Privacy Policy

Effective Date: February 4, 2025

 

To Whom Does this Policy apply?

This Privacy Policy is published by Ceros, Inc. (“us” or “we”) and applies to Ceros’ website: www.ceros.com (the “Website”), our design and content creation, marketing and sales applications, tools and elements (collectively the “Ceros Platform”), and other interactions you may have with us (including as an employee or customer).

 

Acceptance of Terms

By visiting our Website you agree to the terms of this Privacy Policy.

 

International Data Transfers

Ceros may transfer your Personal Data to countries other than the one in which you live. We have the following safeguards in place if Personal Data is transferred from jurisdictions with differing data protection laws:

  • European Commission’s Standard Contractual Clauses. Ceros offers the Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK, where appropriate) for transfers to the United States. Ceros will transfer your Personal Data to facilitate the provision of the Subscription Services. A copy of our standard Data Processing Addendum, incorporating the Standard Contractual Clauses, is available upon request.
  • Data Privacy Framework. Ceros complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Ceros has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  Ceros has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/. Under certain conditions, more fully described on the DPF website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. The U.S. Federal Trade Commission (FTC) has jurisdiction over Ceros’ compliance with the DPF Principles. Ceros is subject to the investigatory and enforcement powers of the FTC. 

 

How we collect and use information

There are two kinds of information that we collect as discussed in this Privacy Policy:

  1. Information that can be used to identify you (“Personal Information”), and
  2. Information that does not identify you (“Other Information”).

When you request information about our products and services or sign up to receive information from us, you may enter your email address, name, or contact information, in which case your information will be used in order to contact you about our products and services. We will honor any requests that we no longer contact you and will provide you with a convenient means to unsubscribe or opt-out of any communication. 

When you purchase services from us, we will collect the Personal Information that you submitted in order to administer or improve our services to you, to administer our rewards and promotional programs; to improve our Website and services to you; to solicit your feedback; and to inform you about our products and services. You may opt out of unnecessary communications, but please understand that if and while you are a customer, we have legitimate reasons to contact you to administer the services that we provide to you, respond to issues, and manage or discuss our agreement.

When you otherwise send your personal information to us by email, by submitting an online form on our Website, or contact us using other means and we use that Personal Information in order to respond to you. 

We collect Other Information from Website visitors that is publicly transmitted by devices and web browsers in order to understand basic information about the categories and frequency of visitors that come to our Website.  Website visitor information includes IP address, your location, your browser type, the fonts you have installed, basic information about your device, and other information that is automatically transmitted from all browsers. Although we do not use it for the purpose of identifying you personally, the combination of Other Information from your browser is sufficiently unique that it can be used to identify you as a repeat visitor. If you do not wish to have such information shared with us (or anyone else while browsing), you should consult your browser’s manual or identify a browser plug-in that will prevent the sharing of this information, but it may prevent your browser from functioning appropriately on the web. 

We also collect Other Information using “cookie“ technology and JavaScript tags. Cookies are small packets of data that a website stores on your computer’s hard drive so that your computer will “remember“ information about your visit. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) as well as JavaScript tags to enhance your experience using the Website and to display relevant and interesting advertisements to you on other websites through third parties. This Other Information is not linked to you personally, but allows the delivery of relevant information to you elsewhere on the web because of your browser information. If you do not want us to place a cookie on your hard drive, please consult your browser’s documentation for information on how. Understand that if you decide not to accept cookies from us, the Website may not function properly. We use JavaScript tags to trigger a sequence of events that includes viewing a first-party cookie (or setting that cookie if it does not already exist) and to help us tailor and optimize our Website and provide you relevant advertisements from us outside of our Website.

We will obtain your consent for additional uses of your Personal Information for purposes that are not disclosed in this privacy policy.

 

How we share information

We may employ other companies and individuals to perform functions on our behalf. Examples may include providing technical assistance, customer service, and marketing assistance. These other companies will have access to the minimum amount of Personal Information about you, only as necessary to perform their functions and to the extent permitted by law. For a full list of our Sub-Processors please visit: https://trust.ceros.com/subprocessors. In the context of an onward transfer, Ceros is responsible for the processing of Personal Information it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on our behalf. Ceros will remain liable under the DPF Principles if our agent processes your Personal Data in a manner inconsistent with the DPF Principles, unless Ceros is not responsible for the event giving rise to the damage.

We share aggregate information that does not identify you with our affiliates, agents, and business partners and disclose aggregated user statistics in order to describe our products and services to current and prospective business partners and to other third parties for other lawful purposes. In order to provide our services and administer our rewards and promotional programs, we share your Personal Information with our third-party promotional and marketing partners, including, without limitation, businesses participating in our various programs. We may share your Information with any of our parent companies, subsidiaries, joint ventures, or other companies under common control with us. As we develop our businesses structure, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, sale of assets, dissolution, or similar event, the Personal Information about customers may be part of the transferred information.

Under certain circumstances, we may be required to disclose your Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements, or in response to a court order. 

Your information will be processed in the United States where we are based, and it is necessary for personal data to be processed in the United States in order to provide services or publish this Website.  We remain responsible for our sharing of Personal Information with third parties in cases of onward transfer.

 

Retention of Personal Information and Your Rights

We keep your Personal Information for as long as we have your consent to keep the personal information that is reasonably based upon the purpose for which it was collected, unless it is retained for a legitimate business purpose that does not pose a risk to your privacy rights or otherwise required by law as authorized or necessary under any applicable agreement with you. 

At any time if you no longer want us to keep any of your personal information, you may contact us and request us to erase it, access it, correct it, or restrict or object to further processing and sharing.  If you make such a request, we will comply, unless we have a specific contractual, regulatory or legal reason to have to retain the personal information or refuse the request. For customers, whenever practicable, we provide you with the ability to administer and erase your own Personal Information in our services.

To the extent that Ceros’ processing of your Personal Information is subject to the General Data Protection Regulation (GDPR), or applicable laws covering the processing of Personal Information in the United Kingdom, Ceros relies on your consent and its legitimate interests to process your data.

External Websites

This Website may contain links to third-party websites. Ceros has no control over the privacy practices or the content of these websites. As such, we are not responsible for the content or the privacy policies of those third-party websites. You should check the applicable third-party privacy policy and terms of use when visiting any other websites.

California Consumer Privacy Act (CCPA)

This section details the rights afforded to California consumers regarding our collection and processing of personal information under the CCPA. For more details about the personal information we collect, including the categories of sources, please see the “How we collect and use information” section above. As described in the “How we collect and use information” section, we collect this information for business purposes and may share this information as described in the “How we share information” section above. Ceros does not sell (as defined in the CCPA) the personal information we collect.

The CCPA provides California consumers the right to:

  1. Request to know more details about the categories or specific pieces of personal information we collect (including how we use and disclose this information),
  2. To delete their personal information,
  3. To opt out of any “sales” that may be occurring, and
  4. To not be discriminated against for exercising these rights.  

California consumers may make a request to Ceros pursuant to these rights by contacting us at privacyofficer@ceros.com. We will verify your request by using the information (such as the email address) associated with your account or by requiring Government-issued identification. You may designate an authorized agent to exercise these rights on your behalf.

 

Contacting Us

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ceros commits to resolve DPF Principles-related complaints about our collection and use of your personal information.  EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Ceros’ Privacy Officer at privacyofficer@ceros.com.

You may also send a letter to: 

Ceros Inc. 

228 Park Avenue South, Suite 16327

New York, NY 10003-1502 USA

Or, if you are located in the United Kingdom, to:

Ceros Crowd Fusion, Ltd.

Broadgate Tower

20 Primrose Street

London, EC2A 2EW 

Dispute Resolution

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Ceros commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the American Arbitration Association, an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://adr.org/ for more information or to file a complaint.  The services of the American Arbitration Association are provided at no cost to you.

You may refer a complaint to your local data protection authority and we will work with them to resolve your concern. 

If you are located in the United Kingdom, you may lodge a complaint with the Information Commission Office (the ICO) if you feel your personal data has been handled incorrectly or are unhappy with Ceros’ response regarding the use of your personal data. You can contact the ICO by calling 030 123 111 or visit https://ico.org.uk/make-a-complaint/

Updates

This policy may be changed at any time at our discretion as laws, regulations, and industry standards evolve making those changes necessary, or in accordance with changes to our services or business. If we should update this policy, we will post the updates to this page on our Website and update the Effective Date at the top. If we make changes that materially alter your privacy rights, we will provide additional notice via email or through the Subscription Services. Your use of this Website after an update indicates your agreement.