GDPR and CCPA

The General Data Protection Regulation (GDPR) is a legal policy that gives European residents more clarity and control over how their Personal Information is used. GDPR is effective from March 19, 2019. In the context of GDPR, Personal Information refers to information that can directly or indirectly identify a person, such as a photo, name, bank details, medical information, and computer IP address. This European-wide law replaces the 1995 Data Protection Directive 95/46/EC.

The California Consumer Privacy Act (CCPA) is a data privacy law, effective from January 1, 2020. It applies to certain businesses and is intended to enhance privacy rights and consumer protection for residents of California. Learn more about how Popless is complying with the GDPR and the CCPA in our Privacy Policy, Cookies Policy, and California and Vermont privacy policy supplement.

Our response

Popless Privacy teams have carefully analyzed applicable privacy laws and regulations and undertaken the necessary steps to ensure that Popless is in compliance with their requirements. We value our users’ privacy and their rights to control their personal data. Regardless of where you call home, you may close your account or request the deletion of all personal information we have about you at any time. However, we will only be following the strict requirements outlined by the GDPR and the CCPA for those living in the European Economic Area (EEA) and in California, respectively. If you live elsewhere, we will be more than happy to consider your request to delete your data.

We will only collect and process Personal Information where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you to provide the Services), and “legitimate interests.” Where we rely on your consent to process Personal Information, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object.

If you have any questions about the lawful bases upon which we collect and use your Personal Information, or the below please contact us at hello@popless.com. Where we rely on your consent to collect Personal Information you may withdraw your consent using the contact information contained within this Section.

For all GDPR-based requests made pursuant to this section, Popless will: 1) respond as required under applicable law, 2) provide a copy of any requested Personal Information in a structured, commonly used and machine-readable format, and 3) transmit such Personal Information to another service provider without restriction in accordance with applicable law.

Submit a data request

If you are located in a region covered by GDPR and CCPA, you may have certain rights with regard to your personal information. These rights may be limited, for example, if fulfilling a request would reveal personal information about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping (such as fraud prevention purposes or record retention requirements under applicable laws). In addition, we typically will not remove information you posted publicly or shared with others through or on the Service, as neither you nor Popless can delete all copies of information that have been previously shared with others on the Service.

If you would like to request to close your account in our system, you can do so by emailing hello@popless.com. In addition, you can access, correct, or delete your personal information by making updates to that information through your account. You can also submit a request to us regarding your personal information by completing the below form or emailing hello@popless.com. Please note that if your information is deleted, then your account may become deactivated. If your account is deactivated or you ask to close your account, you will no longer be able to use the Service.