Welcome! You have arrived at www.sangstre.com (the “Site”) or its associated mobile application-enabled registered user platform (the “Platform”), which is owned and operated by Sangstre (“Sangstre”). Throughout this Privacy Policy, the words “we”, “us” and “our” refer to Sangstre, and the words “you” and “your” refer to the user visiting the Site or the Platform. This Privacy Policy applies to information that we collect at the Site or the Platform (including through the mobile application and both the generally available and password-protected aspects of the website).
This Privacy Policy does not apply to our data collection activities offline or otherwise outside of the Site or the Platform (unless otherwise stated below). Please review the Platform’s Terms of Use, which govern your use of the Platform.
By accessing and using our Site or Platform, you consent to our Privacy Policy, our Terms of Use, and our collection, use and sharing of your information and data, and other activities, as described below.
What Information Does the Site or the Platform Collect?
(a) Information You Provide to Us
Personal Information: We may ask you to provide us with, or you might submit via the Site or the Platform, personally identifiable information, which is information that identifies an individual personally, such as one’s first and last name, telephone number, e-mail address, geolocation data, educational background information and employment history, your fitness information, and prescription information, including any images of prescriptions you may provide to us (“Personal Information”).
If you provide us with an image of your prescription, we obtain any information that appears on the prescription form. We may collect this Personal Information through various forms and in various places on the Site or the Platform, including account registration forms, “contact us forms” at the Site, or when you otherwise upload data to and interact with the Platform.
(b) Information Collected or Stored As You Access and Use the Site, the Platform or the Smart Glasses Frames
In addition to any Personal Information or other information that you choose to submit to us via the Site or the Platform, we and our third-party service providers may use a variety of technologies that automatically (or passively) store or collect certain other information whenever you visit or interact with the Platform. This information shall be defined as “Usage Information” for purposes of this Privacy Policy.
Usage Information may include:
- Your IP address, UDID or other unique identifier (“Device Identifier”)
- Your Device functionality (including browser, operating system, hardware, mobile network information)
- The URL that referred you to our Site or the Platform
- Details of transactions you carry out through the Site or the Platform
- The areas within our Site or Platform that you visit and your activities there
- Your Device location
- Your Device characteristics
- Your personal health and fitness information tracked by sensors and generated by your use of the associated smart glasses frames device
- Certain other Device data, including the time of day, among other information
You may also provide information for publication or display posted in public areas of the Site or the Platform (collectively, “User Contributions”). Your User Contributions are posted and transmitted to others at your own risk. We cannot control the actions of third parties with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
Third Party Tracking and “Do Not Track”
There may be other Tracking Technologies now and later devised and used by us in connection with the Site or the Platform. Further, third parties may use Tracking Technologies in connection with our Site or Platform, which may include the collection of information about your online activities over time and across third-party websites or online services. We may not control those Tracking Technologies and we are not responsible for them.
However, you consent to potentially encountering third-party Tracking Technologies in connection with use of our Site or Platform and accept that our statements under this Privacy Policy do not apply to the Tracking Technologies or practices of such third parties.
Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party web sites or online services (e.g., browser do not track signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms.
Information Third Parties Provide About You
We may, from time to time, supplement the information we collect directly from you on the Site or the Platform with outside records from third parties for various purposes, including to enhance our ability to serve you, to tailor our content to you and to offer you opportunities that may be of interest to you. To the extent we combine information we receive from those sources with your Personal Information we collect on the Site or the Platform, it will be treated as Personal Information and we will apply this Privacy Policy to such combined information, unless we have disclosed otherwise. In no other circumstances do our statements under this Privacy Policy apply to information we receive about you from third parties, even if they have used our technology to collect it and share it with us.
Interactions with Third-Party Services
The Site or the Platform may include functionality that allows certain kinds of interactions between the Site or the Platform and a third-party website or application. For example, you might be able to link the Platform with, or import/share information about you from, third-party health and fitness applications. The use of this functionality may involve the third-party operator providing certain information, including Personal Information, to us.
For example, when you register with the Site or the Platform, you may have an option to use your Facebook, Google or other account provided by a third-party site or application to facilitate the registration and log-in or transaction process on the Site or the Platform, or otherwise link accounts.
If we offer and you choose to use this functionality to access or use our Site or the Platform, the third-party site or application may send Personal Information about you to us. If so, we will then treat it as Personal Information under this Privacy Policy, since we are collecting it as a result of your accessing of and interaction on our Site or Platform.
In addition, we may provide third-party sites’ interfaces or links on the Site or the Platform to facilitate your sending a communication from the Site or the Platform. For example, we may use third parties to facilitate emails, tweets or Facebook postings. These third parties may retain any information used or provided in any such communications or other activities and these third parties’ practices are not subject to our Privacy Policy. Sangstre may not control or have access to your communications through these third parties.
Further, when you use third-party websites or services, you are using their services and not our services and they, not we, are responsible for their practices. You should review the applicable third-party privacy policies before using such third-party tools on our Site or Platform.
How Do We Use the Information Collected?
Generally, we may use your Personal Information, User Contributions, or Usage Information that you submit or that we collect about you:
- To provide you with information or services that you have requested or agreed to receive.
- To provide you with information via email about product or service offerings from Sangstre or Sangstre’s partners on an ongoing basis, unless you opt out of receiving such emails.
- To enable you to participate in a variety of the Site or the Platform’s features.
- To process your account inquiry, including verifying your information is active and valid.
- To improve the Site or the Platform, to create new service offerings, to customize your experience, or to serve you specific content that is most relevant to you.
- To contact you with regard to your use of the Site or the Platform and, in our discretion, changes to the Site or the Platform and/or any of the Site or the Platform’s policies.
- For internal business purposes.
- For purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy.
How and When Do We Share Information with Third Parties?
We will not share Personal Information with third parties for their direct marketing purposes without your explicit consent. We may, however, share non-Personal Information, such as aggregated user statistics and browsing behavior information, with third parties.
We may share the information we have collected, including Personal Information, as disclosed at the time you provide the information and as described below or otherwise in this Privacy Policy. Sangstre may also disclose Personal Information as follows:
(a) When You Request Information From or Provide Information to Third Parties: If you choose to receive information and/or marketing offers from third parties, your Personal Information and other information may be disclosed to such third parties and all information you disclose will be subject to the third-party privacy policies and practices of such third parties.
(b) Third Parties Providing Services on Our Behalf: We may use third-party vendors to perform certain services on behalf of us, such as hosting the Site or the Platform, designing and/or operating the Site or the Platform’s features, tracking the Site or the Platform’s activities and analytics, and enabling us to send you special offers or perform other administrative services. We may provide these vendors with access to user information, including Device Identifiers and Personal Information, to carry out the services they are performing for you or for us.
(c) To Protect the Rights of Sangstre and Others: To the fullest extent permitted by applicable law, we may also disclose Personal Information if we believe in good faith that doing so is necessary or appropriate to: (i) protect or defend the rights, safety or property of Sangstre or third parties (including through the enforcement of this Privacy Policy, our Terms of Use, or other applicable agreements and policies); or (ii) comply with legal and regulatory obligations (e.g., pursuant to law enforcement inquiries, subpoenas or court orders).
(d) Affiliates and Business Transfer: We may share Personal Information with our parent, subsidiaries and affiliates. We also reserve the right to disclose and transfer all such information: (i) to a subsequent owner, co-owner or operator of the Site, Platform or applicable database; or (ii) in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including, during the course of any due diligence process.
Basis for Use of Personal Information
Certain laws, including the EU General Data Protection Regulation (“GDPR”), require that we inform applicable individuals of the legal bases for our use and other processing of personal information. Pursuant to the GDPR (and other relevant laws), we process personal information for the following legal bases:
- Performance of contract: as necessary to enter into or carry out the performance of our contract with you.
- Compliance with laws: for compliance with legal obligations and/or defense against legal claims, including those in the area of labor and employment law, social security, and data protection, tax, and corporate compliance laws.
- Our legitimate interests: in furtherance of our legitimate business interests including:
- Performance of contracts with franchisees and other parties
- Implementation and operation of global support (e.g., IT) services for our business operations
- Customer relationship management and improving our Services, including marketing and analytics
- Fraud prevention, including misuse of company IT systems or money laundering
- Physical, IT, and network perimeter security
- Internal investigations
- Mergers, acquisitions, and reorganization, and other business transactions
- With your consent: where we have your consent (the GDPR (where it applies)) and other applicable laws give you the right to withdraw your consent, which you can do this at any time by contacting us using the details at the end of this privacy notice. In some jurisdictions, your use of the Site or the Platform may be taken as implied consent to the collection and processing of personal information as outlined in this privacy notice.
In addition, we may process your personal information where necessary to protect the vital interests of any individual.
Third-Party Content or Links To Third-Party Services
The Site and the Platform may contain content that is supplied by third parties, and those third parties may collect Usage Information and your Device Identifier when pages from the Site or portions of the Platform are served to you. In addition, when you are on the Site or the Platform you may be directed to other services that are operated and controlled by third parties that we do not control.
We are not responsible for the data collection and privacy practices employed by any of these third parties or their services and they may be tracking you across multiple sites and may be sharing the results of that tracking with us and/or others. We encourage you to note when you leave our Site or Platform and to review the third-party privacy policies of all third-party websites and exercise caution in connection with them.
How Do I Change My Information and Communications Preferences?
You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of registration. The Site or the Platform may allow you to review, correct or update Personal Information you have provided through the Platform’s registration forms or otherwise, and you may provide registration updates and changes by contacting us.
If so, we will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable (but we may retain prior information as business records). Please note that it is not always possible to completely remove or delete all of your information from our databases and that residual data may remain on backup media or for other reasons.
You may cancel or modify our e-mail marketing communications you receive from us by following the instructions contained within our promotional e-mails or in some cases by logging into your Platform account and changing your communication preferences.
This will not affect subsequent subscriptions and if your opt-out is limited to certain types of e-mails the opt-out will be so limited. Please note that we reserve the right to send you certain communications relating to your account or use of our Site or Platform, such as administrative and service announcements and these transactional account messages may be unaffected if you choose to opt-out from receiving our marketing communications.
If you have any questions about the Privacy Policy or practices described in it, you should contact us at: [Insert Sangstre contact information]
What About Transfer of Information to the United States?
If you are located outside of the United States, please be aware that information we collect, including Personal Information, will be transferred to, and processed, stored and used in the United States. The data protection laws in the United States may differ from those of the country in which you are located, and your Personal Information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States.
If you are located, for example, in European Economic Area or Switzerland, your personal information will be transferred to the United States and possibly to other jurisdictions, which may not provide the same level of protection under your local data protection laws. In such cases, we rely on suitable personal information transfer safeguards. By using the Site or the Platform or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information, including Personal Information, in the United States as set forth in this Privacy Policy.
What Should Parents Know About Children?
We understand the importance of protecting children’s privacy in the interactive world. The Services are not intended or directed to children under the age of 16, and we do not knowingly collect any personal information, or knowingly track the use of our Services, from children. If we have actual knowledge that personal information about a child under 16 years old has been collected, then we will take appropriate steps to try and delete such personal information.
European Economic Area/European Union/United Kingdom Resident Privacy Rights
The GDPR (where applicable), gives data subjects the following rights regarding their personal information:
- Right of access: You have the right to obtain confirmation as to whether personal information concerning you is being processed, and where that is the case, to request access to the personal information.
- Right to rectify and complete personal information: You can request the rectification of inaccurate data and the completion of incomplete data.
- Right to erasure (right to be forgotten): You have the right to obtain from us the erasure of personal information concerning you in limited circumstances.
- Right to restriction of processing: You have the right to obtain from us restriction of processing your personal information under certain conditions.
- Right to data portability: You have the right to receive the personal information concerning you in a structured, commonly used and machine-readable format and to transmit those data to another entity without hindrance from us, under certain conditions.
- Right to object: You have the right to object at any time to any processing of your personal information which has our legitimate interests as its legal basis.
- Right to object to our use of your personal information for direct marketing purposes: You can request that we change the manner in which we contact you for marketing purposes.
- Right to withdraw consent: If you have given us your consent for the processing of your personal information, you have the right to withdraw your consent at any time.
- Right to obtain a copy of safeguards: You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside the EU/EEA.
- Right to lodge a complaint with your local supervisory authority: You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information.
What About Security?
We endeavor to incorporate commercially reasonable safeguards to help protect and secure Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure the security of any information you transmit to us, and you use our Site or Platform and provide us with your information at your own risk.
What About Changes to the Privacy Policy?
We reserve the right to change this Privacy Policy at any time. Any changes will be effective immediately upon the posting of the revised Privacy Policy and your use of our Site or Platform indicates your consent to the privacy policy posted at the time of use.
However, we will not use your previously collected Personal Information in a manner materially different than represented at the time it was collected without your consent. To the extent any provision of this Privacy Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: info@sangstre.com