Privacy policy

Effective Date: September 19, 2024

Introduction

This website is owned and operated by SquareGPS Inc. SquareGPS Inc is a company registered in the USA, and located at 21550 Oxnard Street, Los Angeles, CA.

This Privacy Policy applies to the SquareGPS Inc owned and operated software (i.e. Navixy platform) and mobile applications, website and its subdomains. SquareGPS Inc ("SquareGPS"/ "Navixy"/ "we"/ "us" / "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services.

This Privacy Policy not only clarifies how we use the information when you visit our website and services, but also details how we collect, process, and share your personal information. This applies not just to us as SquareGPS Inc but also to our inclusive approach to providing our services and managing personal data for our clients.

We are fully committed to guaranteeing GDPR  compliance in the delivery of our products to clients. As the data controller, our foremost priority is safeguarding our clients' personal data, aligning with GDPR principles and legal obligations while maintaining complete transparency. Safeguarding your privacy remains our highest priority, and SquareGPS Inc is committed to adhering to both current laws and best practices. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Service

SquareGPS Inc serves as the Data Controller and is deeply committed to upholding individuals' rights in accordance with GDPR. If you have any questions or concerns regarding your privacy or data protection, please don't hesitate to reach us directly: [email protected]

Common clauses and definitions

Global Data Protection Regulations

When referring to data protection regulations in this document, we include:

1. European Union and United Kingdom
   • The Regulation (EU) 2016/679 (EU GDPR)
   • The Data Protection Act 2018 (UK GDPR)
2. United States
   • California Consumer Privacy Act (CCPA)
   • California Privacy Rights Act (CPRA)
   • Other state-specific privacy laws as applicable
3. Other Major Jurisdictions
   • Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
   • Lei Geral de Proteção de Dados (LGPD) - Brazil
   • Personal Data Protection Act (PDPA) - Singapore
   • Privacy Act 1988 and Australian Privacy Principles (APP) - Australia
   • Personal Information Protection Law (PIPL) - China
   • Protection of Personal Information Act (POPIA) - South Africa

Should there be a need to invoke other regulations, they will be appropriately and distinctly named.

Territorial scope

Our privacy practices comply with data protection requirements across multiple jurisdictions:

1. European Union and UK
   • Processing of personal data by entities within the EU/UK
   • Processing related to offering goods/services to EU/UK residents
   • Monitoring behavior of EU/UK residents
2. United States
   • Processing of California residents' personal information under CCPA/CPRA
   • Compliance with other state-specific privacy laws where applicable
3. Global Coverage
   • Processing of personal data in accordance with local regulations where we operate
   • Application of the highest standards of data protection globally

Personal Data / Personal Information - Under various global privacy and data protection regulations, personal data (also referred to as personal information in some jurisdictions) refers to any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. This broad definition encompasses a wide range of information, including but not limited to, names, addresses, email addresses, identification numbers, IP addresses, and cookie identifiers. While different privacy frameworks worldwide may use varying terminology, the fundamental principle of protecting information that can identify an individual remains consistent across regulations such as GDPR, CCPA, PIPEDA, LGPD, and other applicable data protection laws.

Sensitive Personal Data - Privacy regulations worldwide recognize certain categories of personal data as particularly sensitive, requiring enhanced protection measures. This sensitive personal data, which may be termed special category data, sensitive personal information, or sensitive information depending on the jurisdiction, includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data, data concerning health, financial account information, precise geolocation data, personal communications content, and data concerning a natural person's sex life or sexual orientation. The classification of sensitive data may vary across different privacy frameworks, and we apply the highest standard of protection to ensure compliance with all applicable regulations.

Privacy Statement Summary:
This Privacy Policy ("Policy") outlines the methods by which SquareGPS Inc ("SquareGPS"/ "Navixy"/ "we"/ "us" / "our") gathers, handles and shares your information. This Policy is relevant when we decide the reasons and methods for processing specific personal information, such as details from our website visitors, service users, clients, partners, and others.

About this Privacy Policy

This policy sets out how we will collect, store and process the information that you provide to us, information we collect as a result of our interaction, the information we collect about you from other sources, or information we service about you by using the information we hold.

Global data protection regulations, including the EU and UK GDPR, CCPA, PIPEDA, and other applicable privacy laws, establish requirements for how organizations must collect, handle, process, and store personal information. These rules apply regardless of whether data is stored electronically, on paper, or other material. To comply with these regulations, personal information must be collected and used fairly, stored safely, and not disclosed unlawfully. Our data protection practices are built on fundamental principles recognized by major privacy frameworks worldwide. These principles establish that personal data must:

• Be processed fairly, lawfully, and transparently;
• Be obtained only for specific, explicit, and legitimate purposes;
• Be adequate, relevant, and limited to what is necessary;
• Be accurate and kept up to date;
• Not be held for any longer than is necessary for the relevant purpose;
• Be processed in accordance with individual privacy rights;
• Be protected using appropriate technical and organizational measures;
• Not be transferred to countries without adequate data protection safeguards or appropriate legal mechanisms for data transfers.

We take these responsibilities seriously across all jurisdictions where we operate; this document describes our comprehensive approach to data protection.

This policy helps protect both individuals' privacy rights and our organization from data security risks, including:

• Breaches of confidentiality. For instance, information being given out inappropriately or unauthorized access to personal information;
• Failing to respect privacy choices. For instance, all individuals should be free to choose how their personal information is collected, used, and shared, subject to applicable legal requirements;
• Reputational damage. For instance, the company could suffer if unauthorized parties gained access to sensitive data;
• Non-compliance with regulatory requirements. For instance, failing to meet obligations under various privacy laws could result in penalties and enforcement actions;
• Cross-border transfer risks. For instance, ensuring appropriate safeguards when transferring data between different jurisdictions;
• Any other risks inherent in the collection, storage, processing, or international transfer of your data.

Who we are and how to contact us

Global headquarters

SquareGPS Inc US Headquarters
USA: 550 West B Street #128
San Diego, CA
Tel: +1 213 786 12 80
Email: [email protected]

Regional representatives

European Union and UK Representatives

We have appointed EU and UK Representatives under Article 27 of the EU GDPR and UK GDPR respectively. Our appointed representatives are:

Our UK Representative

Under Article 27 of the UK Data Privacy Act, we have appointed a UK Representative to act as our data protection agent. Our nominated UK Representative is: GDPR Local Ltd.

Adam Brogden [email protected]
Tel +44 1772 217800
1st Floor Front Suite
27-29 North Street, Brighton
England
BN1 1EB

Our EU Representative

Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is: Instant EU GDPR Representative Ltd.

Adam Brogden [email protected]
Tel +35315549700
INSTANT EU GDPR REPRESENTATIVE LTD
Office 2,
12A Lower Main Street, Lucan Co. Dublin

If you have any questions or comments about this Privacy Policy, wish to exercise your information rights in connection with the personal data you have shared with us, or wish to complain, please contact us. We aim to process data protection requests within 30 days, SAR responses are usually free, but we reserve the right to charge for excessive or unfounded requests. We fully comply with Data Protection legislation and will assist in any investigation or request made by the appropriate authorities.

If you remain dissatisfied, then you have the right to apply directly to your local data protection authority. You can find the list at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

What this policy applies to

This section describes the lawful basis for processing your data and applies to the information about yourself that you choose to provide us with or that you allow us to collect. This includes:

• The Information you provide when you contact us;
• When you contact us in order to discuss buying our products or services;
• Information we collect about how you use the websites;
• Information relating to the products and services we offer to you and other transactions including financial and other personal information required to complete these transactions;
• Information that is given and stored as part of our ongoing relationship;
• Information we collect as a result of our interaction;
• information we collect for the purposes of employment
• information you share with us for the purposes of recruitment

We automatically collect certain information when you visit, use or navigate our Websites and Services. This information does not reveal your specific identity but may include:

• Device and usage information (such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services and other technical information)
• Location data (if you enable this functionality)

We do not routinely collect or process sensitive data about you. However, where this is the case we will ensure we take appropriate precautions to protect your data.

How your information will be used

We will only use your personal data for the purposes for which we collected it and as you would reasonably expect your data to be processed and only where there is a lawful basis for such processing.

• Provide, operate, and maintain our Services
• Improve, personalize, and expand our Services
• Understand and analyze how you use our Services
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud
• For compliance, fraud prevention, and safety

We will use your data for the purpose it was collected and where we have your consent or an appropriate lawful basis we may use your personal information to provide you with marketing information about services, promotions and offers that may be of interest to you. This document explains how you can change whether to receive this information. Please note that, even if you choose not to receive this information, we may still use your personal information to provide you with important services communications, including communications in relation to any services we provide to you.

You will only receive marketing communications from us if you have:

• Requested information from us;
• If you provided us with your details and ticked the box at the point of entry of your details for us to send you marketing communications;
• You have not opted out of receiving marketing;
• Where we have an appropriate lawful basis.

We will get your express opt-in consent before we use or share your personal data with any third party for marketing purposes.

How we share your information with third parties

We will never sell your Personal Data to any third party.

We may have to share your personal data with selected third parties in order to meet our obligations to you and for the purposes described in this document:

• Service providers who provide IT and system administration services;
• Third parties including data processors, suppliers, service providers, equipment providers, and other third parties as required to run and grow our business;
• Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, credit scoring, banking, legal, fraud protection, insurance and accounting services;
• Social media companies;
• Government organization, regulators, other legal authorities and other relevant jurisdictions who require reporting of processing activities in certain circumstances;
• Third parties to whom we sell, transfer, or merge parts of our business or our assets;
• Other companies as it is required to meet our obligations to you and run our business.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

Our obligations and your rights

We are a Data Controller. In relation to the information that you provide to us, we are legally responsible for how that information is handled. We will comply with applicable data protection laws and regulations in the way we use and share your personal data, including but not limited to GDPR, CCPA/CPRA, PIPEDA, and other privacy laws in jurisdictions where we operate.

Under applicable privacy laws, you have various rights regarding your personal data. While specific rights may vary by jurisdiction, these generally include:

• Common rights across major Privacy Regulations:
  • Request access to your personal data/information
  • Request correction of inaccurate data
  • Request deletion/erasure of your data
  • Object to certain types of processing
  • Request restriction of processing
  • Request data portability where technically feasible
  • Withdraw consent previously provided
  • Object to automated decision-making and profiling
• Additional rights by Region:
  • EU/UK residents: All rights under GDPR/UK GDPR
  • California residents: Additional rights under CCPA/CPRA, including:
    • Right to know what personal information is sold or shared
    • Right to opt-out of personal information sales
    • Right to limit use of sensitive personal information
  • Other jurisdictions: Rights as provided under applicable local privacy laws

Exercise of Rights

You will not have to pay a fee to access your personal data or exercise your privacy rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances where permitted by applicable law.

Identity Verification

We may need to request specific information from you to help us confirm your identity before processing your privacy request. This is a security measure to ensure that personal data is not disclosed to any unauthorized persons. We may also contact you to ask for further information to help us process your request efficiently.

Response Timing

We aim to respond to all legitimate requests within the timeframes required by applicable laws:

• EU/UK (GDPR): Within one month
• California (CCPA/CPRA): Within 45 calendar days
• Other jurisdictions: Within legally required timeframes

If we need more time due to complexity or multiple requests, we will notify you and keep you updated. The extension period varies by jurisdiction and will be in accordance with applicable laws.

Note: Your rights and the extent to which they apply may vary depending on your location and the specific circumstances of the processing. We will honor your rights to the fullest extent required by applicable laws in your jurisdiction.

How we store and process your data

Your data will be collected, stored and processed securely, where we transfer your data internationally, we will ensure we take appropriate precautions to protect this data. Your data will normally be stored for up to as long as necessary in order to meet our legal obligations and protect our interests. For more information, please contact us about our Data Retention Policy.

We will only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to find out more about how the processing for the new purpose is compatible with the original purpose, please email us. If we need to use your personal data for a purpose unrelated to the purpose for which we collected the data, we will notify you and we will explain the legal ground of processing.

We may be legally obliged to disclose your personal information without your knowledge to the extent that we are required to do so by law; in connection with any ongoing or prospective legal proceedings; in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk); to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Where required under GDPR will report any breaches or potential breaches to the appropriate authorities within 24 hours and to anyone affected by a breach within 72 hours. If you have any queries or concerns about your data usage, please contact us.

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Data residency

We offer flexible data residency options to meet various regulatory and business requirements. For more information, please refer to our Data Residency documentation.

Processing of children's information

We do not knowingly collect or maintain Personally-Identifying Information from anyone under the age of 16, unless or except as permitted by law. Any person who provides Personally-Identifying Information through the Website represents to us that he or she is 16 years of age or older. If we learn that Personally-Identifying Information has been collected from a user under 16 years of age on or through the Website, then we will take the appropriate steps to cause this information to be deleted.

If you are the parent or legal guardian of a child under 16 who has become a member of the Website or has otherwise transferred Personally-Identifying Information to the Website, please contact the Company using our contact information below to have that child's account terminated and information deleted.

Cookies

A cookie is a small file that asks permission to be placed on your computer’s hard drive. Once you agree, the file is added, and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. We use traffic log cookies to identify which pages are being used. This helps us analyze data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

As well as your ability to accept or reject cookies, we also require your permission to store cookies on your machine, which is why when you visit our site, you are presented with the ability to accept our terms of use, including the storage of cookies on your machine.

How to change your preferences

We operate in line with the applicable data protection regulations and privacy laws. We respect your rights and will respond to any request for access to personal information and requests to delete, rectify, transfer, data, and to stop the processing. We will also advise you on how to complain to the relevant authorities if needed. Where possible any requests or objections should be made in writing to the Data Controller, or you can visit our website, call, or email us to contact us to exercise your rights, make a complaint, or change your preferences at any time.

Opting out at a later date

Where you give your consent for us to process your data, for example when you agree to us sending you marketing information or where you agree to us processing financial data, you can contact us to amend or withdraw your consent at any time. You can also choose to object to processing and request deletion of your data. We respect all user rights as defined in applicable data protection regulations and privacy laws. If you have any comments or wish to complain please contact us at [email protected].

Changes to this privacy policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "effective date" at the top of this Privacy Policy.

Last Updated: November 14, 2024