App Privacy Policy
Effective Date: July 29, 2026
This Privacy Policy describes how we at Maura collect, use and share your personal data and personal information as defined under applicable data privacy laws (referred to herein as "personal data"), including (1) the types of personal data we collect, (2) from whom we collect personal data, including you as end user consumers ("end users") as well as Partners, including brands, retailers, stylists and concierges as further described below (all of the foregoing as "you," "your," or "users"), (3) the purposes for which we collect it, including in connection with your use of our app, for marketing, or other purposes as well as providing support services; and collecting video, text, and images as may be shared by you (collectively, the "Service(s)," (4) how we use your personal data, (5) with whom we may share or sell your personal data, (6) what choices and rights are available to you with respect to the use of your personal data, and (6) our compliance efforts to protect your personal data.
You may be reading this Privacy Policy as a user of our app and Services or where we have provided a white labelled version to one of our corporate customers ("Partners").
- CALIFORNIA USERS NOTICE, CHOICE AND OPTING OUT: See Section 8 for the California notice and information about your choices regarding opting out of the sale of your personal data, opting out of cookies, opting out of specific types of advertising, and opting out of use of precise location.
- ADDITIONAL RIGHTS FOR OPTING OUT: In addition to California residents' rights for opting-out, see your rights to opt-out in Section 5.
- OTHER UNITED STATES USER RIGHTS: Rights under other US data protection laws are described in Section 9.
- EEA, SWISS, AND UK USERS' RIGHTS: See EEA, Swiss, & UK Data Subject Rights in Section 7.
- CONTACT: If you have questions or wish to contact us, see Section 13.
We reserve the right to change this Privacy Policy from time to time by posting a new version on our website or within the app. Please consult this Privacy Policy regularly for updates. See Changes to this Privacy Policy in Section 14.
POLICY OVERVIEW
Who We Are
BLOS Platforms Inc. ("Maura") has its principal place of business in the USA. To contact us or exercise your privacy rights, see Section 13. This Privacy Policy applies to Maura and any of its affiliates as may exist from time to time.
More information about Maura can be found at Maura's website found at https://www.maurainc.com/.
Data Processing Roles
For purposes of data protection laws in the European Economic Area ("EEA"), Switzerland, and UK, depending on the purpose for which you use our mobile app and related Services, with respect to the processing of your personal data as described in this Privacy Policy, we act as a data controller; or under the California Consumer Protection Act as a business or services provider (or similar designations under other data protection laws).
Who this Policy Applies to
This Privacy Policy applies to all users of our mobile app and related Services. Our privacy policy posted on our web app applies to our Partner clients' use of our web app.
As a consumer user of our app or Services, you hereby agree to be bound by our terms and conditions found at ______ and any other policies referenced herein, and you acknowledge that you have read and understand this Privacy Policy. This Privacy Policy is not a contract and does not create any legal rights or obligations. You may be shown and required to accept user terms, participation terms, or enter into a contract or other terms of service (collectively as "terms of service") before enrolling, using, or interacting with the Services. To the extent you are a Partner or are using the Services as an employee of a Partner (including as a stylist), if you or your employer has entered into a written agreement with Maura, your use of the Services is primarily covered by the written agreement. In the event the terms of service or written agreement provide more precise or additional information about how we process your personal data, such terms apply in addition to those in this Privacy Policy.
More detailed information regarding this Privacy Policy can be found in Sections 1 through 14 below.
- Section 1: We Collect personal data From and About You; Categories of personal data
- Section 2: We Collect personal data From Various Sources
- Section 3: How We Use Your personal data
- Section 4: We Disclose, Share and Sell personal data to Others
- Section 5: You Choices About How We Use Your personal data
- Section 6: We transfer and process personal data in the United States
- Section 7: Your EEA, Swiss, UK Privacy Rights
- Section 8: California Notice
- Section 9: Other US Data Protection Laws
- Section 10: Information Security
- Section 11: Not For Children
- Section 12: Third Party Links
- Section 13: How to Contact Us
- Section 14: Changes to this Privacy Policy
Section 1: We Collect personal data From and About You; Categories of personal data
We (and the third party service providers we hire to perform business functions on our behalf — see section 4 for more detail) may collect, receive, process, and use various categories of personal data about you. The type of personal data we collect about you depends on the nature of your interactions with us and the purposes for which you are using the Services or app. Such personal data may include the following:
- Contact Information:
- name
- email address
- address (residential or business)
- telephone
- birthday
- customer ID and login details
- Profile and Account Information:
- Preferences
- Activity information
- Invitation to Maura
- Tier
- Family and Marital status and partner/spouse information, including number of children and anniversary details
- Travel habits and preferences
- Comments (on own content)
- Clothing related attributes, as drafted by AI and as confirmed by you, such as material, fit, size, price, brand, sale source, patterns, and feature details such as closures or colors
- Clothing (including photos of clothing you submit), preferences looks, collections and inspirations
- Use of clothing for example in looks, how long it remains in your closet and how clothing is combined for styles etc.
- Purchase history (from Partners where relevant and shared by Partners) including purchases initiated on Maura
- Style attributes (such as business, casual, occasion)
- Social media account
- Partner User Information:
- User ID and login details
- Employing Partner
- Status
- Recommendations and the performance of recommendations
In some cases the provision of information (e.g. email address and name) may be mandatory: if relevant data is not provided, then we will not be able to provide the app and Services to you. The provision of all other information is optional but not providing it will result in a less personalised Service (including recommendations).
Section 2: We Collect personal data From Various Sources
We collect personal data about you from various sources, directly and indirectly:
- Directly from You: For example, we may prompt you (or you may volunteer) to provide certain personal data if you register on our app or use our Services.
- Our Partners: We may receive end user contact details from our Partners (including brands, concierge services, retailers and more) so that we can invite you to the app. Partner users may also create certain end user data by making recommendations for end users. For Partner users, we will receive your contact details from your employer. We also collect purchase history details from our Partners where your customer journey was initiated with us.
- Third Party Service Providers We Hire to Work on our Behalf: For example, vendors or service providers including network providers, platform service providers, that host, manage, maintain, analyze, translate, or provide other services for our Services including our server platform, infrastructure, or website or send promotional emails for us may collect and provide personal data about you including demographic, geo-location, behavioral, consumer preferences and internet activity related data. Our marketing agencies, advertising technology vendors, and analytics providers may also provide us with personal data about you.
- Third party social media platforms: If you choose to connect to our services by making use of log-in information from a social media or other online platform, we will receive information directly from that social media or online platform, including details such as your name, username and profile picture. We may also share information about your use of our Services in return.
- Automatically from your devices for our Services: We use tracking tools like browser "cookies," pixels, and web beacons to automatically collect information about you, your device, and your usage when you interact with our Services, websites, online content, ads, or emails. A cookie is a small text file containing information that we can read later for our own business purposes. For the Services and associated website, we use strictly necessary and statistical cookies to facilitate your access to our websites, improve your user experience, and analyze website traffic including to count visits and monitor traffic sources so we can measure and improve the performance of our site. These cookies help us to know which pages are the most and least popular and see how you move around the site. If you do not allow these cookies, we will not know when you have visited our site, and we will not be able to monitor its performance. We may share your site usage data with our analytics partners and service providers. In addition to strictly necessary and statistical cookies, we also use marketing and preference cookies to personalize your experience, track your preferences (such as language), customize your experience, and track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organizations or advertisers. These cookies are used to measure the overall effectiveness of our online content, advertising campaigns, and products and services we offer. To learn about your choices for these tracking tools, see Section 5 of this Privacy Policy. If you choose to decline cookies, you may not be able to sign in or use some of the interactive features offered on the website. We also use standard Internet technologies, such as embedded links on web pages and other similar technologies to track usage across the application. We use web beacons in e-mail messages or newsletters to track whether you open the messages.
Section 3: How We Use Your personal data
Use Purposes: We, or the third party service providers use the above-referenced categories of personal data for the following purposes. If you're located in the EEA, UK or Switzerland we have to have a legal basis to process your personal data. For each purpose, we explain the lawful basis for that processing, the processing operations that we carry out and the categories of personal data that we process.
| Purpose | Legal Basis (EEA, UK & Switzerland) |
| We will collect, use and store your Contact Information, Profile and Account Information, and Partner Information to invite you, allow you to register and create an account on our app and provide you with the Services such as to create personal looks, prepare for appointments, provide recommendations for fits and looks, and initiate instructions to purchase Partner products and services. | It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you. |
| We will collect, use and store your Contact Information to manage our relationship with you. | We have a legitimate interest in managing our business and providing services to our clients. |
| We will use your Contact Information and Profile and Account information and Partner Information to monitor user accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law. | We have a legitimate interest in preventing and detecting fraud or other wrongdoing. UK only: where it is necessary to process personal data to prevent, detect, or investigate a crime, we rely on our recognised legitimate interests. |
| We will collect and use your Contact Information and Profile and Account Information to send you direct marketing in relation to our relevant products and services, or other products and services provided by us, our affiliates and carefully selected partners. | Your consent. Whenever we ask for your consent, we will explain why and how we will use your data, so your consent can be informed. We have a legitimate interest in promoting our services to our clients. |
| We will collect and analyse your Profile and Account Information in order to manage and operate our app, including to keep it updated and relevant, to develop our business and to inform our marketing strategy. | Your consent. Whenever we ask for your consent we will explain why and how we will use your data, so your consent can be informed. We have a legitimate interest in operating our app and improving its operation. |
| If you engage in commenting or sharing of looks we will collect, use and store your Profile and Account Information as included in such posts in those spaces to facilitate communication between Partners and end users. | We have a contractual obligation. We have a legitimate interest in managing our business and providing services to our clients. |
| We track the performance of recommendations and the app usage of Partner users and make this available to Partners (and their users). | We have a contractual obligation. |
| To verify your identity and comply with any data subject requests, if you make requests pursuant to this Privacy Policy. | We have a legal obligation under data protection laws. |
No Automated Decision Making: We use AI to detect clothing in the photos you upload but we do not take any decisions involving the use of algorithms or profiling that significantly affect you as an individual.
Aggregated, Anonymous, or De-identified Statistical Data: Where permitted by applicable law, we may collect, create, process and use aggregated, anonymous, pseudonymous, or de-identified statistical data (including reports, insights, analysis, benchmarking, comparative data and other information derived from your personal data) to provide services to you and our Partners and also to modify and improve our Services. Aggregated anonymized information does not contain any personal data, and its use and disclosure are not subject to the terms of this Privacy Policy.
How We Communicate with You
We may use your personal data to communicate with you using the following methods:
- "Push notifications" or text messages if you agree to such communications;
- Digital communication via the Services such as in-app notifications;
- Email communications; and
- Telephone if provided by you.
Section 4: We Disclose, Share, and Sell personal data to Others
We may share or disclose your personal data in the following instances:
- Our Partners (such as brands, retailers, concierge and luxury services) and marketing companies: We share insights with Partners such as the performance of their recommendations or invites to the app as well as aggregated data on how their brand performs in the Discover tab. We might share personal data with third party service providers that help us with our marketing efforts, including social media platforms, advertising networks, and ad tech companies. For example, we may share email addresses or other identifiers or contact information with social media platforms so they can serve our advertising to you on their platform and so that you can post fits and looks directly from Maura onto your profile. We may also share data with these platforms where you choose to use your log-in information with these platforms as your log-in details for those platforms to access our Services. Personal data received by our third party service providers, Partners, and other third parties may also be subject to their privacy policies.
- Service providers: We engage third party service providers ("service providers") to process personal data on our behalf and help us pursue our business purposes, such as analytics, user support, data analysis, translation services, customer service engagement, email delivery, network providers, cloud hosting services, platform services, and marketing assistance. Such service providers may use such data for their own business purposes to enhance, improve, and deliver their services and in such case their use is governed by their privacy policy.
- For Safety, Security, or Legal Compliance Purposes: We might share information in response to subpoenas, court orders, or other legal process (including for national security and law enforcement purposes); to establish or exercise our legal rights or the legal rights of a third party service provider, sponsor, customer, or other research provider (for example to enforce confidentiality or intellectual property rights); to defend against legal claims; or as otherwise required by law; to comply with applicable laws; to protect rights, safety and property of us, our customers, or others; and to respond to lawful requests from public authorities. We might also share personal data to prevent, detect, or investigate suspected fraud, violations of our terms of service, harassment, or illegal conduct.
- Mergers or Reorganizations: If we undergo a business acquisition, merger, or sale of assets, we may transfer your personal data to the successor entity. If we go out of business or enter bankruptcy, your personal data would be an asset transferred to or acquired by a third party.
- Other Disclosures: We may also share personal data for other reasons we may describe to you from time to time as permitted by law, including as disclosed in any conversation-specific disclosures.
- Sale of Personal Data: With respect to end users, we may "sell" certain categories of personal data disclosed in Section 1 above to our Partners as necessary to provide the Services. We may also sell aggregated data derived from personal data to provide insights. With respect to all users we may share personal data for cross context behavioural advertising. We may "sell" or share these categories of personal data to the categories of third parties described in this Section 4 of this Privacy Policy.
You have the right to know whether your personal information is being sold. For example, under the CCPA, your personal information is "sold" when it is provided to a third party for monetary or other valuable consideration for a purpose. Please note a "sale" does not include when we disclose your personal information that has been de-identified prior to sharing with a third party or is shared, at your direction, to a third party service provider for a specific business purpose or when otherwise permitted under law.
Section 5: Your Choices About How We Use Your personal data and Opt Out Rights
We believe it is important to give you choices about the use of your personal data. We will use your personal data as described in this Privacy Policy or as disclosed in any other terms of service or data protection agreements entered into between us. In the event of a conflict, the terms of service or data protection agreement will govern. If we want to use your personal data for a purpose not authorized in this Privacy Policy, we will first obtain your consent to do so.
- You Can Opt Out of Receiving our Marketing emails. We will respect your wishes not to receive, or stop receiving, marketing communications. You can opt out at any time by using the unsubscribe links or instructions at the bottom of our emails or text messages. Please note that we will continue to send you Services-related communications regardless of any such marketing-related request.
- Opt-Outs. The Services may include other options to select the "decline" or "opt-out" option for specified functionality or features, where available (such as whether your wardrobe items can be seen by our Partners).
- You May be able to Block or Remove Cookies through your Browser Settings. We use cookies and other tracking tools to help customize the websites and web app and improve your experience, as well as analyze our performance and marketing activities. You may be able to block or delete cookies by going to the preferences, tools, or options menus of your Internet browser. If you choose to do so, some features of the websites and web app may not function properly. Selections you make are device-specific and browser-specific, meaning that you may need to make your selections on each browser and on each device you use to access the websites or web app.
- You can Opt Out of having your Online Behavior Recorded and Used for Interest-based Advertising Purposes. Some content or links, including advertisements, are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies, alone or in conjunction with web beacons or other tracking technologies, to collect information about you when you use our websites or web app. The information they collect may be associated with your personal data or they may collect personal data about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third-party tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. To opt out from receiving interest-based advertising from participating companies, visit the opt-out mechanisms of the Digital Advertising Alliance (United States), the Network Advertising Initiative (United States), and the European Interactive Digital Advertising Alliance (European Union). The choices you make are both browser- and device-specific, meaning that you should exercise your preference on each browser and each device you use. If you clear cookies from your browser, you may need to exercise these choices again.
- Our Do-Not-Track Policy. Some mobile operating systems include a Do-Not-Track ("DNT") feature or setting that you can activate. This signals your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will do so accordingly.
- California Opt Out. For information about additional opt out rights under California law, please see Section 8.
In addition to the options stated above, you may contact /send us notices as described in Section 13, "How to Contact Us."
Section 6: We Transfer and Process personal data in the United States
We operate the app and Services in the United States and, depending on your country of residence, the submission of personal data to our app may involve the collection of such personal data in the United States for our processing. Your personal data may be processed by personnel operating in the United States who work for us or one of our third party service providers or personnel of our third party service providers who may access your personal data remotely globally. As a result, your personal data may be subject to access by and disclosed to the U.S. government and law enforcement agencies according to U.S. laws. See Section 7 below for the safeguards we place in relation to European data.
Section 7: Your EEA, UK & Swiss Privacy Rights
Since your privacy is important to us, we want you to be fully aware of the data protection rights that may be available to you under EEA, UK, and Swiss law if applicable, including the EU General Data Protection Regulation ("GDPR"), the UK General Data Protection Regulation and the Data Protection Act 2018 ("UK GDPR") and the Swiss Federal Act on Data Protection ("FADP") (collectively together as "EU DPLs"). "EEA" refers to the European Economic Area.
Rights of EEA, UK & Swiss Data Subjects
Users accessing Services from the EEA, UK & Switzerland are entitled to the following rights where the EU DPLs apply:
- The Right to be Informed – You have the right to be provided with clear, transparent, and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this Privacy Policy.
- The Right to Access – You have the right to request access to your personal data that is within our control.
- The Right to Rectification – You have the right to request that we correct any personal data you believe is inaccurate. You also have the right to request that we complete the personal data if you believe it is incomplete.
- The Right to Erasure – This is also known as the "right to be forgotten." You have the right to request that we erase your personal data in certain circumstances, if there is no compelling reason for us to keep using it or if it is no longer necessary in relation to the purposes for which it was originally collected or otherwise processed.
- The Right to Restrict Processing – You have the right to request that we restrict the processing of your personal data in certain circumstances. If you choose to restrict this processing, we may not be able to provide you with certain services. We may keep lists of people who have asked to restrict processing in order to make sure the restriction is respected in the future.
- The Right to Object to Processing – You have the right to object to certain types of processing of your personal data, in particular processing based on our legitimate interests. Your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us. You also can object at any time to your personal data being used for direct marketing purposes (including profiling related to such direct marketing). Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
- The Right to Data Portability – You have the right to request that we transfer the personal data you have provided us to another organization, or directly to you, in a format that is easily readable and transferrable.
- The right to refuse or withdraw consent – You have the right to refuse to provide and withdraw your consent to processing of your personal data at any time with effect for future processing.
- UK only – You have the right to complain to us about how we process your personal data or have responded to a request to exercise one of your rights under the EU DPL.
- France only – You have the right to instruct us regarding the use of your personal data after your death including with respect to retention, deletion and disclosure. You can change or revoke such instructions at any time.
Please note your rights in relation to your personal data are not absolute. We may, for example, deny you access to your personal data when required or authorized by law, or if granting access would have an unreasonable impact on another individual's privacy.
If you wish to exercise any of these rights, please contact us at the contact details set out below.
If you are not satisfied with our response to your complaint or believe our processing of your personal data does not comply with the applicable EU DPLs, you can make a complaint to your data protection authority.
We will retain and use your personal data as long as necessary to comply with our legal and business obligations, provide the Services, resolve disputes, and enforce our agreements.
International Transfers
We transfer personal data from the European Economic Area, the United Kingdom, and Switzerland to other countries, some of which have not yet been determined by the European Commission, or UK or Swiss Governments, to have an adequate level of data protection. For example, their laws may not guarantee you the same rights, or there may not be a privacy supervisory authority there that is capable of addressing your complaints. When we engage in such transfers, we use a variety of legal mechanisms, such as the standard contractual clauses published by the European Commission under Commission Implementing Decision 2021/914, to help protect your rights and enable these protections to travel with your data. To learn more about the European Commission's decisions on the adequacy of the protection of personal data in the countries where Maura processes personal data, see this article on the European Commission website: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en.
A copy of the relevant mechanism can be obtained for your review on request by using the contact details below.
Section 8: California Notice
Your California Privacy Rights
The California Consumer Privacy Act, Cal. Civ. Code §§ 1798.100 et seq. ("CCPA") and the California Privacy Rights Act ("CPRA") is a U.S. law enacted in the State of California. It expands upon the privacy rights available to certain California consumers, and requires certain companies to comply with various data protection requirements. Please also visit the final CCPA Regulations.
Pursuant to the California data protection laws, California residents have the right to be provided with the information and to exercise the rights as set forth in this Section 8 below.
We handle personal data on behalf of our third parties (such as third party service providers, customers, etc.) as described in Section 4 above. The privacy policies of those third parties control their use of your personal data, and you should contact them with any questions about that personal data.
Categories of personal data: We and our third party service providers may collect personal data for our business or commercial purposes (as those terms are defined in applicable law) and a detailed list of the categories of personal data which we collect can be found in Section 1. Some of the personal data that we process may include sensitive information as defined by CCPA including access credentials, geo-location, and racial or ethnic origin.
Purposes of Collection: We collect your personal data for the business and commercial purposes described in Section 3 of this Privacy Policy.
How personal data is Collected: We collect the above categories of personal data from the sources described in Section 2 above.
Who we Share personal data with: We may share personal data for you and our Partners to the categories of third party service providers described in this Section 4 of this Privacy Policy.
Sale of personal data or sharing of personal data for advertising: With respect to end users, we may "sell" certain categories of personal data disclosed in Section 1 above to our Partners for the purpose of providing the Services. We may also sell aggregated data derived from personal data to provide insights. We may share for cross context behavioural advertising certain of the categories of personal data disclosed in Section 1 above.
You have the right to know whether your personal information is being sold. For example, under the CCPA, your personal information is "sold" when it is provided to a third party for monetary or other valuable consideration for a purpose. Please note a "sale" does not include when we disclose your personal information that has been de-identified prior to sharing with a third party or is shared, at your direction, to a third party service provider for a specific business purpose or when otherwise permitted under law.
Notice and Right to Request: You have the right to request access to your personal data that is within our possession.
Shine the Light Notice: California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of "personal data" (as defined by this law) to third parties for their direct marketing purposes. To make such a request, please send an email to our contact found at Section 13 below. Indicate in your email that you are a California resident making a "Shine the Light" inquiry.
Privacy Rights for Californians
If you are a resident of California, you can also make the following more specific requests with respect to your personal data:
- Access – You can request that we disclose to you the categories of personal data we collected about you, the categories of sources from which we collected the personal data, the categories of personal data we sold or disclosed, our business or commercial purpose for collecting and selling the personal data, the categories of third parties with whom we shared the personal data, and the specific pieces of personal data we collected about you over the past 12 months.
- Deletion – You can request that we delete your personal data that we maintain about you, subject to certain exceptions.
- Do Not Sell My Personal Information or Opt-Out Rights – You can request that we not sell your personal data by contacting us using the methods specified below however this may prevent us from providing certain Services to you. For purposes of this Privacy Policy, "sell" means the sale of your personal data to an outside party for monetary or other valuable consideration, subject to certain exceptions. Please note that if you would like to opt out of cookie-based tracking for advertising purposes (which might be considered a "sale"), you will need to separately visit www.aboutads.info/choices and https://optout.privacyrights.info to opt out of certain uses of cookies for advertising purposes. Your selections are specific to the device, website, and browser you are using. Your selections are also deleted (lost) whenever you clear your browser's cache.
- Right to Correct – You have the right to request correction or changes of your personal data if it is found to be inaccurate or out of date.
- Right to Limit Use of Sensitive personal data – You can request that we use your sensitive personal data as defined under California data protection laws (such as precise geo-location) for limited purposes, such as providing you with the services.
- Data Retention – we store personal data only as long as reasonably necessary or to comply with legal requirements as permitted by law.
Notice of No Discrimination: We will not discriminate against you because you made any of these requests.
Process and Contact Information to Send Notices to Us
- Where to Send Notice: If you would like to exercise any of these rights, please submit a request by email to us at our contact described in Section 13 below.
- How we Handle Requests: We may deny certain requests, or fulfil a request only in part, based on our legal rights and obligations. For example, we may retain personal data as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.
- Verification of Identity: We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps may vary depending on the sensitivity of the personal data and whether you have an account with us.
- Authorized Agent: California residents may designate an authorized agent to make a request on their behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.
Section 9: Other US Data Protection Laws
As used herein, "US data protection laws" means any applicable United States data privacy or data protection laws, including but not limited to (i) California Consumer Privacy Act (the "CCPA"), including the California Privacy Rights Act ("CPRA"); (ii) the Colorado Privacy Act ("CPA"); (iii) the Virginia Consumer Data Protection Act ("VCDPA"); (iv) the Connecticut Data Privacy Act ("CDPA"); (v) the Utah Consumer Privacy Act ("UCPA"); and any corresponding or similar United States state or federal laws or regulations relating to the use or protection of data including any amendment, update, modification to or re-enactment of such laws.
Please note that the rules implementing some of these laws have not yet been finalized and additional states are in the process of enacting similar laws. We are continuously working to remain current with these laws, and we will update our processes, disclosures, and this notice as necessary to address new laws as they are finalized.
In addition to the privacy rights of California residents as described in Section 8, US residents of other states may have the right to be provided with the information and to exercise the rights as set forth in Section 8 above to the extent specifically set forth in the applicable US data protection laws. Such rights include the following:
- Right to Access Your Data. You have the right to request that we disclose certain information to you about our collection, use, and disclosure of your personal data. You can make this request by contacting us as described in Section 13.
- Right to Know. You have the right to know what personal data we process and how we process your personal data. For more information see Sections 1, 2, 3, and 4.
- Opt Out. You may have the right to opt out of the processing of personal data. For more information see Section 5. You can make this request by contacting us as described in Section 13.
- Right to Data Portability. You may have the right to a "portable" copy of your personal data that you have submitted to us. Generally, this means you have a right to request that we move, copy, or transmit your personal data stored on our servers or information technology environment to another service provider's servers or information technology environment. You can make this request by contacting us as described in Section 13.
- Right of correction. You have the right to request correction or changes of your personal data if it is found to be inaccurate or out of date. You can make this request by contacting us as described in Section 13.
- Right to Delete Your Data. You have the right to request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions. You can make this request by contacting us as described in Section 13.
Process and Contact Information to Send Notices to Us
See Section 13, "How to Contact Us" to contact/send notices to us. For unique state requirements, see below.
Section 10: Information Security
We have implemented technical and organizational security measures designed to help protect against unauthorized access, unauthorized alteration, disclosure, or destruction of information. Unfortunately, no data transmission over the Internet can be guaranteed to be entirely secure, and we cannot and do not guarantee or warrant the security of any information that you transmit on or through our websites or Services.
We try to restrict access to information to only those employees, contractors, service providers and agents who need to know that information in order to help us provide the Services, and consistent with the level of sensitivity of such data.
Please note that the security of your personal data collected via the Services depends, in part, on your ensuring that any of your IDs and passwords are kept confidential and secure and that you adhere to the restrictions on password and ID-sharing set forth in our Terms of Service.
Section 11: Not For Children
Our websites and Services contain business-related content and are specifically aimed at and designed for use by adults. You must be 18 years of age or older to use our web app. In addition, we do not knowingly solicit or collect personal information (as defined by the Children's Online Privacy Protection Act, COPPA) from or about individuals under the age of 13 years. If we become aware that a visitor is under the age of 13 and has registered without prior verifiable parental consent, we will remove their personally identifiable registration information from our files. If you are the parent or guardian of a person under the age of 13 who has provided personally identifiable information to us without your approval, please inform us by contacting us at privacy@maurainc.com, and we will remove such information from our database.
Section 12: Third Party Links
Our app and Services may contain links to third-party websites or services. These third parties are bound by their own privacy policies. We are not responsible for the privacy practices of others. When you leave our websites or Services to visit a third-party website or service, please read their privacy statements. This Privacy Policy applies solely to personal data collected by us through the Services, and not to any personal data collected by the operators of third-party websites or services. The inclusion of a link on the website/Service does not imply endorsement of the linked website or service by us or by our affiliates.
Section 13: How to Contact Us
This Privacy Policy applies to the app and Services of Maura. Maura maintains an active privacy and data protection compliance program. If you have any questions about this Privacy Policy or how we process your personal data, please email us at privacy@maurainc.com.
Please note that once you contact us to exercise any of your rights, we may require additional information and documents, including personal data, in order to authenticate and validate your identity and to process your request. We will then retain such additional data for legal purposes (e.g., as proof of the identity of the person submitting the request).
We do not have an establishment in the European Union; therefore, we have appointed a local representative, [insert representative name], who you can contact. Our EU representative can be contacted directly by emailing them at the following address [insert email address of EU rep].
We also do not have an establishment in the United Kingdom; therefore, we have appointed a local representative, [insert representative name], who you can contact. Our UK representative can be contacted directly by emailing them at the following address [insert email address of UK rep].
Section 14: Changes to this Privacy Policy
This Privacy Policy may change from time to time. If we make any changes to this Privacy Policy, we will post any changes on this page. Where we make any material changes to this Privacy Policy, we will make a more prominent notice in compliance with applicable laws. Please refer to the "Effective Date" above to see when this Privacy Policy was last updated.