Extreme Reach, Inc.; Extreme Reach Talent, Inc; Extreme Reach Services Group, LLC; CMC Crew Services, Inc; Extreme Reach Payroll Solutions, Inc.; Slate and Extreme Reach UK Limited (collectively “Extreme Reach”) are committed to respecting and protecting your privacy.

This Privacy Policy describes how we collect, use, disclose, store, and otherwise process user information collected through the Extreme Reach Platform application. For information related to particular Services, please see the relevant policy posted on our Privacy website.

Information We Collect

Extreme Reach collects IP addresses, aggregate user data, non-precise geolocation, and browser type, (collectively “Technical Usage Data”) from Platform users and user contacts. This information is collected when users register, update their user profiles, or add contacts to their Platform account. Extreme Reach also collects personal information about users that users voluntarily supply (e.g., information submitted through registering as a user). When communicating with Extreme Reach, all communications may be transmitted and stored by us. By visiting the Extreme Reach Platform or using any of our services, you consent to Extreme Reach’s collection, use, and storage of information relating to you as set forth in this privacy policy.

Depending on the services Extreme Reach provides to you, we may also collect information about user ads and campaigns, individuals in the ads, or other information related to the ads and campaigns. Other than those categories of data listed in this section, Extreme Reach does not collect any other personal information.

How Collected Data Is Used

Extreme Reach uses personal information about Platform users and contacts to process orders, deliveries, or other transactions users conduct using the Extreme Reach Platform. We may also use your user information to manage the application, track usage, and improve the application services.

We may also use this information to recommend products and services that might be of interest to you, to send you marketing and advertising messages such as newsletters, announcements, or special offers or to notify you about our upcoming events. We may also use such information to provide you products and services, such as to fulfill your requests for products or to help us personalize our offerings to you. We also use your personal information to support our business functions, such as fraud prevention or legal functions. We do not use your data for any automated decision-making.

Technical Usage Data is used to manage the application, track usage, properly assign support to correct geo-regions, and improve application services. Other non-personally identifiable information that we collect is used to manage ads and campaigns.

Information Disclosed to Outside Parties

Information, including personal contact information, from orders, deliveries, and other business transactions may be disclosed to the third parties (e.g., users’ employer and/or their business partners) involved in those transactions.

Extreme Reach may also disclose personal information to our third-party vendors and service providers that work with us. We will only share personal information to these vendors and service providers to help us provide a product or service to you or to understand your usage of the Extreme Reach Platform.

We do not otherwise sell, trade, or transfer collected information to outside parties, unless we believe release is required to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

How We Protect Your Information

Security of all information is of the utmost importance for Extreme Reach. We use technical and physical safeguards to protect the security of your information from unauthorized disclosure. We also make all attempts to ensure that only necessary people and third parties have access to personal and confidential information.

We require that our third party service providers (1) use confidential information only to perform their obligations, and (2) otherwise maintain the confidentiality of such information. These third party service providers and channel partners are expected to maintain privacy and security protections that are consistent with Extreme Reach’s privacy and information security policies.

Cookie Choice

We honor Do Not Track and cookie preferences. Although you are not required to accept cookies, if you block or reject them, functionality of the Extreme Reach Platform will be compromised. Most web browsers also provide settings that allow you to control or reject cookies or to alert you when a cookie is placed on your computer, tablet or mobile device. For more information, visit the help page for your web browser.

Your Rights

You have a variety of rights you may exercise with respect to your personal information.  While legislation only requires that we honor certain requests from people who live in certain jurisdictions, we believe in your privacy rights regardless of where you live and, therefore, allow anyone (including agents) from anywhere to exercise any of those same rights, and we will not discriminate in any way against anyone for doing so.  

As such, you can exercise the following rights with respect to your personal information that we have: (1) access your information, (2) correct or update your information, (3) delete your information, (4) Do Not Sell or Share directive, (5) transfer or port your information to someone else, (6) find out who we’ve disclosed your information to, and (7) unsubscribe or opt-out. To exercise any of these rights, please click here. Obviously, some of these requests would cause you to lose your ability to actually use the Platform (for example, if we delete all of your information, that would include your account).

You can opt-out of marketing emails by contacting Extreme Reach at privacy@extremereach.com or by clicking the unsubscribe link from a marketing email, which will remove you from our marketing list.

GDPR

Extreme Reach is committed to protecting your data in compliance with the General Data Protection Regulations (GDPR). Extreme Reach is the controller of data collected you provide to us as a Platform user. Should you have any issues with how we handle your data, we request that you contact us first so that we can make every effort to address your concerns. You also have the right to lodge a complaint with a local data supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner, who may be contacted at http://ico.org.uk/concerns/ or by telephone: +44303-123-1113.

For further information on your rights under GDPR, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals rights under the General Data Protection Regulation.

CPRA

If you are a California resident, California law provides you with particular rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws. To exercise any such rights, please click the link above within the “Your Rights” section.

For data regarding Data Requests we received and responded to in 2023, please see Consumer Data Request Report.

International Transfers

We receive data from customers wherever they sign in to our application globally. We store and process data in the United States, Canada and the UK, depending on customer location and the services at issue. Data accessed by customers internationally may be transferred by such customers.

EU-US Data Privacy Framework Compliance

Extreme Reach complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Extreme Reach has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  Extreme Reach has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

In compliance with the DPF Principles, Extreme Reach commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our policy or data privacy actions should first contact Extreme Reach at privacy@extremereach.com.

Extreme Reach is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its use of your data. Under certain conditions, you may have the right to invoke binding arbitration regarding your privacy rights. If Extreme Reach wrongly transfers your private data to third parties, it may be liable to you for damages.

ER has further committed to refer unresolved privacy complaints under the EU-U.S. DPF Principles to an independent U.S.-based third party dispute resolution provider. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Children

Extreme Reach recognizes the importance of protecting the privacy and safety of children. The Extreme Reach Platform is directed toward the advertising industry and is not directed toward children. We do not knowingly collect Platform user information about children under the age of 16.

Data Retention

We retain data we collect from Platform profiles to support Platform transactions. We may be obligated to retain this data to support contractual or regulatory reasons.

Changes to This Policy

Extreme Reach reserves the right to change, modify, add or remove portions of this Privacy Policy at any time without notice (except when legally obligated to provide notice). Any changes to this Privacy Policy will become effective when we post the revised version on our website.

Opt-out

You can opt-out of marketing emails by contacting Extreme Reach by or by clicking the unsubscribe link from a marketing email, which will remove you from our marketing list. You can also do so from the link in the Your Rights section above.

Legal Basis

Your consent and our legitimate interest (carrying out services that you or your employer or your employer’s clients have contracted for) are the legal bases for collecting and processing your data. By submitting your information and registering as a Platform user, you are providing your consent to process your data in the manners described herein. You have the right to withdraw or decline your consent at any time by contacting Extreme Reach (see Your Rights above or Contact Information below). Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal. Withdrawing consent will terminate your ability to use the Extreme Reach Platform.

Contact Information

You can contact privacy@extremereach.com or 1-800-324-5672 if you have questions about this privacy policy or for requests related to your privacy rights.

Last updated: August 21, 2023 to update EU-US DPF Compliance.