Data Privacy Frameworks
HiHello, Inc. has certified its compliance with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, the "DPF") regarding the collection, use, and retention of European personal information covered by this Privacy Notice that we transfer from Europe to the United States.
HiHello, Inc. has certified to the US Department of Commerce that it adheres to: (i) the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal information received from the EU in reliance on the EU-US DPF and from the UK in reliance on the UK Extension to the EU-US DPF; and (ii) the Swiss-US Data Privacy Framework Principles with regard to the processing of personal information received from Switzerland in reliance on the Swiss-US DPF (collectively, the "DPF Principles”).
If there is any conflict between the terms of this Privacy Notice and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF, and to view our certification page, please visit https://www.dataprivacyframework.gov. HiHello, Inc. is subject to the investigation and enforcement of the U.S. Federal Trade Commission. HiHello, Inc. remains liable if it fails to meet its obligations under the DPF and is responsible for the event giving rise to damage.
Any personal information received by HiHello, Inc. will be used for the purposes indicated in this Privacy Notice or in a separate notice provided to you. We will retain your personal information in an identifiable form only for the period necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law or by the DPF Principles. We will adhere to the DPF Principles for as long as we retain the personal information collected under the DPF.
We commit to give you an opportunity to opt out where we disclose your personal information to an independent third party or if your personal information is to be used for a purpose that is materially different from those communicated and/ or authorized by you. If you otherwise wish to limit the use or disclosure of your personal information, please contact us using the details provided below.
If we have received your personal information in the United States and subsequently transfer it to a third party acting as an agent, we will comply with the Accountability for Onward Transfer Principle including ensuring that such agents have written agreements requiring them to provide at least the same level of protection as required by the DPF Principles and/or applicable law. If such a third-party agent processes your personal information in a manner inconsistent with the DPF Principles, we will remain liable unless we can prove we are not responsible for the event giving rise to the damage.
In certain situations, we may be required to disclose personal information that we process under the DPF in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Individuals located in Europe have rights to access their personal information and request that HiHello, Inc. correct, amend, or delete it if it is inaccurate or processed in violation of the DPF. HiHello, Inc. may request specific information from you to confirm your identity and we will respond to your request in accordance with the DPF Principles and data protection laws. You may also opt-out of receiving marketing communications from us by writing to us at the contact details provided below or by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you.
In compliance with the DPF Principles, HiHello, Inc. commits to resolve complaints about our collection or use of your personal information. Individuals located in Europe with questions, concerns, inquiries or complaints should first contact us at privacy@hihello.com or in writing to the addresses provided in the Contact Us section below. We will investigate and attempt to resolve any DPF-related complaints or disputes within forty-five (45) days of receipt.
If you have an unresolved DPF complaint that we have not addressed satisfactorily, we commit to cooperate with the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO), the Gibraltar Regulatory Authority (GRA) and the Swiss Federal Data Protection and Information Commissioner (FDPIC), as applicable, and to comply with the advice given by them in respect of the complaint.
You may also have the option to select binding arbitration for the resolution of your complaint under certain circumstances. To learn more about the DPF’s binding arbitration scheme please see: https://www.dataprivacyframework.gov.
