Privacy Policy - Vendorfront

Last updated: May 28, 2024

Introduction

This Privacy Statement explains how Vendorfront, Inc. and its affiliates (“Vendorfront, “we,” or “us”) collects, uses, and discloses your personal information to provide our services to you (“Services”).

This Privacy Statement applies to personal information we collect when you use any Services, including but not limited to our website, software applications, and related services for clients and service providers (“Vendors”) to find each other and arrange for the provision of services (the “Vendorfront Service”), or when you otherwise interact with us.

This Privacy Statement does not apply to websites, applications, or services that display or link to other privacy statements, unless expressly stated otherwise in those privacy statements.

Changes to this privacy statement

We may change this Privacy Statement from time to time when necessary to reflect changes in our Services, how we use personal information, or the applicable law. If we make changes, we will revise the “Last Updated” date at the top of the statement.

If we make material changes, we will provide you with notice or obtain consent regarding such changes as may be required by law.

We encourage you to review the Privacy Statement whenever you access the Services or otherwise interact with us to stay informed about our privacy practices and the ways in which you can exercise choice over these practices. The practices described in this Privacy Statement are subject to applicable laws in the locations in which we operate; this means that we only engage in the practices described below in a particular location if permitted under the laws of that location.

How Do We Collect Your Information?

The information we collect varies based on how you interact with us, which Services you use, and the choices you make. We collect and process information about you with your consent and/or as necessary to provide the products and services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.

We collect information about you in various ways when you use our Services, including information you provide directly, information collected automatically, information collected via third-party data sources, and data we infer or generate from other information. We may also share information with, and receive information from, our affiliates for the purposes described in this Privacy Statement.

When you are asked to provide information, you may decline. You may also use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide information that is necessary for certain products or features, those products or features may not be available or function correctly.

The table below sets forth how we may collect your personal information.

Information You Provide to Us

We collect information you provide directly to us, as follows:

Account Information: Includes personal information we collect when you create an account, create or edit your profile, or list your Services through the Vendorfront Service. Account information includes your name, email address, phone number, information about the services you offer, availability, and any other account-related information you choose to provide.
Content and Files: Includes the profile photos, service photos, portfolio photos, videos, documents, and other files you record or upload through the Services. This also includes the content of any reviews (including private reviews) or your communications to or from Vendorfront.
Payment Information: Includes payment information you provide to us, such as the amount and type of services purchased, the date and time of a transaction, and payment card information. (Payment card transactions are processed by our third-party payment processors.)
Sensitive Personal Information: If you are a Vendor, we may collect certain sensitive personal information from you for purposes of verifying your identity or assisting with your creation of a Stripe payment account.
Account access information: We collect information such as a username or account number in combination with a password, security or access code, or other credential that allows access to an account.
Contents of communications: We collect the content of communications you make using our Services.
Geolocation: See “Location Information” below.
Other Information: Includes all other personal information you provide to us, participate in a promotion, complete a survey, communicate with us via third-party social media sites, request customer support, provide us with contact information for a referral, or otherwise communicate with us.

Information Collected Automatically When You Use the Services

When you access or use the Services, we may automatically collect information about you, as follows:

Identifiers and Device Information: We collect log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address, device identifiers, device type, browser, and other software including type, version, language, settings, mobile network information, and configuration. As further described in our Cookie Policy, our websites and online services store and retrieve cookie identifiers, mobile IDs, and other data.
Usage Information: We automatically log your activity on our Services, including the URL of the website from which you came to our sites, pages you viewed, how long you spent on a page, access times, and other details about your use of and actions on our Services.
Location Information: Depending on your device and app settings, we may collect geolocation data when you use our Services. This information may include your geolocation data, meaning data derived from a device and that is used to locate you.
Cookie Information: We use various technologies to operate our Services and collect information, including cookies and web beacons (collectively, “Cookies”). Most browsers are set to accept cookies. To learn more about how we use Cookies and how to manage your preferences, please read our Cookie Policy.
Inferences: We infer new information from other information we collect, including using automated means to generate information about your likely preferences or other characteristics. For example, we infer your city, state, and country location based on your IP address.

Information We Collect from Third Parties

We may collect information about you from third parties, service providers, and affiliates, as follows:

Social Media and Integrated Services Information: If you create or log into your account through a third-party site or affiliate site, we will have access to certain information from that site. For example, if you access our Service through a social media site, we will have access to information such as your name, account information, in accordance with the authorization procedures determined by such site.
Service Provider Information: Includes information from third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address.
Other Third-Party Information: Includes information we receive (sometimes for a fee) from other sources, including affiliates, data brokers, partners with whom we offer co-branded services or engage in joint marketing activities, and publicly available sources.

How we Use Your Information

We use your information in the following ways to provide, maintain, and improve our Services:

Purposes of Use

Providing, maintaining and improving our Services. This includes:

Creating and registering your account for the applicable Service.
Providing, maintaining, improving and facilitating access and security for the Services, including developing new services or features and conducting research.
Enabling communications between you and other users of the Services.
Presenting the Services to you on your device.
Responding to your comments, questions and requests and providing customer service.
Fulfilling your referral requests.

Sensitive Personal Information:

account access information
contents of communications
geolocation data.

Communicating with you. This includes:

Responding to your comments, questions and requests and providing customer service.
Sending you technical notices, updates, security alerts and support and administrative messages.
Presenting you with content that is relevant to you.
Providing news and information we think will be of interest to you.

Account Information, Content and Files, Usage Information, Identifiers and Device Information, Location Information, Cookie Information, and Inferences.

Facilitating and processing transactions. This includes:

Facilitating and processing transactions and sending you related information, including booking and payment confirmations (where required).
Payment and account access information.

For marketing and advertising. This includes:

Communicating with you, and displaying advertising to you, about products, services, offers, promotions, rewards, and events offered by Vendorfront and others, and providing news and information we think will be of interest to you.
Facilitating contests, sweepstakes and promotions and processing and delivering entries and rewards.
Fulfilling your referral requests.

Account Information, Other Information, Usage Information, Identifiers and Device Information, Location Information, Cookie Information, and Inferences.

To personalize your experience. This includes:

Selecting a language and region in which to present the Services to you.
Linking or combining with information we get from other sources to help understand your needs and provide you with better service.
Usage Information, Identifiers and Device Information, Location Information, Cookie Information, and Inferences.

Providing integrated services. This includes:

Allowing you to log in to the Service through affiliate or third-party sites and, for the Vendorfront Service, helping create a public profile for you.
Allowing you to share certain content related to your use of the Services with your friends, followers or contacts on affiliate or third-party sites.
Social Media and Integrated Services Information, and Service Provider Information.
Sensitive Personal Information: account access information.

For other uses. This includes:

Detecting, investigating and preventing fraudulent transactions and other illegal or unauthorized activities and protecting the rights and property of Vendorfront and others.
Defending ourselves from potential litigation or legal claims.
Complying with any applicable legal obligations.
Carrying out any other purpose described to you at the time the information is collected.
All information set forth above.

We may also use Other Third-Party Information, on its own or augmented by information you provide to us, directly to contact you, send you promotional materials, personalize our Service, prepopulate online forms, and better understand the demographics of our users.

How Do We Disclose Your Information?

We may disclose the personal information we collect with third parties with your consent or as we determine necessary to complete your transactions or provide Services you have requested or authorized. In addition, we disclose each of the categories of personal information described above, to the types of third parties described below for the following business purposes:

Clients

We share information about your booking with the applicable Vendor when you make or accept a booking.

Public information

You may select options available through our Services to publicly display and disclose certain information when you sign up for and participate in the interactive areas of our Services, such as creating a user profile or writing a review (note that if you are a Vendor, your profile is discoverable to anyone who searches the Site or enters your unique profile URL into their browser).

Service Providers

We share information with vendors, consultants, business partners, and other service providers who need access to such information to carry out work on our behalf. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal information to provide those functions.

Legal and law enforcement

We may disclose information in response to a request for information if we believe disclosure is in accordance with, or required by, applicable law, regulation or legal process.

Security, safety, and protecting rights

We may share your information if we believe your actions are inconsistent with our user agreements or policies, to operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks or to protect the rights, property or safety of Vendorfront, its employees, its users, or the public.

Corporate transactions

We may disclose information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, divestiture, bankruptcy, dissolution, or other transaction or proceeding involving sale, transfer or divestiture of all or a portion of our business or assets to another company, to the extent permitted under applicable law.

Affiliates

We may share information between and among Vendorfront and our current and future parents, affiliates, subsidiaries and other companies under common control and ownership, for example, where we share common data systems or where access helps us to provide our services and operate our business. Our corporate affiliates may also use and disclose this information in accordance with their own privacy statements. Our corporate affiliates are listed here.

Other Disclosures

We may disclose de-identified information in accordance with applicable law.

The Services may offer social sharing features and other integrated tools (such as the Facebook “Like” button), which let you share actions you take on our Services with other media, and vice versa. Your use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of information collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.

Advertising and Analytics Services Provided by Third Parties

To the extent permitted by law, we may allow third party analytics and advertising companies to provide analytics services and/or serve advertisements on our behalf across the Internet. These entities may use cookies, pixel tags, web beacons or other similar technologies to collect information about your use of our websites and third-party websites, including identifiers and device information (such as cookie IDs, device IDs, and IP address), geolocation data, usage data, and inferences based on and associated with that data. To learn more about how these third parties use these technologies and how to manage your preferences, please read our Cookie Policy. Note that if you opt-out of third-party advertising cookies, you will still see online ads, but they will not be personalized.

Some of the information disclosures to these third parties may be considered a “sale” or “sharing” of personal information as defined under the laws of California and other U.S. states. Please see the California Privacy Rights sections below for more details.

Please note that some of our services also include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal data to any of those third parties, or allow us to share personal data with them, that data is governed by their privacy statements.

Information Security

Vendorfront takes reasonable and appropriate measures designed to help protect information about you from loss, theft, misuse and unauthorized access, use, disclosure, alteration and destruction. Please be aware that no method of transmission over the Internet or through mobile applications is 100% safe. Therefore, although we use commercially reasonable means to protect your information, we cannot guarantee its absolute security.

To help us protect personal information, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.

Transfer and Location of Information

The information we collect may be stored and processed in Canada, your region, in the United States, or in any other country where we or our affiliates, subsidiaries, or service providers maintain facilities. The processing locations are chosen in order to operate efficiently, to improve performance, and to create redundancies in order to protect information in the event of an outage or other problem. We take steps designed to ensure that the information we collect under this statement is processed according to the provisions of this statement and applicable law wherever the information is located.

Information Retention

We retain information for as long as necessary to provide the products and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful purposes. Because these needs can vary for different information types in the context of different products, actual retention periods can vary based on criteria such as user expectations or consent, the sensitivity of the information, the availability of automated controls that enable users to delete information, and our legal or contractual obligations.

Access, Portability, Correction, and Deletion

You may access, update, correct or delete certain information or if you wish to request deactivation or the permanent deletion of your account by contacting us at [email protected]. We may decline requests that are prohibited by law, could adversely affect the privacy or other rights of another person, are not required to be honored by applicable law, or where we are unable to authenticate you as the person to whom the information relates.

Location Information

When you first install or launch any of our mobile applications that collect location information, you will be asked to consent to the application’s collection of this information. We require location information, including your geolocation, to use certain features of our Services, so if you do not consent to this collection, you cannot use those features. If you initially consent to our collection of location information, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. If you do so, certain features of our mobile applications will no longer function. You may also stop our collection of location information by following the standard uninstall process to remove our mobile application from your device.

Emails

If you receive marketing emails and you wish to opt-out, you may also do so by clicking “Unsubscribe” in those emails. If you opt out of receiving marketing emails, we may still send you Service-related emails, such as those about your account or your ongoing business relationship with us.

Mobile Push Notifications/Alerts

We may send push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.

Text Messages

With your consent as required by applicable law, we may send communications containing service information (including technical notices, updates, security alerts and support and administrative messages), sales, marketing, or advertising messages, by autodialed, prerecorded, or artificial voice calls or SMS, text messages, email, over-the-top messaging platforms (such as WhatsApp), and other electronic means, at any phone number or email address you provide in connection with your account, even if your phone number is on the national or any state’s do-not-call registry. You may opt out of receiving these messages by following the prompt in an individual message or replying with “STOP”.

Data Sales

Some privacy laws define “sale” broadly to include some of the disclosures described in the “How Do We Disclose Your Information” section above. To opt-out from such data “sales” update your preferences at any time by contacting us at [email protected] or enabling the Global Privacy Control settings in a web browser or browser extension as described below.

Targeted Advertising

You have several options to opt-out from or otherwise control targeted advertising. First, you can contact us at [email protected] to decline advertising-related cookies. Second, you can use the Global Privacy Control setting in a web browser or browser extension as described below. Third, you can use the opt-out controls offered by the organizations our advertising partners may participate in, which you can access at:

United States: NAI (http://optout.networkadvertising.org) and DAA (http://optout.aboutads.info/)
Canada: Digital Advertising Alliance of Canada (https://youradchoices.ca/)

Fourth, you can use the other cookie or mobile ID controls described below. These choices are specific to the device or browser you are using. If you access our services from other devices or browsers, take these actions from those systems to ensure your choices apply to the data collected when you use those systems.

Browser or Platform Controls

Cookie controls: Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated. refer to our Cookie Policy for information on how to manage your choices with cookies used on our website.

Global Privacy Control: Some browsers and browser extensions support the “Global Privacy Control” (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.

Do Not Track: Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the websites you visit indicating you do not wish to be tracked. Unlike the GPC described above, there is not a common understanding of how to interpret the DNT signal; therefore, our websites do not respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the GPC, cookie controls, and advertising controls described above.

Mobile advertising ID controls: iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs.

Email Web Beacons: Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, which prevents the automatic connection to the web servers that host those images.

If you are a California resident and the processing of your personal information is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), you have certain rights with respect to that information:

Notice at Collection

At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared and how long such information is retained. You can find those details above

Right to Know

You have a right to request access to the personal information we collected about you. You can also request information about the categories of personal information we collected, the sources of collection, the purposes for collection and sharing of this information, the categories of information we shared, and the categories of third parties with whom we shared this information. Note that we have provided much of this information above in this Privacy Statement. You can see much of the personal information collected about you by logging into your account and viewing your profile. You may also make such a request by contacting us at [email protected].

Right to Request Correction or Deletion

You can request that we correct inaccurate personal information and that we delete personal information under certain circumstances, subject to a number of exceptions. You may make a request using the contact information in the Contact Us section below.

You have a right to opt-out from any sharing of your personal information with third parties to the extent that such sharing is for “cross-context behavioral advertising” or otherwise constitutes a “sale” of that data under the CCPA. Note that the CCPA defines “sell,” “share,” and “personal information” very broadly, and some of our data sharing described in this privacy statement may be considered a “sale” or “sharing” under those definitions. In particular, we let advertising and analytics providers collect identifiers (IP addresses, cookie IDs, and mobile IDs), activity data (browsing, clicks, app usage), device data, and geolocation data through our sites and apps when you use our online services. We may also share information with corporate affiliates, which may be used in accordance with their own privacy statements. We do not “sell” or “share” any other types of personal information. If you do not wish for us or our partners to “sell” or “share” personal information, you may exercise such a request by contacting us or enabling a recognizable opt out preference signal in your browser, such as the Global Privacy Control. If you opt-out using these choices, we will not share or make available such personal information in ways that are considered a “sale” or “sharing” under the CCPA. However, we will continue to make available to our partners (acting as our service providers) some personal information to help us perform advertising-related functions. Further, using these choices will not opt you out of the use of previously “sold” or “shared” personal information or stop all interest-based advertising. For more information, see our Cookie Policy.

Right to Limit Use and Disclosure of Sensitive Data

The Services may also require processing of “sensitive” data, as defined in the CCPA. This may include geolocation from your use of the Service, government identification, communications with other users, as well as or other personal information you provide to us. When you are asked to provide information, you may decline. But if you choose not to provide information that is necessary for certain products or features, those products or features may not be available or function correctly. You have a right to limit our use of sensitive personal information for any purposes other than to provide the Services you request or as otherwise permitted by law. If we use sensitive personal information for such purposes, we will inform you and provide you the option to limit such use.

Right to Non-Discrimination

You will not be discriminated against by Vendorfront for exercising rights set out in the CCPA.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

Further, to provide, correct, or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your account.

We do not knowingly collect or sell personal information of minors under 16 years of age.

Please note that the above applies to the Vendorfront Service, and our affiliates may have different procedures for exercising your data subject rights. You should refer to their privacy statements for more information.

UK and European Economic Area Data Protection Rights

If the processing of your personal data is subject to UK or EEA data protection law, then in addition to the controls listed above, you have certain rights with respect to that information:

Access and Rectification: You can request access to or rectification of your personal data.
Erasure: You can request deletion of your personal data. Please note, however, that a request to delete your personal data may be restricted if there is a valid legal reason to retain it and may continue to be retained by third parties with whom you communicated through the Vendorfront Service. We may also retain cached or archived copies of information about your account for up to a year.
Consent: If the processing of personal data is based on your consent, you can withdraw consent at any time for future processing.
Data Portability: You may have the right to request your personal data in a format in which it can be transferred to another provider.
Objection: You can object to our processing of your personal data if that processing is based on the fulfillment of our legitimate interests.
For residents of France: You can send us specific instructions regarding the use of your information after your death.

To make such requests or contact our Data Protection Officer, please use the contact information in the Contact Us section below. When we are processing data on behalf of another party that is the “data controller,” you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns.

We rely on different lawful bases for collecting and processing personal data about you, for example, with your consent and/or as necessary to provide the services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfill other legitimate interests.

Your Choice

You are always in control of your personal information and providing us with your information is always your choice. If you object to the processing of your personal information, you can choose to withdraw any consent you previously provided us, and we will respect that choice in accordance with our legal obligations.

However, your decision to withhold details may limit or prevent us from providing products or services you have asked for.

If you do not wish to receive promotional materials from us, or you do not want your personal information shared, please contact us using one of the methods below.

Contact Us

Method	Details
Email	[email protected]
Mail	Vendorfront Inc.
	Attn: Privacy
	2 Atherton Ave
	Ajax, ON L1T4X2, Canada

Account Deactivation or Deletion

Please email us using the information listed above.

Privacy Concerns

If you have any questions, concerns, or complaints about this Privacy Statement please contact us using the email or mailing address provided above.

California and Other US-State Privacy Rights

If you wish to exercise your privacy rights under the CCPA or other applicable state laws or otherwise appeal a decision made by Vendorfront regarding your data privacy rights, please contact us using the information above. Please note that we may need to verify your identity and request to the degree of certainty required by law before taking further action on your request.

UK/EEA Data Subject Rights

If you wish to exercise your UK or EEA data subject rights, please contact us using the information above. Please note that we may need to verify your identity and request to the degree of certainty required by law before taking further action on your request. You also have the right to lodge a complaint with a regional supervisory authority, but we encourage you to first contact us with any questions or concerns.