This Privacy Notice for Lodge Fractals ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at defytheoddsfractal@gmail.com.
This summary provides key points from our Privacy Notice — you can find more detail on any of these by reading the full sections below.
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal information provided by you. The personal information we collect may include:
Sensitive information. We do not process sensitive information.
Payment data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the associated security code. All payment data is handled and stored by Stripe. You may find their privacy notice here: https://stripe.com/privacy.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
If you are located in the EU or UK, this section applies to you.
The GDPR and UK GDPR require us to explain the valid legal bases we rely on to process your personal information:
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (express consent), or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time. In certain exceptional cases, we may process your information without consent, including: where collection is clearly in an individual's interest and consent cannot be obtained in a timely way; for investigations and fraud detection/prevention; for business transactions under certain conditions; where contained in a witness statement necessary to assess an insurance claim; for identifying injured, ill, or deceased persons; where there are reasonable grounds to believe someone has been a victim of financial abuse; where reasonably necessary to investigate a breach of an agreement or Canadian law; where required to comply with a subpoena, warrant, or court order; where produced by an individual in the course of their employment, business, or profession and used consistently with that purpose; for journalistic, artistic, or literary purposes; where the information is publicly available; or for approved research or statistics with confidentiality safeguards.
Vendors, consultants, and other third-party service providers. We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties designed to help safeguard your personal information — they cannot do anything with it unless we've instructed them to, and won't share it with anyone else.
The third parties we share personal information with are:
We may also need to share your personal information in the following situation:
Our servers are located in the United States. Regardless of your location, your information may be transferred to, stored by, and processed by us and by the third parties with whom we share your personal information (see Section 4) — including in the United States and other countries.
If you are a resident of the European Economic Area (EEA), United Kingdom (UK), or Switzerland, these countries may not necessarily have data protection laws as comprehensive as those in your own country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law, including reliance on the European Commission's Standard Contractual Clauses.
We will only keep your personal information for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required by law. No purpose in this notice requires us to keep your personal information for longer than the period of time in which you have an account with us.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if that isn't possible, securely store it and isolate it from any further processing until deletion is possible.
We have implemented appropriate technical and organizational security measures designed to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that hackers or other unauthorized parties will never be able to defeat our security. You should only access the Services within a secure environment.
We do not knowingly collect, solicit data from, or market to children under 18 (or the equivalent minimum age in your jurisdiction), nor do we knowingly sell such information. By using the Services, you represent that you are at least 18, or that you are the parent/guardian of a minor and consent to their use of the Services. If we learn that we have collected personal information from a user under 18, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any such data, please contact us at defytheoddsfractal@gmail.com.
In some regions (the EEA, UK, Switzerland, and Canada) you have the right to: (i) request access to and a copy of your personal information; (ii) request rectification or erasure; (iii) restrict processing of your personal information; (iv) data portability, where applicable; and (v) not be subject to solely automated decision-making that produces legal or similarly significant effects — in which case we will explain the main factors and offer a simple way to request human review. You may also have the right to object to processing in certain circumstances. You can make such a request using the contact details in Section 13.
If you are in the UK and unhappy with how we've handled your personal information, you can complain directly to us first (email defytheoddsfractal@gmail.com). We'll acknowledge your complaint within 30 days, investigate without unjustifiable delay, and keep you informed of progress and the outcome. If you're not satisfied with our final response, you can refer your complaint to the UK's Information Commissioner's Office:
If you're in the EEA or UK, you may also complain directly to your Member State data protection authority or the UK data protection authority. If you're in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw it at any time by contacting us (see Section 13). This won't affect the lawfulness of processing carried out before your withdrawal.
If you would like to review, change, or terminate your account at any time, you can:
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your online browsing activity monitored. No uniform technology standard for recognizing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we'll update this notice.
The table below shows categories of personal information that may apply, and whether we actually collect each one.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, postal address, phone number, unique or online identifier, IP address, email address, account name | Yes |
| B. California Customer Records categories | Name, contact info, education, employment, employment history, financial information | No |
| C. Protected classification characteristics | Gender, age, date of birth, race/ethnicity, national origin, marital status, other demographic data | No |
| D. Commercial information | Transaction information, purchase history, financial details, payment information | Yes |
| E. Biometric information | Fingerprints and voiceprints | No |
| F. Internet or similar network activity | Browsing history, search history, online behavior, interest data | No |
| G. Geolocation data | Device location | No |
| H. Audio, electronic, sensory, or similar information | Images, audio, or video recordings | Yes |
| I. Professional or employment-related information | Business contact details, job title, work history | No |
| J. Education information | Student records and directory information | No |
| K. Inferences drawn from collected information | Profiles reflecting preferences or characteristics | No |
| L. Sensitive personal information | — | No |
Categories A, D, and H are retained for as long as you have an account with us. We may also collect other personal information outside these categories through customer support, surveys or contests, and while responding to your inquiries.
We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.
You have rights under certain US state data protection laws, including the right to: know whether we're processing your personal data; access it; correct inaccuracies; request deletion; obtain a copy of the data you've shared with us; non-discrimination for exercising your rights; and opt out of processing for targeted advertising, sale, or profiling with legal effect. Depending on your state, you may also have the right to: access categories of data processed (Minnesota); obtain a list of categories of third parties data was disclosed to (California, Delaware, Maryland); obtain a list of specific third parties (Minnesota, Oregon); obtain a list of third parties data was sold to (Connecticut); review and correct profiling (Connecticut, Minnesota); limit use of sensitive personal data (California); and opt out of biometric collection via voice or facial recognition (Florida).
How to exercise your rights. Contact us at defytheoddsfractal@gmail.com. Under certain state laws you may designate an authorized agent to make a request on your behalf, with proof of authorization. Upon receiving a request we will verify your identity before acting on it.
Appeals. If we decline to act on your request, you may appeal by emailing defytheoddsfractal@gmail.com. We will inform you in writing of the outcome and the reasons for our decision. If your appeal is denied, you may submit a complaint to your state attorney general.
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. To make such a request, contact us using the details in Section 13.
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this notice. If we make material changes, we may notify you by prominently posting a notice or by directly notifying you. We encourage you to review this Privacy Notice periodically.
If you have questions or comments about this notice, you may email us at defytheoddsfractal@gmail.com, or write to us at:
Lodge Fractals
12-55 Cl 147, conjunto barcelona interior 29
Bogotá, Bogotá 110111
Colombia
Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we've processed it, correct inaccuracies, or delete it. You may also have the right to withdraw your consent to our processing of your personal information. To make such a request, email defytheoddsfractal@gmail.com.
Submit a data request →