Privacy Policy

About this Policy

This Privacy Policy applies to the personal information that we obtain in various contexts from various Brand Partners and other sources. We use the term “personal information” – also called “personal data” or “personally identifiable information” in the laws of some jurisdictions – to refer to any information identifying, relating to, describing, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual or household.

We collect data that is not readily identifiable to you or otherwise associated with you, such as aggregated data, and is not personal information. To the extent this data is stored or associated with personal information, it will be treated as personal information; otherwise, the data is not subject to this Privacy Policy.

As described below in this Privacy Policy, the types of personal information we collect about you depends on your interactions with us and your use of the Site.

Certain links included in this Policy may direct you to region-specific content. To access our supplemental state law privacy statements, please visit U.S. State Privacy Rights linked here.

At PebblePost, your personal information will be stored and processed in the United States. If you are using the Site from outside the United States, by your use of the Site you acknowledge that we will transfer your data to, and store your personal information in, the United States, which may have different data protection rules than in your country, and personal information may become accessible as permitted by law in the United States, including to law enforcement and/or national security authorities in the United States.

Personal data we collect about you

We collect personal information directly from you when you use our Site and via our Brand Partners based on where you are located. We also collect personal information automatically or indirectly from you through logging tools, cookies, pixel tags, similar tracking technologies, and as a result of your use of and access to the Site and other websites. 

When you visit or interact with our Site or communications, we, our Vendors, and our third-party partners may collect several types of information related to you or your device and your use of our Platform. This information may include:

The sources of information are collected via cookies, pixels, and information you share from us or through third parties. In the past one hundred and eighty (180) days, we may have collected the below categories of personal information from you when you use PebblePost’s Site either automatically or by the information you have provided:

Data Category	Statutory Data Category (California)	Categories of information collected	Sold or Shared for a Commercial Purpose
Personally Identified Information	Identifiers	Online identifiers, such as your Internet protocol (IP) address or device or advertising ID. Device information, such as your mobile device manufacturer and model, operating system type and version number, browser type, screen resolution, device type (phone, laptop, tablet, etc.), language settings, or your wireless carrier or internet service provider,	PebblePost may sell/share identifiers in the course of delivery of its Services.
Customer Relationship Management	Identifiers Commercial Information Inferences drawn from other personal information	Online activity information, such as Site access times, websites that referred you to us, web pages within our Site that you visit, your navigation paths on the Site, or whether you have opened our emails or clicked on links within them.	PebblePost may sell/share related customer data in the course of delivery of its Services.
Pseudonymous IDs	Internet or other similar electronic network activity	Internet or other electronic network activity information, such as information collected for advertising partners or through online forms. Professional related information, such as professional emails, business address, and other business related information. Marketing Preferences and Choices, such as an opt-out, unsubscribe, or other request or preference that you share with us.	PebblePost may sell/share Pseudonymous IDs in the course of delivery of its Services.
Attribute Data	Inferences drawn from other personal information Commercial Information Internet or other similar electronic network activity	PebblePost may disclose Attribute Data to our service providers under contracts that limit their use of data to that which is necessary to provide contracted services. PebblePost may disclose Attribute Data at the direction of and on behalf of our clients, including, e.g. to the business customer that owns the data or, at their direction, to their service providers, agents, or other designated recipients.	PebblePost may sell/share Attribute Data in the course of delivery of its services.
Precise Geolocation	Geolocation Data	PebblePost does not collect, receive, or process precise geolocation data. Under applicable state privacy laws, “precise geolocation data” means data derived from a device that identifies an individual’s location within a radius of 1,850 feet or less.	PebblePost does not sell, share, or otherwise process precise geolocation data.

We, our Vendors, and our third-party partners use cookies and similar technologies—a common practice among online services—to automatically gather certain personal information and other data. This collection includes information about you, your device, and your activity over time on our Platform and Site, as well as on other products and online services.

Cookies and Similar Technology. “Cookies” are pieces of information that may be placed on your computer by a website for the purpose of collecting data to facilitate and enhance your communication and interaction with that website. Such data may include, for example, the address of the websites you visited before and after you visited our Site, the type of browser you are using, your Internet Protocol (IP) address, what pages on the Site you visited and what links you clicked on, the region where your device is located, and geographic information based on your IP data. To learn more about cookies and similar tracking technologies please follow the link here. 

We may store some information on your device or device hard drive as a cookie or similar type of file (such as clear gifs, web beacons, tags, and similar technologies that work on mobile devices) to collect data related to usage of the Site. We may also use cookies to customize your visit to the Site and for other purposes to make your visit more convenient or to enable us to enhance the Site.

Functional and Performance Cookies. We may work with third-party Vendors who use the technologies described in this section to conduct website analytics to help us track and understand how visitors use our Site. One such provider is Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help analyze how users use the Website. The information generated by these cookies about your use (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Google will use this information for the purpose of evaluating your use of the Website, compiling reports on activity for its staff, and providing other services relating to web page activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You may refuse the use of cookies by selecting the appropriate settings in your browser. By using the Website and accepting cookies, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Targeting Cookies. These cookies may be set through our Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites, products, or other channels like CTV or via mail. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

If you interact with us on social media or use features, such as plugins, widgets, or other tools made available by social media platforms or networks (such as Instagram, Facebook, X, Google, or LinkedIn) in connection with the Site, we may collect information that you share with us on social media or that such platforms share with us. Please review the privacy policies and settings of the social media platforms and networks that you use for more information about their privacy practices.

Links and Resources. 

Please refer to the currently available opt-outs for Google Analytics by visiting:
Google Analytics Opt-out Browser Add-on Download Page.

You may obtain additional information about Google Analytics by visiting the section titled “How Google uses information from sites or apps that use our services,” located at:
How Google uses information from sites or apps that use our services.

Further information on cookies is available at:
https://www.allaboutcookies.org/

For the specifics of how and which cookies PebblePost uses, this is available by visiting:

PebblePost Cookie Policy

Our purpose for using your personal data

We use personal information collected to contact you regarding our Services, and to remember your preferences. Some of the purposes of any collection, processing, or sharing includes but is not limited to the following:

1. Communicate with you about our products and services.
2. Communicate with you via email to provide certain information to access our blogs or to download certain information on the website.
3. Review your job application.
4. Provide you content, including but not limited to newsletters or blog posts.
5. Serve other purposes for which we provide specific notice at the time of collection.
6. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity.
7. As otherwise authorized or required by applicable law.
8. As necessary or appropriate to protect the rights, property, and safety of our users, us, and other third parties.
   

We may disclose your information as we believe necessary or appropriate to:

• Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• Investigate fraud or violations of law or of any party’s rights, including our Terms of Use (https://www.pebblepost.com/terms-of-use/).Your privacy rights and keeping your personal data safe
• Allow us to pursue available remedies or limit the damages that we may sustain.

We share personal information with vendors we engage to support our operations (such as hosting providers, email vendors, and printing partners) (“Vendors”). Such Vendors are only authorized to use personal information in connection with their performance of services for PebblePost and for no independent purpose. Note: PebblePost itself acts as a Third Party — not a service provider — when it receives and processes Brand Partner consumer data, as described in the Brand Partners section below.

We may share your personal information with business and advertising partners who partner with us to promote products and services, provide marketing and advertisements, conduct data analytics, or use the data for other commercial purposes. We do not control how these third parties use and share your personal information once they receive it. You will need to contact such third parties directly for information about their privacy practices or to exercise any rights you may have (including if you would like to opt out of marketing messages).

We may, in the future, sell or otherwise transfer some or all of our business, operations, or assets to a third party, whether by merger, acquisition, or otherwise. Personal information we obtain from or about you may be disclosed to any potential or actual third-party acquirers and may be among those assets transferred.

PebblePost does not use or disclose personal information other than as described in the above chart, except for the following circumstances: (1) To (i) comply with US laws and/or regulations or to respond to lawful requests and legal process in US civil, criminal or investigative matters, (ii) enforce agreements, our terms and conditions, and policies, and protect our rights and property as the site owner, and (iii) in an emergency to protect the life or personal safety of PebblePost, its customers, or any person; (2) In an aggregated or de-identified form that does not directly identify you; and (3) PebblePost may send our own advertisements (marketing campaign emails, for example) to businesses. If you would like to discontinue receiving this content, you may update your marketing preferences by selecting the “Unsubscribe” link found in emails we send to you. 

Global Privacy Control (GPC) signals. PebblePost honors Global Privacy Control (“GPC”) signals as a valid opt-out of the sale or sharing of personal information and the processing of personal information for targeted advertising, as required by applicable state laws. When a browser transmits a GPC signal to our Site, we treat it as an opt-out request and suppress sale, sharing, and targeted advertising for that visitor. Please see the sections titled U.S. State Privacy Rights below.

Links to Other Websites. We may link to content contained on other websites. We are not responsible for the content of other websites and your use of those websites is subject to the privacy practices of those websites.

The Services may also integrate with social media services. We do not control such services and are not liable for the manner in which they operate. While we may provide you with the ability to use such services in connection with the Services, we are doing so merely as an accommodation and, like you, are relying upon those third-party services to operate properly and fairly.

Your privacy rights and keeping your personal data safe

Rights For Residents of Covered States with State Privacy Laws

This section describes the broad rights of consumers from Covered States and explains how to exercise those rights. To be clear, these rights are granted only to the extent that you are considered a consumer of Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information. The categories of personal information we process, our purposes for processing your personal information, the categories of personal information that we share with third parties, or sell (commercial purpose) your personal information to different third parties, as detailed above. Certain states have more unique or specific reference policies that we list below – if you are located in Nevada, California, or Connecticut go to those sections. See below the enumerated rights you can exercise:

State (“Covered States”)	Law / Bill Name (Collectively “State Privacy Laws”)	Year Enacted & Effective Date
California	CCPA California Consumer Privacy Act	2018; effective Jan. 1, 2020
Colorado	SB 190 Colorado Privacy Act	2021; effective July 1, 2023
Connecticut	SB 6 Connecticut Data Privacy Act	2022; effective July 1, 2023
Delaware	HB 154 Delaware Personal Data Privacy Act	2023; effective Jan. 1, 2025
Indiana	SB 5 Indiana Consumer Data Protection Act	2023; effective Jan. 1, 2026
Iowa	SF 262 Iowa Consumer Data Protection Act	2023; effective Jan. 1, 2025
Kentucky	HB 15 Kentucky Consumer Data Protection Act	2024; effective Jan. 1, 2026
Maryland	SB 541 Maryland Online Data Privacy Act	2024; effective Oct. 1, 2025
Minnesota	HF 4757 Minnesota Consumer Data Privacy Act	2024; effective July 31, 2025
Montana	SB 384 Montana Consumer Data Privacy Act	2023; effective Oct. 1, 2024
Nebraska	LB 1074 Nebraska Data Privacy Act	2024; effective Jan. 1, 2025
New Hampshire	SB 255	2024; effective Jan. 1, 2025
New Jersey	SB 332	2024; effective Jan. 15, 2025
Oklahoma	SB 546	2026; effective Jan. 1, 2027
Oregon	SB 619 Oregon Consumer Privacy Act	2023; effective July 1, 2024
Rhode Island	H 7787 Rhode Island Data Transparency and Privacy Protection Act	2024; effective Jan. 1, 2026
Tennessee	HB 1181 Tennessee Information Protection Act	2023; effective July 1, 2025
Texas	HB 4 Texas Data Privacy and Security Act	2023; effective July 1, 2024
Utah	SB 227 Utah Consumer Privacy Act	2022; effective Dec. 31, 2023
Virginia	Virginia Consumer Data Protection Act (VCDPA)*	2021; effective Jan. 1, 2023

Right to Delete	You may request that we delete any personal information we possess about you, subject to certain exceptions as provided under State Privacy Laws.
Right to Know	You may request that we disclose certain information to you about the personal information we collected, used, disclosed, and shared about you in the past 12 months. This includes a request to know any or all of the following: the categories of personal information collected about you, the categories of sources from which the personal information is collected, the purpose for collecting and selling the personal information, the categories of third parties with whom we share the personal information, and the specific pieces of personal information collected about you. Delaware residents have the right to obtain a list of the categories of third parties to which we have disclosed personal information, and Oregon residents may obtain a list of the specific third parties to which we have disclosed personal information.
Right to Data Portability	You have the right to request a copy of the personal information we have collected and maintained about you in the past 12 months.
Right to Correct	You have the right to correct inaccurate personal information that we have collected and maintained about you.
Right to Opt-Out	You have the right to opt out of the processing of your personal information for purposes of: (i) targeted advertising; and (ii) the sale of personal information. As of the latest date of the Privacy Policy, we use certain advertising cookies, pixels, or tags to serve targeted online ads and to measure their effectiveness, including ads that are selected based on personal information obtained from your activities over time. We may sell or share your personal information in exchange for monetary or other valuable consideration or engage in profiling decisions based on your personal information that produce legal or similarly significant effects concerning you. To opt out of selling or sharing your data, please click here to visit the “Do Not Sell or Share My Information” webpage.
Automated Decision Making Opt-Out/ Cross-Context Behavioral Advertising	We may utilize automated decision-making technologies to process your personal information. This includes any system, software, or process powered by artificial intelligence, machine learning, or statistical analysis that makes, executes, or assists humans in making decisions, including user profiling.  You have the right to request access to information regarding our use of automated decision-making technologies and the right to opt-out of these processes. You may have the right to opt out of our use of your personal information for purposes of profiling, targeted advertising, or cross-context behavioral advertising.
Right to Appeal	If you believe you have been denied any of your consumer privacy rights in error, you may have the right to appeal by replying to your denial message or any communication from us.

If you wish to opt out of the processing of your personal information for any of the above purposes, or opt back in, please submit your request via our Privacy Center linked here. 

We do not process, sell, or share the personal information of persons under 18 years of age. If you become aware or believe that to be the case of such, please send an email to privacy@pebblepost.com immediately. 

We do not discriminate against you for exercising any of your privacy rights above. Unless permitted by the State Privacy Laws, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services; or
• Suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services.

Connecticut Privacy Rights

The Connecticut Act Concerning Personal Data Privacy and Online Monitoring (CTDPA) gives Connecticut residents certain rights over their personal data and establishes responsibilities and privacy protection standards for data controllers that process personal data. It protects a Connecticut resident acting in an individual or household context, such as browsing the Internet or making a purchase at a store. It does not protect an individual acting in an employment context, such as applying for a job. Under the CTDPA, PebblePost acts a controller of your personal data and will respect and fulfill your enumerated rights: (i) right to access; (ii) right to correct; (iii) right to delete; (iv) right to obtain a copy of your personal data; (v) the right to opt-out of the sale and processing of your personal data; and (vi) PebblePost’s responsibility to respect global opt-out requests.

Data Broker Status

PebblePost is a registered Data Broker in California, Texas, Vermont,  and Oregon. Each state  requires registration before being able to share or sell personal data. If you are a resident of one of these four States you have special rights to be able to opt-out and we recommend that you refer to your respective State run websites for more information. In compliance with these states you have the access to various opt-out mechanisms linked here. 

FOR TEXAS RESIDENTS, PEBBLEPOST IS A REGISTERED DATA BROKER IN THE STATE OF TEXAS. DATA BROKERS ARE REQUIRED BY TEXAS LAW TO REGISTER WITH THE TEXAS SECRETARY OF STATE (TEXAS SOS) TO OPERATE WITHIN THE STATE.

The entity maintaining this website is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website. For more information on the Texas Notice Requirements please follow the link here.

For California residents only, PebblePost has integrated with the Delete Request and Opt-Out Platform (“DROP”) to accommodate global delete requests via that system. For more information please follow the link to the California Delete Request and Opt-out Platform (DROP). 

Exercising your privacy rights

Where permitted by applicable law, you  may exercise your rights above, free of charge, by:

• Complete the form located here.
• Send requests to privacy@pebblepost.com.
• Mail in your request to us by completing all of the information indicated in the form (linked here) and mailing the form to:

PebblePost, Inc.
Attn: Privacy Officer
Address: 1178 Broadway, 3rd Floor, #4505,
New York, NY 10001

After submitting a request, we may take steps to verify your identity in order for us to properly respond and confirm that it is not a fraudulent request. In order to verify your identity, we will ask, at a minimum, that you provide your name and email address so that we can seek to match this information with the information existing in our systems. Depending on the request you submit we may require your mailing address, this includes the unit number for apartments, condos, triplexes, and duplexes. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected personal information, we may contact you for more information, or we may not be able to meet your request. Only you (or for California residents, an agent legally authorized to act on your behalf) may make a verifiable request related to your personal information. If you are making a request as the authorized agent of a California consumer, we will ask you to also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf. 

Nevada Privacy Rights

Chapter 603A of the Nevada Revised Statutes permits Nevada residents to opt out of the sale of covered personal information. PebblePost may sell personal information of Nevada residents for monetary consideration. We honor opt-out requests as prescribed by law. To submit a request, please email privacy@pebblepost.com or submit a request via our Privacy Center.

California Privacy Rights

Under California Civil Code Section 1798.83 (“Shine the Light”), California residents may have the right to request in writing from businesses with whom they have an established business relationship: (a) a list of the categories of personal information, as defined under Shine the Light, such as name, email address, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To submit a California Shine the Light request, please email privacy@pebblepost.com with the subject line “California Shine the Light Request” and include your name and email address.

Appeals and Responses

We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, State Privacy Laws allow us up to 90 days to respond. We will contact you within 45 days from when you contacted us to inform you of the need for additional time and the reason for such extension. We may charge you a reasonable fee to cover administrative costs if your requests are manifestly unfounded, excessive, or repetitive.

If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. Depending on your state of residence, you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (45 days for residents of Colorado) of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.

Data Subject Requests 

Pursuant to California regulations, businesses that handle the personal information of 10 million or more California residents annually for commercial purposes must publicly share their Data Subject Request (DSR) metrics by July 1. This disclosure includes the volume of access, deletion, and “Do Not Sell” requests received, the fulfillment status of those requests, and the average response time.

The PebblePost Privacy Rights Report for the 2025 calendar year is detailed in the table below. As a registered data broker under California law, these metrics encompass all relevant PebblePost data operations.

Type of Request	Number of Requests Received	Number of Requests Complied with in Whole or In Part	Number of Requests Denied	Average Duration to Resolve (in Days)
Access My Information	0	0	0	N/A
Delete Information Known About Me	25	19	6	26.46
Disclose Information Known About Me	4	2	2	21.12
Do Not Sell or Share My Personal Information	31	23	8	21.60
Opt Me Out of Receiving Mail	44	37	7	29.59
Request to Delete Personal Information	7	4	3	26.22

Brand Partners Use Of Our Services

In the past twelve (12) months, we collected the below categories of personal information from consumers when Brand Partners use  our Services:

• Identifiers (such as your name, email address, and physical address)
• Internet or other electronic network activity information (such as cookies and mobile device IDs, and related browsing information)

When Brand Partners use our Services, we may receive personal information from three sources:

1. Brand Partners provide personal information to PebblePost and are required to give their consumers full notice of such personal information collection and provide their consumers with the ability to opt out of the collection or sale of their personal information in compliance with all applicable laws.
2. PebblePost collects personal information through PebblePost’s JavaScript tag (i.e., PebblePost’s programming language) when consumers visit Brand Partners’ sites. Brand Partners are required to notify consumers of such collection and provide consumers with the ability to opt out of the collection or sale of their personal information in compliance with all applicable laws.
3. PebblePost receives online and offline information from our Vendors to facilitate the Services, and maintains databases of such information. Vendors comply with all applicable laws in providing consumers notice and the ability to opt out of the collection or sale of personal information. The provision of the Services to Brand Partners may include working with third-party Vendors to match online data with mailing addresses of Brand Partners’ consumers.

Business purpose for collecting and receiving consumers’ personal information:
PebblePost uses consumers’ personal information in order to provide the Services to Brand Partners, match corresponding CTV campaigns to potential consumers, and the mailing of direct mail marketing pieces to consumers’ mailing addresses on behalf of Brand Partners, 

Categories and purposes for sharing consumers’ personal information with Vendors:
These include but are not limited to:

• Providing Services to Brand Partners to deliver direct mail pieces to consumer mailing addresses and CTV campaigns.
• Investigation of suspected fraud or violations of law or of any party’s rights.
• Sharing with Vendors engaged by PebblePost to facilitate the Services (such as printing partners, data matching providers, and hosting providers), solely as authorized to perform services for PebblePost. For clarity, PebblePost receives and uses Brand Partner consumer data as a Third Party — not a service provider — for purposes that include enhancement of the PebblePost identity graph, as further described in this section.

In addition, we may, in the future, share or transfer some or all of our business, operations, or assets to a third party, whether by merger, acquisition, or otherwise. Personal information we obtain about consumers when Brand Partners use our Services may be disclosed to any potential or actual third-party acquirers and may be among those assets transferred.

We retain personal information only for as long as there is a legitimate business need, as well as to the extent we deem necessary to carry out the processing activities described above, including but not limited to compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, and to the extent we reasonably deem necessary to protect our and our partners’ rights, property, or safety, and the rights, property, and safety of our users and other third parties.

Artificial Intelligence at PebblePost

We may utilize automated decision-making technologies to process your personal information. This includes any system, software, or process powered by artificial intelligence, machine learning, or statistical analysis that makes, executes, or assists us in making decisions, including user profiling. You have the right to request access to information regarding our use of automated decision-making technologies and the right to opt-out of these processes. For more information on our use of Artificial Intelligence and machine learning please visit PebblePost’s Use of AI and Modeling – FAQs. 

Data Protection and Cybersecurity

We maintain reasonable and appropriate physical, technical, and organizational safeguards designed to promote the security of our systems and protect and secure user and Brand Partner consumers’ personal information. Those safeguards include:

1. The pseudonymization and encryption of personal information where we deem appropriate.
2. Taking steps to ensure personal information is backed up and remains available in the event of a security incident.
3. Periodic testing, assessment, and evaluation of the effectiveness of our safeguards.
4. PebblePost maintains and has placed controls within its Services that upholds commitments and system requirements for SOC 2® compliance. For more information on SOC 2® Certification please see the link here.

However, no method of safeguarding information is completely secure. While we use measures designed to protect personal information, we cannot guarantee that our safeguards will be effective or sufficient. In addition, you should be aware that Internet data transmission is not always secure, and we cannot warrant that information you transmit utilizing the Site is or will be secure.

We know our brands take data protection and cybersecurity seriously. We are dedicated to delivering customer-centric, relevant, and meaningful direct mail campaigns, in ways to help our Brands stay in line with applicable data protection laws.  What is our multi-tiered strategy?   

• We only mail to households leveraging U.S. addresses
• Below is our JavaScript flow to demonstrate another protective layer

• PebblePost works with our Brands to set up their Tag Managers on their site to exclude PebblePost’s JS from being called when any known EU visitors visit the Brand site.
• PebblePost advises our Brands to remove any non-US customers from their customer files when passing such data to PebblePost.
• Leveraging our proprietary technology, we circle back and check again. If PebblePost identifies any Brand IP Address or other online identifier as being related to an EU user in a campaign, PebblePost permanently deletes all related data to that user from our system immediately.

Changes to Privacy Policy
We may change or revise our Privacy Policy from time to time. If we decide to change or revise our Privacy Policy, we will post the revised Privacy Policy on this page with the past version so that you will always know what information we gather, how we might use that information and whether we may disclose it to anyone. Your continued use of the Site indicates your agreement to the Privacy Policy as posted, unless your express consent is required by applicable laws.

This Privacy Policy is subject to the Terms of Use that govern your use of the Site. This Privacy Policy applies regardless of the means used to access or provide information through the Site

This Privacy Policy does not apply to information from or about you collected by any third-party services, applications, or advertisements associated with, or websites linked from, the Site. The collection or receipt of your information by such third parties is subject to their own privacy policies, statements, and practices, and under no circumstances are we responsible or liable for any third party’s compliance therewith.

Notice for Consumers of Our Brand Partners: If your personal data was provided to PebblePost by a Brand Partner, you should reach out to that partner directly for information. You also have the option to request that PebblePost delete your data by using the privacy webform linked below.

PebblePost Site User Communications:
If you wish to stop receiving marketing emails from this Site, please use the “unsubscribe” link found in any Services marketing communication. Requests will be processed within a reasonable timeframe. Opting out may limit your access to specific features of the Services.

Brand Partner Consumer Requests:
To inquire about or delete personal data received via a Brand Partner, you may contact the partner directly or submit a request through the PebblePost Privacy Webform available here.

International Site Visitors:

PebblePost only processes and stores personal data of consumers within the United States and does not intentionally collect information from individuals located elsewhere. Any non-U.S. personal data received inadvertently will be deleted immediately. 

For inquiries concerning this Privacy Policy, please contact us via email at privacy@pebblepost.com. To provide feedback on our privacy procedures or to exercise your relevant data protection rights, you may contact us through the email address provided or by mail at the following location:

PebblePost, Inc.
Attn: Privacy Officer
Address: 1178 Broadway, 3rd Floor, #4505,
New York, NY 10001