Privacy Policy

INTRODUCTION

This Privacy Policy explains how Everbook Inc. (“Everbook,” “we,” “us,” “our,” or the “Website”) collects, uses, and discloses your personal data when you use our services or interact with our advertising technology on third-party websites. Please read this Policy carefully to understand our practices regarding your personal data and how we will handle it. Everbook Inc. is based in Ontario, Canada. If you have any questions or concerns about this Policy, or wish to contact our Data Protection Officer, please reach out to us at support@everbook.com.

1. Data we collect about you

Personal data (or personal information) is any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store, and transfer different kinds of personal data:

1. Information you provide to us
   You may give us information about yourself by completing forms on our Website, emailing us, speaking with us by phone, or communicating in other ways. This can happen when you register an account, place an order, subscribe to newsletters, participate in discussions or social media, enter promotions, or notify us of an issue. This information may include your name, billing address, delivery address, email address, phone number, age, date of birth, gender, photograph, username, password, and other registration details, as well as details about the book recipient (such as their name, age, date of birth, gender, and address). We may use each piece of data by itself or combine it with other information you have provided.
2. Information we collect about you and your device
   Each time you visit our Website, we may collect information automatically, such as:
   a. Technical Information including your IP address, browser type and version, time zone setting, operating system, and platform.
   b. Usage Information about how you arrived at, interacted with, and left our Website (including the date and time). This can include what products you viewed, purchased, or searched for; page response times; download errors; time spent on certain pages; how you interact with pages (e.g., scrolling, clicks, mouse-overs); and methods used to navigate away from pages. We may also note any phone number used to contact our customer service.
3. Information we collect about you via advertising
   From time to time, we may place ads on third-party sites (for example, YouTube). When you view or interact with these ads, we and our partners may use technologies such as cookies to collect information about you, including anonymized IDs for attribution and advertising. We use these tools to better understand our customers and how effective our ads are. This may include retargeting efforts to show you content that is most relevant to you.
4. Information we receive from other sources
   We may receive information about you if you use any other websites or services we offer. We also work closely with third parties (e.g., business partners, payment and delivery providers, advertising networks, analytics services, credit reference agencies) and may receive information about you from them.
5. Location Information
   We may collect information about your location, for example the IP address of the device you use to access our Website.
6. Marketing and Communications Data
   This includes your preferences for receiving marketing from us and your communication preferences.
7. Financial Information
   We do not collect or store your financial information (e.g., credit card details). Payments are processed by third-party payment processors.

2. How we collect your personal data

1. Direct interactions
   You may provide us with personal data (e.g., Identity, Contact, Technical) by filling out forms or corresponding with us by post, phone, email, or otherwise. This includes when you:
   • Request our products or services
   • Create an account on our Website or use the live chat function
   • Subscribe to our newsletters or updates
   • Request marketing to be sent to you
   • Call us and leave a message or request a call back
   • Enter a competition, promotion, or survey
   • Interact with us via social media channels (e.g., Facebook, Twitter, Instagram)
   • Provide feedback
2. Automated technologies or interactions
   As you use our Website, we may automatically collect Technical Data about your device, browsing activities, and usage patterns using cookies, server logs, and similar technologies. We may also collect Technical Data if you visit other websites that use our cookies. For more details, see our Cookie Policy below.
3. Third parties or publicly available sources
   We may receive personal data about you from various third parties and public sources, including:
   • Analytics providers (e.g., Google)
   • Advertising networks
   • Search information providers
   • Providers of technical, payment, and delivery services
   • Publicly available sources (e.g., social media, open databases)

3. How we use your personal data

We use your data for the following purposes and under the following legal bases (under applicable data protection regulations, which may include GDPR if you are in the EU or equivalent Canadian regulations like PIPEDA):

1. To provide and deliver our products and related services
   Legal Basis: Performance of a contract with you
2. To enable you to use interactive features on our Website
   Legal Basis: Legitimate Interest (for you to interact with our Website) or Consent (e.g., certain cookies)
3. To conduct promotions
   Legal Basis: Consent (when you sign up)
4. To contact you about products and services you have requested
   Legal Basis: Performance of a contract (to fulfill your order or request)
5. To notify you about changes to our Website, products, and services
   Legal Basis: Legitimate Interest (to keep customers informed of changes)
6. To ensure content is displayed effectively on your device
   Legal Basis: Legitimate Interest (to understand how customers use our services and improve them)
7. To administer our Website and conduct internal operations (e.g., troubleshooting, data analysis, testing)
   Legal Basis: Legitimate Interest (for business operations, IT security, fraud prevention, or business reorganization)
8. To advertise to you and measure the effectiveness of our advertising
   Legal Basis: Consent
9. To use data analytics to improve our Website, products, services, marketing, and customer relationships
   Legal Basis: Legitimate Interest (to grow our business and refine marketing strategies)
10. To remind or inform you about our products or services
    Legal Basis: Consent
11. To communicate with you by email, SMS, push notifications, and post
    Legal Basis: Legitimate Interest (to grow and improve our services), or Performance of a contract (e.g., to deliver products)

4. Marketing & Opting Out

If you have given consent, we may share your email address with third parties for marketing purposes. We require all third parties to keep your personal data secure and to use it only in accordance with our instructions.

You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link at the bottom of our emails. You can also change or update your marketing preferences in your account settings.

To stop receiving push notifications, you can disable them in your browser or device settings.

5. Where your data is stored

We store your personal data on secure servers. Depending on the services or products you request, your data may be transferred outside of Canada (e.g., to the United States or the European Economic Area). We will only transfer your personal data across borders where permitted by applicable laws and safeguards (such as standard contractual clauses) are in place to protect your information.

6. Data Retention

We retain your personal data for as long as necessary to provide the services or products you have requested, or to fulfill the purposes outlined in this Policy. Factors we consider when determining retention periods include:

• The amount, nature, and sensitivity of the data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process your data and whether those purposes can be achieved by other means
• Legal and regulatory requirements (e.g., we may keep certain data for 7 years to comply with record-keeping obligations)

We may anonymize your personal data (so it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice.

7. Data Security

We have implemented appropriate security measures to protect your personal data from accidental loss, unauthorized access, use, alteration, or disclosure. Access to personal data is limited to employees, agents, contractors, and third-party service providers who have a legitimate need to know. They process your data only on our instructions and are subject to confidentiality obligations.

We have procedures in place to deal with suspected personal data breaches and will notify you and any relevant regulator where legally required.

8. Your Legal Rights

Depending on your jurisdiction, you may have certain rights under data protection law (e.g., GDPR if you are in the EU). These rights may include:

1. Request access to your personal data.
2. Request correction of any inaccurate or incomplete data.
3. Request erasure of your personal data in certain circumstances.
4. Object to processing of your personal data where it affects your fundamental rights and freedoms.
5. Request restriction of processing in certain scenarios (e.g., verifying data accuracy, pending objection decisions).
6. Request transfer of your personal data in a structured, machine-readable format to you or a third party.
7. Withdraw consent at any time where we rely on consent to process your data.

You generally will not have to pay a fee to exercise these rights. However, a reasonable fee may be charged if a request is unfounded, repetitive, or excessive. We may request specific information to verify your identity before processing a request.

If you have questions about your rights or wish to exercise them, please contact us at support@everbook.com.

9. Cookies

Our Website uses cookies to distinguish you from other users and to improve your browsing experience. By continuing to browse our site, you consent to our use of cookies. Cookies are small text files stored on your device; they can collect information such as browser details and user preferences.

Third parties (such as advertising networks or analytics providers) may also use cookies, which we cannot control. Most browsers allow you to manage or block cookies, but doing so may affect your ability to access some parts of our Website.

10. Changes to this Privacy Policy

We may update this Policy from time to time. If we make changes, we will notify you by posting the revised version here with a new “last updated” date, and in some cases, we may notify you by email. Your continued use of our services after such changes indicates your acceptance of the updated Policy.

11. Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy, or wish to exercise any of your rights, please contact us at support@everbook.com.