US State Privacy Rights Notice

Aperim Pty Ltd (ABN 46150699737; ACN 150699737) is incorporated in New South Wales, Australia and operates the aicial brand. In this notice, “aicial” refers to that brand; “we”, “us” and “our” refer to Aperim Pty Ltd; and “you” refers to a resident of a US state to whom this notice applies.

This notice supplements our Privacy Policy and applies to a resident of a US state that has its own comprehensive consumer privacy law, where that law’s own thresholds and scope requirements are met. It describes rights available under that law in addition to those described in the Privacy Policy. It does not repeat the Privacy Policy’s general description of how we collect, use, disclose, secure and retain personal information, or the rights available to residents of other jurisdictions; read it together with the Privacy Policy, which continues to apply to you in full.

As explained in our Privacy Policy’s About this policy section, we act as a business or controller for account, waitlist and billing information and information used for our own service operations. Where we process personal information solely on a customer’s documented instructions — for example, information within a social account or audience a customer connects — we act as that customer’s service provider or processor rather than as a business or controller. If your personal information appears in a customer’s connected account or content, direct your request to that customer in the first instance; we support the customer in responding to it. The rights described in section 3 are rights you exercise against us as a business or controller; where we act as a processor or service provider, we support the relevant customer in responding rather than acting on the request ourselves.

As at the effective date of this notice, California, Virginia, Colorado, Connecticut and Utah were among the first US states to bring a comprehensive consumer privacy law into force, under, respectively, the California Consumer Privacy Act as amended by the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act and the Utah Consumer Privacy Act. Additional states have since enacted comparable laws. This notice is not limited to the states named here: if you are a resident of a US state whose own law grants rights of the kind described below, those rights are available to you under this notice, whether or not your state is individually named.

Our Privacy Policy’s Information we collect and How we use personal information sections describe, in detail, the personal information we collect about you, where it comes from, and the purposes for which we use it. This notice supplements those sections rather than repeating them: the categories of personal information we collect, and our purposes for using them, are as described there.

We collect and use personal information for our own business and commercial purposes described in the Privacy Policy, such as providing and administering aicial services, securing and improving our website and services, and communicating with you.

If this notice applies to you, you may have some or all of the following rights, where your state’s own law provides them, subject to the exceptions, thresholds and conditions that law sets.

• Right to know and access. You may ask us to confirm whether we process personal information about you and, where we do, to provide access to it. Where California law applies, this right also extends to the categories of personal information we collect, their sources and our purposes for collecting them, and the categories of third parties we disclose each category to, as described in our Privacy Policy’s Information we collect and Sharing and disclosure sections.
• Right to correct. You may ask us to correct inaccurate personal information we hold about you, taking into account the nature of the information and the purpose of processing.
• Right to delete. You may ask us to delete personal information we hold about you, subject to exceptions your state’s law provides, for example where we need to retain information to complete a transaction, meet a legal obligation, or maintain security.
• Right to data portability. You may ask us to provide a copy of the personal information you have provided to us in a portable, and where technically feasible, readily usable format.
• Right to opt out of sale, sharing and targeted advertising. Some state laws give you the right to opt out of the sale of personal information, its “sharing” for cross-context behavioural advertising, or its use for targeted advertising. We do not sell personal information, consistent with our Privacy Policy’s Sharing and disclosure section, and do not use it for cross-context behavioural or targeted advertising, consistent with our Cookie Policy’s description of the cookies and similar technologies we currently use, so there is nothing to opt out of in this respect today. If that changes, we will update this notice, the Privacy Policy and the Cookie Policy first and provide the opt-out method your state’s law requires.
• Right to opt out of profiling. Some state laws give you the right to opt out of profiling in furtherance of a decision that produces a legal or similarly significant effect. We do not make solely automated decisions of that kind about any person; a human genuinely reviews any consequential output before action is taken, as described in our Privacy Policy’s AI and personal information section.
• Right to limit the use of sensitive personal information. Where your state’s law provides it, you may direct us to limit our use and disclosure of sensitive personal information to the purposes that law permits. Our Privacy Policy’s Sensitive information and identity protection section describes how we handle sensitive information generally.
• Right to non-discrimination. We will not deny you goods or services, charge you a different price, or provide a different level or quality of goods or services because you exercised a right under this notice.

Certain state laws provide further rights beyond those listed above. Where your state’s law gives you a right that is not separately listed here, you may still exercise it using the contact method in the next section, and we will respond in accordance with that law’s requirements.

To exercise a right described in this notice, email privacy@aicial.com describing the right you wish to exercise and information that helps us locate your records, such as the email address associated with your account or waitlist entry. You do not need to create an account with us to submit a request.

Before acting on a request, we verify your identity, for example by matching the details you provide against our account, waitlist, billing or other business records, and we may ask for additional information reasonably necessary to complete that verification or to confirm the authority of an agent submitting a request on your behalf. If we cannot verify a request to the degree the applicable law requires for the action requested, we will explain why and, where possible, tell you what further information would allow us to proceed.

An authorised agent may submit a request on your behalf where your state’s law permits, subject to verification of both your identity and the agent’s authority. We do not charge a fee to respond to a request, unless applicable law permits us to charge a reasonable fee. Where that law allows us to decline a request it defines as manifestly unfounded or excessive, we will explain our reasons. We respond to a request within the time your state’s law requires, and will tell you if we need to extend that period where the law permits an extension.

If we decline to take the action requested, in full or in part, and the law of your state provides a right to appeal that decision, you may request an appeal by replying to our decision or emailing privacy@aicial.com with “Appeal” and a description of the original request. We will respond to an appeal within the time your state’s law requires.

If we deny an appeal, we will explain our reasons in writing and, where the applicable law requires it, describe any further complaint mechanism available to you, such as lodging a complaint with your state’s attorney general or other privacy regulator.

We may update this notice to reflect changes to our practices, the personal information covered, or our legal obligations, including as additional states enact or amend comprehensive privacy laws. The version, effective date and last-reviewed date shown at the top identify the current notice. We publish the updated notice on our website and, where a change is material, provide additional notice through the website before the change takes effect.

For questions about this notice or to exercise a right it describes, contact:

Aperim Pty Ltd, which operates the aicial brand
ABN 46150699737
ACN 150699737
New South Wales, Australia
Email: privacy@aicial.com