This Privacy and Cookies Statement explains how personal information is collected, used, and disclosed by SoapBox Labs Limited and Meowtek Limited (a wholly owned subsidiary of SoapBox Labs), both Irish companies (“we”, “us”, “our”) in connection with your use of the applications and associated services (collectively the “Services”) of SoapBox Labs and Meowtek.
For the purpose of the Irish Data Protection Acts 1988 to 2018 and the EU General Data Protection Regulation (GDPR) (the “Acts”) the data controller is SoapBox Labs Limited. Meowtek Limited is a data processor under the same Acts.
We respect your right to privacy and your freedom to control and monitor your children’s online activities. This Privacy and Cookies Statement together with any terms and conditions of use for the Services (“Terms”) and any other documents which they refer to sets out the basis on which any personal data we collect from you and from any children who use our Services will be processed by us. Note that children are defined as under the age of 18 in the US, or 16 in the EU (unless the Member State has made provision for a lower age limit, but no lower than 13).
There are two different ways that our Services can be accessed:
Our services apply a “data protection by default” and “data protection by design” approach in keeping with the principle of minimizing the processing of personal data to the extent necessary to provide the Services and to further develop and enhance our services. Accordingly, we will not take any steps to re-identify or de-anonymize any voice data or otherwise associate the voice data with personally identifiable information and does not authorize, instruct, or encourage any third party to do so.
Parental Consents
For Direct Access, we rely on consent from an individual with parental authority as the legal basis for processing data where the data subject is a child. We have our own clear parental consent mechanisms and verification processes in place and you can withdraw your consent as outlined below. For Indirect Access, we require any third parties using our services to ensure that the relevant parental consents are in place before they send any voice data to our services. We process de-identified voice data for the legitimate interest purposes of improving the Services as outlined in this statement. Your rights and the mechanisms for objecting to this type of processing of data are clearly outlined below.
Where you are accessing our services through a third party, the voice data passed to us is de-identified voice data and no other data relating to the identity of the child is received by our system. Depending on the terms and conditions agreed with the third party provider, this voice data may be retained in our system after processing for the sole purpose of improving the services. In other cases, the data is deleted immediately after processing. You should check with the third party to clarify the basis on which the voice data is passed to our system to assess whether or not it is retained post-processing.
Where We Store Your Personal Data
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). By submitting your personal data or permitting your child to use the Services, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy and Cookies Statement, typically through the use of EU-approved “model contract clauses” or ensuring our third party vendors are certified under the EU-US Privacy Shield.
All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password or username which enables you to access certain parts of our Services, you are responsible for keeping this password or username confidential. We ask you not to share this information with anyone. You can request deletion of this data at any time by emailing us at [email protected]. , from the email address provided upon initial registration.
We will delete personally identifiable information after expiry of an appropriate retention period (typically a number of years after our contact with you has terminated). However we will retain de-identified data indefinitely for product development purposes unless you have chosen to withdraw your consent or delete your data as outlined below.
Disclosure Of Your Information
We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and other agreements; or to protect the rights, property, or safety of SoapBox Labs, its subsidiaries and its group companies, our users, or others.
We may disclose aggregated or anonymised data if:
We work with advisors or service providers;
We or substantially all of our assets are acquired by a third party, in which case personal data held by us about our users will be one of the transferred assets. In the case of sale or merger the privacy policy will apply. In the case of a material change you will be notified and provided an opportunity to opt out.
Other than as set out in this Privacy and Cookies Statement, we do not currently disclose data to any other third parties; if this changes in the future we will notify users through changes in this Privacy Policy.
Cookies and Similar Technology
If you are accessing our services directly, we may collect information about your computer or other device including, where available, device and browser type for system administration and analytical purposes. This is statistical data about how you use our Services.
For the same reason, we may obtain information about your general usage of the Services by using a cookie or similar software which is stored on the memory of your computer or device. This software contains information that is transferred to your computer or device’s memory. Cookies help us to improve our Services and to deliver a better and more personalised service.
We may use Web beacons or similar technology in connection with the Services. Web beacons are small, invisible graphic images that may be used in the Services or in emails relating to our Services to collect certain information and monitor user activity on the Services.
You may refuse to accept cookies by activating the settings on your browser or device which allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of the Services.
We work with third party analytics provider Unity Analytics. We use a restricted version of Unity, that does not use any advertising services, and no user data is shared with any other third parties. For more information on Unity’s Privacy Policy click here.
Your Data Subject Rights
You have the right to request a copy of your personal data which is held by us about you or your child. If you are accessing our service directly, you should contact us about this data - if you are accessing our services indirectly, you should also contact the third party provider. You also have the right to access your or your child’s personal data, have changed any inaccuracies in the details we hold, the right to object to the use of personal data, the right to block any specific uses of personal data in certain circumstances, the right to data portability and the right to request deletion of personal data, by means of a request in writing setting out as much detail as possible to [email protected]. Where your data has been deleted or de-identified by us it will not be possible to act on your request.
Contact
Questions, comments and requests regarding this Privacy and Cookies Statement are welcomed and should be addressed to SoapBox Labs/Meowtek with its registered office at Floor 3, The Boat House, Bishop Street, Dublin 8, Ireland or [email protected].