us, no method of transmission over the internet or electronic storage is 100% secure.

Please note that personal information stored on servers in the custody of our service providers may be subject to access by the law enforcement authorities of those jurisdictions in which the service providers or the servers are located. Our Privacy Officer, whose contact information is provided below, can provide further information about our policies and practices regarding service providers located outside of Canada and further information about how these service providers, collect, use, disclose or store personal information on our behalf.

The security of your personal information is important to us, please advise our Privacy Officer immediately of any incident involving the loss of or unauthorized access to or disclosure of personal information that is in our custody or control.

Your Responsibilities

You are responsible for keeping your user account password private and confidential and for all activities that occur through the use of your user account. You agree to maintain the confidentiality of your user account and notify us immediately of any unauthorized use of your user account or any other breach of security relating to your account. Kidstory will not be liable for any loss or damage arising out of your failure to comply with this section. You may be issued a new password or required to change your password from time to time. We encourage you to create a secure password.

Retention of Personal Information

We will retain your information for as long as your account is active or as otherwise required to process payments for your subscription for the Services. We may also retain and use your information as we deem necessary to comply with our business or legal obligations, and to resolve disputes and enforce our agreements.

Your Access to Personal Information

It is important that the information contained in our records is both accurate and current. If your personal information happens to change during the course of our relationship, please keep us informed of such changes. You can access and change your information through your user account through the settings button at any time.

You also have a right to review any of the information that we hold about you and learn about how we have used it or to whom we have disclosed it by contacting us. Subject to any exceptions prescribed by law, you can access and correct your personal information and challenge the accuracy and completeness of the information we have about you. We may deny access when required or authorized by law. For example, we may deny access when granting access would have an unreasonable impact on other people’s privacy or when necessary to protect our confidential commercial information and the requested information cannot be severed from the balance of the record in which it is contained. If we deny your request for access to, or refuse a request to correct information, we will explain why.

Personal Information of Minors

Our Website, App and Services are not intended to solicit information of any kind from individuals under the age of 13 or the minimum legal age in their jurisdiction of residence to use the Website, App or Services (“Minors”) without the required consent and supervision from their parents/guardians. If we become aware of any information we possess that may belong to a Minor, we will immediately obtain parental consent to delete this information from our servers. If you are a parent/guardian and you suspect that your child may have submitted personal information to us, please contact our Privacy Officer at privacy@kidstory.life.

The Website, App and Services are intended to comply with the United States Children’s Online Privacy Protection Act (“COPPA”). If you reside in the United States, we encourage you to visit visit http://www.ftc.gov/bcp/edu/pubs/consumer/tech/tec08.shtm for more information about COPPA and children’s privacy. In the event that we become aware that we have collected COPPA-restricted personal information from any child other than as permitted under that law, we will dispose of that information, or otherwise treat it, in accordance with COPPA and other applicable laws and regulations. If you are a parent or guardian and you believe that your child under the age of thirteen (13) has provided us with personal information (as defined by COPPA) without COPPA-required consent, please write to: privacy@kidstory.life.

This Privacy Policy only applies to our Website and App

This Privacy Policy does not apply to the privacy practices of these third party websites, applications or social media platforms (including those of other users) which might collect personal information from you.

Our Website, App and Services might have links in them that take you to a website, application or social media platform that we do not control and that may be subject to less stringent privacy standards. These links are provided for your convenience only and you assume all risk for clicking these links. We cannot assume any responsibility for the privacy practices, policies or actions of the third parties that operate these websites, applications, social media platforms or other pages, including how such parties collect, use and/or disclose your personal information. Please make sure you read the privacy policies of these other websites, applications and social media platforms carefully. We do not endorse nor are we responsible for the content, products, services or policies or any information on these third party sites. Your use of any linked sites is at your own risk.

Interpretation of this Privacy Policy

This Privacy Policy is subject to the laws of the Province of Ontario and the federal laws of Canada applicable therein. This Privacy Policy does not create or confer upon any individual any rights, or impose upon Kidstory any rights or obligations outside of, or in addition to, any rights or obligations imposed by Canada’s federal and provincial privacy laws, as applicable. Should there be, in a specific case, any inconsistency between this Privacy Policy and Canada’s federal and provincial privacy laws, as applicable, this Privacy Policy shall be interpreted, in respect of that case, to give effect to, and comply with, such privacy laws.

Contact Us

If you have any questions about this Privacy Policy or concerns about how we manage your personal information, please contact our Privacy Officer by telephone, in writing or by e-mail. We will endeavor to answer your questions and advise you of any steps taken to address the issues raised by you. If you are dissatisfied with our response, you may be entitled to make a written submission to the Privacy Commissioner in your jurisdiction. We have appointed a Privacy Officer to oversee compliance with this Privacy Policy. The contact information for our Privacy Officer is as follows:

by email to:

privacy@kidstory.life

by mail to:

10 Alcorn Avenue, Suite 303, Toronto, Ontario M4V 3A9

**If you choose to communicate with us via email, please be aware that email is not a 100% secure medium for sending any personal or confidential information to us.**

PRIVACY NOTICE FOR USERS BASED IN THE EEA AND UK

This section is applicable to you only if you are based in the EEA or the UK. To the extent there is any inconsistency in this Privacy Policy between any terms of this section and any terms in the rest of the Privacy Policy, the terms of this section will govern if you are based in the EEA or the UK.

This section of the privacy policy includes information that is specific to how we process the personal information of users of our Website, App and Services who are based in the EEA and the UK. For the purposes of the EU’s General Data Protection Regulation (“GDPR”) Kidstory is the data controller and can be contacted in accordance with the “Contact Us” section of this Privacy Policy above. Kidstory is a 'data controller' subject to the GDPR only insofar as we are offering goods or services to individuals in the EEA / UK or where our Website, App or Services may be used to monitor individuals' behavior as far as it takes place in the EEA / UK.

Our legal bases for using personal information

Data controllers need a lawful basis to collect and use your personal information under the GDPR. The law allows for six legal bases for processing personal information (and additional conditions for processing sensitive personal information, which the GDPR calls “special categories of personal data”, and which include health information). Four of these legal bases are relevant to the types of processing that Kidstory carries out. This includes where your personal information is processed on the basis of:

performing a contract with you – principally, where the processing of your personal information is necessary to supply the Website, App or Services and related products and services to you in accordance with our Terms. Please note that some of your personal information is necessary for the performance of our obligations under our Terms, and without this personal information we may not be able to provide you with the communications and/or services you request through our Website, App or Services;
Kidstory’s legitimate interests, including our commercial interests in operating our business securely, sustainably and profitably – for example where we send you administrative information, including information regarding the Website, App, Services and changes to our Terms, procedures or policies.
A person’s consent – for example, if we send you marketing materials by email, this will be because you consented to this; and
Processing that is necessary for compliance with a legal obligation – for example where we need to comply with statutory or financial reporting or other regulatory compliance obligations.

Data transfers outside of the EEA

In the course of providing the Website, App or Services and relating products and services to you, we will transfer your personal information outside of the EEA, principally to Kidstory’s offices in Canada and servers in the United States; this means that your personal data will not have the automatic protection of European data protection laws (including the GDPR) which apply in the EEA. In these circumstances, in order to ensure that your personal information continues to have adequate protection when it is transferred outside the EEA, your personal information will only be transferred on one of the following bases:

where the transfer is subject to one or more of the "appropriate safeguards" for international transfers prescribed by applicable law (for example, standard data protection clauses adopted by the European Commission);
a European Commission decision provides that the country or territory to which the transfer is made ensures an adequate level of protection (which is the case for Canada, under the European Commission’s decision of 20 December 2001 in respect of the Personal Information Protection and Electronic Documents Act); or
there exists another situation where the transfer is permitted under applicable law (for example, where we have your explicit consent).

You can obtain more details of the protection given to your personal data when it is transferred outside the EEA by contacting us using the details set out below.

Your rights in relation to personal information

Under the GDPR, you have the following rights in relation to our processing of your personal information. Please note that these rights are not absolute, and we may be entitled or obliged to refuse requests where exceptions or exemptions apply:

to obtain access to, and copies of, the personal information that we hold about you;
to require us to correct the personal information we hold about you if it is incorrect;
to require us to erase your personal information in certain circumstances;
to require us to restrict our data processing activities in certain circumstances;
to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on you;
to receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal information to another data controller; and
where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal.

Note: If you have given your consent and you wish to withdraw it, please contact us using the contact details set out above. Please note that where our processing of your personal information relies on your consent and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services.

If you are not satisfied with how we are processing your personal information, you can make a complaint to a data protection supervisory authority in the EEA or UK, including the data protection regulator in the EEA country or UK where you or your organization is located. A list of data protection authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en.

Please note that the rights described above are not absolute and legal exceptions may apply.

CALIFORNIA PRIVACY RIGHTS

We reserve the right to limit these rights where permitted under applicable law, including where your identity cannot be reasonably verified or to the extent your rights adversely affect the rights and freedoms of others. To exercise any of the rights below, please contact us via the contact information below. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your personal information.

Kidstory may collect the following categories of personal information:

identifiers (as defined in Cal. Civ. Code 1798.140(o)(1)(A))
personal information (as defined in Cal. Civ. Code 1798(o)(1)(B))
commercial information (as defined in Cal. Civ. Code 1798(o)(1)(D))
internet or other electronic network activity information (as defined in Cal. Civ. Code 1798(o)(1)(F))
geolocation data (as defined in Cal. Civ. Code 1798(o)(1)(G))
sensory data (as defined in Cal. Civ. Code 1798(o)(1)(H))
inferences drawn (as defined in Cal. Civ. Code 1798(o)(1)(K))

We collect identifiers, personal, protected classifications, and sensory data directly from you. We collect commercial information by keeping a log of your transactions. We collect internet and other electronic network activity, geolocation, and inferences based on your interactions with our Website, App and Services.

Your personal information is used for the purposes outlined in the sections entitled “Our Purposes for Collecting Personal Information” and “Use of Personal Information”. We share your personal information in accordance with the section entitled “Sharing of Personal Information”. Please note:

in the preceding 12 months, we have not sold personal information about consumers; and
in the preceding 12 months, we have not sold personal information about minors.

Individual Rights

Right to Know About Personal Information Collected, Disclosed, or Sold (if Applicable)

You have the right to request that Kidstory disclose the personal information it collects, uses, and discloses about you to third-parties. There are two types of Rights to Know requests that you can make:

1. Right to Know (Abbreviated Request): If you make a Right to Know (Abbreviated Request), you will receive the following information about you:

categories of personal information collected;
categories of sources from which personal information is collected;
business purpose for collecting or selling personal information; and
categories of third-parties with whom personal information is sold, if applicable.

2. Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you:

specific pieces of personal information collected about you.

This information will be provided to you free of charge, unless Kidstory determines that your request is manifestly unfounded or excessive. You may request this information twice in a 12-month period. There are certain exceptions to a consumer’s Right to Know. Kidstory will state in its response if an exception applies.

Right of Deletion

You have the right to request that Kidstory and our service providers delete any personal information about yourself which Kidstory has collected from you upon receipt of a verifiable request. This right is subject to certain exceptions. Kidstory will state in its response if an exception applies.

Right to Opt-Out of the Sale of Personal Information (if Applicable)

You have the right to opt-out of the sale of their personal information by a business subject to certain laws and regulations. Kidstory does not, and will not, sell any personal information of California consumers. Kidstory will update this Privacy Policy and comply with applicable laws and regulations in the event that it sells personal information of California consumers in the future.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising the privacy rights conferred by California law. Kidstory will not discriminate against you because you exercised any of your privacy rights, including, but not limited to, by: denying goods or services to you; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing a different level of quality of goods or services to you; or suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Submitting Requests

You can submit your request by contacting us using the information set out in the section entitled “Contact Us” above.

Verifying Requests

Kidstory must verify that the person requesting information or deletion is the California consumer about whom the request relates in order to process the request. To verify a California consumer’s identity, we may request up to three pieces of personal information about you when you make a request to compare against our records. We may also request that you sign a declaration under the penalty of perjury from the consumer whose personal information is the subject of the request.

Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in your request to verify your identity and will delete any information you provide after processing the request. Kidstory reserves the right to take additional steps as necessary to verify the identity of California consumers where we have reason to believe a request is fraudulent.

Authorized Agents

You may choose a person registered with the California Secretary of State that you authorize to act on your behalf to submit your requests (“Authorized Agent”). If you choose to use an Authorized Agent, Kidstory requires that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with Kidstory. Failure to do so may result in Kidstory denying your request.