Privacy Policy

When referring to data protection regulations in this document, we include:

European Union and United Kingdom

• The Regulation (EU) 2016/679 (EU GDPR)
• The Data Protection Act 2018 (UK GDPR)

United States

• California Consumer Privacy Act (CCPA)
• California Privacy Rights Act (CPRA)
• Other state-specific privacy laws as applicable

Other Major Jurisdictions

• Personal Information Protection and Electronic Documents Act (PIPEDA) — Canada
• Lei Geral de Proteção de Dados (LGPD) — Brazil
• Personal Data Protection Act (PDPA) — Singapore
• Privacy Act 1988 and Australian Privacy Principles (APP) — Australia
• Personal Information Protection Law (PIPL) — China
• Protection of Personal Information Act (POPIA) — South Africa

Our privacy practices comply with data protection requirements across multiple jurisdictions:

European Union and UK

• Processing of personal data by entities within the EU/UK
• Processing related to offering goods/services to EU/UK residents
• Monitoring behavior of EU/UK residents

United States

• Processing of California residents' personal information under CCPA/CPRA
• Compliance with other state-specific privacy laws where applicable

Global Coverage

• Processing of personal data in accordance with local regulations where we operate
• Application of the highest standards of data protection globally

This policy sets out how we will collect, store and process the information that you provide to us, information we collect as a result of our interaction, the information we collect about you from other sources, or information we service about you by using the information we hold.

Our data protection practices are built on fundamental principles that personal data must:

• Be processed fairly, lawfully, and transparently
• Be obtained only for specific, explicit, and legitimate purposes
• Be adequate, relevant, and limited to what is necessary
• Be accurate and kept up to date
• Not be held for any longer than is necessary
• Be processed in accordance with individual privacy rights
• Be protected using appropriate technical and organizational measures
• Not be transferred to countries without adequate data protection safeguards

Global headquarters

SquareGPS Inc US Headquarters
2945 Townsgate Road Suite 200, Los Angeles, CA, 91361
Tel: +1 213 786 12 80
Email: privacy@navixy.com

Our UK Representative

GDPR Local Ltd — Adam Brogden
Tel +44 1772 217800
1st Floor Front Suite 27-29 North Street, Brighton, England BN1 1EB

Our EU Representative

Instant EU GDPR Representative Ltd — Adam Brogden
Tel +35315549700
Office 2, 12A Lower Main Street, Lucan, Co. Dublin

If you remain dissatisfied, you have the right to apply directly to your local data protection authority. You can find the list at: EU Data Protection Authorities

This section describes the lawful basis for processing your data and applies to the information about yourself that you choose to provide us with or that you allow us to collect. This includes:

• Information you provide when you contact us
• Information collected when you discuss buying our products or services
• Information we collect about how you use the websites
• Information relating to the products and services we offer to you
• Information given and stored as part of our ongoing relationship
• Information we collect for the purposes of employment
• Information you share with us for the purposes of recruitment

We automatically collect certain information when you visit our Websites and Services, including device and usage information (IP address, browser characteristics, operating system, location data if enabled). We do not routinely collect or process sensitive data.

We will only use your personal data for the purposes for which we collected it and where there is a lawful basis for such processing:

• Provide, operate, and maintain our Services
• Improve, personalize, and expand our Services
• Understand and analyze how you use our Services
• Develop new products, services, features, and functionality
• Communicate with you for customer service and marketing
• Send you emails
• Find and prevent fraud
• For compliance, fraud prevention, and safety

You will only receive marketing communications from us if you have requested information, consented at the point of entry, have not opted out, or where we have an appropriate lawful basis.

We will never sell your Personal Data to any third party.

We may share your personal data with selected third parties including:

• Service providers who provide IT and system administration services
• Third parties including data processors, suppliers, and service providers
• Professional advisers including lawyers, bankers, auditors and insurers
• Government organizations and regulators who require reporting
• Third parties to whom we sell, transfer, or merge parts of our business

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Under applicable privacy laws, your rights generally include:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion/erasure of your data
• Object to certain types of processing
• Request restriction of processing
• Request data portability where technically feasible
• Withdraw consent previously provided
• Object to automated decision-making and profiling

California residents: Additional rights under CCPA/CPRA, including right to know what personal information is sold or shared, right to opt-out, and right to limit use of sensitive personal information.

Response timing:

• EU/UK (GDPR): Within one month
• California (CCPA/CPRA): Within 45 calendar days
• Other jurisdictions: Within legally required timeframes

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

Where required under GDPR we will report any breaches to the appropriate authorities within 24 hours and to anyone affected within 72 hours.

We operate in line with the applicable data protection regulations and privacy laws. You can contact us to exercise your rights, make a complaint, or change your preferences at any time.

Where you give your consent for us to process your data, you can contact us to amend or withdraw your consent at any time at privacy@navixy.com.