Privacy Shield

Privacy Shield Notice

EFFECTIVE DATE: November 19, 2019

Yotpo complies with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the transfer of personal data from the EU, UK and Switzerland to the U.S. For purposes of this Privacy Shield Notice, “Personal Information” is information that identifies, directly or indirectly, a client or consumer in the EU, UK or Switzerland. Yotpo has self-certified to the U.S. Department of Commerce and declared its commitment to adhere to the Privacy Shield Principles of Notice; Choice; Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement, and Liability (the “Principles”).

You can learn more about Privacy Shield at https://www.privacyshield.gov and see our Privacy Shield self-certification here. Yotpo’s self-certification to the Privacy Shield is subject to the investigatory and enforcement authority of the Federal Trade Commission.

Personal Information We Process. From clients (i.e., users of Yotpo.com and subscribers to Yotpo software and services), we collect the categories of information, which may include Personal Information, described in Section 6. We process such information for the purposes described in the Section 7. If you use a website developed and operated by a Yotpo Client, we may collect your name, contact information, IP address, geolocation information, purchase information, and transaction data.

Accessing Personal Information. The Privacy Shield Principles provide individuals located in the EU, UK and Switzerland whose Personal Information we process the right to access their Personal Information and to review, correct, amend, or delete their Personal Information. Clients who would like to access their Personal Information may do so by logging into the Yotpo user interface or emailing us at privacy@yotpo.com. Customers who use a Yotpo Client and who would like to access their Personal Information should request access from the Yotpo Client whose website they use.

Transfers to Third Parties and Your Choices. As described in Section 8 and this Section 9, we may disclose and transfer client Personal Information to third parties. We will also disclose client customer Personal Information to third parties (e.g. service providers). We contractually require those third parties to provide the same level of protections to Personal Information as required under the Principles. Yotpo will remain liable under the Principles if a third party processes Personal Information in a manner inconsistent with the Principles, unless Yotpo proves that it is not responsible for the event giving rise to the damage. In accordance with our legal obligations, we may also transfer, subject to a lawful request, Personal Information to public authorities for law enforcement or national security purposes.

Contacting Us, Complaints and Dispute Resolution. We encourage EU, UK and Swiss individuals who have questions or complaints about how we process their Personal Information under Privacy Shield to contact us at privacy@yotpo.com. We will work to resolve your issue as quickly as possible, but in any event within 45 days of receipt. If you have an unresolved privacy or data use complaints that we have not addressed satisfactorily, please contact, free of charge, our dispute resolution provider, JAMS, at https://www.jamsadr.com/eu-us-privacy-shield. If you are an EU, UK or Swiss individual and unable to resolve any complaints through any of the above methods, you may be able to invoke binding arbitration through a Privacy Shield panel, in accordance with the Privacy Shield Framework at https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint.