Regional Privacy Notice

This notice includes information such as our purposes for Personal Information processing, the rights you have regarding our processing of your Personal Information, and how to contact us if you have any questions regarding our processing of your Personal Information.

1. Individuals in the European Economic Area and United Kingdom

Our Services are directed to, and registration is limited to, residents of the United States, and we do not target the Services or our marketing to individuals in the European Economic Area (EEA), the United Kingdom, or Switzerland. If you access the Services from one of those regions as a visitor, we process only limited information about you, such as your IP address and, where you consent, cookie and analytics data, as described in our Privacy Policy. If you have any questions about our processing of your information, you may contact us as described in the “Contacting Us” section of our Privacy Policy.

2. United States State Privacy Rights

2.1. Generally

This section applies if you are a resident of a U.S. state that has enacted a comprehensive consumer privacy Law. The rights described below, and the exceptions, thresholds, and definitions that apply to them, vary by state and apply only to the extent provided by, and subject to the exceptions in, the Law of your state of residence.

Subject to those limits, and depending on your state of residence, you may have the right to:

• Confirm and Access. Confirm whether we process your Personal Information and request access to it, and to receive a copy of it in a portable, machine-readable format.
• Delete. Request that we delete Personal Information that we have collected from you.
• Correct. Request that we correct inaccurate Personal Information that we maintain about you.
• Opt Out. Opt out of the sale of your Personal Information, the processing of your Personal Information for targeted advertising, and certain profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
• Appeal. Appeal our denial of a request, where the Laws of your state provide a right to appeal.
• Non-Discrimination. Exercise your rights without receiving discriminatory treatment for doing so.

To exercise any of these rights, contact us as described in the “Contacting Us” section of our Privacy Policy, or through another request mechanism we make available on the Services. We will take steps to verify your request using the Personal Information associated with your account or that you provide, and we will respond within the time period required by applicable Law. Where your state’s Laws permit, you may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your own identity. If we deny your request, you may appeal that decision by emailing us at privacy@numapit.co with the subject line “Privacy Request Appeal.” We will respond to your appeal within the time period required by Law.

2.2. Opt-Out Preference Signals

Some U.S. state laws require businesses that sell or share Personal Information, or that process it for targeted advertising, to honor opt-out preference signals such as the Global Privacy Control (GPC). We do not currently sell or share Personal Information or engage in targeted advertising.

3. California

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), provides you with the additional information and rights described below, subject to the CCPA’s exceptions.

3.1. Categories of Personal Information We Collect

In the preceding twelve (12) months, we have collected the following categories of Personal Information, as those categories are defined under the CCPA:

• Identifiers, such as your name, email address, telephone number, date of birth, account credentials, and IP address.
• Customer records and commercial information, such as your postal or shipping address, records of the Items you have bid on, purchased, or sold, and any Personal Information included in communications you send to us.
• Internet or other electronic network activity information, such as your device and browser information and information about your interactions with the Services.
• Geolocation data, such as the approximate location derived from your IP address.
• Sensitive Personal Information, limited to your account log-in credentials, which we use only to authenticate you and secure your account.
• Inferences drawn from the above to create a profile reflecting your preferences and characteristics.

3.2. Sources, Purposes, and Disclosures

The sources from which we collect Personal Information, the business and commercial purposes for which we use it, and the categories of third parties to whom we disclose it are described in the “How We May Collect Personal Information,” “How We May Use Personal Information,” and “How We May Disclose Personal Information” sections of our Privacy Policy.

3.3. Sale or Sharing of Personal Information

We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We use analytics providers, such as Google Analytics, only as our service providers under written contracts that limit their use of your information to performing services for us, and we do not currently use advertising pixels, retargeting, or targeted advertising.

3.4. Sensitive Personal Information

We do not use or disclose sensitive Personal Information for purposes other than those permitted under the CCPA.

3.5. Your California Rights

Subject to the CCPA’s exceptions, you have the right to know and access the Personal Information we have collected about you; to delete your Personal Information; to correct inaccurate Personal Information; to opt out of the sale or sharing of your Personal Information; where applicable, to limit the use and disclosure of sensitive Personal Information; and to not receive discriminatory treatment for exercising your rights.

3.6. How to Submit a Request

You may submit a request to know, delete, or correct by contacting us at privacy@numapit.co. We will verify your request using the Personal Information associated with your account or that you provide. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your own identity.

3.7. Shine the Light

California residents may request certain information regarding our disclosure (if any) of Personal Information to third parties for their direct marketing purposes, pursuant to California Civil Code Section 1798.83. To make such a request, please contact us, identify yourself as a California resident, and provide sufficient information so we can take appropriate action, such as your name, email address, or any additional information required.