14. Your privacy rights
Depending on where you live and the law that applies to your information, you may have rights including:
- Access: You can ask us for a copy of the personal information we hold about you.
- Correction: You can ask us to correct information that is inaccurate or incomplete.
- Deletion: You can ask us to delete personal information where the law allows this.
- Restriction: You can ask us to restrict how we use your information in certain circumstances.
- Data portability: Where the law provides this right, you can ask us to provide certain personal information in a structured, commonly used and machine readable format or ask us to send it to another organisation.
- Objection: You can object to certain processing, including processing based on legitimate interests. You have an absolute right to object to direct marketing.
- Withdraw consent: Where we use consent as our lawful basis, you can withdraw your consent at any time.
- Rights relating to automated decisions: Where applicable law gives you rights in relation to solely automated decisions that have legal or similarly significant effects, you can exercise those rights.
14.1 Automated decision making and profiling
We do not currently use personal information to make decisions solely through automated processing that produce legal effects or similarly significant effects on individuals.
If this changes, we will update this notice where required and provide information about the relevant processing, including the information required by applicable law.
For Australian privacy purposes, where the requirements relating to automated decision making apply, we will include the additional information required by the Australian Privacy Principles.
14.2 If Recite Me is processing your information for one of our customers
If you use a Recite Me product on another organisation’s website, that organisation may be responsible for your personal information. For example, a school, university, employer, government organisation or business may use Recite Me technology on its website.
Where Recite Me acts only as a Data Processor, you should normally contact that organisation about your personal information and privacy rights. We will provide reasonable assistance to our customers where required by our contract and applicable law.
14.3 Children and young people
We recognise that children and young people may use websites where Recite Me technology is provided.
Where Recite Me acts as a Data Processor for a customer, the customer is responsible for determining how children’s personal information is collected and used, subject to the terms of our agreement and applicable law.
Where Recite Me acts as a Data Controller, we will consider whether children are likely to use the relevant service and will provide privacy information that is appropriate for their age and level of understanding. As a Controller, our own services are not directed at children under 13 and we do not knowingly collect personal information directly from children under 13 for our own purposes. If you believe that a child has provided personal information directly to us, please contact us so that we can investigate.
Where privacy information is provided directly to children, we will use clear and age appropriate language.
14.4 Anonymity and pseudonyms in Australia
If Australian privacy law applies, you may be able to deal with us without identifying yourself or by using a pseudonym where it is lawful and practicable to do so.
There are circumstances where we need to know who you are. For example, we may need to identify you to provide a service, enter into a contract, meet a legal requirement or respond properly to a privacy rights request.
Where we cannot reasonably deal with you without identifying you, we will explain why.
14.5 United States privacy rights
Privacy laws in the United States vary between states.
Where a state privacy law applies to you, you may have additional rights. These can include:
- The right to know what personal information is collected, used or disclosed
- The right to access personal information
- The right to correct inaccurate personal information
- The right to delete personal information
- The right to obtain a copy of certain personal information
- The right to opt out of certain processing
- The right to opt out of the sale of personal information
- The right to opt out of targeted or cross context behavioural advertising where applicable
- The right to limit certain uses of sensitive personal information where applicable
- The right to appeal certain decisions about your privacy request
- The right not to receive discriminatory treatment for exercising applicable privacy rights.
The exact rights available to you depend on the state in which you live and whether the relevant law applies to Recite Me and the processing concerned.
We will not sell personal information for monetary consideration. We do not knowingly use personal information for cross context behavioural advertising unless this is permitted and disclosed under applicable law.
14.6 How to exercise your rights
Contact us through the details provided in Section 18 at the bottom of this privacy notice.
We may need to verify your identity before responding to a request. This is to protect your personal information and prevent someone else from accessing it. In California, you may also use an authorised agent to make a request on your behalf where permitted by California law. We may require appropriate evidence that the agent is authorised to act for you.
We will respond within the timeframe required by the law that applies to your request. You will not normally have to pay to exercise your rights. There are circumstances where we may refuse a request or charge a reasonable fee where the law allows this. If this happens, we will explain why.
