WHAT INFORMATION DOES SAMMY RABBIT COLLECT FROM UNREGISTERED USERS?
Users may access our Services without registering for an account. For all users, whether they are account holders, users of profiles created under a given account, or non-account holders, we may collect the following information:
Device ID and other unique identifiers (including when the Services are accessed through Apple TV);
Software and operating system information;
URL of the site users came from;
Pages users visit and the details of user interactions with such pages;
Whether a user self-selects as a Member or Sponsor;
Search terms within our Services; and
Other “clickstream” data.
WHAT INFORMATION DOES SAMMY RABBIT COLLECT FROM REGISTERED USERS?
Parents, legal guardians, or other adults in the home (“Adults”) will need to register to create a User Account. When an Adult registers to create an account (a “User Account”), we collect the following information from the Adult:
IP Address; and
WHAT INFORMATION IS Sammy Rabbit CAREFUL NOT TO COLLECT?
Personal Data is information which is related to an identified or identifiable natural person, including information that directly or indirectly identifies a natural person (collectively, “Personal Data”). Sammy Rabbit never collects Personal Data from children absent direct parental consent, as is required under the Children’s Online Privacy Protection Act (“COPPA”).
Beyond what is disclosed above, Sammy Rabbit would only collect Personal Data from a child under the age of thirteen (13.) In the event that we learn that we have accidentally collected such Personal Data without the requisite and verifiable parental consent, we delete that information from our database as quickly as practical.
Parents may review their child’s Personal Data or request that their child’s Personal Data be deleted, corrected, or no longer collected or used by contacting us at email@example.com.
HOW DOES SAMMY RABBIT USE THE INFORMATION IT COLLECTS?
For Adults registering for User Accounts, we use the Adults’s email address to send account verification emails and to send updates about how the Services are being used. Once the Adult clicks the link in the account verification email, the account is created.
Once registered for a User Account, we may collect and retain contact information and other Personal Data from the Adult in a number of ways, such as when the Adult requests email updates or other information, completes customer surveys, or submits a feedback or contact form. When a user contacts us by phone, email, or postal mail, we may also receive and process that user’s Personal Data.
In addition to the Personal Data we collect, we create aggregated, de-identified data and use it to improve our Services, to demonstrate the efficacy of our Services, and to develop new services. We share aggregated, de-identified information with our sponsors to let them know how many users viewed and interacted with their materials but this information does not identify any individual. We do not sell Adult's Personal Data.
We engage third-party service providers that help us administer and provide the Services (for example, a web hosting company whose services we use to host our application). In some cases, these third parties need access to Personal Data, and so we may share Personal Data to the extent necessary in order for them to be able to perform those services for us. We maintain and regularly update an active Third Party List of service providers who have access to our users’ Personal Data.
Sammy Rabbit also uses “cookies” to enhance users’ Site visits. A “cookie” is information either temporarily or permanently stored in a file on users’ computer. Users can set their browser to reject cookies, but that may limit use of some Sammy Rabbit features. For more information on cookies and how Sammy Rabbit uses them, please see our Cookie Notification.
For more information about third-party advertisers and how to prevent them from using your information, visit the NAI’s consumer website at /choices or /choices/. If you want to opt out using these tools, you need to opt out separately for each of your devices and for each web browser (such as Google Chrome, Firefox, or Safari) that you use on each device.
HOW SAMMY RABBIT COMMUNICATES WITH USERS
We do not send marketing messages to children. We do send emails to Adults with information about our Services that we believe may be of interest when these users have opted in to receive those messages. Users may opt out of receiving email messages by contacting us at contact@Sammy Rabbit.com or by clicking on the “unsubscribe” link found at the bottom of every email that we send.
Adults may also choose to subscribe to email newsletter communications from Sammy Rabbit. These communications may include invitations to participate in Sammy Rabbit promotions or surveys, as well as information about Sammy Rabbit events, updates, and other activities, and users may provide us with additional information when they participate in these activities. In addition, users may provide us with additional information when they fill out the feedback or support contact forms. We use the information provided to respond to their concern.
Sammy Rabbit is committed to making the Site, Apps and Services accessible to everyone. We continue our mission to follow Web Content Accessibility Guidelines (WCAG) and use Accessible Rich Internet Applications (ARIA) specification to help support people with disabilities.
If you do encounter any difficulty using Sammy Rabbit, please reach out to us via contact@Sammy Rabbit.com with details about the section or webpage, and we will make all reasonable efforts to make that page accessible.
We are committed to protecting the security, integrity, and confidentiality of all user data through the use of commercially-reasonable physical, technical and administrative safeguards. Sammy Rabbit stores data in secure cloud-based environments and uses server authentication and industry-standard firewalls in an effort to prevent interference or access from outside intruders. We also require unique account identifiers, user names, and passwords that must be entered each time users access the Services.
Nonetheless, despite Sammy Rabbit’s security efforts described above, it is common knowledge that transmission of information via the Internet is not wholly secure, and we cannot guarantee the security of Personal Data transmitted to or through any of our Services. Any transmission of Personal Data by you is at your own risk. By using our Services, you acknowledge and accept these risks. As a result, we cannot guarantee or warrant the security of any information you disclose or transmit to us or that are otherwise provided to us and we cannot be responsible for the theft, destruction, or inadvertent disclosure of information. It is your responsibility to safeguard any passwords, ID numbers, or other special access features associated with your use of the Services. Any transmission of information is at your own risk. By using our Services, you acknowledge and accept these risks.
You are responsible for maintaining the confidentiality of your user name and password, as well as the credentials of any other users operating under your account. If you become aware of, or suspect, any unauthorized use of an account or loss of your or your users’ account credentials or suspect any other security incident related to Sammy Rabbit, notify us immediately at firstname.lastname@example.org.
DATA RETENTION AND PRIVACY REQUESTS We retain data for as long as an account is active, and for a period of time afterward to retain account continuity for Adults.
If you would like to access, review, update, rectify, and delete any Personal Information we hold about you, or exercise any other data subject right available to you under the EU General Data Protection Regulation (GDPR), CCPA, CPRA, or other applicable law, send your request to email@example.com.
GDPR: DATA COLLECTION IN THE EEA
Under the General Data Protection Regulation (EU) 2016/679 (known as, “GDPR”), Sammy Rabbit functions as a “data controller” when we process certain Personal Data from Adults who access Sammy Rabbit through a User Account in order to maintain and provide the Services, and for any marketing communications that Educators and Adults may opt in to receive.
If you are a user accessing our Services from within the EEA (such user herein referred to as a “Data Subject”), we may ask for your consent so that we may process your Personal Data. For example, we will ask for your consent to send you marketing information. However, in certain situations, applicable data protection law allows us to process your Personal Data without needing to obtain your consent. For example:
To perform our contractual obligations to you, including fulfilling requests you have made, contacting you in relation to any issues with your use of the Services, or where we need to provide your Personal Data to our service providers who help us operate the Services.
To comply with laws, regulators, court orders, or other legal obligations.
We will use your Personal Data as described above and for other purposes, including the following:
To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to ask a question about our services, we will use that Personal Data to respond to your inquiry.
To provide, support, personalize, and develop our Services, including without limitation, receiving, processing, and responding to feedback.
To our third party service providers to allow them to provide features on our behalf as described below.
To create, maintain, customize, and secure your account with us.
To personalize your experience with the Services and to deliver content, and service offerings relevant to your interests and/or geographic location.
For testing, research, analysis, and product development, including to develop and improve our Services and products through focus groups and surveys.
To communicate information to you (e.g., new features, products, or services), and to send you relevant emails and communications that may be of interest to you and that you have opted in to receive.
To help maintain the safety, security, and integrity of our Services, databases, and other technology assets, and business, including without limitation, to investigate suspected violations of our Terms of Service, suspected fraud, or other unlawful activity.
To enforce our agreements, terms, conditions, and policies, and to notify you of any updates to the same.
As may be required by law or by a court order, in which case we shall attempt to notify you and work with you to seek to limit the scope of the required disclosure.
With your consent and as permissible under applicable laws and regulations.
EU RESIDENTS: YOUR DATA RIGHTS When we are operating as a Controller as described above, Data Subjects are provided with certain rights related to your Personal Data. Note that in circumstances where we are operating as a Processor, you may have similar rights with the controller. In those circumstances, please contact your controller to exercise your rights. We will work with them and with you to address any requests you may have related to exercising your rights as described below.
Please note that the rules in your country may provide you with additional rights or may limit the rights noted below. In all cases, we will act in accordance with applicable laws.
Right of access. You may obtain confirmation about whether Personal Data concerning you is processed, and request access to the Personal Data, including the purposes of the processing, the categories of Personal Data concerned, a copy of the Personal Data, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.
Right to rectification. You may have inaccurate Personal Data concerning you corrected. Depending on the purposes of the processing, you may have the right to have incomplete Personal Data completed, including by providing a supplementary statement.
Right to erasure ("right to be forgotten"). Under certain circumstances, you may have Personal Data concerning you erased.
Right to restriction of processing. Under certain circumstances, you may restrict us from processing your Personal Data. In this case, the respective data may only be processed by us for certain purposes.
Right to data portability. Under certain circumstances, you may receive the Personal Data concerning you in a structured, commonly-used, machine-readable format, and you may have the right to transmit that data to another entity without hindrance from us.
Right to object. Under certain circumstances, you may object, on grounds relating to your particular situation, or at any time where Personal Data is processed for direct marketing purposes to the processing of your Personal Data by us, and we can be required to no longer process your Personal Data. If Personal Data concerning you is processed for direct marketing purposes, you also have the right to object at any time to the processing of that Personal Data for that marketing, including profiling to the extent that it is related to the direct marketing. In this case we will no longer process your Personal Data for such purposes.
If you have provided your consent for our processing of your Personal Data, you may revoke that consent at any time by sending your request to firstname.lastname@example.org. That withdrawal will not impact the lawfulness of the processing prior to your revocation of consent.
However, this does not change our commitments to safeguard your privacy and we will comply with all applicable laws relating to the cross-border data disclosure of your Personal Data. Where required, we implement Standard Contractual Clauses with our third parties pursuant to the requirements of the EU General Data Protection Regulation (“GDPR”), and you may request a copy of the Standard Contractual Clauses by emailing us at email@example.com.
CALIFORNIA AND CCPA PRIVACY RIGHTS AND DISCLOSURES
**California Civil Code Section 1798.83 permits users of the Site and the Apps who are California residents to request and obtain from us a list of what Personal Data (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge. Under Section 1798.83, California residents are entitled to request and obtain such information. You can request to review, correct, update, or have deleted your Personal Data from our database by contacting us at firstname.lastname@example.org.