Privacy Policy

Welcome to Strawbees Privacy Policy

Last updated 2024-04-19

This Privacy Policy describes what data we (Strawbees AB) collect, how and why we use it, and where you can find out more. It governs the use of data collected by our platforms located at strawbees.com, shop.strawbees.com, engage.strawbees.com, blog.strawbees.com, and help.strawbees.com (from now on referred to as “our Company Website(s)”) as well as our platforms designed for schools located at classroom.strawbees.com, music.strawbees.com, and admin.strawbees.com (from now on referred to as “our Educational Content Provision”).

As used in this Privacy Policy, ‘personal information’ means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person.

FERPA AND COPPA COMPLIANCE

Our Educational Content Provision is compliant with Family Educational Rights and Privacy Act (FERPA) and Children’s Online Privacy Protection Rule (COPPA). We don’t collect or maintain student data and we don’t hold any student education records. Users of classroom.strawbees.com must confirm they are older than 18 upon sign up. We will set up accounts for users of admin.strawbees.com.

GDPR COMPLIANCE

We comply with the European Union General Data Protection Regulation (“GDPR”). We aim to ensure:

  • Transparency regarding the use of data
  • That any processing is lawful, fair, transparent and necessary for a specific purpose
  • That data is accurate, kept up to date, and removed when no longer necessary
  • That data is kept safely and securely

Strawbees AB processes Personal Information as a Controller or Business, as defined in the EU/UK GDPR and CPRA respectively

PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG

We collect personal information as you engage with both our Educational Content Provision and our Company Website(s).

A. If you are a teacher user of our Educational Content Provision, this includes when you:

  • Sign up for an account on Strawbees Classroom. When you sign up for Strawbees as an educator, we collect, from you, your personal identifiers (email address, name, country), your professional information (job title), what Strawbees products you have access to and your sensitive login details (password) in encrypted format. If you sign up via Google SSO, we will have access to your profile picture, but we will not collect your password and your usage of the SSO will be governed by the relevant Google policies.We use this information to create and manage your account, and to send you updates about Strawbees. Service-related messages could include notification of activity, abuse warnings, and/or updates to your account. We might also send you system alerts, service updates and information, such as temporary outages and/or updates to this Privacy policy. This is done to perform our contractual relationship with you and/or to comply with a legal obligation. We retain this information for as long as your account exists, unless specified otherwise. You can delete your account at any time in account settings.We may also use this information to send you news about Strawbees. This is in reliance with our legitimate interests to study how educators use our Educational Content Provision, to develop our Educational Content Provision and to inform our marketing strategy. You may unsubscribe from news at any time by clicking the “unsubscribe” link included at the bottom of each email we send to you or by contacting us at privacy@strawbees.com. However, we will continue to send you service-related messages for as long as you have an account. Our emails include a tracking pixel that tracks whether you open the email, whether you click banners in the email, and your subsequent clicks and usage of our Websites. We use this information to send you additional email communications which may be of interest to you, as based on your interaction with our emails and/or Websites. You can avoid downloading the pixel by rejecting the download of images in the email. We will not send you unsolicited or Third Party marketing.
  • Sign up for an account on Strawbees Admin. When you sign up for Strawbees as an administrator, we collect, from you, your personal identifiers (email address) and your sensitive login details (password) in encrypted format. If you sign up via Google SSO, we will have access to your profile picture, we will not collect your password and your usage of the SSO will be governed by the relevant Google policies.We use this information to create and manage your account, where you can get an overview of connected Strawbees Classroom accounts, and to send you updates about Strawbees. Service-related messages could include notification of activity, abuse warnings, and/or updates to your account. We might also send you system alerts, service updates and information, such as temporary outages and/or updates to this Privacy policy. This is done to perform our contractual relationship with you and/or to comply with a legal obligation. We retain this information for as long as your account exists, unless specified otherwise.Admin users can access a list of Strawbees Classroom users that are connected to the admin account. Admin users send connection invites to the Strawbees Classroom users, who then either accept or refuse the connection request. Admin users can access the connected accounts’ personal identifiers (email) and the last time they were active.We may also use this information to send you news about Strawbees. This is in reliance with our legitimate interests to study how educators use our Educational Content Provision, to develop our Educational Content Provision and to inform our marketing strategy. You may unsubscribe from news at any time by clicking the “unsubscribe” link included at the bottom of each email we send to you or by contacting us at privacy@strawbees.com. However, we will continue to send you service-related messages for as long as you have an account. Our emails include a tracking pixel that tracks whether you open the email, whether you click banners in the email, and your subsequent clicks and usage of our Websites. We use this information to send you additional email communications which may be of interest to you, as based on your interaction with our emails and/or Websites. You can avoid downloading the pixel by rejecting the download of images in the email. We will not send you unsolicited or Third Party marketing.
  • Use our Educational Content Provision. When you use Educational Content Provision, we automatically collect, through cookies and similar technologies, your internet or other electronic network activity information (usage data such as dates, times, and details of your browsing activities), and technical data regarding performance (such as page response times, download errors). We also automatically collect log data including your online identifiers (IP address) and other technical data such as browser type, operating system, device information, and mobile carrier. In addition, we may collect additional information such as the referring web page, referring search terms, and pages visited. We use this information to create aggregated usage reports, to understand how educators are using our Educational Content Provision and to improve the Educational Content Provision. This is in reliance on our legitimate interests in developing and improving the Service. We retain this information for as long as your account exists, unless specified otherwise.
  • Send student links. When you send student links to your students, we do not collect information about the visitors to those links. Students do not require an account.This is to preserve student privacy.

Please note we only use necessary cookies on our Educational Content Provision.

B. If you are a website visitor to our Company Website(s), this includes when you:

  • Contact us. When you contact us through the website, we collect from you, your personal identifiers (name, email address, phone number, country), your professional information (job title), your Strawbees product interests and any additional information you choose to include in your message. We use this information to respond to your questions or inquiries or to communicate with you about scheduling a live demo. This is in reliance with your consent.
  • Email us. When you email our support team, we collect, from you, your personal identifiers (name, email), and any additional information you choose to include in your message. We use this information to respond to your questions or inquiries. This is in reliance with your consent.
  • Purchase our products. When you purchase a product, we collect from you, your personal identifiers (name, email address, shipping address, billing address), your sensitive financial information (credit or debit card number, CVV, expiration date). We use this information to process payments, and to provide your products. Your sensitive financial information is held with our third-party payment processor Stripe and is not accessible to us. Please see Stripe’s Privacy Policy for information regarding Stripe’s collection and use of personal information.  This is done to perform our contractual relationship with you and/or to comply with a legal obligation.When you purchase a product, you become a Customer. We may also use your information as a customer to send you news about Strawbees. This is in reliance with our legitimate interests to develop Strawbees, inform our marketing strategy and grow our business. You may unsubscribe from news at any time by clicking the “unsubscribe” link included at the bottom of each email we send to you or by contacting us at privacy@strawbees.com. However, we will continue to send you service-related messages for as long as you have an account. Our emails include a tracking pixel that tracks whether you open the email, whether you click banners in the email, and your subsequent clicks and usage of our Websites. We use this information to send you additional email communications which may be of interest to you, as based on your interaction with our emails and/or Websites. You can avoid downloading the pixel by rejecting the download of images in the email. We will not send you unsolicited or Third Party marketing.
  • Sign up for our newsletter. When you sign up for our newsletter, we collect from you, your personal identifiers (email address, country) and your professional information (job title, school, and postal/zip code). We will use this information to send you news about Strawbees. This is in reliance with your consent. You may unsubscribe from news at any time by clicking the “unsubscribe” link included at the bottom of each email we send to you or by contacting us at privacy@strawbees.com. Our emails include a tracking pixel that tracks whether you open the email, whether you click banners in the email, and your subsequent clicks and usage of our Websites. We use this information to send you additional email communications which may be of interest to you, as based on your interaction with our emails and/or Websites. You can avoid downloading the pixel by rejecting the download of images in the email. We will not send you unsolicited or Third Party marketing.
  • Attend our webinars. When you attend one of our webinars, we collect from you, your personal identifiers (name, email address), and your professional information (job title, school, country/region, and postal/zip code). We use the third-party webinar processor Zoom to provide our webinars. Please see Zoom’s Privacy Policy for information regarding Zoom’s collection and use of personal information. This is in reliance with your consent. We also use this information to send you additional email communications which may be of interest to you, as based on your interaction with our emails and/or Websites. This is in reliance with our legitimate interests to develop Strawbees, inform our marketing strategy and grow our business.
  • Participate in our contests. When you win a contest, we collect from you, your personal identifiers (name, email address, mobile number), and your professional information (job title, school, address, postal/zip code). This is in reliance with your consent to ship the prize(s) to you.
  • Respond to our surveys. When you respond to a survey, we collect your opinions. We use this information, in combination with information you have already provided to us, to improve our products and services. This is in reliance with your consent.
  • Interact with our Company Website(s). If you provide your affirmative, opt-in consent to our use of tracking technologies, we will also collect information from you automatically as you interact with our Websites via non-essential cookies, pixels, and web beacons. Cookies are small pieces of code placed on your device, to enhance your experience on our site and for retargeting purposes. These cookies and pixels allow us to provide a tailored experience for our users and also enable us to retarget our advertisements to you on other platforms. We rely on your consent for Cookies.If you opt-in, we will use necessary, functional, analytics, and advertising cookies to collect your usage, device, and location information when you interact with the Websites. We use this information to: (i) track you within the Websites; (ii) enhance user experience; (iii) conduct analytics to improve the Websites; (iv) prevent fraudulent use of the Websites; (v) diagnose and repair errors, and, in cases of abuse, track and mitigate the abuse; (vi) provide targeted advertising; and (vii) measure the effectiveness of our marketing campaigns. If you take no action, or opt-out we will only use necessary cookies on the Websites.We run targeted and retargeted advertising campaigns. This includes advertising on platforms like Facebook (part of Meta), Google, X (formerly known as Twitter), LinkedIn, and Microsoft. We endeavor to only show you ads that are relevant and valuable to you. When you consent to cookies you give us consent to use your personal identifiers (name, email address, phone number, city, state/region, country), your professional information (job title/profession, school, and postal/zip code) and your online identifiers (cookies). For better understanding and optimization of our customer’s behavior, we employ UTM trackers on our websites – strawbees.com and shop.strawbees.com. UTM trackers help us gauge the effectiveness of our online marketing campaigns, understand where our traffic is coming from, and optimize the user and buyer journeys on our platforms. The data gathered from these trackers is analyzed on HubSpot. By opting-in to cookies, you consent to the practices described in this section. We track visitor activity by source, medium, and campaign on HubSpot, enabling us to identify and follow through with users while respecting their privacy and choices. You may opt-in or out of non-essential cookies at any time by clicking the cookie button on the bottom left of our Company Website(s). Next click ‘change your consent’ and adjust the toggles to suit your preferences. A black toggle indicates you are not opted-in; a blue toggle indicates you are opted-in. For a detailed breakdown of how we use cookies, pixels, and what information is being collected, please refer to our Cookie Policy.
  • Interact with us on social media. When you interact with our social media pages on social networking Websites, such as Facebook, LinkedIn, X (formerly known as Twitter), Instagram, Pinterest, Threads, Tiktok, and YouTube, we collect basic engagement metrics and use it to tailor content and marketing and use it to improve user experience as set forth in this section. Please note that we do not control the use or storage of the information that you have posted to any social networking Websites. This information is collected and processed by the social networking Websites for their own purposes, including marketing. For more information on how these social media companies use your personal information, please see Facebook’s Privacy Policy, LinkedIn’s Privacy Policy, X’s Privacy Policy, Instagram’s Privacy Policy, Pinterest’s Privacy Policy, Threads’ Privacy Policy, Tiktok’s Privacy Policy, and YouTube’s Privacy Policy.

C. If you visit us at an event, this includes when you:

  • Are in photos/videos. When you interact with us at an event, photos may be taken. We will ask for your consent and outline how long we will keep the photos at the time. We will use the photos, if we have your permission, to promote Strawbees. We may share the photos on social media. Please see the section ‘interact with us on social media’ above for more. You may withdraw your consent at any time by contacting us privacy@strawbees.com.

Strawbees will also use the personal information we collect as described in this section to comply with the law, to efficiently maintain our business, to prevent issues and abuse of both our Educational Content Provision and our Company Website(s) and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.

Unless otherwise stated in this Privacy Policy, we retain your personal information for as long as the relevant Strawbees account exists or until we no longer need your information to fulfill the purposes for which we collected it. You can delete your accounts on our Educational Content Provision at any time by logging in and visiting account settings. However, we may need to use and retain your personal information for longer than the periods indicated above for purposes of:

  • Compliance with our legal and ethical obligations. For example, retaining personal information where we are legally required to do so or required by our professional ethics rules.
  • Meeting our safety and security commitments. For example, keeping our properties secure and preventing fraud.
  • Exercising or defending legal claims. We also may need to retain personal information for longer than the periods indicated above in order to respond to legal process or enforceable governmental requests, or to enforce our contracts or Terms of Use, including investigation of potential violations.

HOW WE SHARE YOUR PERSONAL INFORMATION

A. General Sharing

Strawbees shares personal information in the following ways:

  • Within Strawbees. We share your personal information within Strawbees, as appropriate, to provide our Educational Content Provision and our Company Website(s)and to efficiently maintain our business.
  • With our affiliates. We share information with our affiliate (parent company) eEducation Albert AB and the eEducation Albert group family of affiliates as part of our regular reporting activities on company performance. Shared reports use aggregated information and personal information is not reidentified. In addition, Sumdog Inc can see some of our information in its role as a provider for some of our US orders. Finally, Sumdog Ltd gets access to some of our marketing campaign information in order to assist us with the campaigns. Companies in the eEducation Albert group include:
    • eEducation Albert AB (publ)
    • Ampd A
    • Kids MBA SAS
    • Swedish Film AB (subsidiary of APRU Management)
    • Sumdog Ltd
    • Sumdog Inc
  • With administrators. We share information with connected school administrators set up on Strawbees Admin. This includes email addresses and the last time the user was active.
  • In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. We will also share personal information with third parties if we undergo bankruptcy or liquidation, in the course of such proceedings.
  • For legal purposes. We share your personal information where we are legally required to do so, such as in response to court orders, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations.
  • With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time and may do so by contacting us via email at privacy@strawbees.com.

B. Sharing in the Last Twelve (12) Months

For a business purpose. In the preceding twelve (12) months, Strawbees has disclosed the following categories of personal information for a business purpose to the following categories of third parties:

  • We have disclosed your personal identifiers to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; data hosting; customer relationship management; mailing; email delivery; professional services (lawyers, bankers, insurers, auditors, accountants); purchase and payment; error reporting; video/phone system; web analytics; and similar services.
  • We have disclosed your online identifiers to service providers (such as but not limited to Plausible Analytics) to help with analyzing data to improve both our Educational Content Provision and our Company Website(s). We may run beta tests of new features of our platform that require the collection of personally identifiable data. These tests will always be agreed upon with users ahead of time, and only those who give consent have their data collected. For these tests, we use third-party services (such as but not limited to Hotjar).
  • We have disclosed your internet or other electronic network activity information collected by cookies to our service providers to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Websites and platform errors.
  • We have disclosed your internet or other electronic network activity information collected by cookies to our cookie management provider.

Third parties are contractually prohibited from using the Personal Information for any other purpose than to provide the service requested by us, for the purposes described in this Privacy Policy. This ensures Third Party Service Providers will provide the same or higher level of protection for your Personal Information. We only permit Third Party Service Providers to process Personal Information for specified purposes and in accordance with our instructions.

C. Sale of Personal Information

Where targeted advertising is defined as a sale, in the preceding twelve (12) months (assuming you have opted-in), Strawbees has shared your internet or other electronic network activity information collected via cookies and other tracking technologies on both our Educational Content Provision and our Company Website(s) with our data analytics/advertising providers as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG. To adjust your privacy preferences (opt-in or out), please click the cookie button on the bottom left of our Company Website(s). Please note that advertising and analytics cookies are not deployed behind login walls on our Educational Content Provision.

INTERNATIONAL TRANSFERS

Your information is stored and processed in our headquarters in Sweden as well as on our servers and those of our Service Providers based in the EU and the USA.

To ensure your Personal Information receives an adequate level of protection, we require our Service Providers to protect it in a way that respects the EU GDPR and the UK GDPR. If you are based in the UK or EU, we will transfer your Personal Information out of the UK or EU and we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will transfer your Personal Information to countries that have been deemed to provide an adequate level of protection or Personal Information by the UK or the EU.
  • We will transfer your Personal Information to certain Service Providers protected by specific contracts approved for use in the UK or EU which give Personal Information the same protection it has in the UK and EU.
  • We will transfer your Personal Information to certain Service Providers covered by the EU-U.S. Data Privacy Framework and/or the UK Extension to the EU-U.S. DPF.

These safeguards are monitored in accordance with the appropriate laws and are kept up to date. If you require further information about these protective measures, please write to our Data Protection Officer.

If you are based in the USA, some of your Personal Information will be transferred out of the USA to the EU and the UK. If you require further information about this, please write to our Data Protection Officer.

HOW WE KEEP YOUR PERSONAL INFORMATION SAFE

Strawbees respect the trust placed in us to properly protect your information and we take steps to maintain a reasonable and appropriate security programme designed to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.

Our security measures include, but are not limited to, the use of access-controlled data centers, data encryption in transit, brute force controls, firewalls, multi factor authentication for systems, regular staff training and physical access controls.

In addition, we limit access to your personal information to those employees, agents, contractors and other Third Parties who have a business need to know. They will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Users of our Educational Content Provision are responsible for using their best efforts to select and protect their login details, including restricting access to your Strawbees account, and logging off after using Strawbees.

Our Service Providers that handle payment data maintain the relevant Payment Card Industry (PCI) compliance levels.

Please note if Strawbees displays links to third-party websites, our Privacy Policy will not apply. Please refer to the third-party Privacy Policy for how your Personal Information may be processed.

DO WE ALLOW ADVERTISING WITHIN OUR Educational Content Provision OR SHARE PERSONAL DATA FOR ADVERTISING?

Strawbees does not carry paid advertisements for anyone else on either our Company Website(s) or our Educational Content Provision. We do not share data for advertising or marketing purposes on our Educational Content Provision only. For how we share data for advertising purposes on our Company Website(s) please see ‘How we Share Your Personal Information’ above.

AUTOMATED DECISION-MAKING

Automated decision-making is used as part of our Company Website(s). This helps us customize the email journey, ensuring what you receive is relevant to you.

Automated decision-making is not used as part of our Educational Content Provision.

We do not anticipate the automated decisions on our Company Website(s) will impact you in a legal, or similarly significant manner.

DO NOT TRACK

We do not respond to Do Not Track requests. Do Not Track is a preference you can set in your web browser to inform websites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

YOUR DATA PROTECTION RIGHTS

It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us.

Where the UK GDPR and the EU GDPR apply, by law you have the right to:

  • Request access to your Personal Information. This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.
  • Request correction of the Personal Information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your Personal Information. This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Information where you have successfully exercised your right to object to processing (see below), where we have processed your information unlawfully or where we are required to erase your Personal Information to comply with law. Note, however, that we may not always be able to comply with your request for erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your Personal Information where we are relying on a legitimate interest (or those of a Third Party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your Personal Information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request the restriction of your Personal Information. This enables you to ask us to suspend the processing of Personal Information about you, (i) if you want us to establish its accuracy or (ii) where our use of the data is unlawful but you do not want us to erase it, (iii) where you need us to hold the data even if we no longer require it as you need to establish, exercise or defend legal claims or (iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your Personal Information to you or another party. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose (such as electronic marketing or photographs), you have the right to withdraw your consent for that specific processing at any time. We will then no longer process your information for the purpose(s) you originally agreed to, unless we have another legitimate basis for doing so.
  • Right to lodge a complaint about how we handle your Personal Information with IMY (Sweden EU) https://www.imy.se/privatperson/utfora-arenden/lamna-ett-klagomal/ or the ICO (UK) https://ico.org.uk/global/contact-us/.

If you are a resident in any of the jurisdictions above and wish to exercise your data protection rights, please email our Data Protection Officer at privacy@strawbees.com. You may have further privacy rights in your jurisdiction. Please reach out to our Data Protection Officer.

Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that Personal Information is not disclosed unlawfully.

We will try to act on your request within one month or quicker if local law requires. You will be notified of receipt of your request within 10 days. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

RIGHTS OF CALIFORNIA RESIDENTS ONLY

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, “CPRA”) entitles California residents to certain rights. To the extent the CPRA applies to our processing of your personal information, you are entitled to the following rights:

  • Right to Access/Know. You have the right to request what personal information we have collected, used, disclosed, and sold about you, unless doing so proves impossible or would involve disproportionate effort. You may only make a request for access twice within a 12-month period.
  • Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking to be deleted, we would not be able to delete the information until we are legally permitted to delete it.
  • Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.
  • Right to Opt Out of Sale/Sharing. You have the right to opt out of the sale or sharing of your personal information to third parties.
  • Right to Non-Discrimination. You have the right to not receive discriminatory treatment if and when you exercise your privacy rights under the CPRA.
  • Right to Limit Use of Sensitive Personal Information. You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Strawbees does not process sensitive personal information in a manner which gives rise to this right.

If you are a California resident and wish to exercise your privacy rights, you may submit a request to our Data Protection Officer via email at privacy@strawbees.com. Please indicate your state of residence upon submission of your request. You may opt in or out of non-essential cookies at any time by using the toggles in Your Privacy Rights.

For requests submitted via telephone, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional pieces of information. We will ask you for your school name, school zip code, and your role.

Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.

We will try to act on your request within one month or quicker if local law requires. You will be notified of receipt of your request within 10 days. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

RIGHTS OF NEVADA RESIDENTS

If you are a consumer in the State of Nevada, you may request to opt-out of the current or future sale of certain of your personal information. We do not currently sell any of your personal information under Nevada law, nor do we plan to do so in the future. However, you can submit a request to opt-out of future sales, as defined by Nevada law, by contacting us at privacy@strawbees.com. Please include “Opt-Out Request Under Nevada Law” in the subject line and body of your message.

CHANGES TO THIS PRIVACY POLICY

We may amend this Privacy Policy at our sole discretion at any time. If we do, we will post the changes to this page, and will indicate the date the changes go into effect. We encourage you to review our Privacy Policy to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Websites and/or via email, and obtain your consent, if required.

CONTACT INFORMATION

We have appointed a Data Protection Officer to oversee compliance with this Privacy Policy. If you have any questions about this Privacy Policy or how we handle your Personal Information, please contact privacy@strawbees.com.

You can also reach us by mail at our headquarters:

Strawbees AB, Stenkolsgatan 1B, 417 07 Göteborg, Sweden.

If the use of your Personal Information is subject to the UK GDPR, for example because you are resident in the UK, and you have any query regarding this Privacy Policy or your Personal Information on Strawbees please contact the Strawbees UK GDPR Representative at Sumdog Ltd, 43 Queensferry Street Lane, Edinburgh, EH2 4PF, UK.