Trainn Privacy Notice

California notice at collection

If You are a California resident, the "Additional information for California residents" section below contains information that We provide pursuant to the California Consumer Privacy Act (“CCPA”). That section includes information regarding categories of information We collect, the purposes for which We collect those categories of information, whether the information is sold or shared and how to opt out, and how long the information is retained. You can find those details by clicking on the above links.

What personal information do We collect about You?

Information We collect directly from You:

The information that We collect from You depends on how You are engaging with Us and what information You choose to provide Us. We have listed below certain scenarios and the personal information that We may collect in such scenarios.

• If You use Our products and services: Contact information, such as name, email address, contact number, and company name; billing information such as your organization’s billing address and payment information;

• If You submit any forms on Our website: Contact information, such as name, email address, phone number, title, company name, location, and any information You choose to submit as part of the form;

• If You sign-up for webinars and events: Contact information, such as name, email address, phone number, title, company name, location as well as your image, voice, and name as part of the live-streaming, audio/video recording, and photography of online/in-person webinar/events, CCTV recordings at in-person events;

• If You visit Our office: Contact information, such as name, title, and company name, any additional information required to enter into visitor Our register, and CCTV recordings;

• If You interact with Us over an audio or video call: Contact information, such as name, email address, title, company name, and location, and audio/video recordings or transcriptions of the call;

• If You engage with Us for research: Contact information, such as name, email address, and other information submitted by You in furtherance of the research or to obtain associated incentives;

• If You apply for a job vacancy: Contact information, such as name, email address, phone number, and mailing address and professional and employment information, such as resume, educational qualifications, work experience, and background verification information, which may include criminal history.

Information We automatically collect

We may also collect certain information automatically when You use Our Websites and products such as:

• Information about the browser and device You use to access Our websites or products, such as IP addresses or MAC addresses, advertising IDs, operating system information, and device identifiers.

• Information about how You use and interact and/or communicate with the Websites and products, such as the pages or features You visited, how long You spent on the pages or features You visited, links You click on, heatmaps, journey mapping, session replays and other usage patterns and behavioural analytics;

• Information that indicates Your general location, such as can be derived from Your IP address; and

• Other information automatically captured as part of maintenance of service, including error monitoring, performance monitoring and fraud detection.

Our Websites and products may use technologies like cookies (which are small files placed on the hard drive of Your device to store data that can be recalled by Our Websites and products), session replay, pixels, web beacons, and other online tracking technologies to automatically collect information about You. Those cookies, session replay, pixels, web beacons, and other online tracking technologies may be provided by third parties. Those third parties may collect, receive, and record this information, and collect, receive, and record other information about Your online activities over time and across third-party websites and online services.

For example, We may use analytics technologies like Google Analytics to learn more about how You use Our Websites and products. Google Analytics uses cookies to help Us analyze how visitors use Our Websites and products. For more information on Google Analytics, including how Google Analytics collects, uses, and discloses information, refer to the following page: www.google.com/policies/privacy/partners/. We may also use other technologies to automatically collect information and monitor Your activities on Our Websites and products.

Information We collect from third-party sources

We may collect personal information about You from various sources, including the following sources:

• Business partners: Referral partners, resellers, integration partners and other business partners may share Your personal information such as name, email address, title, company name and other personal information.

• Event organisers: Partners with whom We jointly host events as well as organisers of events We sponsor may share Your personal information such as name, email address, title, company name, event photographs, audio/video recordings and other personal information that You share with them or authorize them to process.

• Sales intelligence platforms and B2B lead databases: We may receive Your name, email address, phone number, title, company name, and other personal information;

• Service providers: Service providers (such as SSO providers) who You authorize may share Your name, email address and such other personal information that You authorize them to share.

• Social media websites and other publicly available sources: We may collect Your name, email address, phone number, title, company name, Your comments or feedback about Chargebee and other personal information from the internet, social media websites and other publicly available sources.

We may combine this with the information that We collect directly or automatically from You.

On what basis do We collect Your personal information?

The legal bases that We rely on to process Your personal information depends on the context and the purpose for which We collect the personal information. The legal bases that We typically rely on for collection and processing of Your personal information are:

• Performance of contract or steps prior to entering into a contract;

• Compliance with Our legal obligations;

• Legitimate interest of Chargebee or third party;

• Such other legal basis as permitted under applicable law, such as consent.

The legitimate interests that We pursue include providing, improving, and developing Our products, services and Websites, processing registrations and completing transactions, managing and administering Our organization, for corporate transactions, to comply with legal requirements, for security and protecting ours and others’ rights, for sales, advertising, and marketing activities, for business and research purposes, for recruitment activities, and for other company initiatives.

What do We use Your personal information for?

The specific purposes for which We process Your personal information depends on the context and purpose for which Your personal information was obtained as well as relevant business and legal requirements. We may process Your personal information for one or more of the following purposes:

• To provide, improve and develop Our products, services and Websites: This includes delivering Our products, services and Websites to You, administering Your account, operating Our products and ensuring its availability, integrity and security, performance and error monitoring, debugging, operating and administering Our Websites, processing payments from You, maintaining KYC details, preventing misuse of Our products, services and websites or violation of terms, responding to Your requests and queries, product implementation and integrations, tracking renewals and Your subscription details, assessing Your business needs and proposing or demonstrating Our other suitable products, compiling information about and analysing Your usage patterns and behaviour within Our products and Websites to improve Our products and Websites and to provide personalised content, develop new products and services, improve user experience and interface and for such other internal purposes to improve, enhance, support, develop and operate Our products, services, Websites and business.

• To process registrations and complete transactions: This includes processing Your personal information with respect to Our events, webinars, contests/sweepstakes, blogs, community forums, and other programs that You register or sign-up for, such as to process any payments from You in relation to such registration or sign-up, reaching out to You with details of such registration or sign-up and enabling Your use of such registrations and sign-ups. It also includes completing any specific transactions for which You have submitted any forms or information to Us, such as, to list You or Your product on Our marketplace, allowing You to download certain collaterals from Our Website.

• To manage and administer Our organisation: This includes business accounting, tax, auditing, creation and maintenance of appropriate records and other recordkeeping functions, preparing internal reports on product and Website usage patterns and behaviour as well as data analytics for forecasting, product strategy, business, board and investor reporting.

• For corporate transactions: This includes evaluation and participation in an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of, or investment in, some or all of Our assets, including as part of bankruptcy, liquidation, or similar proceedings.

• To comply with legal requirements: This includes compliance with applicable laws (including Our obligation to screen prospective customers, customers, end customers and individuals for compliance with sanctions regulations), preventing violation of laws and limiting Our damages, responding to and compliance with legal requests from administrative, judicial and other authorities and regulators, pursuing legal remedies, to respond to or disclose as part of judicial proceedings, arbitration and mediation.

• For security and protection of Our and others’ rights: To protect Our products, services and business operations; manage access to Our offices, premises and event spaces, and maintain visitor information and CCTV recording for ensuring security and safety; to ensure safety and protect the rights and property of Chargebee or those of Our stakeholders; to prevent and detect fraud, unauthorized activities and access, and other misuse; where We believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of Our Terms of Service.

• For sales, advertising, and marketing activities: This includes marketing communications, delivering targeted or cross-context behavioral advertising to You, personalized advertisements, campaigns and drives to reach out to customers and potential customers, data enrichment, contextualizing and personalizing marketing content, sending product and organization updates and newsletters, sending rewards, incentives, gifts and vouchers, send information and updates to You pertaining to Your usage, publishing Your testimonials, comments or reviews from and on Our Website, blogs and community forums, publishing case studies, blog posts and other marketing content, hosting and live-streaming webinars, events and other programs, taking and publishing photographs, videos and information about the events, showing personalized and behavioural advertisements and analyzing Your usage and behaviour patterns.

• For business and research purposes: This includes reaching out for and conducting surveys, setting up interviews, soliciting feedback, analysing usage and behaviour patterns, learning preferences and sending incentives.

• For recruitment activities: This includes evaluation for job openings, retaining feedback of interviewers, retaining information for future job opportunities and reaching out with respect to any job opportunities.

• For other company initiatives: This includes processing information in relation to CSR and community building initiatives, responsible disclosure policy or bug bounty program, and other specific initiatives and programs that We host or organize.

• To create aggregate and deidentified information : When We process personal information We may create aggregate or deidentified information, which is not personal information and is no longer subject to this Privacy Notice.

We may use artificial intelligence and machine learning capabilities offered by third parties as well as those built by Us in order to process Your personal information for the purposes set out above. Such processing shall be in line with this Privacy Notice and commitments made herein. In certain cases, Your information may also be used to help improve the accuracy, efficiency, and overall performance of such capabilities.

How do We protect Your information?

We implement commercially reasonable security measures designed to ensure a level of security appropriate to the risks to Your personal data.

How long do We keep Your personal information?

We retain Your personal information for as long as required to satisfy the purpose of collection and processing, as required to fulfill Our legal obligations as well as for enforcing Our agreements. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of the personal information being processed, the potential risk of harm from unauthorized use or disclosure of the personal information, whether We can achieve the purposes of the processing through other means, and any applicable legal requirements. For example, We will retain certain identifiers for as long as it is necessary to continue maintaining Your account and providing You our products and services, to comply with applicable tax, accounting, and record-keeping obligations, to administer certain warranties, and for research, development, and safety purposes, as well as an additional period as necessary to protect, defend, or establish Our rights, defend against potential claims, and to comply with Our legal obligations.

Typically after expiry of the applicable retention periods, Your personal information will be deleted, unless such deletion is rendered impractical or unreasonably burdensome due technical or other reasons, including where it becomes technically impossible, data retained as part of automatic archiving and back-up procedures, In such cases where any information is retained, We will implement appropriate measures designed to prevent misuse of such information. In certain circumstances, We may anonymize Your personal information so that it can no longer be associated with You, in which case We may use such information without further notice to You.

Do We disclose Your information to third parties?

Yes, We may disclose Your information with third parties listed below for the purposes set forth in this Privacy Notice.

• Members of Our corporate group: These may include Our affiliates, subsidiaries, and parent companies who assist in the provision of Our products and Websites, as well as with various business purposes set out in this Privacy Notice.

• Vendors, service providers, partners, and other third parties We use to support Our organization: They provide their services to Us and assist Us in fulfilling business purposes such as those listed under the section “What do We use Your personal information for?” For example, providers offering services such as customer relationship management (CRM), product analytics, website analytics, marketing automation, data enrichment, performance and error monitoring, infrastructure monitoring, fraud detection, business intelligence, data warehousing, payment processing, event management, collaboration, accounting, forecasting, investor and board reporting etc. as well as advertising partners and ad networks.

• Auditors, accountants, lawyers and other professional advisers: They assist Us in compliance with accounting and other business requirements, advise on various legal aspects, prevent violation of law and ensure compliance with applicable laws.

• Investors, potential buyers or successors, insurance companies and financial institutions: We may disclose Your information to current investors for reporting, to potential investors, to potential buyers, successors or other persons in the event of an actual or potential merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of, or investment in some or all of Our assets, including bankruptcy, liquidation or similar proceeding, to financial institutions in case We seek any financial assistance, to insurance companies and to other organisations as part of any KYC requirements.

• Regulators, law enforcement authorities and courts: We may disclose Your information to regulators and law enforcement authorities in case of any request from them for information or where necessary to protect You, third parties or Our rights, and to court or as part of judicial proceedings, arbitration or other dispute resolution mechanism, including to enforce Our agreements and claim remedies available to us.

• Other Third parties You may authorize Us: We may disclose Your information to third parties You authorize Us to disclose to.

Do We transfer any information across borders?

We may process Your personal information outside the jurisdiction in which You are located, including in the United States, European Union, India, Australia. The data protection laws may differ from those in Your jurisdiction and may not provide the same level of data protection compared to the laws in the jurisdiction in which You are located.

However, when We transfer Your personal information internationally, We will rely on frameworks or measures designed to provide appropriate safeguards in compliance with applicable laws, such as execution of Standard Contractual Clauses, binding corporate rules, or another framework deemed adequate by relevant regulators for transfers of personal information originating from the European Economic Area (“EEA”) and United Kingdom (“UK”).

Certification under EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Data Privacy Framework

Chargebee participates in and complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. Chargebee has certified to the U.S. Department of Commerce that it adheres to (a) the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles), with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar if applicable) in reliance on the UK Extension to the EU-U.S. DPF; and (b) Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles, UK extension to the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view Our certification, please visit https://www.dataprivacyframework.gov/.

When Chargebee transfers personal data as a data controller to a third party acting as an agent on Our behalf, We shall remain liable under the EU-U.S. DPF Principles, UK extension to the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, as applicable, if any third party that We share Your information with processes Your information in a manner inconsistent with the EU-U.S. DPF Principles, UK extension to the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF EU-U.S. DPF Principles, unless We prove that We are not responsible for the event giving rise to the damage.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Chargebee commits to

• (a) Resolve DPF Principles-related complaints about Our collection and use of Your personal data. EU, UK and Swiss individuals with inquiries or complaints regarding Our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Us at privacy@chargebee.com. The contact details of Our EU representative are provided under the ‘Contact Us’ section below.

• (b) Cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) with regard to unresolved complaints concerning Our handling of personal data received in reliance on the EU-U.S. DPF, the UK Information Commissioner’s Office (ICO) (and the Gibraltar Regulatory Authority (GRA)) with regard to unresolved complaints concerning Our handling of personal data received in reliance on the UK Extension to the EU-U.S. DPF, and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning Our handling of personal data received in reliance on the EU-U.S. DPF, UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

The Federal Trade Commission has jurisdiction over Chargebee’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain circumstances, We may be required to disclose personal data in response to the lawful requests by public authorities, including to meet national security or law enforcement requirements.

An EU, UK or Swiss individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms (additional information can be found in Annex I to the DPF).

What Rights do You have?

We have described below certain privacy rights We may offer to You depending on the data protection law that applies. There may be limitations or exceptions that apply to Your request in accordance with applicable data protection law. We have described these rights generally, without noting all applicable or potentially applicable limitations or exceptions. When You make a request, We may provide more information regarding any legal requirements applicable to Your request and whether any exception or limitation applies.

• Right to access Your personal information held by Us;

• Right to rectify inaccurate or complete any incomplete personal information;

• Right to erase or delete Your personal information;

• Right to object or restrict Our processing of Your personal information in specific circumstances;

• Right to receive personal information provided concerning You that You have provided to Us or transfer such information to another entity in a structured, commonly accepted, and machine-readable format;

• If and to the extent the processing is based on consent, you may have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (such as withdrawal of consent to receive marketing communications); and

• Right to lodge a complaint with a relevant supervisory authority.

If You are a California resident, please see the Additional information for California residents section below.

How can You exercise Your rights or make privacy choices?

In order to exercise Your rights, You may contact Us at the email address set forth in the ‘Contact Us’ section below with details of the right You intend to exercise, the details or nature of personal information with respect to which You intend to exercise the right, Your location, and where known, the law under which You are exercising this right. Alternatively, You may submit a request here. In certain cases, We might require additional information from You in order to address Your request or to verify Your identity.

Where We have made available specific ways to opt-out of certain communications and processing, We encourage You to exercise Your rights using such specified ways, such as,

• For cookies: You can opt-out by selecting Your preferences in the shield widget available on the bottom left corner of Our Website. While You can control the use of cookies at the individual browser level, choosing to disable certain cookies may limit Your use of certain features or functions on Our Website, product or services.

• For marketing communications that You receive from Us or on Our behalf: We encourage You to exercise Your opt-out using the ‘unsubscribe’ or similar option provided in such marketing communication. Please note that opting out of marketing communications does not opt You out of receiving communications related to any existing relationship with Us, such as communications about products and services You have subscribed to, such as maintenance, downtimes, security information and about events and programs You have registered or opted in for.

• For exercising Your rights as a user of Our products and services: You may exercise Your rights using the various functionalities available to You in Your use of the products and services, including by updating Your settings, preferences and profile information within Your account.

• For targeted or cross-context behavioral advertising : Some of the advertisers and service providers that perform advertising-related services for Us may participate in the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. To learn more about how You can exercise certain choices regarding these companies’ advertising activities, visit http://www.aboutads.info/choices/. Some of these companies may also be members of the Network Advertising Initiative (“NAI”). To learn more about the NAI and Your opt-out options for their members, see http://www.networkadvertising.org/choices/. Please be aware that opting out only means that those selected members should no longer deliver certain interest-based advertising to You but does not mean You will no longer receive any targeted content and/or ads (e.g., from other ad networks). Also, if Your browser is configured to reject cookies when You visit these opt-out webpages, or You subsequently erase Your cookies, or use a different device or web browser, Your NAI/DAA browser-based opt-out may not be effective.

Kindly note, some web browsers and mobile operating systems offer a “Do Not Track” setting that You can activate to signal Your preference not to have information about Your online browsing activities monitored and collected. Currently, Our Website, products and services do not recognize “Do Not Track” signals.

Third party personal information processing

Third Party links: In certain cases, We may include links to third party websites and products. These third party websites and products have separate and independent terms and privacy policies. Since We neither own nor control such websites and products, We are not responsible or liable for the content and activities of these websites or products. We encourage You to review those third parties’ terms and privacy policies to understand their privacy practices.

Blogs: Our Websites may include references to publicly accessible blogs. The comments on Our blog may be managed by a third party application that may require You to register to post a comment. We do not have access or control of the information posted to the blog comments. You will need to contact or login into the third party application if You want Your personal information that was posted to the comments section removed. To learn how the third party application uses Your information, please review their privacy policy.

Children’s personal information

Our Website is not intended for use by individuals under the age of 18 years or who are otherwise considered as minors under the law they are subject to, and consequently, such individuals are prohibited from using Our Website or engaging with Us. We do not knowingly collect any personal information from such individuals and You are also prohibited from sharing personal information pertaining to such individuals to Us. If You are a parent or legal guardian and believe Your child has given Us information and You did not provide consent, please contact Us at the email and address provided below under “Contact Us”.

Additional information for California residents

This section provides additional details about the personal information We collect about California residents as required by the CCPA. For avoidance of doubt, this section applies only to California residents and their personal information We collect as a Business (as defined in the CCPA). This section does not address or apply to Our handling of personal information or deidentified information that is exempt under the CCPA or the personal information that We handle in our capacity as a Service Provider (as defined in the CCPA) on behalf of Our customers.

• Collection and Sources of Personal Information. The categories of personal information We have collected in the last twelve (12) months and that We may collect include :

  • Identifiers;

  • Commercial information;

  • Internet or other electronic network activity information;

  • Geolocation data;

  • Audio, electronic, visual, or similar information;

  • Professional or employment-related information;

  • Education information; and

  • Inferences drawn from any of the above.

  We may obtain these categories of personal information from the sources discussed in the “What personal information do We collect about You?” section above.

• Purposes of Collection. We collect this personal information for the business purposes described in the "What do We use Your personal information for?" section above. Notwithstanding the foregoing, we do not use, disclose, or otherwise process personal information defined as sensitive personal information under the CCPA for purpose inconsistent with those in California Code of Regulations tit. 11, § 7027(m).

• Disclosure of Personal Information. We have disclosed the categories of personal information listed in clause 1 above for a business purpose in the twelve (12) months and may disclose such personal information to service providers, contractors or other third parties who support Our business and as otherwise described in the "Do We disclose Your information to Third Parties?" section above.

• Sale and Sharing of Personal Information.

  While We do not “sell” personal information in the traditional sense (i.e., for money), CCPA defines “sale” very broadly and We may be considered as “selling” personal information as that term is defined in the CCPA through Our use of third-party analytics and advertising cookies. We may also “share” personal information, as defined in the CCPA, for cross-context behavioral advertising purposes with unaffiliated third parties. Cross-context behavioral advertising means displaying advertising to You based on personal information obtained or inferred from Your activities over time across different websites, applications, or other online services We do not operate. In the twelve (12) months prior to the effective date of this Privacy Notice, We may have sold/shared (as defined under the CCPA) the following categories of personal information to facilitate Our advertising efforts:

  • Commercial information.

  • Internet or other electronic network activity information, such as Your interaction with Our website and services (via the use of third-party cookies and similar tools).

  • Inferences drawn from any of the above.

  We may “sell” or “share” these categories of information with advertising partners and ad networks that enable or participate in cross-context behavioral advertising, social media platforms, analytics partners, and providers of technologies like cookies, session replay, pixels, web beacons, and other online tracking technologies We may use to automatically collect information about You. We may engage in sales and sharing of personal information for cross-context behavioral advertising for purposes of delivering or facilitating cross-context behavioral advertising, marketing and performing analytics.

  Additionally, We do not and will not sell personal information or share personal information for cross-context behavioral advertising if We have actual knowledge that a consumer is less than 16 years of age. We do not have actual knowledge that We “sell” or “share” personal information from individuals under 16 years of age. To exercise Your right to opt-out of sale/sharing, please see below.

• Your Rights.

  Rights of the residents of the State of California : You have certain rights, subject to certain limitations under applicable law, with respect to Your personal information, including:

  1. With respect to personal information collected about You in the twelve (12) months prior to the effective date of this Privacy Notice, right to request for:

     • The categories of personal information We collected about You;

     • The categories of sources from which We collected Your personal information;

     • Our business or commercial purpose for collecting Your personal information, selling Your personal information, or sharing Your personal information for cross-context behavioral advertising purposes;

     • The categories of third parties with whom We shared that information; and

     • The specific pieces of personal information We collected about You.

     • If We sell Your personal information, share Your personal information for cross-context behavioral advertising purposes, or disclose Your personal information about you, the categories of Your personal information that We sold, shared for cross-context behavioral advertising, or disclosed during the applicable time period of Your request.

  2. The right to request the correction of inaccurate personal information collected. We will take in account the nature of the personal information and the purposes of Our processing when We address Your request.

  3. Subject to certain exceptions, the right to request deletion of Your personal information.

  4. The right to "opt out" of any sale of personal information or sharing of personal information if such sale or sharing occurs. You may exercise this right by clicking the “Do not sell or share my personal information” link in the website footer.

  5. The right to request to receive a copy of Your personal information in a readily-usable format to the extent feasible.

  6. The right to limit use and disclosure of sensitive personal information in specific instances as set forth in CCPA.

  7. The right not to be discriminated against for exercising Your rights under CCPA.

Your Privacy Rights Under the California “Shine the Light” Law

California residents who have an established business relationship with Us may request information about disclosures of certain personal information (as defined in California’s “Shine the Light” law) during the preceding year, if any, to third parties for those parties’ own direct marketing use. If You are a California resident with an established business relationship with Us and wish to exercise rights under the “Shine the Light” law, please send Your written request by mail to Chargebee Inc. ATTN: “Shine the Light” Privacy Request 909 Rose Avenue, Suite 950, North Bethesda, MD 20852. Please include in Your request your California address of residency.

Exercising California Access, Data Portability, Deletion, or Correction Privacy Rights

California consumers or an authorized agent that You authorize to act on behalf may make a request to exercise rights under the CCPA by contacting Us at privacy@chargebee.com or via mail to Our postal address set forth above. Your request must provide information sufficient to permit Us to reasonably verify that You are the person about whom We collected personal information or an authorized agent. In order to verify Your request, We may ask You to provide information such as Your first and last name, email address, mailing address, and any other information necessary to verify Your identity or that You are an authorized agent of the requestor. Your request must also include sufficient detail for Us to properly understand, evaluate, and respond to it.

If We are unable to verify Your identity after a good faith attempt, We may deny the request and, if so, We will explain the basis for the denial.

Changes to Our Privacy Notice

We may change or update this Privacy Notice from time to time. If We change or update this Privacy Notice, We will update the Effective and Last Updated date at the top of the page. If We make any material changes adversely affecting Your rights, We may notify You (for example, by means of a notice or banner on this website, or where You are a customer of Chargebee, by sending a notice to an email address associated with Your account, or through an in-product banner or notification). We encourage You to periodically review this page for the latest information on Our privacy practices.

Contact Us

If You have there are any questions regarding this Privacy Notice, or Chargebee’s privacy practices, You may contact Us at:

• Details of Chargebee
  Chargebee Inc.
  909 Rose Avenue, Suite 950, North Bethesda, MD 20852
  privacy@chargebee.com

• Contact details of Our EU representative:
  Chargebee B.V.
  Piet Heinkade 55
  1019GM Amsterdam
  Netherlands
  privacy@chargebee.com

• Contact details of Our UK representative:
  Prighter Group
  Contact at https://app.prighter.com/portal/12271578810