Privacy Policy

This Privacy Policy describes how Organised (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from organised.co (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

• Basic contact details including your name, address, phone number, email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
• Account information including your username, password, security questions.
• Shopping information including the items you view, put in your cart or add to your wishlist.
• Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Information We Collect through Cookies

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

• Companies who support our Site and Services, such as Shopify.
• Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.

When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third Party Websites and Links.

How We Use Your Personal Information

Providing Products and Services

We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and to enable you to post reviews.

Marketing and Advertising

We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites.

WhatsApp Communications

Where you have explicitly opted in, we may use your phone number to communicate with you via WhatsApp. These communications may include customer support responses, service-related messages (such as order updates), and, where permitted by law, marketing or promotional messages.

We will only send you WhatsApp messages if you have actively provided your phone number and clearly consented to receive WhatsApp communications from us (for example, by selecting a checkbox, submitting a form, or initiating a WhatsApp conversation with us).

You may withdraw your consent at any time by replying "STOP" within WhatsApp or by contacting us at hello@organised.co. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

Security and Fraud Prevention

We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.

Communicating with You

We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.

The Organised app

This section explains what the Organised app for iPhone, iPad and Android collects, on top of what the rest of this policy says about our Services.

What the app collects

When you sign in, the app uses your Organised account. That means your name, email address, delivery address, phone number if you gave one, your customer number and your orders. It uses them to show and manage your Organised plan, your orders and your bookings.

When you buy in the app, Shopify's checkout and, for supper club places, Stripe's payment sheet collect your payment details. They process them for us as our service providers. We never see or store your full card number.

When you message us from the app, we receive your message, your app version, your phone's platform and the state of your plan, so we can answer you.

Your location

The app asks for your location the first time you tap to see what is near you. It uses an approximate location, rounded to about 1 kilometre. Once you have allowed it, the app also reads it when it opens, so the farms near you are there without a tap. To list the farms near you, that location stays on your phone. The app also shows a map of your area. To draw it, the app loads the map's pictures for that area from Mapbox, our map provider, as Today opens once you have allowed location, with no tap, and asks our server for the farms in that area, so both learn roughly which area the map shows. The app turns off Mapbox's optional collection of how you use the map and roughly where you are, which Mapbox uses to improve its own maps, and it stays off unless you turn it on from the map's information button. To show supper clubs near you, the app sends your approximate location to our server with that request. We use it to answer the request and do not store it. If you ask us to tell you when a supper club opens near you, we keep that approximate location with your email address so we can email you when one does. Your location never goes to our analytics or to advertising tools. You can say no, or turn location off in your phone's settings, and search for a place instead.

Analytics and error reports

The app counts how it is used and reports the errors it hits, so we can make it better. It sends these to PostHog, our analytics provider, which processes them for us. They include your phone's make, model and system version and an identifier for this install of the app, and when you are signed in they are linked to your account by your customer number, email address and first name. They never include your location. You can turn them off at any time with the Analytics switch in Settings.

What the app does not do

The app does not track you across other companies' apps or websites, contains no advertising tools, and orders placed in the app are never sent to advertising partners.

Notifications

If you allow notifications, the app sends our server a notification token for your phone, linked to your account, so we can tell you about your deliveries, your plan and your bookings. To deliver them, the app shares your phone's notification address and an identifier for this install of the app with Expo, our push delivery service, which processes them for us. They are used only for those messages, never for advertising or tracking. Your morning reminder is set on the phone and sends nothing to us. You can turn notifications off in your phone's settings at any time.

Data kept on your phone

The app keeps your sign in securely in your phone's Keychain or Keystore, and keeps a copy of your plan and orders on the phone so it can show them when you are offline. Signing out removes them.

Deleting your account

You can delete your account in the app, on You beside Settings, or on our website at organised.co/account/delete. We delete your account, with the name and contact details on it, straight away, and ask Shopify, which handles our orders, to erase your details there. Your past orders and supper club bookings stay on record without your name.

Tests

We sometimes show different members different versions of the app or of our invitations to it, chosen at random, to learn what works best. This never changes the notices we must send you or your right to cancel.

Cookies

Like many websites, we use Cookies on our Site. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and service providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites. These include Shopify, Meta, Reddit, Spotify and Magellan AI, as set out under Advertising and Measurement Partners below.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

Advertising and Measurement Partners

Our advertising and measurement partners include Shopify, Meta, Reddit, Spotify and Magellan AI. This section explains what each of them receives from us, the cookies involved, and how your choices apply.

Shopify

Our shop runs on Shopify. Shopify hosts our checkout and the page where you sign in to your account, receives the contact, delivery and payment details you enter there, and keeps the records of your orders and account for us.

As you browse our Site, we also send Shopify the pages you view and the products you add to your basket, with information about your browser and device, so that Shopify can count visits to our shop and connect a visit to the checkout that follows. This uses Shopify's own cookies, such as _shopify_y, _shopify_s, _shopify_analytics and _shopify_marketing, which are set on our Site whatever you choose on our cookie banner. Each of these events tells Shopify the analytics and advertising consent state that our banner and Shopify's privacy settings hold for you, and we pass the choice you make on the banner to those settings.

When you go to checkout, we add details to your basket, and Shopify keeps them with your order. They include the Meta and Reddit cookies and ad references described below, the customer or visitor ID we give you and the page you landed on.

Meta

We advertise on Facebook and Instagram, which are run by Meta Platforms. To show our ads to people who may like them and to measure whether our ads work, we use the Meta Pixel on our Site, and we send information to Meta from our own servers through Meta's Conversions API.

The information we share with Meta can include the pages you visit on our Site, the products you view or add to your basket, when you sign up to our emails, create an account or contact us, the checkout steps you reach and the orders you place with their value, together with identifiers that let Meta recognise the same browser or person. These identifiers include the Meta cookies in your browser (_fbp, and _fbc, which records a Meta ad you clicked, each lasting up to 90 days from when it was last set), your IP address and browser details, a customer or visitor ID we give you, and a hashed copy of details such as your email address, phone number, name and address. Meta uses this information to show you our ads, to tell us whether an ad led to a visit or a purchase, and to improve how our ads are delivered.

Contact details that our servers send to Meta are hashed with SHA-256 before they leave them, and we give the Meta Pixel on our Site your email address and name only as hashes made in your browser. A hash is a fixed code made from a detail, from which the detail itself cannot be read back. It is still personal information, because Meta can match it to an account that uses the same detail, and that match is its purpose. Your IP address, browser details and the Meta cookies are sent as they are, because Meta asks for them that way. The ID we give you reaches the Meta Pixel on our Site and Meta's Signals Gateway, described next, as it is.

The Meta Pixel's events also pass through Meta's Signals Gateway, a service Meta runs for us at routing.organised.co, which forwards them to Meta. On our checkout pages, which Shopify runs, a Meta tag sends the checkout steps you reach to the same gateway, with the Meta cookies, the ID we give you (or, where your basket carries none, the visitor ID Shopify gives your browser) and the contact, delivery and billing details you enter there. The tag gives the gateway all of these as they are, without hashing them.

When you pay for an order, and each time a subscription renews, our servers send Meta the order's reference, value and currency and how many items it contains, with the identifiers described above, including a hashed copy of the email address, phone number, name and address on the order. For an order you place, they also tell Meta whether you are a new or returning customer and whether the order starts a subscription. We do this for orders placed through our Site or Shopify's Shop app whatever you chose on our cookie banner, so that Meta can tell us which of our ads led to sales. An order can also carry the page you landed on and the ID of the Meta ad our Site records, but only if the rules under Your Choices About Advertising below allowed the Meta Pixel to run when you went from our Site to checkout. The _fbc cookie, if your browser has one, goes with every paid order. When an order carries no _fbc but those rules allowed the Meta Pixel to run when you went from our Site to checkout, our servers send Meta the Meta ad click your basket recorded or, if it recorded none, the latest _fbc we keep for your account. We take that copy from your browser when you are signed in to your account and those rules allow the Meta Pixel, or from the basket of an order you placed while they allowed it, keep it for up to 90 days from the click it records, and delete it when you choose Decline while signed in or delete your account. After a Decline we keep only a note of when you chose it, for up to 90 days, so no Meta ad click recorded before it is kept again.

Reddit

We also advertise on Reddit. To show our ads to people who may like them and to measure whether our ads work, we use the Reddit Pixel on our Site, and our servers send Reddit a copy of each of the Pixel's events through Reddit's Conversions API. Each copy shares a reference with its Pixel event, so Reddit counts the pair once.

The information we share with Reddit can include the pages you visit on our Site, the products you view, save or add to your basket, when you start checkout, sign up to our emails or create an account, and the orders you place with their value, currency and products. The Reddit Pixel reads the address of the page you are on for itself. The copies our servers send name only our Site, not the page you are on.

These come with identifiers that let Reddit recognise the same browser or person. They include the Reddit cookie the Pixel sets in your browser (_rdt_uuid), the reference in a Reddit ad link you followed, which our Site keeps in its own cookie (og_rdt_cid) for up to 28 days, your IP address, your browser details and screen size, and a hashed copy of your email address where we know it and of the customer or visitor ID we give you. Like any content your browser loads from Reddit, the Reddit Pixel also gives Reddit your IP address and browser details directly. For an order we also send a hashed copy of the phone number on it. The Reddit Pixel itself is not given your email address, phone number or the ID we give you. They reach Reddit only from our servers, hashed with SHA-256 before they leave them. Reddit uses this information to show you our ads, to tell us whether an ad led to a visit or a purchase, and to improve how our ads are delivered.

When you pay for an order, our servers tell Reddit about it, with its value, currency, products and the identifiers described above, but only if the rules under Your Choices About Advertising below allowed the Reddit Pixel to run when you went from our Site to checkout. Reddit receives no subscription renewals.

While you are on our checkout pages, our own code there tells our servers when you submit your contact details, your delivery address, your delivery method and your payment details, and our servers pass each of these steps on to Reddit. Reddit receives them even if you do not go on to place an order. Each step carries the value, currency and products of your basket and how many items it holds, the Reddit cookie and ad reference our Site added to your basket when you went to checkout, and a hashed copy of your email address, of the contact phone number you gave and of the customer or visitor ID we give you. Those copies are hashed with SHA-256 on the checkout page, before they leave your browser. The steps name only our Site, not the checkout page you are on. Our servers add your browser details and your IP address, both taken from your browser's request to them. We send them only if the rules under Your Choices About Advertising below allowed the Reddit Pixel to run when you went from our Site to checkout, and only while the privacy choices Shopify holds for you allow marketing and the sale or sharing of your personal information.

Spotify

We also advertise on Spotify. To measure whether our ads work and to show our ads to people who may like them, we use the Spotify Pixel on our Site, and our servers send Spotify a copy of some of the Pixel's events through Spotify's Conversions API. Each copy shares a reference with its Pixel event, so Spotify counts the pair once.

The information we share with Spotify can include the pages you visit on our Site, the products you view or add to your basket, when you start checkout, sign up to our emails or create an account, and the orders you place with their value and currency. The Spotify Pixel reports the address of the page you are on and the referring address your browser reports. The copies our servers send name only our Site, not the page you are on.

These come with identifiers that let Spotify recognise the same browser or person. They include the Spotify cookie the Pixel sets in your browser (__spdt), the reference in a Spotify ad link you followed, which the Pixel keeps for your visit, your IP address, and a hashed copy of your email address where we know it. The Spotify Pixel also keeps an ID for your visit, and the events it has not yet sent, in your browser's storage. Like any content your browser loads from Spotify, the Spotify Pixel also gives Spotify your IP address and browser details directly. The Spotify Pixel itself is not given your email address or the ID we give you. Your email address reaches Spotify only from our servers, hashed with SHA-256 before it leaves them. Spotify uses this information to tell us whether an ad led to a visit or a purchase, to show you our ads, and to improve how our ads are delivered.

When you pay for an order, our servers tell Spotify about it, with its value, currency, your IP address and a hashed copy of your email address, but only if the rules under Your Choices About Advertising below allowed the Spotify Pixel to run when you went from our Site to checkout. Spotify receives no subscription renewals, and our checkout pages carry nothing of Spotify's.

Magellan AI

We also advertise on podcasts. To measure whether those ads work, we use the Magellan AI pixel on our Site. Magellan AI is a measurement company that the producers of podcasts we advertise on use to count the visits and orders that follow an episode carrying our ad. It does this mainly by comparing the IP address that comes with a visit or an order with the IP addresses that podcast apps use to download episodes, and it reports the totals to those producers.

The Magellan pixel can tell Magellan the pages you visit on our Site. It reads the address of the page you are on, and the referring address your browser reports, for itself. It is not given your email address, your name or the ID we give you. Like any content your browser loads from Magellan, it also gives Magellan your IP address and browser details, and Magellan keeps a cookie of its own on its domain, mgln.ai, where your browser allows one, so that it can recognise the same browser when you reach our checkout.

While you are on our checkout pages, our own code there tells Magellan when you start checkout and when you place an order. The start of checkout carries the value and currency of your basket and how many items it holds. An order carries its reference, value, currency and products, how many items it holds and, where Shopify knows it, whether you are a new customer. Either can also carry a discount code, but only a code that a podcast reads out to its listeners, and we tell Magellan of no other code. These go to Magellan straight from your browser, with your IP address, your browser details and Magellan's cookie if your browser holds one, but without the address of the checkout page and without your email address, phone number, name, postal address or any ID we give you. We send them only if the rules under Your Choices About Advertising below allowed the Magellan pixel to run when you went from our Site to checkout, and only while the privacy choices Shopify holds for you allow marketing and the sale or sharing of your personal information.

Your Choices About Advertising

If you are in the United Kingdom or the European Economic Area, or we cannot tell where you are, the Meta Pixel, the Reddit Pixel, the Spotify Pixel and the Magellan pixel do not run as you browse our Site, and our servers send Meta, Reddit and Spotify nothing about your visit, apart from the paid orders described under Meta above, until you choose Accept on our cookie banner. What you do before you choose, such as viewing a product or adding it to your basket, is held in the browser tab where you do it, at most until you close or reload that tab, and sent to Meta, Reddit and Spotify if, while it is held, you choose Accept or we learn that you are outside the United Kingdom and the European Economic Area. If you choose Decline in that tab, or close or reload it without choosing, what it holds is discarded unsent. Nothing is held for Magellan, which counts only the page you are on when the Magellan pixel starts and the pages you visit after it. Page views from before the Spotify Pixel starts are not held either. The matching details our Site keeps in your browser (your hashed contact details and a copy of the ID we give you) stay there until you choose. Decline deletes them, and Accept, during that visit or a later one, puts them to use. Elsewhere they run unless you choose Decline.

You can change your choice at any time from Cookie preferences in the footer of our Site. Choosing Decline stops the Meta Pixel, the Reddit Pixel, the Spotify Pixel, the Magellan pixel and the copies our servers send from then on. It also deletes our og_rdt_cid cookie and the matching details our Site keeps in your browser for these partners (your hashed contact details and a copy of the ID we give you); the ID itself still goes with paid orders, as described under Meta above. If you are signed in, it also deletes the copy of your latest _fbc that our servers keep for your account. The Meta, Reddit and Spotify cookies set before you chose (_fbp, _fbc, _rdt_uuid and __spdt), and Magellan's cookie on mgln.ai, stay in your browser until they expire or you delete them in your browser settings. A Decline does not stop what we send Meta about paid orders, described under Meta above, except that an order from a checkout you start after it does not carry the page you landed on or the ID of the Meta ad our Site records, and our servers do not add the Meta ad click your basket recorded or the latest _fbc we keep for your account (an _fbc cookie set before the Decline still goes with it). A checkout you started before a Decline keeps the choice that applied when you started it, for Meta, Reddit, Spotify and Magellan, as described under each of them above. Whether a Decline also stops the Meta tag on our checkout pages depends on Shopify's privacy settings for our shop, described next.

Our cookie banner covers our Site. Our checkout pages are run by Shopify under its own privacy settings for our shop, and we pass the choice you make on our banner to those settings. The Meta tag on our checkout pages does not read your choice itself, and those settings decide whether it runs.

Information Held by Our Partners

Shopify, Meta, Reddit, Spotify and Magellan AI each handle the information they receive under their own privacy policies, which also explain how to exercise your rights with them. You can read Shopify's Privacy Policy, Meta's Privacy Policy, Reddit's Privacy Policy, Spotify's Privacy Policy and Magellan AI's Privacy Policy.

A Decline, or a request to us to delete your personal information, applies from then on. It cannot recall information a partner has already received, and none of Meta, Reddit and Spotify offers us a way to delete the advertising events we have already sent them. We know of no such way for Magellan either.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With advertising and measurement partners, including Shopify, Meta, Reddit, Spotify and Magellan AI, as described under Advertising and Measurement Partners.
• With the farm, chefs and team hosting an event you book, who see details of your booking such as your name, the email address on your account, the places you booked and any dietary note you give, so they can run the event and contact you about it.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

User Generated Content

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

Third Party Websites and Links

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know. You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
• Right to Delete. You may have a right to request that we delete personal information we maintain about you.
• Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Restriction of Processing. You may have the right to ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent. Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
• Appeal. You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
• Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below. We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request.

In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

International Users

Please note that we may transfer, store and process your personal information outside the country you live in, including the United States. Your personal information is also processed by staff and third party service providers and partners in these countries.

If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at hello@organised.co.