Ninth Brain Suite LLC participates in and complies with the EU-U.S. Data Privacy Framework and the UK extension to the EU-U.S. DPF regarding the collection, use, and retention of personal information about you that is transferred from the European Union to the U.S. We have self-certified our commitment to adhere to the Data Privacy Framework Principles for all information about you that is received from the European Union in reliance on the EU-U.S. Data Privacy Framework.

To learn more about the EU-U.S. Data Privacy Framework and the UK extension to the EU-U.S. DPF program, and to view Ninth Brain Suite’s certification, please see the Data Privacy Framework website.

Types of personal data we collect and use
The types of personal data we may receive in the United States, as well as the purposes for which we collect and use it, will vary depending on the services and modules you use. You can find the details applicable to your specific information set out in our full Privacy Policy.

Your choices
Where appropriate or required to do so, we will give you an opportunity to opt out where personal data we control about you is to be disclosed to an independent third party or is to be used for a purpose that is materially different from those set out in the Privacy Policy. If you otherwise wish to limit the use or disclosure of your personal data, please contact us using the contact details below.

Transfer to third parties
Ninth Brain Suite uses a limited number of third-party service providers to assist us in providing our services to customers which are listed on Ninth Brain Suite’s website on the Subprocessors page. These third party providers offer customer service and support to our customers, help protect security and monitor performance, provide in-service communication, or offer hosting and infrastructure services. These third parties may access, process, or store personal data in the course of providing their services. Ninth Brain Suite maintains contracts with these third parties restricting their access, use and disclosure of personal data in compliance with our Data Privacy Framework and the UK extension to the EU-U.S. DPF obligations, including the onward transfer provisions, and Ninth Brain Suite remains liable if they fail to meet those obligations and we are responsible for the event giving rise to damage unless we can prove we are not responsible for the event giving rise to the damage.

Your DPF rights
If you are from the EEA or UK, you have the right to request access to the personal data that we hold about you and request that we correct, amend, or delete it if it is inaccurate or processed in violation of the DPF and the UK extension to the EU-U.S. DPF.

If you would like to exercise these rights, please write to us at the contact details provided below. We may request specific information from you to confirm your identity and we will respond to your request in accordance with the DPF Principles and applicable data protection laws.

You may also opt-out of receiving marketing communications from us by writing to us at the contact details provided below or by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you.

Disclosures for national security or law enforcement
Please note that under certain circumstances, we may be required to disclose your personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Enforcement
Ninth Brain Suite’s compliance with the with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

Questions or complaints
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. DPF, we commit to resolve DPF-related complaints about our collection and use of your personal data. EU and UK individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DP DPF should first contact us by email at privacy@ninthbrain.com or by filling out the form available here.

We will investigate and attempt to resolve any DPF-related complaints or disputes. If you have an unresolved DPF complaint that we have not addressed satisfactorily, we commit to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. These services are provided free of charge to you.

You may also have the option to select binding arbitration for the resolution of your complaint under certain circumstances. For further information, please refer to: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2