Privacy Policy

Last updated: 30 April, 2024

A. This Policy

This Policy explains how we process personal data. It may be amended or updated from time to time, so please check it regularly for updates. This Policy is issued by Dodo Payments and is addressed to individuals outside our organization with whom we interact in our course of business as a Merchant of Record. Please note that not all provisions of this Policy will apply to you and your personal data, as this will depend on your specific relationship with Dodo Payments.

B. Collection of Personal Data

We collect or obtain personal data from the following sources:

Data provided to us: When you contact us via email, our sites, or by any other means.
Data we obtain in person: During meetings, trade shows, or events.
Collaborations: When you collaborate with us in research or consultancy.
Relationship data: In the ordinary course of our relationship with you.
Data you make public: Via social media or public posts.
Site data: When you visit our sites or use features.
Registration details: When you register to use our sites, products, or services.
Content and advertising information: From third-party content or advertising.
Third-party information: From third parties like credit reference agencies or law enforcement authorities.

C. Creation of Personal Data

We create personal data about you, such as records of your interactions with us.

D. Categories of Personal Data We Process

We process the following categories of personal data:

Personal details
Demographic information
Contact details
Expertise
Consent records
Purchase details
Payment details
Data relating to your use of our sites
Employer details
Content and advertising data
Views and opinions

E. Sensitive Personal Data

We do not seek to collect or process sensitive personal data in the ordinary course of our business. Where necessary, we rely on legal bases such as compliance with applicable law, detection and prevention of crime, establishment, exercise or defense of legal claims, or consent.

F. Purposes of Processing and Legal Bases for Processing

We process personal data for purposes such as:

Provision of sites, products, and services
Compliance checks
Operating our business
Communications and marketing
Management of IT systems
Health and safety
Financial management
Surveys
Security
Investigations
Legal compliance
Improving our sites, products, and services
Fraud prevention
Establishment, exercise, and defense of legal claims
Recruitment and job applications

G. Disclosure of Personal Data to Third Parties

We disclose personal data to:

Legal and regulatory authorities
External advisors
Processors
Parties in connection with legal proceedings
Third-party providers of advertising, plugins, or content

H. International Transfer of Personal Data

We transfer personal data to recipients in other countries. Transfers from the UK/EEA to a recipient outside the UK/EEA are done on the basis of Standard Contractual Clauses and appropriate safeguards.

I. Data Security

We have implemented security measures to protect your personal data against unauthorized processing and accidental loss.

J. Data Accuracy

We take steps to ensure your personal data is accurate and up-to-date.

K. Data Minimization

We limit the volume of personal data we process to what is necessary.

L. Data Retention

We retain personal data only for as long as needed for its lawful purpose.

M. Your Legal Rights

Subject to applicable law, you may have rights such as access to your personal data, rectification, erasure, restriction of processing, objection to processing, data portability, withdrawal of consent, and lodging complaints with data protection authorities.

N. Cookies and Similar Technologies

We process personal data using cookies and similar technologies. For more information, see our Cookie Policy.

O. Terms of Use

All suppliers are subject to Terms of Use that govern all use of our site.

P. Terms of Sale

Our Buyer Terms and Conditions govern the sale of all products by Dodo Payments.

Q. Direct Marketing

We process personal data to contact you with information regarding sites, products, or services that may be of interest to you. You may unsubscribe at any time.

R. California Disclosures

Under the California Consumer Privacy Act (CCPA), we disclose our practices regarding the collection, use, and disclosure of personal information of California residents. Consumers have rights such as access, deletion, and non-discrimination.

S. Consumer Rights Under the CCPA

Consumers have rights such as knowing about personal information, requesting deletion, opting out of sale or sharing, correcting inaccurate records, and limiting the use of sensitive personal information.

T. California's "Shine the Light" Law

California residents can request a notice describing what categories of personal customer information we share with third parties.

U. Details of Controllers

There are several Dodo Payments entities that act as controllers for this Privacy Policy.

V. Definitions

Adequate Jurisdiction: A country recognized as providing adequate protection for personal data.
California Resident: An individual residing in California.
Controller: The entity that decides how and why personal data is processed.
Cookie: A small file placed on your device when you visit a website.
Data Protection Authority: An authority overseeing compliance with data protection laws.
EEA: European Economic Area.
GDPR: General Data Protection Regulation.
Merchant of Record: The licensed reseller of software and digital products.
Personal Data: Information about an individual.
Process: Any action done with personal data.
Processor: Entity processing personal data on behalf of the controller.
Product: Supplier’s software product(s) and/or digital content.
Relevant Personal Data: Personal data for which we are the controller.
Sell: As defined in the CCPA.
Sensitive Personal Data: Data about race, ethnicity, political opinions, etc.
Sensitive Personal Information: Information revealing sensitive details.
Share: Communicating personal information for advertising.
Site: Any website operated by us.
Standard Contractual Clauses: Clauses for data transfer to third countries.
Supplier: A party appointing Dodo Payments as Merchant of Record.
UK: United Kingdom.