The Cartrast Privacy Policy
The following is the Privacy Policy for residents of United States of America and is the policy of Cartrast LLC, with a registered address at 5151 California Avenue, Suite 100, Irvine, CA, 92617, on behalf of itself and all members of the Cartrast corporate family including all affiliates of Cartrast LLC globally listed below (collectively "Cartrast"). All such entities globally shall have access to personal data collected pursuant to this policy and may access and/or store such data outside of your country of residence including in the United States.
First Effective: June 30, 2021
This Version: Effective June 30, 2021
The following sets forth the privacy policy for the Cartrast websites, databases, and/or mobile applications (collectively "Application/Services") offered by Cartrast.
This Privacy Policy sets forth the collection, use and disclosure of personal data or personally identifiable information ("PII") and other information by Cartrast in connection with Cartrast's Services as defined herein and other Cartrast and third party activities as defined herein ("Non-Research Activities"). Cartrast's Services provide you with the opportunity to participate in events and complete surveys administered by Cartrast or by third parties (whether as a customer or a non-customer), use the websites associated with Cartrast’s services, use the Application/Services associated with the services, and receive and redeem rewards and incentives, including, without limitation, sweepstakes entries, offered in connection with taking part in Cartrast Experiences and/or the completion of surveys (collectively "Services"). Non-Research Activities include, but are not limited to, Cartrast marketing Cartrast Services and/or third parties marketing their services to you and/or sharing individual and/or aggregate profile data with third parties to develop marketing insights and/or audience/look alike models. Non-Research Activities are described in more detail in this Privacy Policy.
Your use of Cartrast's Application/Services is completely voluntary and therefore Cartrast's processing of your PII in connection with the Application/Services and Non-Research Activities and this Privacy Policy is with your consent.
Surveys administered by third parties and the data collected in connection therewith are not subject to this Privacy Policy. Registration with, use of, and access to Cartrast's Services is subject to Cartrast's Terms and Conditions. In some cases Cartrast may not be the sponsor of the survey and the survey instrument, and the survey results or survey data will be owned by the sponsor of the survey.
All references in this Privacy Policy to "Cartrast" include Cartrast and its parent, subsidiary and affiliated companies. All references to "us" or "we" refer to Cartrast. All PII is stored on servers located in the United States, where Cartrast's servers are located and accessible globally to Cartrast employees and/or agents. For purposes of this policy, respondent shall mean any individual who participates in Cartrast Services, including passive data collection and/or participates in the Non-Research Activities described herein. For purposes of this policy, online shall include mobile web browsing.
What personal data and other information does the Application/Services collect and how is it used?
Cartrast collects personally identifiable information ("PII") from participants during and after registration with an Experience, including, without limitation, during participation in a survey and in connection with the receipt and redemption of rewards and incentives and/or during the Application/Services registration and Experience process. You will be asked to provide certain PII and demographic information, including, without limitation, your name, address(es), telephone number(s) (including home, cell, and/or business telephone numbers), email address(es), date of birth, and occupation/education, the unique driver/respondent identification number we assign to you when you sign up for an Experience (individually a "UID" and collectively "UIDs"), and racial and gender information. In addition to the collection of PII mentioned above, during and subsequent to the registration process, you may be asked to voluntarily provide or disclose Sensitive Data. "Sensitive Data" means PII that discloses or reveals health and medical conditions, sexual orientation or sexual life, political opinions/views, race/ethnic origin, religious and philosophical beliefs and trade-union membership. Sensitive Data is used to target survey opportunities to you and as otherwise set forth in this Privacy Policy.
Cartrast collects PII, Sensitive Data and demographic information from non-customers prior to and during participation in a survey.
Cartrast provides its clients and/or its advertising partners with information about your device, including but not limited to, the device's IDFA or Advertising ID and interactions with the Application/Services with your consent. Cartrast, the clients and/or ad partners may use this information to facilitate Cartrast surveys, for marketing of Cartrast products and services to you, for unrelated interest-based advertising, to link your device to additional data about you and/or your device available from third party data management platforms and data providers/brokers and/or to validate certain information you provide about yourself and/or your device.
Additional information you submit.
You may submit, upload or transmit content or material, including, without limitation, photos, videos, and/or any other similar or related content or material which may include your PII ("User Content"), for example, when completing surveys. PII included in User Content shall be collected, used and disclosed as set forth in this Privacy Policy. User Content should not include audio, video, images, or the likeness of anyone other than you.
Information collected through automated means:
The Application/Services also collect certain information automatically, such as information about your device and device capabilities, including, without limitation, the device operating system, the other applications on your device, IP address, device network provider, device type, time zone, network status, browser type, browser identifier, unique device identification number (such as identifiers for analytics or advertising), network provider user ID (a number uniquely allocated to you by your network provider), Media Access Control (MAC) address, International Mobile Equipment Identity, location and other information that alone or in combination may be used to uniquely identify your device. Specific examples of this data and the technology that collects it are below:
Geo-location data. The Application/Services will request your permission to obtain geo-location information from your mobile device, and such geo-location information may be provided by the Application/Services at any time, whether the Application/Services is open or not. If you consent to sharing your geo-location data, in addition to the uses set forth under "Cartrast's use of information" below, Cartrast will also use your location information to offer you the option to participate in location-based surveys and market research and/or to share such geolocation data with third party clients to demonstrate certain location and/or traffic patterns of Application/Services participants. In addition, Cartrast may share your geo-location data with third party vendors to generate surveys for market research and for other research from aggregated location patterns. Please visit this Privacy Policy for a description of how our partner uses the geo-location data.
Geo-location data also may be used by ad networks to provide you with location-based advertising. The ad networks' use of data, and how to opt out, are described in more detail below.
If you no longer wish to share your geo-location data through your device, please change the privacy settings in your device for the Application/Services.
Application/Services and functionality. Cartrast may request access to certain applications and/or functionality available on or through your device for use in connection with the Application/Services and the Services. Access shall be requested via push notification or other alerts and access will only be granted with your consent. If you consent, you may subsequently opt-out by changing your settings on the device.
Social media information. You may also be offered the opportunity to access the Application/Services through third party social media platforms. If you select such an option, Cartrast may collect certain profile information stored in your social media platform account.
Cookies and Similar Technology. Cookies are small files that store certain data on a device. Session cookies expire when you close your browser. Persistent cookies remain on your device until deleted or once they reach a defined expiration date. You may set your browser to notify you when you receive a cookie. Additional geographic and demographic data such as the Audience Measurement Data (as defined below) may be shared with third parties and associated with a cookie placed on your device.
First party and third party cookies and other similar or related technology and device identifiers (e.g., IDFAs, AAIDs, etc.) may be placed, written, set, and/or read for several purposes including, without limitation, to provide a better survey experience, quality control, validation, to enable or facilitate survey participation, tracking of completed surveys or other completed actions, for fraud detection and/or prevention, online ad effectiveness research, website tracking and audience measurement, to develop audience insights and/or look-alike models in connection with marketing campaigns, and for the purpose of targeting advertisements and other content to individuals, subject to your consent where required by applicable law. However, for certain cookies and/or similar or related technology, if you decide not to accept cookies, you will not be able to use the Application/Services.
For more information on the types of cookies we use, the purposes for which we use information collected via cookies, please see our Cookie Consent Tool.
Log Files. The Application/Services may automatically gather and store certain information, including, without limitation, data available from your web browser, including, without limitation, IP Address, browser type, internet service provider, referring/exiting pages, operating system, date/time stamp, and click stream data in log files.
Digital Fingerprinting. Generally, digital fingerprinting assigns a unique identifier to your device based upon the device's technical settings, characteristics, and IP Address. Cartrast uses digital fingerprinting technology for quality control and validation purposes and fraud detection and/or prevention, including, without limitation, identifying duplicate or fraudulent respondents. Cartrast may implement and use digital fingerprinting directly or through a third party vendor with your consent where required by applicable law.
Watermarking. Generally, watermarking involves placing a technology or file on your device to identify that it has previously been used to register with or access the Application/Services or the Services. Watermarking is used for quality control and validation purposes and fraud detection and/or prevention purposes. Cartrast may engage in watermarking activities directly or through a third party vendor with your consent where required by applicable law. In some cases, we may use information collected through automated means, along with other information, to recognize users (or households) across platforms or across devices, such as smartphones, computers, tablets or related browsers, for the purposes described in this Privacy Policy.
Information collected from third parties.
Cartrast may obtain PII, behavioral and/or demographic information from third parties, including, without limitation, data management platforms, ad networks, information service bureaus, other sample suppliers and/or social media platforms. Cartrast may use the PII, behavioral and/or demographic data received from these third parties for various purposes, including, without limitation, data validation, data append, developing marketing insights and look alike models, fraud detection purposes, and/or sending you a one-time email to invite you to participate in a survey and/or join an Experience. In addition, geolocation data, including information regarding retail and other commercial enterprises you may visit while the geolocation feature is enabled, may be appended to your profile and/or shared with Cartrast's clients if you elected to opt in to the geolocation services.
How does Cartrast use the information it collects?
Cartrast's use of information:
In addition to the purposes described above, Cartrast uses personal data collected through the Application/Services as follows: (i) to communicate with you regarding your Experience(s) produced by Cartrast; (ii) to communicate with you regarding your participation in a survey(s) or Experience(s); (iii) to tailor Experiences and survey opportunities to you and to arrange for advertisements to be displayed to you outside the Application/Services for the purposes of facilitating the completion of Experiences and surveys; (iv) to send you notifications of Experience and survey opportunities; (v) to comply with any and all legal obligations, including, without limitation, tax obligations; (vi) to administer and manage Cartrast's reward and incentive programs and fulfill your requests for rewards and incentives; (vii) to facilitate your entry into Cartrast's sweepstakes and promotions and communicate with you regarding such entries; (viii) to update Cartrast's records; (ix) to comply with any data suppression obligations or requirements; (x) for fraud detection and/or prevention purposes; (xi) to link your device and/or profile to additional information available about you and/or your device available from data management platforms ("DMP"); (xii) to market Cartrast products/services to you; (xiii) to enable third parties to market their products/services to you; (xiv) to enable Cartrast or third parties to develop marketing insights and/or audience/look alike models; (xv) to validate the profile information you provided to us; and/or (xvi) as otherwise permitted pursuant to this Policy or as otherwise authorized by you. Cartrast may use information collected in the context of the Application/Services in connection with other Experiences and surveys that Cartrast administers and/or in connection with Non-Research Activities. With respect to the linking of Application/Services data to third party DMP data, Cartrast uses such data itself and/or permits Cartrast's clients and/or the DMP itself to use such data to provide you with survey opportunities, to measure advertising effectiveness (as described in more detail below), to segment audiences; to design advertising campaigns using "look alike" cohort groups based on survey and third party data; and/or to market such third party's products/services to you.
Retargeting. Cartrast may from time-to-time engage a third party or third parties to either display advertising on a Cartrast website(s) or to manage Cartrast's advertising on other websites (for example on social media sites). Cartrast's third party partner(s) may use technologies such as cookies or identifying data elements. Including but not limited to your IDFA or Advertising ID to gather information about your activities on Cartrast's website(s) and/or on other websites in order to: (i) provide you with advertising about Cartrast and its services and/or (ii) assist Cartrast in developing marketing and advertising campaigns designed to target individuals who have a social and demographic profile similar to your social and demographic profile. If Cartrast is conducting a re-targeting program and you wish to not participate in this re-targeting program, please opt-out via the applicable cookie opt-out process set forth in this Privacy Policy or in Cartrast's separate cookie notice, by modifying your IDFA or Advertising ID and/or by unsubscribing within the advertisement itself.
Audience Insights/Look-alikes. Cartrast and/or third parties may use Personal Data and/or may link Personal Data to a third-party cookie to develop audience insights and/or look-alike models in connection with marketing campaigns.
Online Advertising Effectiveness. In connection with Cartrast's online ad effectiveness program, you can participate in surveys regarding ads, promotions, content, campaigns, and/or websites that Cartrast is testing for its clients. To facilitate the completion of these surveys, Cartrast's clients may write, set, or read cookies, locally shared/stored objects, flash cookies and/or any other related technology (each a "Third Party Technology" and collectively the "Third Party Technologies"). The Third Party Technologies may be written, set or read in various locations, including, without limitation, Cartrast's servers or systems. If you participate, your UID will be stored in or associated with the Third Party Technology to allow you to be re-contacted about the online ad or promotion and Cartrast's client will use the Third Party Technology to determine whether you have seen, clicked on, or otherwise interacted with the online ad or promotion. If you have interacted with the online ad or promotion, Cartrast's client will send your UID and the specific survey to Cartrast and Cartrast will provide you with the opportunity to complete the survey.
Audience Measurement Data. In addition to the use and sharing of Audience Measurement Data (as defined below) in connection with online advertising effectiveness research, as such research is described above, Cartrast may share your UID and data previously collected by Cartrast, including, without limitation, age, gender, income, number of people in your household, education/education level, and employment status, ("Audience Measurement Data"), to third parties, including, without limitation, Cartrast's subcontractors, partners, and/or clients for the purpose of audience measurement reporting on the content, advertisements, campaigns, and websites that you visit, view, and/or click on. The Audience Measurement Data will be used in connection with online advertising effectiveness research, and to assist in the creation, development, and implementation of websites, online advertisements, and other Internet and digital media features, functionality, and campaigns. Audience Measurement Data may be shared in a single summary form (i.e. individual respondent level) or aggregate summary form (i.e. group of respondents).
How do advertisers/ad networks use my information?
Ad partners' use of information.
You can use the Application/Services to participate in surveys, including, without limitation, surveys regarding specific ads and promotions that Cartrast is testing for its business clients. You may see these ads or promotions in several places, including, without limitation, in non-Cartrast mobile apps (for example, in a gaming app), after which Cartrast shall provide you with access to, or contact you to complete, a survey about the ad or promotion that you were exposed to. To facilitate the completion of surveys on ads or promotions, Cartrast has partnered with ad companies that provide, measure or facilitate advertisements, including, without limitation, in many other mobile apps. The Application/Services provides these ad networks with the UID, your unique device identifier, and many or all of the other types of information described in the "Information collected through automated means" section above (including your ongoing geolocation, if your device permits the collection of geolocation). Then, when you use a mobile app that has partnered with one of the ad companies, the ad company can use your unique device identifier or other automatically collected information to recognize your device. The ad company may then show you an ad or promotion that Cartrast is testing for one of our business clients. The ad company may then inform Cartrast that the device associated with your UID has just received an ad or promotion, which allows Cartrast to provide you with access to, or to contact you to complete, a survey regarding the ad or promotion. With your consent, the ad companies also use the information they collect about your device and your interactions with the Application/Services and other mobile apps to provide you with other in-app advertising that has been tailored to your interests and for other purposes.
What communications will I receive through the Application/Services or relating to the Services?
Cartrast may contact you to participate in surveys via "push" notifications or SMS/text messages if you expressly agree to receive such communications.
In addition, Cartrast and/or its agents or vendors on behalf of Cartrast will send email communications to you regarding survey invitations, survey participation, reward or incentive information, inquiries and redemption, newsletters, notices required to be provided hereunder or by law, sweepstakes or promotion entries, notice of winning a sweepstakes or promotion, and in response to inquiries from you.
Where you provide Cartrast with your telephone number(s), Cartrast, its clients and/or its Subcontractors may also contact you by telephone in relation to your account, including, without limitation: (i) surveys you have or are participating in; (ii) reward or incentive information, inquiries and redemption; (iii) sweepstakes or promotion entries and prize fulfillment; (iv) responding to your queries; (v) notices under this Privacy Policy; (vi) additional survey invitations and/or opportunities; and/or (vii) to validate profile information you have provided to us.
Does Cartrast share personal data and other information collected through the Application/Services with third parties?
Pursuant to applicable law, Cartrast may disclose or transfer personal data and other information collected through the Application/Services to third parties as follows:
(i) With your consent;
(ii) In response to a subpoena or an order of a court or government agency;
(iii) To establish, exercise, or defend legal claims of an individual or Cartrast, including in order to protect the safety of an individual or to protect Cartrast's rights and/or property;
(iv) Between various Cartrast experiences, if you sign up for more than one Cartrast experience;
(v) To a parent, subsidiary, or affiliate of Cartrast: (1) in the event of a reorganization or restructuring; or (2) for use and processing in accordance with this Policy or as authorized by you;
(vi) To authorized agents and/or subcontractors of Cartrast and/or of Cartrast's clients, who are providing services, including, without limitation, data append services, data validation services, fraud detection and/or prevention services, database matching services, coding services, and reward, incentive, and sweepstakes related services. In connection with the sharing of personal data and other information with subcontractors as set forth in (vi) above, such subcontractors may use such data to improve or enhance their services, in which event they are acting as data controllers or data owners and not as subcontractors engaged by Cartrast. For a list of the subcontractors acting as data controllers or data owners of your data and their privacy policies, please click here.
(vii) To a client for limited market research related uses including, without limitation, modeling, validation, data append, database segmentation, and reward, incentive, or sweepstakes redemption, fulfillment, and/or entry;
(viii) In connection with a change of ownership or control, including, without limitation, a merger or an acquisition of any or all of Cartrast's business assets, provided that the party receiving or acquiring the personal data agrees to use, protect, and maintain the security, integrity, and confidentiality of personal data in accordance with this Policy;
(ix) to a client or to such client's customer in the event Cartrast or a third party believes that you have or may violate the intellectual property rights of a third party;
(x) to a client or to such client's customer in the event Cartrast or a third party believes that you have violated the Terms of Service;
(xi) to a third party, which shall include both Cartrast research clients and third parties that engage in Non-Research Activities to enable such third party to develop marketing campaigns, audience insights, look-alike models and/or to market such third party's products/services to you; and
(xii) As otherwise permitted pursuant to this Policy.
In addition to the foregoing, if you enroll through a third party with whom Cartrast has a contractual relationship and/or from an email sent from a third party company proposing you to join our Application/Services (collectively "Program Partner"), Cartrast may share select enrollment information with the Program Partner who invited you into the program, which can include your full name, post or zip code, and your email address. You acknowledge that our Program Partner may collect, use, and disclose that information in accordance with their privacy policy. Please note that Cartrast will not be responsible for and will not be liable for our Program Partner's actions concerning your information or for any Program Partner's privacy practices when you are dealing directly with them.
Please note, Cartrast may allow a client to collect PII directly from respondents. The disclosure is voluntary and, prior to collection, the client is required to enter into a written agreement with Cartrast, which, among other things, limits use of the PII.
Cartrast may license certain PII to third parties (e.g., data brokers, data aggregators, etc.) for their own Non-Research Purposes, including, without limitation, the licensing of individual-level and/or aggregated-level data (e.g., product and/or service purchasing or usage activity, social media activity, website visitation data, internet search history, etc.) for the development of audience insights and/or look-alike models, for the purpose of sale of such data to the third party's clients/customers for the purpose of performing analytics and providing marketing intelligence and/or to enable such third party to market its products/services to you.
Additionally, UIDs and information collected by automated means are provided to third parties, including, without limitation, clients, partners, agents and/or vendor for the purposes of identifying respondents for re-contact surveys or communications, fraud detection and/or prevention, database matching, data validation, data append, coding, data segmentation, and reward, incentive, and/or sweepstakes or promotion related services.
In connection with your survey data, Cartrast or the client may associate certain demographic attributes to you. Cartrast may share with third parties, including but not limited to clients, the geographic and/or demographic data Cartrast collects from you during registration or through certain profile questions Cartrast may ask you. Such data may be shared with third parties on an individual respondent level or aggregate summary form (i.e. a group of respondents). If you voluntarily disclose personal data in connection with your survey data and responses, and Cartrast collects the survey data and responses, Cartrast will transfer the survey data and responses, UID and the voluntarily disclosed personal data to the relevant Cartrast client.
How can I opt-out of certain data collection and/or use?
There are multiple opt-out options for users of this Application/Services.
You can stop all collection of personal data and other information by the Application/Services by uninstalling the Application/Services and/or terminating your participation in the experience(s) and survey(s). You may use the standard uninstall processes available as part of your mobile device or via the mobile application marketplace or network and/or you may cancel your account on the Web Site. Please note that if you delete the Application/Services, but maintain a profile with one of Cartrast's websites, we may still collect personal data and other data from you through our site(s). Uninstalling the Application/Services will not delete all information collected by Cartrast prior to uninstalling the Application/Services. To delete all information collected by Cartrast please contact Cartrast as set forth below.
Six months following termination of your account, inactivity of your account and/or the date upon which you uninstall the Application/Services, Cartrast may transfer your PII to a third party data broker and/or data management platform for purposes of resale/reuse by such third party. If you do not wish for your PII to be used for Non-Research Activities and/or if you do not consent to Cartrast sharing your PII with third parties after termination of your account and/or removal of the Application/Services from your device, please contact us at support@cartrast.com.
For iOS Opt-out of location data
You may, at any time, opt-out from enabling the Application/Services to access your location data by:
Touching or selecting the settings icon for the device;
Once in the settings icon, touch or select Location Services; and
Once in Location Services, you can use the individual slider for the Application/Services, to turn off location services.
Note: If you turn off Location Services, you will be prompted to turn on Location Services the next time the Application/Services tries to use this feature.
For Android Opt-out of location data
You may, at any time, opt-out from enabling the Application/Services to access your location data by:
Touching the ABOUT button on the top right of the navigation bar
Once in the ABOUT dialog, you can toggle on/off Location Services via a switch labeled: "Access to my location"
For iOS Opt-out of push notifications
You may opt-out of push notifications for the Application/Services by:
Touching or selecting the settings icon for the device;
Once in the settings icon, touch or select notifications;
If push notifications are turned on, there will be a list of icons, touch or select the icon for the Application/Services; and
From this screen, you will be able to modify the push notification settings for the Application/Services.
For Android Opt-out of push notifications
You may opt-out of push notifications for the Application/Services by:
Access the Settings for the device.
From within Settings, locate the Apps setting.
Once in Apps, locate the relevant application (QuickThoughts or iPoll), and select it.
Locate a checkbox labeled "Show notifications" and toggle it based on your preference.
Opt-out of email communications
You may opt-out of email communications by clicking the unsubscribe link in any email you receive from us or contacting us as set forth below.
Opt-out of sharing social media platform profile data
You may opt-out of sharing social media platform profile data by changing your preference/profile settings with the social media platform regarding the sharing of data with third parties or removing the Application/Services from your social media profile.
Opt-out of use of the advertising identifier assigned to your smartphone/device
You may change the advertising identifier assigned to your device at any time.
Ad network opt-out
The ad networks that collect information through the Application/Services for use in facilitating surveys and providing interest-based advertising offer certain opt-out mechanisms. To opt-out, follow the instructions for each ad network at the links provided below. If you opt-out, you will not be able to participate in our surveys about ads and promotions.
Admob by Google https://www.google.com/ads/preferences/html/mobile-about.html
Flurry https://policies.oath.com/us/en/oath/privacy/controls/index.html
InMobi https://www.inmobi.com/inmobi-privacy-policy/opt-out/
Millennial Media https://policies.oath.com/us/en/oath/privacy/controls/index.html
Can I stop Cartrast from tracking my online activities?
Do Not Track ("DNT") is a preference in your browser that you can set to notify websites that you visit that you do not want the websites to collect certain information about you. Cartrast does not respond to DNT signals. If you object to Cartrast's practice with regards to DNT signals, you may opt-out from participation or use of Cartrast's services as described below.
In connection with Cartrast's online ad effectiveness program, Cartrast permits Cartrast's subcontractors, partners and/or clients to drop, set, and/or write Third Party Technologies for the purpose of facilitating audience measurement and ad recall survey activities. Cartrast is not responsible for any third party's compliance with or response to DNT signals. To learn more about Cartrast's online ad effectiveness program, please review the Cookies section of this Privacy Policy.
How long do you keep my personal data and other information?
Cartrast will retain personal data and other information relating to your use of the Application/Services and/or the Services for as long as you have the Application installed and/or use the Application/Services and for up to five (5) years thereafter or such other period as may be required or permissible by law. One year following your inactivity with the Sites and/or uninstalling the Application/Services, Cartrast may transfer your PII to a third party data broker and/or data management platform for purposes of resale/reuse by such third party.
How can I access the personal data and other information the Application/Services has collected about me?
You have the right to review, correct, and delete your personal data, subject to applicable law. You may contact us with such a request using the contact details provided below.
Does the Application/Services collect data from minors under thirteen (13) years of age?
The Application/Services is not designed for, or intended for use by, any individual under the age of thirteen (13). We do not knowingly collect personal data from children under the age of thirteen (13), and if we become aware that we have inadvertently collected personal data from a child under the age of thirteen (13), we will undertake reasonable commercial efforts to delete such personal data.
What security is available for the personal data and other information collected through the Application/Services?
Cartrast maintains an appropriate level of technical, administrative, and physical safeguards to protect personal data and other information disclosed or collected by Cartrast. Cartrast reviews, monitors, and evaluates its privacy practices and protection systems on a regular basis. Despite the safeguards we implement, transmissions over the Internet and/or a mobile network are not totally secure and Cartrast does not guarantee the security of online transmissions. Cartrast is not responsible for any errors by individuals in submitting personal data to Cartrast.
FOR CALIFORNIA RESIDENTS:
Your Rights Under the California Consumer Protection Act of 2018 (“CCPA”)
Pursuant to the California Consumer Protection Act of 2018 (“CCPA”), and subject to certain exceptions and limitations, Californians can contact Cartrast to exercise the rights described below with respect to certain personal information that Cartrast holds about them. To the extent those rights apply to you, they are described below. Cartrast also handles certain personal information on behalf of Cartrast customers. You should contact those customers to exercise any rights you may have with respect to that personal information.
Right to Know About Personal Information Collected, Disclosed, or Sold
You have the right to request that we provide you with details about the personal information we collect, use, disclose and sell. You can submit a verifiable consumer request by clicking here. You can also submit your request via our toll-free number 669-222-9588. Cartrast reserves the right to verify your identity to our satisfaction, including by asking you to provide your driver’s license number if you have one.
You are entitled to receive the following:
The categories of your personal information that Cartrast has collected in the preceding 12 months
The categories of sources from which that information was collected
The business/commercial purpose for the collection or selling
The categories of third parties with whom Cartrast shares personal information
The specific pieces of personal information Cartrast has collected about you (subject to some exceptions)
Because Cartrast has disclosed or sold (as those words are defined in the CCPA) personal information to third parties in the last 12 months, you are also entitled to receive:
The categories of personal information that Cartrast has disclosed or sold in the past 12 months
Right to Request Deletion of Personal Information
You have the right to request deletion of the personal information we have collected about you (subject to some exceptions). You can submit your request as described above, and we reserve the right to conduct the verification described above.
Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights
You have the right not to receive unlawful discriminatory treatment by Cartrast for the exercise of your privacy rights under the CCPA.
Right to Opt-Out of Sale of Personal Information
You have the right to opt-out of the sale of your personal information by Cartrast. You can submit a verifiable consumer request by clicking here or by calling 669-222-9588. You may also request to opt-out by sending an email to support@cartrast.com.
List of Categories of Personal Information to be Collected and May Have Been Sold or Disclosed
Categories of Personal Information Collected
Cartrast collects personal information from research participants during and after registration for an Experience, including, without limitation, during participation in a survey and in connection with the receipt and redemption of rewards and incentives and/or during the Application/Services registration and download process.
The categories of personal information we may collect include:
“Identifiers” such as
Name
Address(es)
Telephone number(s) (including home, cell, and/or business telephone numbers)
Email address(es)
Date of birth
Internet Protocol address
Unique device identification number (such as identifiers for analytics or advertising)
Network provider user ID (a number uniquely allocated to you by your network provider)
Media Access Control (MAC) address
International Mobile Equipment Identity
Unique cookie identifiers
Internet or other electronic network activity information, and other information collected through automated means (more detail can be found here), such as:
Information about your device (e.g., device operating system, the other applications on your device, device network provider, device type, time zone, network status, browser type, browser identifier and other information that alone or in combination may be used to uniquely identify your device)
Geolocation
Cookies and similar technology
Social media information
Log files
Digital fingerprinting
Watermarking
Browsing activity
Other behavioral information
Professional or employment-related information, including occupation
Education information
Additional content/material you submit, including photos, videos and/or similar content
Characteristics of potentially protected classifications under California, federal or international law (e.g., health and medical conditions, sexual orientation or sexual life, political opinions/views, race/ethnic origin, gender, religious and philosophical beliefs and trade-union membership)
Other medical information
Demographic information
All of the information above was collected for the purposes described here. In CCPA terms, these purposes, which are described further in that section of our Privacy Policy, include but are not limited to the following examples:
Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with the CCPA and other standards;
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
Debugging to identify and repair errors that impair existing intended functionality;
Short-term, transient uses;
Performing or using services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing or using advertising or marketing services, providing or using analytic services, or providing or using similar services;
Undertaking internal research for technological development and demonstration;
Undertaking activities to verify or maintain the quality or safety of services and devices, and to improve, upgrade, or enhance services and devices; and
Facilitating the operational purposes of Cartrast or our service providers.
Categories of Personal Information that May Have Been Sold
Cartrast sold all of the above categories of personal information in the last 12 months.
Categories of Personal Information that Were Disclosed
Cartrast disclosed all of the above categories of personal information in the last 12 months.
Who can I contact with questions about this Policy?
If you wish to:
- receive a copy of the information we hold about you;
- communicate an opt-out request to Cartrast;
- request access to, or the correction, blocking or deletion of, your personal data;
- make a complaint about our privacy practice;
- opt out of certain uses of your PII;
- or have any questions regarding Cartrast's privacy practices and/or this Policy, please contact us via email at support@cartrast.com.
Cartrast's Legal Department is responsible for Cartrast's compliance with this Policy.
Are there any companies within Cartrast that may collect, store and process PII?
No.