Last updated: Jan 17th 2020.
Services means any products, services, content, features, technologies, or functions, and all related websites, applications and services offered to you by us.
Platform means the websites, mobile apps, mobile sites or other online properties through which we offer our Services.
We collect personal data to provide and improve our Services and operate our Platform. The types of data we collect, how we collect it and why, are described below.
2.1.1. Data provided through direct interactions
Depending on the choices you make when registering for or during the process of engaging our Services, you may opt to give the following personal data:
In addition, when you use our chat feature to communicate with other users, we collect the information that you provide and communicate to other users through this feature.
Please note that your user name and your profile picture will be made available to the other users and the public when you engage with some of our Services. For example, when you post a product some of your information will be available to Platform users, so you should exercise discretion when using the Services to post personal data.
Please note, other users and community members may be able to collect your information through the Platform. While we protect the information you share with Flipppit, we are not responsible for protecting such information that you choose to share with third parties through our Services and Platform (e.g., sending your telephone number to another user through the Services).
You may choose to access some parts of the Services as a guest. However, some features are reserved for users with registered accounts and guests may not be able to access and use all content and features of the Services.
2.1.2. Data we collect automatically when you use of our Services
When you interact with our Platform or use our Services, we automatically collect the following information about you:
2.1.3. Data from third parties or publicly available sources.
To the extent permitted by law, we may also collect personal data from third parties including from publicly available sources and third party companies or entities.
We may collect personal data about you from our group companies.
Our Services are not intended for children under 13 and we do not knowingly collect data from anyone under 13. If a parent or guardian becomes aware that his or her minor child of any age has provided us with personal data without their consent, please contact us at privacy@Flipppit.com. If we become aware that a minor under 19 has provided us with personal data without the consent of their parent or guardian, we will delete it immediately.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
In certain circumstances, we may also process your personal data based on your consent. If we do this, we will let you know the purpose and the category of personal data to be processed at the time we seek your consent.
We have set out below a description of the ways we use your personal data.
4.1 For providing access and delivering Services through our Platform
We process the above information for adequate performance of our contract with you and on the basis of our legitimate interest in providing the Services and undertaking marketing activities to offer you Services that may be of your interest.
4.2 For improving your experience on the Platform
We use clickstream data to
We use your location data for following purposes:
We process the above information on the basis of our legitimate interest to improve your experience on our Platform and market our Services and for adequate performance of our contract with you.
4.3 To provide you a safe and secure Platform
We process the above information for adequate performance of our contract with you, to improve our services and on the basis of our legitimate interest to prevent fraud.
In addition, we may aggregate and/or de-identify data about visitors to our Platforms and use it for any purpose, including product and service development and improvement activities.
You may have rights under data protection laws in relation to your personal data.
If you wish to exercise any of the rights set out below, please go to your account/privacy settings or contact us.
Right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you.
Right to request correction of any of the data we have about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where you believe our use of the data is unlawful; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Right to request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note that for certain purposes we may be legally obligated to retain your data.
Right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which you believe impacts your fundamental rights and freedoms. You may also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may deny your request if we have compelling legitimate grounds to process your information.
Right to request for the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a commonly used format.
Right to withdraw your consent to the processing of your personal data at any time. This does not affect the legality of any processing we have already carried out based on the consent given previously.
No fee usually required: You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Time to respond: We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
There may be instances where we cannot grant you access to the personal data we hold about you. If that happens, we will give you written reasons for any refusal. Where permitted by law, we may also disagree with your request to correct or update your personal data (for example, if we consider that your proposed update is incorrect).
In addition to the foregoing, you may have additional rights depending on your local law.
We reserve the right to verify your identity in connection with any requests regarding personal data to help ensure that we provide the information we maintain to the individual to whom it pertains, and allow only that individual or their authorized representatives to exercise rights with respect to that information. We will try to comply with your request as soon as reasonably practicable. Please note that your exercise of these rights is subject to certain exemptions and our interests.
We may communicate with you by email or in app notification in connection with our Services/Platform to confirm your registration, to inform you in case your product listing has become live/expired and for other transactional messages in relation to our Services.
We (or our service providers and advertising partners) may send you direct marketing communications and information about our Services that we consider may be of interest to you. We will provide an option to unsubscribe or opt out of further communication on any electronic marketing communication sent to you or you may opt out by contacting us as set out in the “contact details” section below.
We may share your personal data with the parties set out below for the purposes set out above.
Corporate affiliates: We may share your data with other Flipppit group companies which are located within as well as outside of Canada.
Third Party Service Providers: We share your data with third party service providers that help us deliver certain aspects of our Services. For example, we use cloud storage facilities to store our data, we use customer support software providers to administer and respond to user inquiries and we use payment processors for certain services within the Platform. We need to share your data with these third parties otherwise we would not be able to provide the Service. Service providers may be located inside or outside of Canada.
Advertising and analytics providers: In order to improve our Services, we will sometimes share your non-identifiable information with analytics providers that help us analyse how people are using our Platform/Service. We also partner with demand side platforms who buy our ad placements through auctions such as Criteo, and Double Click etc. We share your information with them in a deidentified and aggregated form for monitoring and reporting the effectiveness of the campaign delivery to our business partners and for internal business analysis.
Law enforcement authorities, regulators, grand juries, courts and tribunals, governmental or public bodies and others: We may disclose your data, including your personal data, to law enforcement authorities, regulators, grand juries, courts and tribunals, governmental or public bodies and other relevant third parties as we believe necessary or appropriate to protect people or property, to protect our services, rights or property, to comply with legal or regulatory requirements and to respond to legal process, law enforcement requests and requests from other public and government authorities.
Publicly available information: When you post an item for sale using our Services, you may choose to make certain personal data visible to other Flipppit users. This may include your first name, last name, your email address, your location and your contact number. Please note, any information you provide to other users can always be shared by them with others so please exercise discretion in this respect.
We take reasonable steps to ensure that the overseas recipients of your personal data do not breach the privacy obligations relating to your personal data. Where required by certain jurisdictions, we will transfer your information subject to jurisdiction-approved safeguards, such as standard contractual clauses.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Please note that we often need to retain certain data for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. In addition, there may be certain data that we may not allow you to review for legal, security or other reasons.
We maintain administrative, technical and physical safeguards designed to protect personal data we maintain against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
Please note, despite the measures we have implemented to protect your data, the transfer of data through the Internet or other open networks is never completely secure and there is a risk that your personal data may be accessed by unauthorised third parties.
Some features of the Services allow you to post content on our Platform or social media pages, such as photos. We do not have control over how other users who have access to the Platform will use any content you post publicly or send to them privately. We urge you to exercise discretion when sharing personal information with other users.
We may also use any ad you post on Flipppit, including the uploaded photo or image of the product as well as other data (including user name and location) associated with the ad, for our own advertising purposes, including social media, Facebook ads, newsletters and ads for any media.
To help protect your privacy, we allow only limited access to other users’ contact information as necessary to fulfil your transactions and collect payments. However, when users are involved in a transaction, they may have access to each other’s name, user ID, email address, and other contact information.
If you have any questions or comments regarding this policy, or wish to contact our Data Protection Officer, please contact us by email at privacy@Flipppit.com or by mail at P.O. Box 924, Toronto, ON M5X 1A9. Please do not send sensitive information to us by email, as email communications are not always secure.