REGIONAL ADDENDA
Your rights, by region.
These addenda supplement the main privacy policy with the rights and notices specific to your jurisdiction. Where an addendum conflicts with the main policy, the addendum controls for residents of that region.
European Economic Area & United Kingdom (GDPR / UK GDPR)
- You have the rights of access, rectification, erasure, restriction, portability, and objection.
- Legal bases: performance of contract, legitimate interests, consent, and legal obligation — as mapped in the main policy.
- International transfers rely on Standard Contractual Clauses and the EU-U.S. Data Privacy Framework where applicable.
- You may lodge a complaint with your local supervisory authority. An EU Article 27 representative will be named before EEA go-to-market.
California (CCPA / CPRA)
- Rights to know, delete, correct, and to opt out of "sale"/"sharing" of personal information.
- Dropinly does not sell your personal information and does not share it for cross-context behavioral advertising.
- We will not discriminate against you for exercising any of these rights.
- Submit requests via account deletion or [email protected].
Brazil (LGPD)
- Rights to confirmation, access, correction, anonymization, portability, and deletion of personal data.
- Processing is grounded in the legal bases of Art. 7 LGPD, primarily contract execution and consent.
- A data protection officer (encarregado) contact will be designated before Brazil go-to-market.
Canada (PIPEDA)
- We collect, use, and disclose personal information only for purposes a reasonable person would consider appropriate.
- You may request access to and correction of your information, and withdraw consent subject to legal/contractual limits.
Sweden / Nordics
- Dropinly is operated from Sweden; EEA GDPR rights above apply in full.
- Accounting records are retained for 7 years to satisfy the Swedish Bookkeeping Act (Bokföringslagen); these are pseudonymized after account deletion.