OVERVIEW AND UPDATES.
We respect your privacy and are committed to safeguarding your Personal Information and communicating transparently regarding our privacy practices.
Attn: Data Protection
ESO Management Services, LLC
635 Mariners Island Boulevard, Suite 204,
San Mateo, California 94404
PERSONAL INFORMATION WE COLLECT ABOUT YOU.
When you inquire about the Service, register to use the Service, use the Service, and/or communicate with us about the Service or otherwise, we may collect information about you (“Personal Information”). This Personal Information may include the following:
· Email address;
· Phone number;
· Government issued IDs and/or documents;
· Employment information;
· Bank account information; and
· Stock option-related legal documents.
Depending on how you use the Service, the information we collect may differ. For example, if you are a broker or investor, we may collect your name, contact information, information about your place of work, and so forth, but not your financial information.
We may receive your Personal Information directly from you as you interact with the Service, or various Personal Information may be collected automatically, from third parties or by other means. In the case of third parties, we may receive Personal Information from our Service Providers(defined below) who provide aspects of the Service functionality and other services for us.
Special Category or Sensitive Personal Data
As the Service is related to the purchase of stock options, we receive and process certain financial information related to such transactions, which is enumerated above.
We may collect Personal Information from you through your communications with our customer-support team as you seek assistance with the Service. The nature and content of that Personal Information may be specific to the issue being resolved and may or may not be enumerated above.
Automatically Collected Information and Cookies
When you use the Service, we may automatically collect usage-related information such as your IP address or other device addresses or IDs, web browser and/or device type, the web pages or sites visited just before or just after using the Service, the pages or other content the you view or interact with on the Service, and the dates and times of the visit, access, or use of the Service. We also may use these technologies to collect information regarding your interaction with email messages, such as whether you opened, clicked on, or forwarded a message.
Additionally, we may automatically collect certain information from your device by using various types of technologies, including cookies, “clear gifs" or “web beacons”, or other tracking technologies. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies that may be used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can obtain more information about cookies by visiting http://www.allaboutcookies.org.
Most browsers allow you to block and delete cookies. However, if you disable essential and functional cookies, the Service may be limited or not work properly.
Some third parties may use Personal Information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about any targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from us, see the OPTING OUT OF ELECTORNICCOMMUNICATIONS section below.
HOW WE USE YOUR PERSONAL INFORMATION.
We use your Personal Information to facilitate and improve our Service; secure our Service; validate the information you provide; and communicate with you. For example, we may use your Personal Information as follows:
a) To provide and maintain the Service.
b) To communicate with you regarding the Service.
c) To inform you of new features and offerings.
d) To personalize the Service to you.
e) To provide you with support.
f) To conduct research and development.
g) To monitor site usage.
h) To secure the Service.
i) To detect, address, debug, and prevent technical issues.
j) To generate anonymized information that we share with third parties.
k) To enforce our legal rights and/or meet our legal obligations.
We may anonymize and aggregate data (“Anonymized Data”) collected through the Service, have sole ownership rights to it, and may use it for any purpose without restriction. For example, without limitation, we may use Personal Information to generate anonymized data reflecting our holdings in companies, which we may share with third parties, such as investors and brokers.
WE MAY DISCLOSE YOUR INFORMATION.
We may disclose your Personal Information to third parties under the following scenarios:
a) To receive services from our Service Providers as outlined below.
b) For fraud and misconduct prevention.
c) To address a data incident.
d) To comply with our legal obligations, law enforcement requests and legal processes, court orders, subpoenas, and so forth.
e) To protect and defend our rights, property, or safety.
f) With affiliates and subsidiaries.
g) As permitted by law.
h) In conjunction with a sale or merger as outlined below.
i) To respond to your request.
j) With your permission.
Our Service is built and provisioned, at least in part, using various different third-party components, infrastructure, or tools provided by third parties (“Service Providers”). These Service Providers, depending on their role, may facilitate the provision of the Service, collect and process data, perform Service-related services, or assist us in analyzing how our Service is used. In performing these services, they may receive and process your Personal Information. You authorize us to disclose your Personal Information to these Service Providers.
We may share any information we receive with Service Providers retained in connection with the provision of the Service. We may allow access to other data collected by the Service to enable the delivery of online advertising on or off this Service or to otherwise facilitate transmittal of information we think may be useful or relevant to you.
The follow is a non-exclusive list of Service Providers that we may use.
a) GOOGLE ANALYTICS - We use Google Analytics, an independent web analytics service provided by Google, for analytics and measurement to understand how our Service is used. For example, we analyze data about your visits to our sites to do things like optimize product design. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on Google Analytics, please visit https://policies.google.com/technologies/partner-sites.
b) Hubspot. Hubspot may be used to track and analyze traffic on the Service. You can learn about Hubspot’s privacy practices at https://legal.hubspot.com/privacy-policy. For information on how you may opt out of tracking by Hubspot, please visit https://knowledge.hubspot.com/reports/customize-your-cookie-tracking-settings-and-privacy-policy-alert.
c) Alexa Metrics. Alexa Metrics maybe used track and analyze traffic on the Service. You can learn more about Alexa’s privacy practices at https://www.alexa.com.
d) Quora. Quora Pixel may be used to track traffic and conversions. You can learn more about Quora’s privacy practices at https://quoraadsupport.zendesk.com/hc/en-us/categories/115001573928-Pixels-Tracking.
e) Statcounter. Statcounter may be used to track and analyze traffic on the Service. You can learn more about Statcounter’s privacy practices at https://statcounter.com.
f) Linkedin Insights. Linkedin Insights may be used to track, analyze, and understand visitors to our Service. You can learn more about LinkedIn’s privacy practices at https://www.linkedin.com/insights.
g) Facebook. Facebook’s business tools may be used to better understand traffic on the Service. You can learn more about Facebook’s privacy practices at https://www.facebook.com/business.
h) Google Tag Manager. Google Tag Manager may be used to manage website tags. You can learn more about Google’s privacy practices for Google Tag Manager at https://marketingplatform.google.com/about/tag-manager.
i) Google Adwords. Google Adwords may be used to drive sales, leads, and/or site traffic. You can learn more about Google’s privacy practices for Google Adwords at https://ads.google.com.
Please note that the Service may contain features or links to web sites and services provided by third parties. Any information you provide on third-party sites or services is provided directly to the operators of such services and is subject to those operators’ policies, if any, governing privacy and security, even if accessed through the Service. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Service. We encourage you to learn about third parties’ privacy and security policies before providing them with information.
Change of Control
Please note that if we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of our assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract. We cannot control how such entities may use or disclose such information.
WE DO NOT SELL YOUR PERSONAL INFORMATION
We do not rent, sell, or share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes.
Your Rights UNDER GDPR
Depending on where you reside, you may have rights over your Personal Information that are afforded to you under applicable data protection laws. In particular, if you reside in Europe or the UK, Europe's and the UK's General Data Protection Act (“GDPR”), provide you with the following rights:
· The right to access your Personal Information(called a “subject access request” under the GDPR), which you can do by sending an email to us using the contact information provided above.
· The right to have any data that is inaccurate or incomplete rectified by correcting or completing it.
· The right to erasure (a.k.a., “be forgotten”) by sending an email to us using the contact information provided above and requesting that we delete your Personal Information.
· The right to restrict the processing of your Personal Information under certain circumstances as provided by Article18 of the GDPR.
· The right to obtain and reuse a copy of your Personal Information for your own purposes.
· The right to object to processing of your Personal Information under certain circumstances provided by Article 21 of the GDPR.
How to Exercise Your Privacy Rights
Contact us using the contact information provided above to exercise any of your privacy rights. We will respond to each such request within30 days after receipt or less.
Formalities to Exercise Your Privacy Rights
Please keep in mind that in the case of a vague request we may engage you in a dialogue to better understand the motivation and content of the request. We may also refuse manifestly unfounded and excessive (repetitive)requests. We may also require you to prove your identity in some cases to ensure that no rights of third parties are violated by your request.
Legal Basis for Processing your Personal Information
The legal bases under which we process your Personal Information include your consent, our legitimate interests, to satisfy our contractual obligations, or to satisfy our legal obligations.
Notification requirements. We commit to notify you, when it is needed under the law, within a reasonable period of time and your data protection authority within the timeframe specified in applicable law about data breaches related to your Personal Information.
Data Protection Authorities. Subject to applicable laws, you may have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with applicable law.
YOUR RIGHTS UNDER THE CCPA.
If you are a California resident, then under the California Consumer Privacy Act (“CCPA’’), you have certain rights regarding the Personal Information that we may have collected about you. The following sections disclose the “what,” “how,” and “why” behind any Personal Information we collect about you, who we share it with, and what your rights are over your Personal Information.
Similar to the GDPR, the consumer rights you may have under the CCPA include the right to have us:
· Delete any Personal Information collected or maintained by us;
· Correct any inaccurate Personal Information;
· Disclose what Personal Information is being collected and provide access to that Personal Information;
· Disclose to you the Personal Information that we have sold to or shared with third parties;
· Direct us not to sell or share your Personal Information to/with third parties (i.e., opt out of sale or sharing); and
· Not discriminate against you for exercising your privacy rights.
You may read more about your California privacy rights here.
Submitting a Request, Question, or Feedback
Categories of Personal Information We Collect
As summarized in detail above, we collect Personal Information from the following categories:
· personal identifiers;
· customer records information;
· characteristics of protected classes;
· commercial information;
· biometric information;
· Internet or other electronic network activity information;
· Geolocation data;
· Professional and employment information; and
DO NOT TRACK POLICY.
California law requires that operators of websites and online services disclose how they respond to a Do Not Track signal. Some browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference to the website or online service that a user visits, indicating that the user does not wish to be tracked. Because there is not yet a common understanding of how to interpret Do Not Track signals, we do not currently respond to Do Not Track signal. We continue to work with the online industry to define a common understanding of how to treat Do Not Track signals.
INTERNATIONAL DATA TRANSFERS.
OPTING OUT OF ELECTORNIC COMMUNICATIONS
If you receive electronic communications from us, such as email or text messages, you may unsubscribe at any time by following the instructions contained within the communication or by sending an email to the address provided in the CONTACT INFORMATION section.
Please be aware that if you opt-out of receiving communications from us or otherwise modify the nature or frequency of communications you receive from us, it may take up to ten (10) business days for us to process your request. Additionally, even after you opt-out from receiving communications from us, you will continue to receive essential administrative email communications from us regarding the Service.
If you do not want us to share your Personal Information with third parties for promotional purposes, please send your request to email@example.com and we will attempt to accommodate it. Please note that some third parties collect information automatically from you when you visit the Service, and you may be required to contact them directly to disable the sharing or use the tools provided by them to opt-out of such sharing.
We only retain the Personal Information collected from you for as long as your account is active, for as long as we need it to fulfill the purposes for which we have initially collected it, or for as long as needed to protect our rights, whichever is longer, unless otherwise required by law. We will retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
Although we may allow you to adjust your privacy settings to limit access to certain Personal Information, please be aware that no security measures are perfect or impenetrable. We are not responsible for circumvention of any privacy settings or security measures on the Service. Additionally, we cannot control the actions of other users with whom you may choose to share your information. Further, even after information posted on the Service is removed, caching and archiving services may have saved that information, and other users or third parties may have copied or stored the information available on the Service. We cannot and do not guarantee that information you post on or transmit to the Service will not be viewed by unauthorized persons.
We are committed to protecting child privacy. The Service is not intended for children, and we do not intentionally or knowingly collect information, personal or otherwise, about individuals under the age of 18. If you are aware of anyone under 18 using the Service, please contact us using the contact information provided above and we will take required steps to delete any such information and/or prevent that individual from accessing the Service.