Introduction

This Privacy Policy ("Policy") describes how GoofyGrabs, a Times Group Company (Bennett, Coleman & Co. Ltd) ("We," "Us," "Our," "BCCL"), collects, uses, stores, processes, discloses, and protects information from users ("You," "Your") of our website, mobile applications, and other services ("Website" or "Services"). By using our Services, you agree to this Policy and our Terms and Conditions.

Scope and Third-Party Sites

This Policy should be read alongside our Cookie Policy and Terms and Conditions. When you provide information through third-party platforms linked to our Website, their privacy practices apply to the information they collect. We are not responsible for the privacy practices of these third-party sites. We recommend reviewing their privacy policies.

Information Collection

1. Information Collected Before May 25, 2018
   - If we identify your information as belonging to an EU resident, we will notify you and seek consent to continue storing and processing it. If you withdraw consent, we will delete your information, though some may be archived for legal purposes. Data stored on your device must be manually deleted.

2. User Consent
   - By using our Services (e.g., registering for an account, entering contests, communicating with us), you consent to our collection, use, and sharing of your personal information. In certain jurisdictions with specific data protection regulations, explicit consent may be required.

3. Accessing Website through VPN
   - We are not liable for information collected if you use mechanisms like VPNs to conceal your location.

Collection and Use of Personal Information

1. Information Collected at Registration
   - When you register using web accounts (e.g., Facebook, Google), we collect:
     - First and last name
     - Email address
     - Mobile number
     - IP address
     - Public profile information from linked social media accounts

2. Information Collected through Mobile Application
   - When you download and use our mobile application, we may collect:
     - Email address
     - Mobile number
     - Location/IP address (up to 300 meters accuracy)
     - Device ID
     - SMS for OTP (One-Time Password)

Privacy Policy for GoofyGrabs

Information You Provide to Us Voluntarily

- Personal Correspondence: If you send us emails, letters, or other correspondence about your activities on the Website, we may collect and store this information.
- Profile Information: Post-registration, you have the option to provide additional details such as gender, date of birth, marital status, city, and bank names associated with your debit/credit card. This helps us tailor offers to you.
- Feedback and Communication: We may collect information when you provide feedback, modify your content or email preferences, respond to surveys, or communicate with us. This information may include your name, email address, mobile number, location, etc.

Information Automatically Collected While Browsing/Navigating the Website

- Cookies: Our Website uses cookies and similar technologies essential for its functioning and to provide our Services. For more information, please refer to our Cookie Policy [here](https://goofygrabs.com/cookie-policy). We do not automatically collect personally identifiable information through these cookies.

- Do Not Track: Our Website and Services do not currently respond to “Do Not Track” requests or signals from browsers.

- Inferred Information: We track certain information based on your behavior to conduct internal research on demographics, devices, interests, and behavior. This helps us understand, protect, and serve our users better. We use this information to:
  - Evaluate your interest in various content genres, services, and offers.
  - Perform analytics and customer research to identify effective content and analyze traffic patterns.

- Social Media and Public Content: If you post messages on social media, message boards, chat rooms, or leave feedback, we collect this information to resolve disputes, provide support, and troubleshoot issues.

Information We Collect from Third Parties

- Information from Other Sources: We may receive information from other online sources and add it to our account information system, treating it in accordance with this Policy. We use this information to provide more targeted communications and promotions. We use Google Analytics to track user behavior on our Website. Google Analytics provides anonymous reports and cannot be linked to personally identifiable information. You can opt-out of Google Analytics for Display Advertising via Google Ads Settings.

- Third-Party Websites: If you link or connect your BCCL account with third-party services, they may send us information such as your registered email address and public profile details. Examples include:
  - Facebook: Email ID and public profile information (name, profile picture, age, gender).
  - Google: Email ID, language preference, and age.

Disclosure to Third Parties

- Service Providers: Our Website may include links to other websites or applications governed by their own privacy policies. Once you leave our servers, any information you provide is subject to the privacy policy of the external site.

- Legal Requirements: We may disclose your personal information if BCCL is merged with or acquired by another company, during business reorganization or restructuring, or to comply with legal requirements. This includes enforcing our Terms of Service, responding to claims, protecting rights or safety, or preventing illegal activities.

- Business Transfers: We may share your personal information with affiliates and trusted businesses to process it according to our instructions and Privacy Policy. For instance, we may use service providers to assist with customer support.

 

Usage of Websites in the European Region

This Policy applies to our Websites and mobile applications available in the European Region. In compliance with the European Union’s General Data Protection Regulations (GDPR), some of our services may not be available on certain platforms in the EU.

- Update Requirements: Users are urged to update to the most current version of our Websites and delete any applications we no longer support to avoid the collection or storage of EU users' information. We are not responsible for the collection or processing of information if you use outdated or unsupported versions of our services.

Purposes and Lawfulness of Processing

We collect and process personal data only where we have a lawful basis, including:

- Consent: We may process personal data based on your explicit consent.
- Legitimate Interests: We may process data necessary for providing services and improving user experience, which includes processing by our affiliates or third-party service providers.

Uses of your information include:

- Service Improvement: Analyzing audience data to enhance services, user interface, recommendation algorithms, and delivery.
- Personalization: Providing personalized content, suggestions, and interactive features.
- Advertising: Helping advertisers understand our audience through aggregated statistics and delivering relevant ads.
- Communication: Sending updates about services, new features, promotional content, surveys, and operational requests like password resets.
- Legal Compliance: Notifying about changes in Terms & Conditions and this Policy.
- Customer Support: Resolving issues and addressing queries related to rights or services.

Information Use by the Company

- Service Enhancement: Your information helps us improve services, including advertising, and develop new services.
- Marketing: We may use your email for marketing with your consent and will provide an option to withdraw consent where feasible. For non-marketing purposes, we may use your email for administrative tasks like major updates and breach notifications.
- Public Information: Information shared publicly on our Website or social media is not considered personally identifiable information subject to this Policy. We are not liable for any services denied due to lack of personal information.

Information Sharing

We may share your information with third parties without prior consent under the following circumstances:

- Legal Requirements: Disclosures required by law, court orders, or government agencies for verification, prevention, detection, investigation, or prosecution of offences.
- Group Companies: Sharing within our group companies for processing personal data on our behalf, ensuring compliance with this Policy and confidentiality measures.

Data Retention

- Retention Period: We retain information as long as necessary for account maintenance and service provision. We may delete your information upon request but may retain some data for legal compliance.
- Archiving: We may archive information to ensure compliance with applicable laws.

Your Controls and Choices

Accessing and Rectifying Your Personal Information

- Access Requests: You can request access to your personal information by emailing our Data Protection Officer. You will receive a link to view all personal data collected and stored about you.
- Correction Requests: To correct inaccurate or incomplete personal information, you can update your login credentials via the Profile & Settings section or email our support team.

Data Portability

- Request Copies: You may request copies of your personal information in a structured, commonly used, and machine-readable format by writing to us at support@goofygrabs.com.

Data Retention and Erasure

- Retention: We retain personal information as long as necessary to provide services, comply with laws, or until you request deletion.
- Erasure Requests: You can request the erasure of your personal information and account closure by contacting us. Note that some data may be retained for legitimate business interests or legal obligations, and public information shared with others may remain visible without personal identifiers.

Withdrawing Consent and Restriction of Processing

- Withdraw Consent: You can withdraw consent for processing by emailing us. We will review and verify your request before stopping further processing.
- Restriction of Processing: If you object to processing for direct marketing or other purposes, you can request us to cease processing your data by emailing us.

Complaints

- Grievances: For any grievances or complaints regarding data processing, email us at support@goofygrabs.com. You also have the right to file complaints with data protection authorities.

Phishing

- Suspicious Emails: If you receive suspicious emails claiming to be from us, do not reply or open attachments. Report phishing attempts to support@goofygrabs.com with "phishing" in the subject line.

Children’s Privacy

- Policy: Our services are not directed at individuals under 18. If we collect personal information from minors without parental consent, we will delete it and notify the parent. Parents are responsible for monitoring their children's use of our services.

Data Transfer, Storage, and Processing Globally

- Global Operations: We may transfer your personal information globally within our affiliated companies or third parties, ensuring adequate safeguards are in place, including standard contractual clauses and data processing addendums as per GDPR requirements.

Security Measures

- Protection: We implement security measures to protect your data from unauthorized access, alteration, or destruction. This includes encryption, physical security measures, and controlled access to servers. Report any suspected unauthorized use of your account to our Data Protection Officer immediately.

Updates and Changes

- Policy Changes: We may update this privacy policy to reflect changes in technology or law. Changes will be effective immediately upon posting on our Website, and we may notify you via email. Review this policy periodically.