This Website Privacy Policy (this “Privacy Policy”) discloses the privacy practices of Pointedspaces, LLC (“Pointedspaces,” “we”, “us” or “our”) with respect to our collection and use of Personal Information (defined below) on our online or mobile website, and any other media form, media channel or mobile application related, linked or otherwise connected thereto (collectively, our “Site”).  

PLEASE READ THIS PRIVACY POLICY CAREFULLY.  THIS PRIVACY POLICY, ALONG WITH OUR TERMS OF USE, WHICH IS INCORPORATED BY REFERENCE IN ITS ENTIRETY, CONSTITUTES A LEGALLY BINDING AGREEMENT BETWEEN YOU AND POINTEDSPACES THAT CONDITIONS YOUR USE OF THE SITE.  BY USING, ACCESSING, OR DOWNLOADING A SITE, YOU SIGNIFY YOUR ACCEPTANCE OF THIS PRIVACY POLICY AND THE TERMS OF POINTEDSPACES’ TERMS OF USE.  

• What We Collect and How We Use Your Personal Information.  

In order to better provide you with services, we may collect, process, and store personal information about you.

For the purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer, device, or household. It does not include de-identified or aggregated information, or public information lawfully available from governmental records. 

Depending on the activities you engage in on the Site (including buying or selling products or services through our marketplace), we may ask you to provide certain information about yourself such as your first and last name, email address, phone number, postal address, order, and shipping information and credit card and billing information.  It is completely optional for you to engage in these activities; however, we may ask that you provide us with personal information (detailed in the chart below). Depending upon the activity, some of the information we ask you to provide is in mandatory fields and some are involuntary fields.  If you do not provide the mandatory data with respect to a particular activity, you will not be able to engage in that activity.

The following chart describes the categories of Personal Information we may have collected about you in the past 12 months and, for each category, where and why we collected it, and the categories of entities with which we shared the Personal Information if any: 

Category of Personal Information	Sources of Personal Information	Purpose of collection	Categories of entities with whom Personal Information was shared
Address and other identifiers – such as name, postal address, email address, account name, or other similar identifiers	Directly from you; Automatically when you use our Site; and  Publicly available sources.	To provide you services;  To verify your identity or for other fraud and/or crime prevention;  To debug errors in our systems;  For our marketing and promotional purposes; and  For internal research, analytics, and development.	Professional advisers, including accountancy and legal firms, in order to provide us with advice;  Service providers, including to provide and support our data management, analytics, security, and storage systems; and  Government authorities or other entities with legal authority to request the information.
Unique and online identifiers – such as browser information, operating system information, your IP address, referring site, visit metrics, action metrics, page view metrics, search metrics, or other similar identifiers	Directly from you;  Automatically when you use our Site; and  Through publicly available sources.	To provide you Services;  To provide advertisements on the Site;  To respond to any questions or concerns you have raised;  For internal research, analytics and development. To protect the security and integrity of the Site; and For internal research, analytics and development.	Professional advisers, including accountancy and legal firms, in order to provide us with advice; Service providers, including to provide and support our data management, analytics, security, and storage systems; and  Government authorities or other entities with legal authority to request the information.
Financial information	Directly from you.	To respond to any questions or concerns you have raised; To carry out compliance checks and controls; To verify your identity or for other fraud and/or crime prevention; To debug errors in our systems; and For internal research, analytics and development.	Professional advisers, including accountancy and legal firms, in order to provide us with advice; Service providers, including to provide and support our data management, analytics, security, and storage systems; and Government authorities or other entities with legal authority to request the information.
Education or other professional information	Directly from you; and Through publicly available sources.	To verify your identity or for other fraud and/or crime prevention; For our marketing and promotional purposes; and For internal research, analytics and development.	Professional advisers, including accountancy and legal firms, in order to provide us with advice; Service providers, including to provide and support our data management, analytics, security, and storage systems; and Government authorities or other entities with legal authority to request the information.

• How We Share Your Personal Information.

We provide some of our services through contractual arrangements with affiliates, services providers, partners, and other third parties.  We and our affiliates, services providers, partners, and other third parties may use your Personal Information to operate our sites and to deliver and improve our services.  Third parties with whom we share your Personal Information are bound to comply with similar and equally stringent undertakings of privacy and confidentiality. 

Occasionally, we may be required to share your Personal Information with third parties for legitimate business purposes, or to comply with legal obligations.  For example, we may share Personal Information when we believe in good faith that an applicable law requires it; at the request of law enforcement, judicial authorities (e.g. upon receipt of a court order or subpoena), appropriate governmental authorities; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety or security of third parties, visitors to our Site, our businesses, or the public. 

We may anonymize your Personal Information so that you are not identified as an individual, and we may use and disclose such information in a number of ways, including for research, analysis, and any other legally permissible purposes.  Such information is not considered Personal Information.

• Financial Information 

We may charge for various products and/or services within the Site. In that case, we use third-party services for payment processing (e.g. payment processors).

We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council. PCI-DSS requirements help ensure the secure handling of payment information.  The payment processor we work with is Stripe, whose privacy policy is available at https://stripe.com/privacy. 

• We Do Not Sell Your Personal Information.

We do not disclose and have not disclosed your Personal Information to any other third parties for any purpose other than those described in this Privacy Policy or unless the law requires it, unless you provide authorization for us to do so. We, also, will not sell and have not sold within the past 12 months your Personal Information without your affirmative authorization.

• Children

We are committed to protecting the privacy of children. Our Site is not designed or intended to attract children under the age of 18, much less children under 13 years old. Our Site does not collect personal information from any person we actually know is under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from children without verification of parental consent, we take steps to remove that information from our servers.

• Security of Personal Information.

We implement and maintain reasonable security appropriate to the nature of the Personal Information that we collect, use, retain, transfer, or otherwise process. 

Though we are committed to developing, implementing, maintaining, monitoring and updating a reasonable information security program, unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure.  Data security incidents and breaches can occur due to vulnerabilities, criminal exploits or other factors that cannot reasonably be prevented.  Accordingly, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security. To the maximum extent allowed by applicable law, you agree and acknowledge that we shall not be liable or responsible if any information about you is intercepted, accessed, and/or used by an unintended recipient. If you have reason to believe that the security of your communications or Personally Information has been compromised, please notify us immediately at: hello@openmarket.place.

• Cookies.

Like many other websites, we use and have used within the past 12 months “cookies” to collect information about your use of the Site when you use the Site in order to facilitate and customize your use of the Site.  A “cookie” is a small data text file, which a website stores on your computer’s browser (if your Web browser permits) that can later be retrieved to identify you to us.  The cookies make your use of the Site easier, make the Site run more smoothly, and help us to maintain a secure Site.  Such cookies can only access Personal Information that you have provided on our Site and cannot be accessed by other sites. These cookies are strictly necessary for the operation of the Site, so you do not have the option to accept or decline them individually.  

We also use performance and analytics cookies.  These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site for our users and measure the effectiveness of our content. They help us to know which pages are the most and least popular and see how visitors move around the site. 

You are always free to decline our cookies if your browser permits, but some parts of the Site may not work properly if you do so.  Please note that in a few cases some of our website features may not function if you remove the cookies from your browser. 

• Do-Not-Track Signals.

Certain mechanisms may allow you to send web browser signals, known as “Do Not Track” (“DNT”) signals, indicating your choice to disable tracking on the Site. We do not respond to browser do not track signals at this time. We may not be aware of or able to honor and respond to every such mechanism. More information about “do not track” is available at www.allaboutdnt.org concerning such information. 

Third parties, other than our service providers (such as our website analytics provider), do not have our permission to track which websites you visited prior to and after visiting the Site. 

• Notice to California Residents.

The California Consumer Privacy Act (“CCPA”) provides California residents with certain rights regarding their Personal Information. This section explains these rights and how to make a verifiable consumer request to exercise those rights. You may only make a verifiable consumer request for access or data portability from us twice within a 12 month period, free of charge. You also may request a list of the third parties to whom we have disclosed your Personal Information (if any), as well as the type of Personal Information, disclosed to those parties. However, we do not share Personal Information with third parties for their own marketing purposes.

Right to know and access your Personal Information collected and disclosed

We are committed to ensuring that you know what information we collect about you.  Subject to certain exceptions, you can submit a request to us for the following information, with respect to Personal Information we have collected about you in the last 12 months:  

• The categories of or specific pieces of Personal Information we’ve collected about you. 
• The categories of sources from which we collected the Personal Information.
• The business or commercial purposes for which we collected or disclosed the Personal Information.
• The third parties with whom we shared the information. 

Right to request deletion of your Personal Information.

Upon your request, we will delete the Personal Information we have collected about you, except for situations where specific information is necessary for us to: provide you with a good or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law.  The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us. If we cannot grant your deletion request, we will specify the basis for denial.

Right to non-discrimination. 

We will not discriminate against you for exercising any of your rights under the CCPA. In particular, this means that consumers who exercise their rights in accordance with this Privacy Policy will not be denied or charged different prices or rates for goods or services, nor will we offer a different level or quality of goods or services than others. 

California Shine the Light.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits California residents to annually request, free of charge, information about the Personal Information (if any) disclosed to third parties for direct marketing purposes in the preceding calendar year. We do not share your Personal Information with third parties for their own marketing purposes.

• How California Residents Can Exercise Their Rights 

If you have the rights described above, you may exercise those rights by submitting a verifiable request to us by contacting us using the information outlined below.  We will first acknowledge receipt of your request within 10 days after receipt of your request.  We will provide a substantive response to your request within 45 days after its receipt.  If we require more time (up to 90 days or the permitted timeframe in your jurisdiction), we will inform you of the reason and extension period in writing. 

Only you or an authorized agent (as described below) may make a verifiable consumer request related to your Personal Information. 

• How to Authorize an Agent 

You may designate an authorized agent to submit your verified consumer request on your behalf, only if the authorized agent has your written permission to do so and you have taken steps to verify your identity directly with us. If you would like to designate an agent for purposes of making a request under the CCPA, your agent must register as such with the California Secretary of State and submit a copy of this registration along with your verified consumer request.

• How We Verify Your Request 

To respond to your request under the CCPA we must verify your identity or the authority of your authorized agent to make the request. We will only use the Personal Information provided in a verifiable consumer request to verify your identity or the authority of your authorized agent to make the request. Making a verifiable consumer request does not require you to create an account with us.

To allow us to verify your request, please include the following information: name, address, phone number, and email address. We will verify your consumer request by comparing the information you provide to information already in our possession, and take additional steps to minimize the risk of fraud.

• Privacy Policies of Third-Party Sites.

Our Site may, from time to time, contain links to and from websites of our partners’ networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to the websites.  We do not endorse or make any representations about third-party websites. Any Personal Information you choose to give to unrelated third parties is not covered by this Privacy Policy. 

• Changes. 

We reserve the right to revise this Privacy Policy at any time by amending this page and changes will be effective upon being posted unless we advise otherwise. If we make any material changes to this Privacy Policy we will notify you by means of a notice on our Site prior to the change becoming effective. By continuing to use the Site after changes are made to this Privacy Policy, you agree to such changes. We encourage you to check this page from time to time to take notice of any changes we make. If you do not accept the terms of this Privacy Policy, we ask that you exit our Site immediately. The Privacy Policy published on our Site is kept up to date. 

• Contact and Exercising Your Privacy Rights. 

If you have questions on the processing of your Personal Information, would like to exercise any of your rights, or have a complaint, please contact us here: hello@openmarket.place.