Knit Global Privacy Policy

This Privacy Policy describes how Knit, Inc. f/k/a Purpics, Inc. and its affiliates (collectively “Knit,” “we,” “us,” or “our”) handle` personal information when you use our website (“Site”) participate in our panels, events or activities, receive our emails and marketing communications, or engage with us on our social networks (collectively with the Site, the “Service”).

FOR US USERS:  PLEASE SEE THE “YOUR US STATE CONSUMER PRIVACY RIGHTS” SECTION BELOW FOR ADDITIONAL TERMS THAT MAY APPLY TO YOU.

FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA, SWITZERLAND, OR THE UNITED KINGDOM:  PLEASE SEE THE “EEA, UK & SWISS PRIVACY RIGHTS” SECTION BELOW FOR ADDITIONAL TERMS THAT APPLY TO YOU. 

FOR CANADIAN RESIDENTS:  PLEASE SEE THE “PRIVACY RIGHTS FOR CANADIAN RESIDENTS” SECTION BELOW FOR ADDITIONAL TERMS THAT APPLY TO YOU.

FOR RESIDENTS OF ANY OTHER COUNTRY NOT LISTED ABOVE:  PLEASE SEE THE “PRIVACY RIGHTS OF RESIDENTS OF OTHER COUNTRIES NOT SPECIFICALLY LISTED ABOVE” SECTION BELOW FOR ADDITIONAL TERMS THAT APPLY TO YOU.

Information For Our Market Research Participants 

We provide qualitative and quantitative market research services and analysis for our clients and brand partners. When you use our Service, you are participating in market research efforts that we perform for our clients and brand partners. We provide our clients and brand partners with (1) your answers to the survey questions and (2) access to our Site where our clients and brand partners can view any video responses you may provide us. As described in more detail below, we minimize the amount of personal information we provide to our clients and brand partners about you while still serving our clients and brand partners. The only types of your personal information that we provide to our clients and brand partners are: (a) your video and audio likeness within the videos you record (b) the city and state in which you live and (c) any information that you may share with us in the surveys you take or videos you record while using the Service.

1. WHAT IS PERSONAL INFORMATION?

In this Privacy Policy, “personal information” (sometimes referred to as “personal data”) means information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household, or as otherwise defined under applicable data protection laws.   Personal Information does not include publicly available information or aggregated information that does not include personal identifiers.

2. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

We may collect the following categories of personal information from or about you, including when you use the Site or the Service:

• Identifiers: such as your first name, last name, address, email address and telephone number (but only if you provide it to us).
• Protected Classifications Under Applicable Law:  such as your race, religion, sexual orientation, gender identity, gender expression, or age (but only if you provide it to us).
• Commercial Information: such as survey results and other feedback you provide us; information you provide when you contact us with questions, feedback, or otherwise correspond with us online.

• Internet Data:  such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, and general location information such as city or town. 
• Geolocation Data:  imprecise geolocation data such as your city, state, zip code, and country (based on IP Address).
• Sensory Data:  such as images, videos, and other content that you upload or submit to us through the Service, such as by participating on a panel, answering survey questions or uploading content, including pictures, video, captions and other text, audio, and metadata associated with those files.
• Professional Data:  such as your information about your employer, information from your resume or other information we may collect in operating the Service or when you apply for a job. 
• Educational Data: such as information about your schools attended, dates attended, degrees received and other information we may collect in operating the Service or when you apply for a job. 
• Inference Data:  such as your preferences for receiving marketing communications, details about how you engage with our marketing communications and inferences we make from your Sensory Data. 

‍

3. SOURCES OF PERSONAL INFORMATION.  We collect personal information from the following three sources:

• Information you provide to us.  We collect personal information from you when you communicate with us, participate in our surveys and focus groups or as otherwise identified in this Privacy Policy.
• Information from third-party sources. We may collect personal information about you which we obtain from other sources, such as:

• Third-party platforms. If you choose to connect the Service to a social media or other third-party platform, such as when you log in using a social media account, we will collect the information shared by the platform such as your username or handle, name, image, profile data, and other information. We will treat any information that you or the platform may provide to us in accordance with this Privacy Policy. When you visit or interact with our pages on one of those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use, and processing of your personal information.
• Business partners, such as clients and brand partners, joint marketing partners, and affiliates of such entities.
• Public sources, such as publicly available social media profiles, directories, and other third party sources.

• Data collected automatically. We, our service providers, and our business partners may automatically log the following information about you, your computer or mobile device, and your activity over time on the Service and other online services:

• Device data as described above under “Internet Data”
• Usage data, pages or screens you viewed on our Site, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen or with our email communications, access times, and duration of access.
• Cookies, which are text files stored on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently and remembering your preferences, enabling functionality, helping us understand user activity and patterns, facilitating online advertising and measuring the effectiveness of our ads.
• Javascript libraries, which are snippets of code within web pages that execute when certain actions take place.
• Web beacons, also known as pixel tags or clear GIFs, which are typically used to demonstrate that a webpage or email was accessed or opened, or that certain content within it was viewed or clicked, typically to compile statistics about usage of websites and the success of marketing campaigns.

‍

4. HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for the following purposes or as otherwise described to you in this Privacy Policy or at the time of collection: 

a. To Operate the Services: We use your personal information to:

• provide, operate, maintain, and improve the Service;
• communicate with you regarding the Service, including by sending you Service announcements, technical notices, updates, security alerts, and support and administrative messages;
• analyze and share your survey responses, videos and feedback with our clients and brand partners, which information may be used by such parties for their marketing and advertising purposes;
• process your Service transactions and process any related payments;
• understand your opinions, needs and interests, and personalize your experience with the Service; 
• provide support for the Service and respond to your requests, questions and feedback;
• provide for the monitoring and security of our Site and
• provide services to our clients and brand partners.

b. Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and develop other products and services. As part of these activities, we may create aggregated, de-identified or other anonymous data from the personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service, but we will not reidentify any personal information once it has been deidentified.

c. Marketing. We and our clients and brand partners may collect and use your personal information for marketing and advertising purposes.  For instance, if you request information from us, use the Service or participate in our surveys, promotions or events, we may send you Knit-related marketing communications as you request or as permitted by law.  We will also provide you with the ability to opt-out of receipt of marketing materials, which you can exercise at any time. We use this personal information in several ways, including providing our services to our clients and brand partners, monitoring website activity, and enabling you to communicate with us and request information.

d. Compliance and protection. We may use your personal information to:

• protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
• audit our internal processes for compliance with legal and contractual requirements and internal policies;
• enforce our Terms of Use, or our Master Service Agreements (or similar agreements), including those with our clients and brand partners;
• protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; or
• comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

e. Other purposes with your consent. In some cases, we will ask for your consent to collect, use or share your personal information for other purposes. For example, we may ask for your consent to send you marketing emails where required by law or to post your testimonial or endorsement.

5. PARTIES WITH WHOM WE SHARE YOUR PERSONAL INFORMATION

We may share your personal information with the following parties:

Our Employees: We share your personal information with those employees who need to have access to that information for marketing, customer service sales, customer success, research, product, technology, and operations.”, including to schedule and work with you on surveys and focus groups and to operate our business.

• Our clients and brand partners. We share your personal information with our partner brands and clients. For example, when you participate in one of our surveys or provide us videos, we will disclose the information you provide to our clients or partner brands. Please note that once we share your personal information with another company in the above circumstances, the information received by the other company is controlled by that company and becomes subject to the other company’s privacy practices and may be used by our clients or partner brands for marketing, advertising and other similar uses.
• Service providers. We work with companies and individuals to help provide the Service on our behalf or help us operate the Service or our business (such as IT, customer support, hosting, website analytics, email delivery, marketing and advertising, research, and event management). These service providers are permitted to use your personal information only to help us operate the Service or our business as authorized under our contracts with them.
• Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, investment bankers, accountants, auditors, and insurers, where necessary in the course of the professional services they render to us.
• Compliance and protection. We may disclose your personal information as we believe appropriate to government or law enforcement officials or private parties: (a) for the compliance and protection purposes described above; (b) as required by law, lawful requests or legal process, such as to respond to subpoenas or requests from government authorities; (c) where permitted by law in connection with any legal investigation; and (d) to prosecute or defend legal claims.
• Business transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, reorganization or sale of all or substantially all of our assets, or in the event of bankruptcy.  We may also share that personal information as part of due diligence with regard to any such proposed transaction.
• Subprocessors. To learn more about our subprocessors, please refer to https://goknit.com/subprocessors 

6. WEBSITE ANALYTICS, COOKIES, AND OTHER TRACKING TECHNOLOGY

We use analytics services and targeted advertising cookies in addition to location features that are connected to your use of the Services. We use cookies, web beacons, pixel tags, and other technologies (collectively "Cookies") on our Services to automatically collect information used to improve the Services and to advertise to you. A cookie is a small text file that our Services save onto your computer or device when you use the Site. 

A cookie can either be a "session" cookie or a "persistent" cookie. Session cookies exist only for so long as you are visiting the Site and are typically deleted when you exit your web browser. Each time you visit a Website that has implemented a persistent cookie, the persistent cookie is renewed, and that cookie will remain active until its predetermined expiration date. 

A. Website Analytics

We use third-party software tools on our Website to learn more about how visitors navigate the Site and view content. These third-party analytics providers provide us with analytical information collected through the Cookies that we use to improve the Site, to make sure it is easy to use, and to develop content that is both interesting and customized.

• Google Analytics: We have enabled Google Analytics. We use this analytics information to evaluate the use of the Site, compile reports on Site activity, and for our use and for providing other services relating to activity on and use of the Site. To prevent Google from using data collected by Google Analytics, follow the instructions to download and install the Google Analytics Opt-out Browser Add-on for each web browser you use. Using the Google Analytics opt-out browser add-on will not prevent us from using other analytics tools and will not prevent data from being sent to the Site itself or to Google. Opting out will not affect your use of the Site. For more information on how Google uses Personal Information, visit Google's Privacy Policy and Google's page on How Google uses data when you use their partners' websites or apps.
• LinkedIn Analytics: We have enabled LinkedIn Analytics. We use this analytics information to evaluate the use of the Site, compile reports on Site activity, and for our use and for providing other services relating to activity on and use of the Site. To learn more about LinkedIn’s privacy practices, please refer to their privacy policy, available here. 

B. Targeted Advertising

We use service providers and other third parties to serve you customized email, SMS, and internet-based advertisements. Those ad networks use Cookies and other tracking technologies to serve ads based on your prior visits to our Site. These ad networks may place and store cookies on the devices you use to access our Services and collect information, including your browsing behavior, referring websites, and your response to advertisements.

• LinkedIn Ads: We use LinkedIn Ads to display search advertisements and to track when you have visited or used our Services. If you click on a LinkedIn Ads advertisement, LinkedIn Ads stores a cookie on your device that is used to track the number of individuals who click on a LinkedIn Ads advertisement and are forwarded to the applicable website. To learn more about LinkedIn’s privacy practices, please refer to their privacy policy, available here. LinkedIn allows you to opt out of tracking associated with LinkedIn Ads. You may opt-out here or here.
• Facebook Pixel: Facebook Pixel by Meta is a Cookie that enables us to measure the effectiveness of advertising campaigns served on Facebook. The information collected by that Cookie will be transmitted to and stored by Facebook. For more information about Facebook’s privacy practices, please refer to https://www.facebook.com/about/privacy/. To opt out, please see https://www.facebook.com/ads/preferences. 
• Facebook Connect: We use Facebook Connect by Meta to track and analyze users and advertise to our users through Facebook and Meta's affiliated sites and to deliver targeted advertisements. For more information about Meta's privacy practices, please refer to their privacy policy, available at https://www.facebook.com/privacy/policies/uso/. To opt out, please visit https://www.facebook.com/ads/preferences.
• Google Ads: We may use Google Ads, an online advertising service provided by Google to serve targeted advertisements on our behalf across the Internet. To opt out of remarketing advertising provided through Google, to customize your ad preferences, or to limit Google’s collection or use of this information, visit Google’s Safety Center, available at https://safety.google, and Google’s Ad Settings, available at https://myadcenter.google.com. Opting out will not affect your use of the Platform.
  

C. Session Replay Services

Session replay technology allows us to collect information about how you navigate and use our Website in real time. Session replay technology collects information, including the date and time you visited the Site, mouse clicks, mouse movements, keystrokes and text input, scrolling, webpage, or content loading times.

• Apollo Tracking: We use Apollo software on the Site. Apollo is a multifaceted sales engagement platform that supports B2B sales and marketing activities. Apollo tracks website visitors and their activity on the website, enabling us to identify potential leads and prioritize marketing campaigns. To learn more about Apollo’s privacy practices, please see Privacy Policy | Apollo

7. YOUR PRIVACY CHOICES

We provide you with the ability to make certain choices with regard to the personal information we collect from you as described below: 

Access, delete or update your information. You may review, update, correct or delete the personal information in your registration profile by logging into your account or emailing us at info@goknit.com.

Opt-out of marketing communications. You may opt out of marketing-related emails by logging in and changing your account settings or by following the opt-out prompt in the email. You may continue to receive Service-related and other non-marketing emails.

Advertising choices. You can limit the use of your personal information for interest-based advertising by:

• Browser settings. Blocking third-party cookies in your browser settings or using ad-blocking browser plug-ins/extensions. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Service, and our Site may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit allaboutcookies.org.
• Mobile device settings. Using your mobile device settings to limit the use of the advertising ID associated with your mobile device for interest-based advertising purposes.
• Platform settings. Using Google’s and Facebook’s interest-based advertising opt-out features:
  
  • Google: https://adssettings.google.com/
  • Facebook: https://www.facebook.com/about/ads
• Ad industry tools. Opting out of interest-based ads from companies participating in the following industry opt-out programs:
  
  • Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
  • Digital Advertising Alliance: https://optout.aboutads.info, which lets you opt-out of interest-based ads on websites.
  • AppChoices mobile app: available at https://www.youradchoices.com/appchoices, which lets you opt-out of interest-based ads in mobile apps.

The opt-out preferences described above must be set on each device or browser for which you want them to apply. Not all companies that serve interest-based ads participate in the ad industry opt-out programs described above, so even after opting-out, you may still receive some cookies and interest-based ads from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online, but they may be less relevant to you.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Declining to provide your personal information. If you do not provide the information indicated as required or mandatory within the Service, or that is otherwise necessary to provide a requested service or feature within the Service, that portion or all of the Service may be unavailable to you and we may deactivate your account.

Third-party platforms or social media networks. If you choose to connect to the Service via a third-party platform or social media network, you may have the ability to limit the information that we may obtain from the third party at the time you log in to the Service using the third-party’s authentication service or otherwise connect your account. Subsequently, you may be able to control your settings through the third party’s platform or service. If you withdraw our ability to access certain information from a third-party platform or social media network, that choice will not apply to information that we have already received from that third party.

Global Privacy Control. You may opt out of the sale or sharing of your Personal Information by broadcasting a Global Privacy Control (“GPC”) signal, an opt-out preference signal, using a browser and/or browser extension that supports the GPC signal. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.

8. SECURITY   

The security of your personal information is important to us. We take organizational, technical and physical measures consistent with applicable data protection laws designed to protect the personal information we collect, both during transmission and once we receive it. 

For instance, we protect personal information using physical protections, access controls, penetration testing, firewalls, multi-factor authentication, and end-point monitoring.  We also maintain written policies and procedures to safeguard personal information. We have a written incident response plan designed to allow us to quickly respond to any data security incident.

We review our security practices on a regular basis to confirm we continue to maintain adequate levels of data security.

9. INTERNATIONAL DATA TRANSFERS

Knit is headquartered in the United States and has service providers in other countries.  We may transfer your personal information to the United States or to other locations outside of your home country for processing and storage. Privacy laws in the locations where we handle your personal information may differ and not be as protective as the privacy laws in your home country.  When required by applicable data protection laws, we will use data transfer mechanisms such as Standard Contractual Clauses before transferring your personal information cross-border.

10. DATA RETENTION

We maintain a written data retention plan.  Under that plan, we will only keep personal information as long as we need that information for the purposes for which we collected it or as required by applicable law. If you have any questions about our data retention practices, please contact our Privacy Team at privacy@goknit.com.

11. DATA GOVERNANCE

Data Privacy is an obligation for all Knit employees.  We have appointed a Chief Privacy Officer to operate our privacy program.  Our privacy and security responsibilities are also cross-functional to protect information concerning our participants, employees, and business customers.  For instance, senior members of the IT and Marketing departments work with legal counsel to help comply with applicable data protection laws and to protect the personal information we collect.  For example, we enter into Data Protection Agreements and standard contractual clauses and conduct Data Privacy Impact Assessments/Privacy Impact Assessments as required by applicable law.

All Knit employees are required to participate in annual privacy and security training.  

12. THIRD-PARTY SITES AND SERVICES

The Service may contain links to other websites and services operated by third parties, such as social media platforms, advertising services and other websites and applications. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party websites, applications or services, and are not responsible for their actions. Other websites and services follow different rules regarding their collection, use and disclosure of your personal information. We encourage you to read their privacy policies to learn more.

13. CHILDREN

KIDS PRIVACY ASSURED BY PRIVO: COPPA SAFE HARBOR CERTIFICATION

Knit, Inc. is a member of the PRIVO Kids Privacy Assured COPPA safe harbor certification Program (the “Program”). The Program certification applies to the digital properties listed on the certification page that is viewable by clicking on the PRIVO Seal. PRIVO is an independent, third-party organization committed to supporting online services to safeguard children’s personal information collected online. The PRIVO COPPA safe harbor certification Seal posted on this page indicates Knit has established COPPA compliant privacy practices and has agreed to submit to PRIVO’s oversight and consumer dispute resolution process. If you have questions or concerns about our privacy practices, please contact us at 757.818.5977 or privacy@goknit.com. If you have further concerns after you have contacted us, you can contact PRIVO directly at privacy@privo.com.

The Service is not generally directed at, and (other than as set forth in this Privacy Policy) Knit does not knowingly acquire or receive personal information from, children under the age of 13. However, from time to time we may offer surveys that are intended for children or teens. If a survey requires a child or teen’s participation, we will obtain parental consent prior to collecting any personal information. To obtain parental consent, Knit will collect a parent’s name and email address, and such collection will be subject to the terms of this Privacy Policy. Knit partners with PRIVO to verify the parent and is COPPA Safe Harbor certified. All information collected for verification is stored securely and not used for any other purpose. For more information on PRIVO please see here: https://www.privo.com/platform-privacy-policy.

When a child or teen with full verifiable parental consent participants in a survey, we collect the user’s age, IP address, estimated location, gender and ethnicity to determine if they are eligible to participate in the survey. Participants provide answers by recording video, recording voice or typing an answer into a provided field. Each survey asks various types of questions and users are invited to freely answer in the form of text or recording. Therefore, a user may freely volunteer personal information. Any personal information collected in responses will not be used for any other purpose other than as outlined in this Privacy Policy.

Survey data is shared with the following service providers:

• Pipe Services S.R.L. is used to record video and audio from surveys. Videos are securely stored temporarily on Pipe until they are transferred to the Knit database, at which time they are deleted by Pipe.
• Qualtrics powers the Knit surveys and stores all information provided via the survey.
• Knit uses Open AI and AI technologies to aggregate and evaluate survey data.
• Survey and participant data is stored on Amazon Web Services and MongoDB.

We will not knowingly collect information from users under the age of 18 without the consent of such individual’s parent or legal guardian. If we learn that we have collected personal information from a user under the age of 18 without prior parental consent we will take appropriate steps to delete that individual’s personal information and restrict that individual from future access to the service, until such consent has been obtained. If a parent has any questions about our data privacy collection and use practices, or to request access to review or delete a child’s information, please contact us at info@goknit.com.

14. TRANSLATIONS

This Privacy Policy may be provided in several languages. In the event of conflict or inconsistency, the English language version of this Privacy Policy controls, unless otherwise required by applicable law. En cas de conflit ou d'incohérence, la version anglaise de cette politique de confidentialité contrôle, sauf si la loi applicable l'exige.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make material changes to this Privacy Policy, we will notify you by posting the new privacy policy on our website and changing the effective date listed at the top of the policy or otherwise communicating with you. If required by law, we will also notify you of changes in another way that we believe is reasonably likely to reach you, such as via email (if you have an account linked to a valid email address) or another manner through the Service.

Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes in the Service (or as otherwise indicated at the time of posting). In all cases, your continued use of the Service after the posting of any updated Privacy Policy indicates your acknowledgement of the update or modification(s).

************************************************************************************

16. YOUR US STATE CONSUMER PRIVACY RIGHTS  

The terms in this section apply to US residents of states with consumer privacy laws.  

Under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, (together, the “CCPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Delaware Personal Data Privacy Act (“DPDPA”), the Iowa Consumer Data Protection Act (“ICDPA”), the  Montana Consumer Data Privacy Act (“MCDPA”),  the Nebraska Data Privacy Act (“NDPA”), the New Hampshire Data Privacy Act (“NHPA”), the New Jersey Data Privacy Act (“NJDPA”), the Oregon Consumer Privacy Act (“OCPA”), the Texas Data Privacy and Security Act (“TDPSA”),the Utah Consumer Privacy Act (“UCPA”)or the Virginia Consumer Data Privacy Act (“VDCPA”), residents of those states have additional rights with regard to their personal information. We have provided a summary of those rights below. In the event of a conflict between this Section and the remainder of this Privacy Policy, this Section shall take precedence for the applicable US state residents. 

Certain capitalized terms not defined in this Privacy Policy have the meanings set forth in the relevant acts described above. 

Mandatory California Privacy Disclosures

We make the following disclosures for the purpose of complying with California law:

Collecting Information.

In the last 12 months, we collected the following categories of personal information: identifiers, protected class information, commercial information, internet or other activity information, geolocation data, sensory data, professional data, education data and inferences drawn from the information above.’ 

Disclosing Information

In the past 12 months, we have disclosed the following categories of Personal Information for a Business Purpose: Identifiers, protected class information, commercial information, internet activity, geolocation data, sensory data, professional data, education data and inferences. 

Sale or Sharing of Personal Information.

In the last 12 months we have not Sold your personal information to a third party for monetary compensation.  Our use of cookies and other technologies to deliver targeted advertising and for analytics purposes is considered the “Sharing” of personal information under certain state privacy laws. We may share the following categories of personal information with third parties that provide us with targeted advertising or data analytics services: Identifiers and Internet Activity 

Sensitive Information 

We do not use or disclose sensitive information, as defined in the CCPA. 

Your State Consumer Privacy Rights. 

Depending upon the state in which you live, you may have the following consumer privacy rights:

Right to Know or Access Your Personal Information 

You have the right to know whether we are processing your personal information and to access such personal information.

Right to Request the Deletion of Personal Information

You have the right to request that we delete personal information we have collected from or about you. We will comply with such request, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law.  

Right to Correct Your Personal Information

You have the right to request that we correct your inaccurate or outdated personal information. If you request that we correct personal information about you, we will use commercially reasonable efforts to correct it. If necessary, we may ask that you provide documentation showing that the information we retained is inaccurate or outdated. 

Right to Data Portability

You may request a copy of the personal information you previously provided to us in a portable, and, to the extent technically feasible, readily usable format. 

Right to Non-Discrimination 

You have the right to be treated in a non- discriminatory manner for exercising any of your rights under an applicable state consumer data privacy law. 

Right to Opt Out of Sale or Sharing. You have the right to “opt out” of “targeted advertising” and the “sale of your “personal information” for targeted advertising.

Right to a List.  You may have the right to know a list of the specific third parties that have received your personal information or any personal information from a controller.

We will not charge or penalize you for requesting information and otherwise exercising your rights as described in this Privacy Policy, but we may reasonably limit the number of requests you may make and impose appropriate charges as permitted by law.

In some instances, you may request that we delete your personal information, consistent with your general right to request that we, as a business, delete any of your personal information that we have collected from you. We will comply with your requests to the fullest extent allowed by applicable law.

If you use an authorized agent to request information or exercise your rights, that authorized agent must meet the same authentication requirements that apply to the requests that we may receive directly from you. We may verify requests made by authorized agents to ensure security and comply with regulations and our internal policies.

Exercising Your Rights 

Who May Exercise Your Rights. You may make a request to exercise your state consumer privacy rights. A parent or legal guardian may make a request on behalf of their child. If certain cases, a person that you authorize to act on your behalf may submit requests to exercise your rights under the state consumer privacy laws on your behalf. If you choose to use an authorized agent, you must (a) provide signed, written permission that authorizes the agent to submit requests on your behalf and (b) verify your identity directly with us or (c) directly confirm with us that you granted permission to the authorized agent to submit the request on your behalf. 

We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.

Verifiable Consumer Requests. To verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.  

When we receive your request to exercise your rights: (a) we will acknowledge receipt of your request; (b) we will try to match the information you provide in making the request with information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including personal information, or to log into your existing account with us; (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.  

We will only use personal information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.  

Submitting Requests. To exercise your rights described in this Section, you may submit your request to us by contacting us at any of the following: 

Knit, Inc.
301 Congress Avenue
Floor 12
Austin, Texas 78701
Phone Number: 1-833-255-3335 
Email:  please email us at info@goknit.com or privacy@goknit.com 
https://goknit.com/contact-us 

When We Will Respond. We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. For data portability requests, we will select a format to provide your personal information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.

Opting Out of the Sale of Sharing of Your Personal Information.  

You may opt out of the Sale or Sharing of your personal information for targeted advertising by: 

• Emailing us at:  privacy@goknit.com.

• Completing our webform at: Do Not Sell or Share My Personal Information
• Additionally, you may opt-out by broadcasting an Opt Out Preference Signal.

Additional Information for State Residents: Appeal Process

If you disagree with our refusal to take action on your request to exercise your privacy rights, you have the right to ask us to reconsider. You must submit your request within 60 days of your receipt of our denial. You may submit your request to us by:

Once we receive your request, we will acknowledge and start processing your request. Within 60 days of receiving your request, we will inform you in writing of any action taken or not taken in response to your request, including a written explanation of the reasons for our decision.

California Shine the Light 

Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your personal information within the past year for direct marketing purposes, and (b) a description of the categories of personal information disclosed, by contacting us per the “Contact Us” Section below.

17. EEA, UK & SWISS PRIVACY RIGHTS 

The purpose of this Section is to provide information and additional provisions that apply to Knit’s processing of Personal Data in accordance with the EU General Data Protection Regulation 2016/679, the UK General Data Protection Regulation and the Swiss Federal Data Protection Act (collectively “GDPR”). The terms in this section are only applicable to those persons located in the European Economic Area (“EEA”), Switzerland, and the United Kingdom (“UK”) (collectively, “EU Data Subjects”). 

In the event of a conflict between this section and the remainder of the Privacy Policy, this section shall control for EU Data Subjects.  

Lawful basis for Processing Personal Data of European Data Subjects

We process the personal data of European Data Subjects on the following lawful bases:

• Legitimate Interests. Where the processing is necessary for the purposes of the legitimate interests pursued by Knit or by a third party and not overridden by your fundamental rights and freedoms (e.g., product development and security purposes);
• Performance of a Contract. Where the processing is necessary for the performance of a contract with you (e.g., to deliver the service you have requested);
• Consent. Where you have given explicit consent to the processing of your Personal Information for one or more specific purposes (e.g., new and unexpected processing activities); and
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which Knit is subject (e.g., compliance with laws and regulations).

In this case, we rely on the following lawful basis for processing personal data for the purposes set forth below:

‍

PRIVACY RIGHTS OF EUROPEAN DATA SUBJECTS

European Data Subjects have the following rights concerning their Personal Information under the General Data Protection Regulation, the UK GDPR or the Swiss FADP:

• Withdrawal of Consent. If we are processing personal data on the basis of consent, you may have the right to withdraw consent to our processing at any time.
• Access and Rectification. You may have the right to access, correct, and update your personal data.
• Deletion/Erasure. You may have the “right to be forgotten” through the erasure or deletion of your personal data.
• Portability. You may have the right to move, copy, and/or transfer certain personal data from our service to another service.
• Stop Processing. If processing is on the basis of legitimate interests, you may have the right to object to the processing of your personal data and to ask us to restrict the processing of your personal data, subject to certain limitations.
• Submit a Complaint. You have the right to submit a complaint to a data protection authority about our collection and use of your personal data. Contact details for the EU/EEA are here: 
  
  • If you are located in the European Economic Area, https://edpb.europa.eu/about-edpb/about-edpb/members_en
  • If you are located in Switzerland, https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
  • If you are located in the United Kingdom, https://ico.org.uk/global/contact-us/contact-us-public/
• Right To Withdraw Consent.   In the event you provide your consent for us to process your Personal Data, you may withdraw your consent at any time by emailing to request such change at no additional cost.

Exercising your rights under the European Data Protection Laws

You, or an authorized agent, may exercise your privacy rights by submitting a request to privacy@goknit.com. 

We respond to and process requests promptly and within the time frames required by the European Data Protection Laws. Please note that all requests are subject to proper prior verification before processing.

If you are the authorized agent of an individual making a request, you may have to take additional steps to verify your identity and demonstrate that you can exercise the individual’s rights on their behalf.

Retention of European Data Subject personal data

Knit retains personal data for a period commensurate with the purposes for which the personal data was collected or obtained. The criteria used to determine the retention of personal data includes any time necessary for legal and compliance purposes. Personal data may be retained in archival format (e.g., data backups) beyond its retention period.

Marketing.  

Knit does not process personal data of European Data Subjects for the purpose of marketing without first obtaining your express, opt-in consent or having a legitimate interest for doing so.  You have the right to object to the processing of personal data for marketing purposes at any time by contacting us at 

Automated Decision Making.  

We do not make any automated decisions on your behalf or about you without first obtaining your express, opt-in consent.  In the event we secure your consent to do so, you have the right to object to the processing of personal data via automated decision making at any time by contacting us at.

DATA PROTECTION INQUIRIES

If you are a European Data Subject and you have questions about how we process your personal data, you may contact Knit’s Privacy Team or our designated Data Protection Officer (DPO) using the information below: 

Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee our data protection and privacy compliance efforts. You may contact our DPO directly regarding any questions, concerns, or requests related to your personal data. Knit has appointed Milou Meier as the Company’s designated DPO. 

You can submit a request to Knit’s Privacy Team or contact our DPO directly at privacy@goknit.com (Attn: Knit DPO).

General Data Protection Regulation (GDPR) – European Representative

Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is:

Instant EU GDPR Representative Ltd.
Adam Brogden
contact@gdprlocal.com
Tel +35315549700
INSTANT EU GDPR REPRESENTATIVE LTD
Office 2,
12A Lower Main Street, Lucan Co. Dublin
K78 X5P8
Ireland

UK General Data Protection Regulation (GDPR) – UK Representative
Under Article 27 of the UK Data Privacy Act, we have appointed a UK Representative to act as our data protection agent. Our nominated UK Representative is:

GDPR Local Ltd.
Adam Brogden
contact@gdprlocal.com
Tel +44 1772 217800
1st Floor Front Suite
27-29 North Street, Brighton
England

‍

************************************************************************************

18. PRIVACY RIGHTS FOR CANADIAN RESIDENTS

For Canadian residents, you have certain privacy rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) as well as substantially similar provincial laws in Alberta, British Columbia and Quebec.    

YOUR CANADIAN PRIVACY RIGHTS. We describe below your privacy rights and how you can exercise those rights as residents of Canada:

Right to Access.  You have the right to confirm that we hold personal information about you, receive and explanation about how we use your personal information, and obtain access to your personal information.

Right to Rectification.  You have the right to examine and challenge or correct the accuracy of your personal information. 

Right to Withdraw Your Consent.  You have the right to withdraw your consent to processing your personal information at any time, subject to legal or contractual restrictions and reasonable notice.  If you withdraw of consent implicates the quality of our services to you, we will notify you. 

Right to Lodge a Complaint.  You have the right to lodge a complaint regarding the processing of your personal information with the applicable data protection authority.  Please contact your local data protection authority for more information. However, we would prefer to have the opportunity to respond to your concerns directly, so feel free to reach out to use before you contact your data authority.

How to Exercise Your Canadian Privacy Rights.  To exercise your rights described in this Section, you may submit your request to us by contacting us in the following ways:

Mail:
Knit, Inc.
301 Congress Avenue
Floor 12
Austin, Texas 78701
Email: privacy@goknit.com

ADDITIONAL TERMS APPLICABLE TO QUEBEC RESIDENTS ONLY 

If you are a resident of Quebec, you have additional rights regarding the processing of your personal information, subject to identity verification requirements and certain exceptions.

Right to Restriction of Processing.  You have the right to direct us to cease disseminating your personal information or to de-index any hyperlink attached to your name that provides access to the information by a technological means, if the dissemination of the contravenes the law or a court order. 

Right to Request Deletion.  You have the right to request that we delete personal information we collected from you.  We will comply with such requests, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law.

Right to Data Portability.  You may request copies of the personal information you have provided to us. Where possible, we will deliver the copy of your personal information to you using a structured, commonly used and machine-readable format.  Alternatively, you may request that we send your personal information to another business. 

DATA TRANSFERS AND CONSENT TO PROCESSING OUTSIDE OF CANADA OR QUEBEC 

We are based in the United States.  We may transfer your Personal Information outside of your jurisdiction where you live, including to other Canadian provinces or to the United States in connection with the operation of our business. To assist us in meeting our operational and legal obligations, we may also transfer or make your Personal Information accessible to one of our service providers located either in Canada (both inside and outside Quebec) or throughout the world. 

When we transfer your Personal Information outside of Canada, your Personal Information may be available to government officials in the United States or other countries. These countries have privacy laws that differ from the Canadian privacy laws.  In certain cases, your Personal Information may be accessible to the governments, courts or law enforcement or regulatory agencies in those jurisdictions under the laws of those other jurisdictions‎.

Privacy Officer:  To assist you in exercising your privacy rights, we have designated an individual to serve as a Privacy Officer. If you have any questions, complaints, or comments regarding this privacy practices in Canada our information collection practices, please contact our Privacy Officer at:

Knit, Inc.
301 Congress Avenue
Floor 12
Austin, Texas 78701
Email: privacy@goknit.com 

19. PRIVACY RIGHTS OF RESIDENTS OF OTHER COUNTRIES NOT SPECIFICALLY LISTED ABOVE: 

If you are a resident of a country that is not listed above, you may exercise the privacy choices set forth in Section 7 or any other rights granted under your home country’s applicable data protection laws. 

To lodge a formal complaint with us you can contact us using the contact information listed below in the “Contact Us” section of this Privacy Policy, or by contacting your country’s data protection authority.

For residents of Brazil, If we are unable to resolve your issue within a reasonable period of time, you may contact the Brazilian Data Protection Authority (ANPD) via the ANPD’s website, https://www.gov.br/anpd/pt-br.

For residents of Australia. If we have not responded to you within a reasonable period of time, you may make a complaint to the Office of the Australian Information Commissioner (OAIC). You may contact the OAIC via the OAIC’s website, www.oaic.gov.au, or by phone at 1300 363 992.

HOW TO CONTACT US

If you have any questions or concerns about our Privacy Policy or our privacy practices, please contact us at:

Knit, Inc.
301 Congress Avenue
Floor 12
Austin, Texas 78701
Email: privacy@goknit.com
Phone: 1-833-255-3335