U.S. Privacy Laws Supplement

December 2024

(Version 5.0)

This document (the “Supplement”) is part of our Terms of Use and Sale for Businesses and applies only to the extent that we, as a service provider to you, receive data from you about your consumers who are residents of the United States and whose data is protected by the U.S. Privacy Laws.

1. Definitions: words or expressions defined in “quotation marks” have the same meanings each time they are used in this Supplement. Unless we say otherwise below, any words or expressions that are defined in the Terms of Use and Sale for Businesses (including the Data Processing Agreement) have the same meanings when used in this Supplement.

  • “Business”, “sale”, “sell” and “service provider”have the meanings given in the CCPA (as defined below).

  • “Share” has the meaning given in the CPRA (as defined below).

  • “CCPA” means the California Consumer Privacy Act of 2018.

  • “CPA” means the Colorado Privacy Act of 2021, together with all implementing regulations.

  • “CPRA” means the California Privacy Rights Act of 2020.

  • “CTDPA” means the Connecticut Act Concerning Personal Data Privacy and Online Monitoring of 2022.  

  • “DPDPA” means the Delaware Personal Data Privacy Act of 2022. 

  • “FLDBOR” means the Florida Digital Bill of Rights of 2023.

  • “IACDPA” means the Iowa Consumer Data Protection Act 2023.

  • “MTCDPA” means the Montana Consumer Data Privacy Act of 2023.

  • “NEDPA” means Nebraska Data Privacy Act of 2024.

  • “NJDPA” means the New Jersey Data Protection Act of 2024.

  • “NHEPA” means the New Hampshire Act Relative to the Expectation of Privacy of 2024.

  • “OCDPA” means the Oregon Consumer Data Privacy Act of 2023.

  • “TXDPSA” means the Texas Data Privacy and Security Act of 2023.

  • “UCPA” means Utah Consumer Privacy Act of 2022. 

  • “U.S. Privacy Laws” means the U.S. State data protection and privacy laws that are applicable to our processing of your consumer data, such as CCPA, CPRA, CPA, CTDPA, DPDPA, FLDBOR, IACDPA, MTCDPA, NEDPA, NJDPA, NHEPA, OCDPA, TXDPSA, VCDPA, UCPA and any other state or local laws in force and effect that apply to U.S. Residents’ Data as may be amended, repealed, and replaced from time to time.

  • “U.S. Residents’ Data” means the U.S. residents’ data which is protected by the U.S. Privacy Laws.

  • “VCDPA” means Virginia’s Consumer Data Privacy Act of 2021.

2. Compliance with the U.S. Privacy Laws: We are aware of and will comply with the requirements of the U.S. Privacy Laws in connection with our services we provide to you.

3. Your instructions: Except as necessary to provide our services to you or unless otherwise permitted by the U.S. Privacy Laws:

  • we will not process, retain or use the U.S. Residents’ Data; and

  • we will not sell, share or disclose the U.S. Residents’ Data to any third party.

4. Invitation data: If the type of review invitation services we provide to you requires us to receive or process invitation data that is the U.S. Residents’ Data, then we process that invitation data in accordance with the Data Processing Agreement. You are solely responsible for ensuring that consumers’ privacy requests are communicated to us, and for ensuring that consumers’ privacy rights are complied with in accordance with the U.S. Privacy Laws.

5. Security practices: The security practices that we apply to the U.S. Residents’ Data, will be the same as those that we describe in the Security practices section of our Data Processing Agreement.
On your request, we will provide you with sufficient information to enable you to check that we are complying with these security practices.

6. Training and confidentiality: We will ensure that all persons who have access to the U.S. Residents’ Data in the course of providing services to you are informed of how the U.S. Residents’ Data must be handled under the U.S. Privacy Laws and are subject to a duty of confidentiality.

7. Consumer requests: You or we may receive requests from your consumers attempting to exercise their rights under the U.S. Privacy Laws in connection with your use of our services (“consumer requests”).

  • If we receive a consumer request, we will inform the requesting consumer that he/she should submit his/her request to you, given that you will be responsible for responding to these requests; and

  • If you receive a consumer request, we will provide you with reasonable assistance to respond to it as required by the U.S. Privacy Laws.

8. Deleting and retaining the U.S. Residents’ Data: At your request, we will, or will give you access to, delete all or part of the U.S. Residents’ Data, unless we are permitted to retain such information under the U.S. Privacy Laws or required to retain it under applicable law. To the extent we retain U.S. Residents’ Data, it will remain subject to our Terms of Use and Sales for Businesses (including the Data Processing Agreement) and this Supplement.

Back to top