PRIVACY POLICY

Effective Date: January 10, 2025  

At STRETCHIT, Inc. ("STRETCHIT," "we," "us," or "our"), we prioritize the privacy of our users (“you” or “your”) and are committed to safeguarding your personal information. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information that STRETCHIT or its third party service providers (“Service Providers”) collect through the STRETCHIT mobile application https://web.stretchitapp.com/app (“App”) and/or STRETCHIT websites https://stretchitapp.com, https://www.business.stretchitapp.com, https://stretchitlive.com, https://stretchingbootcamp.com, and our other websites that link to this Privacy Policy (“Web”). The App and/or the Web are also referred to as the “Service”.

Please read this policy carefully to understand your rights and our responsibilities. By accessing or using the Services, you agree to the terms outlined in this Privacy Policy. If you do not agree, please do not use our Services. We may modify or update this Privacy Policy at any time effective upon its posting on the Service. Your continued use of the Service constitutes your acceptance of this Privacy Policy and any modifications or updates thereto.

TABLE OF CONTENTS

1. SCOPE OF THIS PRIVACY POLICY
2. INFORMATION WE COLLECT
3. HOW WE USE YOUR INFORMATION
4. LEGAL BASIS FOR PROCESSING
5. SHARING YOUR INFORMATION
6. SECURITY MEASURES
7. YOUR CHOICES ABOUT YOUR INFORMATION
8. INTERNATIONAL USERS DATA TRANSFERS
9. CHILDREN’S PRIVACY
10. RETENTION OF INFORMATION
11. UPDATES TO THIS PRIVACY POLICY
12. CONTACT US
13. UNITED STATES PRIVACY RIGHTS
14. ADDITIONAL INFORMATION FOR CALIFORNIA
15. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS
16. EU PRIVACY RIGHTS
17. ADDITIONAL INFORMATION FOR CANADA
18. AUSTRALIA AND NEW ZEALAND
19. REPUBLIC OF SOUTH AFRICA

This Privacy Policy applies to:

Users: Includes all individuals who use the Service, including paying users, free trial users, business users, non-paying users, and individuals interacting with support services.

Social Media Users: Covers data collected through engagement with STRETCHIT’s social media accounts.

Business Contacts: Relates to individuals engaging with us in a professional capacity, such as during sales or marketing activities.

This Privacy Policy does not apply to:

Personal data of employees, contractors, or job applicants.

Non-Personal Data, meaning information that cannot identify a specific individual. If we do not store or process information in a manner that directly or indirectly identifies, relates to, describes, or is reasonably capable of being linked to a specific individual or household, such information does not qualify as personal data and this Privacy Policy does not govern our processing of that information.

Third-Party Websites or Services. Our electronic communications and online services, including our App and Web, may include links to third-party websites. We are not responsible for how these websites manage your personal data and encourage you to review their privacy policies for more information.

We collect and/or process personal information you voluntarily provide, such as:

Account Information: When creating a user account on the Service we require your name and email address. We may also require your country of residence. Once your account is created, the Service generates a unique member ID to identify you. If you choose to sign up or log in using a third-party account (e.g., Facebook, Apple, Google), we collect the information you have consented to share with us, such as your name and email address. This data is collected by the respective third-party providers and shared with us in accordance with their privacy policies. You can manage the information we receive by adjusting the privacy settings in your third-party account.

We may also collect other personal information, such as photos and comments when you provide them to us (e.g., by filling in your profile information or saving photos to your profile), or in some other manner, e.g., by posting, tagging or submitting it to our social media pages.

Protected Classifications: If you would like to track your calories burned, we will collect your height, weight, gender, and date of birth.

Workout Information: This includes data you provide on the Service or that is generated through your use of the Service. Examples include your fitness goals, training preferences, completed classes, favorite classes, and class durations.

Linked Devices and Apps. You have the option to link third-party devices (such as an Apple Watch or fitness tracker) and/or an app (such as Apple Health or Google Fit) to the Service and enable that device/app to share your fitness activity and/or personal data with STRETCHIT as well as enable STRETCHIT to share your fitness activity with that device/app. Your personal data is only used to improve the Service use case and features. Your data is NOT used for any other purpose, including transfer to advertising platforms, data brokers, or information resellers. Your data is not transferred to any third parties. We use SSL for secure data transition between the app and our server. You can manage what data is shared between STRETCHIT and the device/app at any time within the Apple Health or Google Fit apps on your device. You can delete previously shared data by clicking Settings - Delete Account on the STRETCHIT app.

Payment Information. If you choose to subscribe to the Service on the Web, we will collect payment information, including credit or debit card number, card expiration date, CVC and ZIP. We use third party payment processors, Stripe and PayPal, to process payments made to us. We do not retain any personally identifiable payment information. Rather, all such information is provided directly to Stripe or PayPal, whose use of your personal information is governed by their privacy policy, which may be viewed at https://www.stripe.com/us/privacy  and https://www.paypal.com/us/legalhub/paypal/privacy-full.

Support Information. The Service includes our customer support, where you may choose to submit information regarding a problem you are experiencing with the Service or ask a question relating to the Service. When you engage with our support team, you will be asked to provide contact information, a summary of the problem you are experiencing or your question, and any other documentation, screenshots or information that would be helpful in resolving the issue.

Feedback Information: This refers to any information you willingly provide about yourself, such as sharing feedback about your experience with the Service, participating in member surveys, or similar activities.

Referral Information: If you send a referral link to a friend, colleague, family member, or via your social media, or if you were referred to STRETCHIT by someone, we may collect information that identifies the person who referred you or the individual you referred.

Information About Others. If you purchase a gift certificate and request electronic delivery, we will collect the recipient’s name and email address. We use this information solely to fulfill your request to deliver a gift certificate to them.

Information Collected Automatically when you use the Service:

We collect information about you when you use the Service, including browsing the Web, using the App and taking certain actions within the Service.

Analytics and Performance Tools. We use third party performance, analytics and research tools to collect and analyze certain information about users and their behavior, including creating logs and recording your access to the Service from different devices. This helps us improve the Service.

Marketing and Performance Tracking Tools. We also use third party performance marketing tools to deliver marketing campaigns and track their performance (e.g., a user visited the Web and/or the App and then made a purchase). This information may include demographic and interest information, such as age, gender, geography, sessions length, frequency of use of the Service, page views, purchases, etc. We use this information for internal business purposes on an aggregated, anonymous basis.

Automatic Logging and Metadata Collection. Log file information is automatically reported by your device each time you make a request to access (i.e. visit) the Service. Such information can also be provided when the content of the Service is downloaded to your device. When a user interacts with the Service, metadata that provides additional context on how you use the Service is generated. E.g., We log classes, programs and other content you interact with.

Log File Information. As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use the Service and record it in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the Service, browser type and settings, the date and time the Service was used, information about browser configuration and plugins, language preferences and cookie data.

Device identifiers. We may access, collect, monitor, store on your mobile device, and/or remotely store one or more “device identifiers.” Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device, including type of the device, operating system, device settings, application IDs, unique device identifiers and crash data. This can be used to customize the Service to your device or analyze any device issues related to the Service. Whether we collect some or all of this information often depends on the type of device used and its settings. Some features of the Service may not function properly if use or availability of device identifiers is impaired or disabled.

Cookies. We and our Service Providers use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to improve and customize the Service and your experience; to allow you to access and use the Service without re-entering your username or password; to understand usage of the Service and the interests of our customers; to determine whether an email has been opened and acted upon; and to present you with advertising relevant to your interests. To opt-out of cookies, you can alter the settings on your internet browser to accept or reject a website from using cookies. This may affect functionality of the Web. Our Service Providers may use cookies to provide us with information about your interactions with their services, but use of those third-party cookies would be subject to the Service Provider’s policies. You can learn more in our Cookie Policy.

In addition to some of the specific uses of information we describe in this Privacy Policy, we may use information to:

• Facilitate account creation, authentication, and maintenance;
• Help you efficiently access your information after you sign in;
• Remember information so you will not have to re-enter it during your visit or the next time you visit the Service;
• Allow you to review your progress and calculate insights about your activities, which are provided to you as part of the Service's features.
• Customize your experience on the Service, including suggesting tailored classes and training programs that align with your goals and past activities.
• Provide and enhance Services, including user support;
• Test, and monitor the effectiveness of the Service, develop and test new products and features;
• Analyze usage trends and improve user experience;
• Send communications about product updates, special offers, or policy changes. You can withdraw your consent for receiving promotional communications at any time.
• Monitor and improve marketing effectiveness;
• Publicly display feedback and comments posted by you on our properties (e.g., use your name, photos, video submissions and comments when you post feedback to social media);
• Resolve technical issues you encounter, respond to your requests for assistance, analyze crash information, and to repair and improve the Service;
• Verify accounts and activity, monitor suspicious or fraudulent activity, identify violations of Service policies, and ensure compliance with legal and regulatory obligations;
• Prevent fraud, enforce terms of service, and protect user safety.

We may also use your personal data in other ways, and where we do so, we will provide specific notice at the time of collection and obtain your consent unless otherwise permitted by applicable Data Protection Law.

We process your data under the following legal bases:

Consent: When you provide explicit permission for specific processing activities.
Contractual Obligations: To deliver Services as outlined in our Terms of Service.
Legitimate Interests: For purposes such as service improvements and fraud prevention.
Legal Compliance: To meet regulatory requirements or respond to lawful requests.

For users in the EU or UK, we comply with the General Data Protection Regulation (GDPR), relying on valid legal bases for processing your personal data, including your explicit consent, legitimate interests, or compliance with legal obligations.

We do not share your information to third parties outside STRETCHIT without your consent, except as noted in this Policy.

Social Networks. The Service allows you to share certain information, such as your completed classes and photos, with social networks. The Service will never automatically share your information to social networks. STRETCHIT is in no way responsible for the protection of any information that you choose to share with social networks. You and such social networks are solely responsible for the protection of such information. Please review any applicable policies and procedures of such social networks before sharing your information therein.

Service Providers. We may share your information as well as information from tools like log files, and device identifiers and location data, with Service Providers. Our Service Providers will be given access to your information as is reasonably necessary to provide the services under reasonable confidentiality terms. Some of our Service Providers are Google Analytics, Zendesk, Mailerlite, Sparkpost, Firebase Crashlytics, Adapty, Adjust, Meta, OneSignal, and Amazon.

We may remove parts of data that can identify you and share anonymized data with other parties. We may also combine your information with other information in a way that it is no longer associated with you and share that aggregated information.

Legal Requirements. We may access, preserve and share your information in response to a legal request (like a search warrant, court order or subpoena) if we have a good faith belief that the law requires us to do so. This may include responding to legal requests from jurisdictions outside of the United States where we have a good faith belief that the response is required by law in that jurisdiction, affects users in that jurisdiction, and is consistent with internationally recognized standards. We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; and to prevent death or imminent bodily harm. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

Business Transfer. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Leaderboards. If you choose to create or join a competition on the Service, your activity data (including your name, profile photo, and points earned) may become visible to other users of the Service on the leaderboards. You have a right to withdraw yourself from a competition at any time by emailing us at support@stretchitapp.com.

Affiliated Program. If you sign up for the Service using a referral link shared by a contact (such as a friend, family member, or colleague), we may notify them that you’ve created an account and provide them with a referral bonus as part of the referral program.

Referrals. If you sign up for the Service using a referral link shared by an employer, insurance company, insurance broker, marketplace, or a similar platform or entity, we may notify them that you’ve created an account and provide them information on your usage of the Service.

We implement technical and organizational measures to safeguard your data. While no system can guarantee absolute security, we strive to protect your information against unauthorized access, alteration, or disclosure.

Your information collected through the Service may be stored and processed in the United States or any other country in which STRETCHIT, its affiliates or Service Providers maintain facilities. STRETCHIT, its affiliates, or Service Providers may transfer information that we collect about you, including personal information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. By signing up for and using the Service you consent to the transfer of information to the US or to any other country in which STRETCHIT, its affiliates, or Service Providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy.

We use commercially reasonable safeguards to help keep the information collected through the Service secure and take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your account. However, STRETCHIT cannot ensure the security of any information you transmit to STRETCHIT or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed.

Please note that you are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to emails between you and STRETCHIT, at all times.

Targeted Advertising. We work with third-party partners, such as Google and Meta, to manage advertising on other websites. These advertising partners may use cookies or similar technologies on our website and across other sites to deliver advertisements tailored to your browsing activities and interests or to display ads that direct you back to our website. You can opt out of some (but not all) online behavior-based advertising by clicking here or by adjusting your browser settings to block cookies or receive notifications when cookies are set. If you are located in the European Union, you can opt out of behavior-based advertising by clicking here.

Requests. You have the right to request a copy of your information, to object to our use of your information (including for marketing purposes), to request the deletion or restriction of your information, or to request your information in a structured, electronic format.

Update Information. You can update your account at any time by logging in and changing your profile settings. You can contact us at support@stretchitapp.com and request to complete or correct your information.

Unsubscribe. You can unsubscribe from email communications from us by clicking on the “unsubscribe link” provided in such communications. Please note that you may not opt out of service-related communications (e.g., payment receipts, technical and security notices).

Delete Account. You can delete your account with us by clicking Settings - Delete Account on the App. You can contact us at support@stretchitapp.com if you’d like your account and information to be deleted. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations.

STRETCHIT is located in the United States (where data privacy laws are less stringent than in the European Union and certain other jurisdictions) and is subject to the applicable state and federal laws of the United States. If you use the Service, you consent to the use and disclosure of information in accordance with this Privacy Policy and subject to such laws.

Your data may be transferred to and processed in countries outside your location. We use appropriate safeguards, such as Standard Contractual Clauses, to ensure compliance with data protection laws.

Our Service is not directed at children under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will delete the information promptly. If you become aware that a child has provided us with personal information, please contact us at support@stretchitapp.com.

We will retain your personal information only as long as necessary to fulfill the purposes for which it was collected, whether to provide services to you, support our legitimate interests (as outlined above), or comply with legal requirements. We reserve the right to retain this information as permitted by law. personal information may be deleted at our discretion, so we recommend that you maintain your own records and not rely on us for storage of any personal information, content, or data.

We periodically review the information we hold, and when there is no longer a user, legal, or business need to retain it, we will securely delete it or, in some cases, irreversibly anonymize it. Please note that while deleted information will be removed from our active databases, it may still exist in archived systems.

This policy may be updated to reflect changes in practices or legal requirements. The revised date will be noted at the top of this document. Changes will take effect immediately upon posting and will apply to all subsequent access to and use of the Service. Users are encouraged to review this policy periodically.

For question and concerns about this Privacy Policy, or if you wish to exercise your rights or to make a request under the applicable law, you can contact us directly at support@stretchitapp.com or write to us at:

STRETCHIT
ATTN: Legal
515 Madison Ave, Office 9026
New York, NY 10022
support@stretchitapp.com

If you reside in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have specific rights regarding your personal information. These rights may include the ability to:

• Request access to and receive details about the personal information we maintain about you and how it has been processed.
• Correct inaccuracies in your personal information.
• Request the deletion of your personal information.
• Withdraw your consent to the processing of your personal information.

These rights may be subject to certain limitations as outlined by applicable laws. For more detailed information, please refer to the relevant sections below.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
Identifiers	Contact details, such as name, alias, online identifier, Internet Protocol address, and email address	YES
Personal information as defined in the California Customer Records statute	Name, and contact information	YES
Protected classification characteristics under state or federal law	Gender, age, and date of birth	YES
Commercial information	Transaction information, purchase history, financial details, and payment information	YES
Internet or other similar network activity	Interactions with our websites, applications, systems, and advertisements	YES
Audio, electronic, sensory, or similar information	Images uploaded by you to the Service	YES
Professional or employment-related information	Business contact details in order to provide you with our Services at a business level	YES
Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	YES
Sensitive personal Information	Account login information	YES

We collect sensitive personal information only as permitted by applicable privacy laws, for purposes authorized by law, or with your explicit consent. Such sensitive information may be utilized or shared with Service Providers or contractors for specified, additional purposes. You may have the right to restrict the use or disclosure of your sensitive personal information.

Additionally, we may gather other types of personal information beyond the specified categories in situations where you interact with us, including:

• Seeking assistance through our customer support channels,
• Engaging with us to facilitate the delivery of our Services or address your inquiries.

We will retain and use the personal information collected as necessary to provide our Services or for specific purposes, while you maintain an account with us.

Your Rights

You have specific rights under various US state data protection laws. These rights may include:

• Right to Know: determine whether we are processing your personal data.
• Right to Correct: correct inaccuracies in your personal data.
• Right to Delete: request deletion of your personal data.
• Right to Obtain a Copy: obtain a copy of personal data you have shared with us.
• Right to Non-Discrimination: be free from discrimination for exercising your data protection rights.
• Right to Opt Out: opt out of the processing of your personal data for targeted advertising, data sales, or profiling for decisions with legal or significant effects.

Additional Rights Based on State of Residence

Depending on your state, you may also have the following rights:

• Access Categories of Personal Data: view the categories of personal data being processed (e.g., as per Minnesota’s privacy law).
• List of Third Parties: obtain a list of categories or specific third parties to whom personal data has been disclosed (e.g., under California, Delaware, Minnesota, or Oregon privacy laws).
• Review Profiling Practices: review and correct how personal data has been profiled (e.g., as allowed under Minnesota’s privacy law).
• Limit Sensitive Data Usage: restrict the use or disclosure of sensitive personal data (e.g., under California’s privacy law).
• Opt Out of Sensitive Data Collection: opt out of the collection of sensitive personal data, such as data gathered through voice or facial recognition features (e.g., under Florida’s privacy law).

Exercising Your Rights

If you wish to exercise your rights or to make a request under the applicable law, you can contact us using the contact details provided in section CONTACT US.

Verifying Requests

The law mandates that we only respond to "verifiable consumer requests," meaning we must be reasonably certain the person making the request is the actual consumer they claim to be. When submitting a request, you must provide enough information to verify their identity. This may include details such as your name, email address, or other information already on record with us to match it to the personal information we maintain.

Important: Do not include sensitive information such as Social Security numbers, driver’s license or state ID numbers, account numbers, credit or debit card numbers, or medical/health information in your request.

If your request is unclear or submitted using methods other than those specified, we will provide instructions on how to properly submit your request or address any deficiencies. Please note that if we cannot verify your identity, we may be unable to fulfill your request.

California "Shine the Light" Law

The following section applies to individuals or households in California (“California consumers”). California Civil Code Section 1798.83: Under this law, California consumers may request information about how a business has shared their personal information with third parties for direct marketing purposes. Upon receiving such a request, businesses may be required to provide details of this information sharing.

California residents who wish to submit a request under this law may do so by contacting us using the information provided in the CONTACT US section. The request should confirm that the requester is a California resident and include a current California address. Please note that businesses are only obligated to respond to one request per customer within a calendar year.

It is important to understand that not all instances of information sharing are covered by California’s "Shine the Light" law. Only sharing that falls within the scope of the law will be disclosed in our response.

California Consumer Privacy Act (CCPA)

The  CCPA (California Civil Code Section 1798.100 et seq.) grants additional rights to California consumers regarding their personal information. While the general categories of personal information we collect are outlined above, the specific data collected may vary depending on the Services used by individual consumers.

Under the CCPA, qualifying California consumers may have the following rights:

Right to Know: The right to request details about the categories and specific pieces of personal information we have collected, the purposes for which we use it, and whether it has been shared with third parties;

Right to Delete: The right to request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Opt-Out: The right to opt-out of the sale of your personal information to third parties.

Right to Non-Discrimination: The right to receive equal service and pricing, even if you exercise your CCPA rights.

Right to correct: Subject to specific exceptions, you have the right to request the correction of inaccurate personal data we have collected about you. Upon receiving your request and verifying your identity, we will review it, considering the nature of the personal data and the purposes for which it is processed, to determine if a correction can be made. In some cases, we may require additional evidence to confirm that the information in question is inaccurate before proceeding with the correction.

Only you, or someone legally authorized to act on your behalf, can submit a request to access or delete your personal data. You may also make such requests on behalf of your child.

Certain data protection laws restrict requests to access personal data to twice within a 12-month period and may permit us to charge a reasonable fee for multiple requests from the same individual. We cannot process your request or provide access to your personal data if we are unable to verify your identity or authority to make the request and confirm that the personal data pertains to you.

You are not required to create an account with us to submit a request for access or deletion. However, requests submitted through a password-protected account are considered sufficiently verified if they pertain to personal data associated with that account.

Personal data provided in connection with a request will only be used to verify the requestor's identity or authority to submit the request.

Submitting Requests. If you are a California consumer and wish exercise your rights or to make a request under the  CCPA, you can contact us directly using the information provided in the CONTACT US section.

Financial Incentive Program. We may provide financial incentives as permitted by applicable data protection laws, which could result in variations in prices, rates, or service quality. These incentives will be reasonably tied to the value of your personal data and will include written terms detailing the key aspects of the program. Participation in such programs requires your prior opt-in consent, which you may revoke at any time.

Do Not Track (DNT) Disclosure. DNT is a privacy preference that users can enable in their web browsers. When activated, the browser sends a signal to websites, requesting that they do not track the user’s online activities. As there is currently no universally accepted industry or legal standard for recognizing or responding to DNT signals, we do not respond to such signals at this time

If you are a resident of Nevada, you have the right to opt out of the sale of certain personal information to third parties intending to license or sell it. To exercise this right, please contact us at support@stretchitapp.com  with the subject line “Nevada Do Not Sell Request” and include your name and the email address associated with your account.

Please note that we do not currently sell your personal information as defined under Nevada Revised Statutes Chapter 603A. If you have any questions, feel free to contact us using the information provided in the CONTACT US section.

If you are a resident of the European Union, you have specific rights regarding your personal information, as outlined by applicable data privacy laws and in accordance with this Privacy Policy. These rights include the right to review, access, correct, and request the erasure of your personal information. You may have the right to limit, restrict or object to the processing of your personal information, and to request its transfer to another party, where permitted by applicable data privacy laws. These rights may be subject to certain exceptions under applicable data protection laws.

For more details on the rights you have in respect of your personal data, please refer to the a the national Data Protection Authority in your country, the European Commission in the EU, or the Federal Data Protection and Information Commission in Switzerland.

We take the protection of personal data seriously, and for EU and UK residents we have appointed DataRep as our Data Protection Representative for the purposes of GDPR in the EU/EEA and the Data Protection Act 2018 / UK GDPR (as amended) in the UK, and FADP in Switzerland. You can contact DataRep directly in your home country. DataRep has locations in each of the 27 EU countries, the UK, and Norway & Iceland in the European Economic Area, and Switzerland.

If you want to raise a question, or otherwise exercise your rights in respect of your personal data, you may do so by contacting us directly at support@stretchitapp.com or write to us at:

STRETCHIT
ATTN: Legal
515 Madison Ave, Office 9026
New York, NY 10022
support@stretchitapp.com

Alternatively, you can send an email to DataRep at datarequest@datarep.com quoting “STRETCHIT, Inc.” in the subject line, contact DataRep on their webform at https://www.datarep.com/data-request, or mailing your inquiry to DataRep at the most convenient of the addresses below.

PLEASE NOTE: when mailing inquiries, it is ESENTIAL that you mark your letters for “DataRep” and not “STRETCHIT”, or your inquiry may not reach us. Please refer clearly to STRETCHIT, Inc. in your correspondence.

Country	Address
Austria	DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Belgium	DataRep, Rue des Colonies 11, Brussels, 1000
Bulgaria	DataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria
Croatia	DataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia
Cyprus	DataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus
Czech Republic	DataRep, Platan Office, 28. Října 205/45, Floor 3&4, Ostrava, 70200, Czech Republic
Denmark	DataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark
Estonia	DataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia
Finland	DataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland
France	DataRep, 72 rue de Lessard, Rouen, 76100, France
Germany	DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
Greece	DataRep, Ippodamias Sq. 8, 4th floor, Piraeus, Attica, Greece
Hungary	DataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary
Iceland	DataRep, Kalkofnsvegur 2, 3rd Floor, 101 Reykjavík, Iceland
Ireland	DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Italy	DataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
Latvia	DataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia
Liechtenstein	DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Lithuania	DataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania
Luxembourg	DataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg
Malta	DataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta
Netherlands	DataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands
Norway	DataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway
Poland	DataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland
Portugal	DataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal
Romania	DataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania
Slovakia	DataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia
Slovenia	DataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia
Spain	DataRep, Calle de Manzanares 4, Madrid, 28005, Spain
Sweden	DataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE - 211 46, Sweden
Switzerland	DataRep, Leutschenbachstrasse 95, ZURICH, 8050, Switzerland
United Kingdom	DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom

To safeguard your privacy and security, we will take reasonable measures to verify your identity before granting access, making corrections, or fulfilling requests to correct or delete your data.

When you contact us, we will aim to respond as quickly as possible. Most requests are free of charge; however, for requests requiring a significant amount of data or administrative effort, we may charge a reasonable fee.

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the relevant data protection authority in your country or state/province. If the GDPR applies, you may file a complaint with a supervisory authority in the European Union, either in your country of residence, workplace, or where the alleged violation occurred.

If you reside in Canada, the following provisions apply in addition to the main Privacy Policy:

1. Additional Purposes. Last paragraph of HOW WE USE YOUR INFORMATION section is replaced with: "We may collect, use, and disclose your personal data for other purposes, provided we obtain your further consent when required."

2. Processing Requirements. We process your personal data only when necessary to operate the Service, deliver Services, and manage our business activities, including the purposes outlined in this Privacy Policy. Typically, processing is required to fulfill contracts under our Terms of Service, such as subscriptions provided through the Service.

3. Marketing and Analytics. In addition to the purposes outlined elsewhere, we may use your personal data for marketing and analytics, including delivering targeted advertising based on your inferred interests from web activity or social media use. For more details, including how to manage your preferences, please refer to our Cookie Policy.

4. Consent Agreement: By using the Service or sharing your personal data with us, you consent to its collection, use, and disclosure as described in this Privacy Policy.

5. Legal Exemptions. In certain cases, permitted or required by applicable Data Protection Law, we may process your personal data without consent, such as during emergencies that threaten life, health, or safety.

6. Data Transfers. When transferring personal data to third-party service providers or outside your home country, we implement safeguards as described in this Privacy Policy and as required by applicable Data Protection Law. These safeguards include contractual obligations to ensure secure and compliant data processing. However, personal data stored or processed outside your country may be subject to different laws, which may not provide the same level of protection. For additional details or to view applicable safeguards, please contact us.

7. Access Fees. Accessing your personal data or exercising your rights will generally be free of charge. However, where permitted by applicable Data Protection Law, we may charge a reasonable fee for requests requiring exceptional effort or decline to fulfill frivolous or vexatious requests.

We collect and process your personal information in accordance with the obligations and conditions set forth in Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (collectively referred to as the “Privacy Acts”).

This Privacy Policy meets the notice requirements under both Privacy Acts, outlining:

• The personal information we collect,
• The purposes for its collection, and
• The other recipients of your personal information.

Providing Personal Information

If you choose not to provide the personal information necessary to fulfill its intended purpose, it may impact our ability to deliver services, including but not limited to:

• Offering you desired products or services,
• Managing your account with us, and
• Verifying your identity and safeguarding your account.

Your Rights

You have the right to access and request corrections to your personal information at any time. To exercise this right, please contact us using the details provided in the CONTACT US section.

Filing Complaints

If you believe your personal information is being processed unlawfully, you may submit a complaint:

• For breaches of the Australian Privacy Principles, contact the Office of the Australian Information Commissioner (OAIC).
• For breaches of New Zealand's Privacy Principles, contact the Office of the New Zealand Privacy Commissioner.

For further assistance, please refer to the respective regulatory offices in your region.

Accessing or Correcting Your Personal Information

You have the right to request access to or correction of your personal information at any time. To do so, please contact us using the details provided in the CONTACT US section.

If you are not satisfied with how we handle any complaint regarding the processing of your personal information, you can contact the appropriate regulatory authority:

The Information Regulator (South Africa). General Enquiries: enquiries@inforegulator.org.za. Complaints: Complete the POPIA/PAIA Form 5 and send it to PAIAComplaints@inforegulator.org.za and POPIAComplaints@inforegulator.org.za.