Global notice for homepage
We use cookies and similar tools to capture how users interact with our services. By continuing to use VTAGZ.com, you accept our collection and use of your information as described in our Privacy Policy.
Privacy Policy
Last Updated: October 31, 2024
Previous version: [https://privacypolicy.vtagz.com/]
Welcome
This Privacy Policy (“Policy”) explains how we collect, use, store, protect, and share your personal information through our services. The services are made available by Mammoth Media, Inc. (“VTAGZ”, “we”, “our” or “us”).
Mammoth Media, Inc. is the primary data controller of the personal information collected through the services (as defined as our “Services” in our Terms of Service (“Terms”)). Our Terms define capitalized terms that aren’t defined in this Policy.
You should read this entire Policy, but here are a key items to keep in mind as you use the services:
- If you enroll in a Merchant Offer through the services, the Mechant will also receive the personal information you provide to enroll—like your phone number—and will serve as an independent controller of that personal information.
- We do not ‘share’ or ‘sell’ your information. Not for targeted advertising, nor for any other purpose.
- Otherwise, how VTAGZ handles your information depends on which services you use, and how you use them.
This Policy is grouped into these sections:
about us and this Policy;
information we collect & why we use it;
how we use information;
when we disclose information to others;
how to control your privacy; and
information about local privacy laws.
We encourage you to read this Policy carefully. If you have questions, please contact us.
About us and this Policy
This Policy is designed to explain how we process your personal information and how you can exercise control over our processing. Capitalized terms that are used but not defined in this Policy are defined in our Terms. The Terms describe how the services works in general, and establishes a contract between you and us governing your use of the services.
Contact us
If you have any questions or feedback about this Policy, email us at privacy@vtagz.com or write to us at: Mammoth Media, Inc., 8605 Santa Monica Blvd., PMB 49217, West Hollywood, California 90069-4109.
Changes to this Policy
Because the services change often, this Policy may change over time. Anytime we modify the Policy, we will post a revised version on the services and update the Last Updated date above. If we intend to change the ways we use your personal information in a manner materially different from that stated at the time of collection, we will notify you before the material changes take effect, so you have time to review them. If we have your contact information (such as your email or phone number), we will notify you through that method. We may also post a notice on the services, or notify you by other means to the extent required by law.
We encourage you to review the Last Updated date periodically to ensure you’re aware of the current Policy. By using or accessing the services, you signify that you have read, understand and agree to be bound by this Policy and the Terms.
When this Policy applies
This Policy applies to you when you use our services, effective as of the Last Updated date above. However, some collection and use of information falls outside this Policy:
- Merchant records: Each time you enroll in a Merchant Offer, the Merchant receives an independent copy of the information you provide. We don’t control Merchants’ records, and their use of your personal information is solely in their control.
- For example, if you ask us to delete your information, we will delete your information from our records, but our deletion will not impact any personal information about you maintained by any Merchant.
- Similarly, if we receive personal information in our role as a service provider to another business, our agreement with that business governs our use of that personal information. We will refer any questions or concerns related to the business that controls the personala information.
- Third-party services: Outside Materials (as defined in our Terms) are not part of the services, so this Policy doesn’t apply to any information you may exchange with providers of Outside Materials or other third parties.
- For example, If you follow a link to a Merchant’s website, your use of that Merchant’s website is governed by that website’s privacy policy, and is not covered by this Policy.
- Our personnel: If you are a current or former employee or contractor of ours, this Policy does not apply to you. Reach out to your human-resources partner or supervisor with any inquiries about your personal information.
Information we collect & why we use it
We collect certain information when you use the services. This includes information you provide to us, information we collect automatically, and information we receive from other sources.
This section describes, comprehensively, how the services collect and use your information, and our legal basis for that processing. Under certain data protection laws like GDPR, companies must have a “legal basis”—a valid reason—to process personal information. We rely on different legal bases to process your information for the purposes described in this Policy.
What we collect | How we use it | Why we process it | Legal basis | Retention |
Activity data – areas of the services you visit, where you click, scroll, hover over or otherwise interact with the services, and when and for how long the activity occurred. | We collect, analyze, process, and store activity data including via automated means
| For fraud prevention. To improve our services. | Our legitimate interests in understanding how users interact with and use our services; and keeping our services safe and secure. Activity data is monitored to prevent malicious and fraudulent activity and unauthorized use on our services as part of performance of a contract. | Account lifetime |
Contact information – name, phone number, email and address | We collect, process and store your contact information. We disclose your contact information to the Merchant sponsoring each Merchant Offer you enroll in. | To track which Merchant Offers you enroll in and administrate your participation. To send you marketing and transactional notifications and reminders. To contact you and provide services related to Merchant Offers and campaigns sponsored by VTAGZ. | Transactional messages are sent as part of performance of a contract. Marketing communications and alerts are sent with your consent, and only until you opt-out.
| Account lifetime |
Device information – IP address, device identifiers, user agent.
| We collect, process and store your device information. | For fraud prevention. | Our legitimate interests in keeping our services safe and secure and to provide a valid and relevant service to our users. We only collect imprecise location data, and only when you have not indicated that you do not wish to share it.
| Account lifetime |
Messaging data – messages that you send through the services, including ATS connected to the services | We process, monitor, review, store, and analyze such content, including via automated means. | To administrate Merchant Offers and process redemptions and qualifications. For data analysis, quality control, enforcement of our Terms and other VTAGZ policies, content moderation. | As part of the performance of a contract. Messaging data cannot be malicious, spam, or fraudulent and is monitored as part of performance of a contract. Depending on the applicable law, we may rely on your consent. | 10 years |
Payment information – any payment-related information contained in your messaging data (as shown on receipts or payment confirmations you provide, such as the last four digits of your payment card and transaction-related info) | If you send us receipts or other documentation evidencing your qualification for redemption of a Merchant Offer, we process any payment information contained in your messaging data to verify qualification for and redemption of Merchant Offers. | To administrate Merchant Offers and process redemptions and qualifications. For data analysis, quality control, enforcement of our Terms and other VTAGZ policies, content moderation. | To comply with our legal obligations with respect to financial reporting and valid legal information requests. In our legitimate interest to ensure we are in contact with the correct person. | Per applicable legal requirements |
User feedback and satisfaction data – including ratings and plain text feedback on how we can improve our services. | We process, monitor, review, store, and analyze such content, including via automated means. | To improve our services and services. | Our legitimate interest in operating, managing, and improving our services and services. | Account lifetime |
We may infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). Any personal information that VTAGZ obtains from other third-party sources will be processed by VTAGZ in accordance with this Policy and all applicable laws.
Security
VTAGZ has implemented technical, administrative and physical security measures to protect your information from unauthorized access, use or disclosure. Still, no data transmission online is 100% secure, so we cannot guarantee or warrant the security of any information you provide, and you do so at your own risk. We cannot promise that your information will remain absolutely secure in all circumstances. We are not responsible for the circumvention of any privacy settings or security measures we may provide.
Our disclosures of information to others
This section describes how and why we exchange personal information with service providers and Merchants. We may also disclose deidentified and/or anonymized data for these purposes.
We do not ‘sell’ or ‘share’ personal information
That means we don’t provide or exchange your personal information with others to faciliate behavioral ads (i.e., ads targeted to you) or otherwise sell it. For clarity, we haven’t shared or sold any personal information for that purpose in the past twelve (12) months.
Merchants receive your information
We disclose the personal information you provide in connection with a Merchant Offer to that Merchant, with few exceptions. The Merchant is as an independent controller of your personal information, meaning that VTAGZ does not control the Merchant’s processing of your personal information.
For example, if you register for four Merchant Offers through the services, each Merchant will receive your registration information (typically, your phone number), in addition to VTAGZ. If you ask VTAGZ to delete your personal information, your personal information will be deleted by VTAGZ, but won’t be deleted by any of those Merchants. If you opt-out of text messages in connection with one of those Merchant Offers, you will continue to receive text messages in connection with the other Merchant Offers.
Functional disclosures
In addition to the use of trackers described above, we contract with companies or individuals to provide certain services related to the functionality and features of the services, including payment processing, email and hosting services, software development, shipping and fulfillment, data management, and administration of contests and other promotions. We refer to them as “contractors.”
We may disclose information about you to contractors as necessary for them to perform their services. Contractors are not permitted to use information about you for any other purpose. In the past twelve (12) months, we have disclosed these types of information to the following types of contractors:
- Analytics providers, namely Google Analytics, to tell us how the services is doing, such as which parts interest visitors and how long they visit before leaving. Among other data, they may receive your IP address.
- Various hosting services and data processors to provide the infrastructure of the services, which ensures that traffic is from real people, not computers. Among other data, they may receive your IP address.
- Messaging providers, namely Twilio, to facilitate text messages between you and us and to share your phone number with each Merchant whose Merchant Offer you enroll in.
For legal reasons
Finally, we may disclose personal information:
- In response to subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us;
- When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of our company, our users, or others; and in connection with the enforcement of our Terms and other agreements; or
- In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
With your consent or at your request
We may periodically ask for your consent to disclose your information to third parties. Whenever we ask your consent for this reason, we will summarize the purpose and scope of the disclosure. To be clear, we only exchange information about you with third parties for direct marketing purposes if you opt in, and will only do so until you opt out.
How long we retain your information
We retain your information only as long as we need it for the purposes described under Informantion we collect & how we use it, except when longer retention is required by our compliance policies and efforts toward applicable legal, tax, accounting and regulatory requirements.
How long we need information for those purposes varies by category, and even within categories. These retention determinations always consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from its unauthorized use or disclosure, whether we can achieve those purposes without using the personal information.
For example, we delete some Internet Activity at some soon as you exit the services, whereas we may retain records of your orders for services and products for several years as required by law or contract, such as agreements with our payment processors or under our accounting standards.
Use by minors
The services is intended for adult users. We do not knowingly collect information from anyone under the age of 16, and we do not share or sell information about anyone under 16 without affirmative authorization. If we learn that we have collected information from a person under age 16, we will delete that information as quickly as possible.
- If you are under 16: sorry, but please leave the services. If you’ve already sent us information, please contact us first so we can delete it.
- If you are a parent or guardian of a person under 16 years of age and you believe that person provided information to us, please contact us.
How to control your privacy
In General
As a user of the services, you have rights and choices about your personal information. We want you to be in control of your information, so we want to remind you of the following options and tools available to you:
- Opt-outs: you may opt-out of any newsletters or promotional communications from us by following the unsubscribe instructions in the communication you receive. We may continue to send you communications regarding the services, such as notices about administrative updates, transaction reports, and changes to the services, this Policy or the Terms.
- Exercising rights: If any of the local privacy rights listed below apply to you, see Requesting information.
Information about local privacy laws
The services operate from the United States, but this Policy applies worldwide. Our practices generally do not differ based on your location, but your rights and choices depend in part on the law where you live. If any of these local privacy laws apply to you, those sections override any contrary descriptions elsewhere in the Policy as they relate to you. If you have questions about your rights under other data privacy laws, please contact us.
International Data Transfers
If you reside outside the United States, we transfer information about you for processing in the United States. By providing your information to us, you consent to the processing of the information in the United States. The transfer of this information to the United States is necessary for the performance of our contract for use of the services.
When we transfer personal data subject to GDPR outside of VTAGZ, we use standard contract clauses approved by the EU for this purpose, or another appropriate transfer mechanism.
Note that U.S. law is not equivalent to GDPR. As of the Last Updated date, the U.S. has not been deemed an ‘adequate’ jurisdiction under GDPR for the purposes of international data transfers. However, the EU and the U.S. are negotiating the terms of an adequacy determination that may go into effect in the years to come.
Information for users in Canada
- Overview: As described in the “How to control your privacy" section of VTAGZ’s Privacy Policy, all our users have control over their information and can directly edit or delete information from their account and limit what data we process. In addition to these rights, users residing in Canada are afforded the right to certain additional information with respect to their personal information under the Personal Information and Electronic Documents Act (PIPEDA). If you are a Canadian resident, this section applies to you.
- Data Controller: As described in the “Welcome” section of VTAGZ’s Privacy Policy, Mammoth Media, Inc. is the primary data controller of your information, and any Merchants whose Merchant Offers you enroll in are independent controllers of any information you provide in connection with their Merchant Offers.
- Exercising your rights: All our users have control over their information and can directly edit or delete information from their account and limit what data we process. Users in Canada have additional rights that you can exercise through the VTAGZ app directly or by contacting us. Those rights include:
- Right of access to your personal data
- Right to rectify your personal data if they are incorrect
- Right to withdraw consent. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal
- Right to file a complaint regarding the processing of your personal data with the Office of the Privacy Commissioner of Canada
Additionally, you may contact VTAGZ’s Privacy Officer by emailing privacy@vtagz.com.
Rights under U.S. state laws.
If you are a resident of California, Colorado, Connecticut, Utah, Virginia or another state with a similar data-privacy law, you may have additional rights that you (or, in certain states, an authorized agent acting on your behalf) can exercise by contacting us, including the right to:
- More information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months
- Access and/or receive a copy of certain personal information we hold about you
- Correct your personal information
- Delete certain personal information we hold about you
- Receive information about the financial incentives that we offer to you, if any
- Opt out of the processing your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable
- You also have the right to not be discriminated against for exercising your rights.
- You may also have the right to opt out of “sales” of your information and “sharing/processing of your information for targeted advertising.” We do not sell the personal data of our users or share personal data for targeted advertising purposes.
Certain information may be exempt from the requests above under applicable law. For example, we need to retain certain information in order to provide our services to you. We also need to take reasonable steps to verify your identity before responding to a request. If you are an authorized agent submitting a request on a user’s behalf (where permitted), we may require proof of your written authorization before processing the request. Depending on applicable law, you may have the right to appeal our decision to deny your request.
If you have any questions about these rights, wish to exercise them, or request an appeal, please reach out to us at privacy@vtagz.com.
Additional Information for Users in California
In addition to the rights described above, consumers residing in California are afforded the right to certain additional information with respect to their personal information under the California Consumer Privacy Act or (“CCPA”). If you are a California resident, this section applies to you.
- Our collection and use of personal information: We collect the following categories of personal information: identifiers (such as your username, the email address you used to sign up, and your phone number if you’ve chosen to provide it); commercial information (such as records of what you have told us you have purchased in connection with Merchant Offers, if anything); financial data (payment information and your history of purchases from VTAGZ); internet or other network information (how you interact with the application); location information (because your IP address may indicate your general location); inference data about you (for example, what content you may be interested in); and other information that identifies or can be reasonably associated with you. For more information about what we collect and the sources of such collection, please see the “Informantion we collect & how we use it” section of the Privacy Policy. To the extent we collect or use sensitive personal information as defined by law (such as the CCPA), we do so in accordance with applicable legal requirements, and we do not use or disclose it other than for purposes for which there is not a right to limit under the CCPA.
- We collect personal information for the business and commercial purposes described in see the “Informantion we collect & how we use it” section of VTAGZ’s Privacy Policy.
- Disclosure of personal information: We may share your personal information with third parties as described in the “Our disclosures of information to others” section of VTAGZ’s Privacy Policy. We disclose the categories of personal information mentioned in that section for business or commercial purposes.
- No sale or “share” of personal information: The CCPA sets forth certain obligations for businesses that sell or “share” personal information. We do not sell or share the personal information of our users as those terms are defined in the CCPA. We do disclose certain information as outlined in the “Our disclosures of information to others” section of VTAGZ’s Privacy Policy and you can make choices with respect to your information as outlined in that policy.
- We retain personal information as described in the “How long we retain your information” section of VTAGZ’s Privacy Policy.
California’s “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties, as defined under applicable law, for their direct marketing purposes. Except in connection with Merchant Offers you enroll in and our disclosures to those Merchants pursuant to your enrollment, we do not share your personal information with third-parties for their own direct marketing purposes.
Requesting information
Submitting requests
To exercise any rights described in this Policy, please contact us. Your request must:
- provide sufficient information to identify you and the law that applies to you, such as your name, e-mail address, home or work address, or other information we maintain.
- not include social security numbers, driver’s license numbers, third-party account numbers, credit or debit card numbers, or health information.
Verifying requests
If your request is unclear or we are unable to authenticate your identity, we will respond with direction on how to remedy the deficiencies, in accordance with law that applies to you. If we cannot verify the identity of the individual making the request, we may deny it, in full or in part.
Responses to requests
We will respond to your request as quickly as we can, taking into account the nature of your request and the volume of pending requests. The content of our response will vary with the nature of your request, but will always respond in accordance with any deadlines or requirements specified by the laws that applies to you.
Under certain circumstances, we may be unable to provide responsive personal information, such as when disclosure would create a substantial, articulable and unreasonable risk to the security of the information, customers’ account with us, or the security of our systems or networks. We do not disclose account passwords or any other non-personal information that enables access to an account.
Please understand, however, that we reserve the right to retain an archive of any deleted information, to the extent permitted by law. We may also retain deidentified or aggregate data derived from information about you.
Appealing decisions
Residents of California, Colorado, Connecticut, and Virginia may appeal a decision we have made regarding their requests by contacting us.
#5164691v2<GGDMS> - VTAGZ—Privacy Policy