Privacy Policy

Purpose

Protecting your privacy is important to us at Prodshot

Prodshot provides services and develops software to help merchants sell better or more efficiently online through various platforms, such as Shopify. Prodshot has adopted this Privacy Policy ("Privacy Policy") to guide you through the collection, use, retention, and disclosure of Personally Identifiable Information ("Personal Data", as further described below) that you may provide while using Prodshot websites, apps, and services in connection with these platforms (collectively referred to as "Services"). Prodshot encourages you to read this Privacy Policy in order to understand how we collect and process Personal Data in the course of providing the Services and your interaction with the Services.

By using the Services, you consent to the collection, use, retention, and disclosure of your Personal Data for processing as described in, and subject to the limitations set out in this Privacy Policy.

Note to Residents of the European Union and California: In order to comply with the requirements of the European General Data Protection Regulation (GDPR) for our European users, and California Consumer Privacy Act (CCPA), this Privacy Policy outlines the legal basis on which we process your Personal Data and provides other information required by the GDPR & CCPA.

Personal Data

Personal Data is any information that would identify a person directly, or indirectly in combination with data from other sources. For example, a full name, home or work address, phone number, national identification number (SSN, SIN, etc.), email address, banking details, IP address, biometric data, usage data, or any information that may individually identify a person.

Prodshot may collect Personal Data including without limitation your name, shipping and billing addresses, phone number, email address, payment information, IP address, and device identifiers and/or geolocation information, in the course of its Services, and may use or disclose that Personal Data as described in this Privacy Policy.

Prodshot may also create de-identified or anonymized data from Personal Data by excluding data components (such as your name, email address, etc.) that makes the data able to personally identify you, through obfuscation, or through other means. In addition, Prodshot may collect and use aggregated, anonymous information to provide data about the Services to advertisers, potential business partners and other unaffiliated entities. As this information does not identify a person, and is therefore not Personal Data, Prodshot's use of such aggregated, anonymized and/or de-identified data is not subject to this Privacy Policy.

Consent and Collection of Personal Data

If you use a Prodshot website, or conduct a transaction through a Prodshot Service where Personal Data is essential, your consent is implied to collect and use your Personal Data to facilitate that use or complete that transaction requested or initiated by you only. Examples of instances in which Personal Data may be collected by Prodshot are, without limitation:

• When you install a Prodshot App,
• If you make or return a purchase through a merchant who uses a Prodshot App,
• When you access and navigate a Prodshot website, or engage in communication and/or business transactions with Prodshot Professional Services, Managed Services, Client Success, or any other Prodshot entity,
• If you knowingly submit Personal Data through a Prodshot website for the purpose of registering for a service, a contest, or authentication.

During these instances, we may collect data such as, but not restricted to: areas of the Services or Prodshot websites you visit, transaction type(s) you engage in or request (and amounts thereof), content you view, your IP address, data downloaded or submitted by you, payment information provided by you, shipping and billing information entered by you, as well as the nature, quantity and price of the goods or services you exchange and the individuals or entities with whom you communicate or transact business using the Services.

In the event Prodshot requests Personal Data for scenarios independent of the above, such as marketing-related questions via questionnaires, surveys, and profile data, it will include a specific consent request. The consent request will include a clear purpose and goal for the collection of Personal Data, along with a means of withdrawing consent. In these scenarios, we may ask for data such as, but not limited to: your contact information (name, telephone numbers, email address, mailing address), date of birth, product and/or cosmetic concerns, which brands and products you use, user authentication and security information (e.g. username and password).

If at any point you wish to withdraw consent to Personal Data collection, please contact Prodshot via the Contact & Questions area at the bottom of this Privacy Policy. Please note that certain Services may only be able to be offered or provided to you if you disclose the Personal Data necessary to facilitate those Services, and therefore Prodshot may not be able to provide you with certain Services in the event that you choose not to disclose that Personal Data to Prodshot.

Age of Consent

The Services offered by Prodshot are directed towards and designed for the use of persons above the age of majority in your province, state, or country. Persons under the age of majority are not permitted to use the Services on their own, and Prodshot will not approve applications of, or establish, or maintain accounts or memberships for, any persons below their respective region's age of majority.

Prodshot does not solicit or knowingly collect Personal Data from persons below the age of majority of their region. If we discover we have received Personal Data of a person below the age of majority, we will delete such information from our systems. Additionally, if a parent or legal guardian believes that Personal Data regarding a minor in their care has been provided to Prodshot, they may request the minor's information be corrected or deleted by contacting Prodshot Privacy Officer via the Contact & Questions area at the bottom of this Privacy Policy.

Anonymous Information

When you interact with a Prodshot Service, similar to most other websites, apps, and online services, certain anonymous technical information about your visit is automatically logged and collected by Prodshot. This may include information about the type of browser you use, operating system, the date and time you access the Service, the links you accessed while using the Service, and the internet address of the website, if any, which linked directly to the Prodshot Service. This information is used for system administration purposes such as diagnosing problems with Prodshot's Services, servers and websites, compiling aggregated and statistical information, and to improve the operation and content of Prodshot's websites and Services. It is not personally identifiable, and is not considered Personal Data and subject to this Privacy Policy.

Personal Data Use

Prodshot may use collected Personal Data for such purposes as:

• Helping to establish and verify the identity of users, and to keep user accounts secure,
• Opening, maintaining, administering and servicing users' accounts or memberships,
• Providing Services and support to users,
• Improving Prodshot's websites, including tailoring its websites to users' preferences,
• Providing users with product or Service updates, promotional notices and offers, and other information about Prodshot and its affiliates,
• Corresponding with you, and responding to your questions, inquiries, comments, and instructions,
• Maintaining the security and integrity of Prodshot systems, and,
• Complying with applicable laws.

Once collected, Prodshot will store and process your Personal Data in secure locations. Prodshot may transmit data outside of Canada for the purposes of processing and executing transactions related to the Services, or for the purpose of executing transactions on behalf of merchants that have installed and make use of Prodshot Apps in connection with their online stores. Where this transmission occurs, the security measures outlined in this Privacy Policy will continue to apply.

Personal Data will only be retained by Prodshot for the length of time required to fulfill the purpose or complete the transaction for which it was collected, or as may be required by law. Beyond that point, Personal Data in the possession or control of Prodshot will be anonymized or securely destroyed.

Legal Basis for Processing

This section addresses the legal basis for processing your Personal Data if you reside outside of Canada and in the European Economic Area (within Canada, you typically provide consent when you receive notice of this Privacy Policy in (or via) a website link or mobile app).

Lawful Basis for Processing

Data protection law in the European Union requires a "lawful basis" for collecting and retaining Personal Data from citizens or residents of the European Economic Area. Prodshot collects and processes your Personal Data for a variety of purposes outlined in this Privacy Policy. In certain cases, separate consent to this processing is not required, including:

• For the performance of a contract: To perform our contractual obligations to you, including account registration, fulfilling orders or purchases you have made (including processing of payment), contacting you in relation to any issues with your order, in relation to the provision of the Services, where Prodshot needs to provide your Personal Data to our service providers to provide the Services, or to aggregate and centralize data for the performance of the Services.
• To meet legal obligations: To comply with laws, regulations, court orders, or other legal obligations or to assist in an investigation, to protect and defend our rights and property, or the rights or safety of third parties, to enforce our Terms of Use, this Privacy Policy, or agreements with third parties.
• For our legitimate interests: In certain cases, we process your Personal Data to meet our legitimate interests as a business. For example, we process your Personal Data to: prevent fraud and maintain a secure website and Services, improve our website and Services, and for our own marketing activities, provided that those interests are not outweighed by your rights and interests.

Contact & Questions

If you have any questions or comments regarding this Privacy Policy or any aspects of Prodshot Services, please contact Prodshot at support@prodshot.net.

Prodshot