Privacy Policy | Legal - PrestonKwei.com

BY ACCESSING OR USING ANY OF OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND RETENTION OF YOUR INFORMATION AS DESCRIBED HEREIN. IF YOU DO NOT CONSENT, YOU MUST IMMEDIATELY DISCONTINUE ALL USE OF THE SERVICES.

1. Introduction and Scope

This Privacy Policy governs the collection, use, disclosure, and retention of information by PrestonKwei.com and its affiliates ("we," "us," "our") across all of our websites, subdomains, mobile applications, APIs, and other digital properties (collectively, the "Services"), including every domain identified on our Domains page. It applies to all visitors, users, and customers, regardless of geographic location, and to information collected online, offline, and from third-party sources. We act as the data controller for personal information collected through the Services. Questions may be directed to privacy@prestonkwei.com.

"Personal information" means any information relating to an identified or identifiable natural person. "Processing" means any operation performed on personal information, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, combination, restriction, and deletion.

2. Information We Collect

We collect information broadly and continuously whenever you interact with the Services. The categories below are illustrative, not exhaustive.

Information You Provide

Identifiers: Name, alias, email address, username, phone number, postal address, date of birth, gender, government-issued identifiers where required, and IP address.
Account and Commercial Data: Passwords and security credentials, purchase and transaction history, billing and shipping information, payment method details, customer service interactions, preferences, settings, and loyalty data. This information may also be collected if you authorize our applications to access your Google Account.
User-Generated Content: Photos, videos, reviews, comments, posts, voice recordings, survey responses, and documents you create or upload.
Social Media Data: If you connect a social account, your profile picture, handle, connections, follower counts, engagement metrics, posts, and other information available through that platform.
Biometric Data: With your consent where required, facial geometry, fingerprints, voiceprints, and behavioral biometrics used for authentication and security.
Employment and Health Data: Job title, employer, and professional details you provide; and, with consent where required, fitness, wellness, and related data from connected devices.

Information Collected Automatically

Device Data: Device model, operating system, browser type and version, screen resolution, unique device identifiers, advertising identifiers, MAC address, mobile network and carrier information, language settings, battery status, and performance metrics.
Activity Data: Pages visited, timestamps, dwell time, clicks, taps, scrolls, features used, search queries, content interactions, downloads, crash and error logs, referral sources, and session identifiers.
Location Data: Precise or approximate geolocation derived from GPS, IP address, Wi-Fi access points, and cell towers, subject to your device settings.
Cross-Device and Cross-Context Data: We may link your activity across devices, browsers, platforms, and contexts to build a unified profile of your behavior and preferences.

Inferred and Derived Data

We analyze the information above to draw inferences about your interests, preferences, habits, characteristics, behavior, and likely demographics, and to create profiles used for personalization, advertising, analytics, and product development. Inferred data is treated as our proprietary work product to the fullest extent permitted by law.

Information From Third Parties

Public Sources: Public records, directories, and other openly available sources.
Partners and Providers: Payment processors, analytics providers, advertising networks, data brokers, authentication providers, and social media platforms.
Combined Data: We may combine information from any source with information we hold to enrich our records and improve our Services.

3. How We Use Information

We use the information we collect for any purpose consistent with a legitimate business interest, including to:

Provide, operate, maintain, and secure the Services, including authentication, account management, and access control;
Process transactions, billing, and collections, and enforce our contractual rights;
Personalize content, recommendations, features, and advertising across devices and contexts;
Conduct analytics, research, testing, and internal reporting, in identified, aggregated, or de-identified form;
Develop, train, and improve our products, services, algorithms, and models;
Send transactional, service, and account communications, which you may not opt out of while you maintain an account;
Send marketing, promotional, and other commercial communications, subject to the opt-out rights described below;
Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service, and cooperate with law enforcement;
Comply with legal obligations, respond to legal process and lawful requests from authorities, and establish, exercise, or defend legal claims;
Effectuate any merger, acquisition, financing, reorganization, bankruptcy, or sale of assets;
Fulfill any other purpose disclosed to you at the time of collection or to which you consent.

4. Cookies and Tracking Technologies

We and our partners use cookies, web beacons, pixels, tags, scripts, local storage, software development kits, server logs, and device fingerprinting to collect information automatically, recognize you across sessions and devices, measure performance, and deliver and measure advertising. Session cookies expire when you close your browser; persistent cookies remain until they expire or are deleted. We may engage in cross-context behavioral advertising; where applicable law requires, we provide the choices described in Section 8. Blocking cookies may degrade or disable portions of the Services, and we make no commitment that the Services will function without them. See our Cookie Policy for additional detail.

5. How We Disclose Information

We disclose information in the following circumstances, and you consent to each of them:

Service Providers and Contractors: Hosting and infrastructure providers, payment processors, communication services, analytics and measurement providers, customer support tools, advertising and marketing platforms, fraud and security services, and professional advisors, in each case under contractual confidentiality and security obligations.
Affiliates: Current and future affiliates, parents, and subsidiaries for the purposes described in this policy.
Advertising and Analytics Partners: Partners who assist us in delivering, targeting, and measuring content and advertising, including through identifiers, hashed data, and audience segments.
Legal and Safety: Any disclosure we believe in good faith is necessary to comply with law or legal process, respond to governmental requests, enforce our Terms of Service, protect our rights, property, or safety or those of our users or the public, or detect and prevent fraud or security issues.
Business Transfers: In connection with any merger, acquisition, financing, reorganization, bankruptcy, receivership, or sale or transfer of some or all of our assets, in which case your information may be transferred as a business asset without further notice to you except as required by law.
With Your Direction or Consent: Any other disclosure you direct or to which you consent.
Aggregated and De-Identified Data: We may disclose aggregated or de-identified information to any party, for any purpose, without restriction.

6. Data Retention

We retain information for as long as necessary or useful to fulfill the purposes described in this policy, and thereafter for as long as retention serves a legitimate business, legal, security, or operational purpose. Retention periods vary by data type and context. Account data may be retained for the life of your account plus a reasonable period thereafter. Content you delete may persist in backups, logs, caches, and archives, and in copies retained by other users or third parties, and may remain in our systems after it ceases to be accessible to you. Where litigation, disputes, investigations, or legal obligations exist or are reasonably anticipated, we retain relevant data until the matter is fully resolved. We may retain aggregated and de-identified data indefinitely.

7. Security

We employ administrative, technical, and physical safeguards appropriate to the nature of the information we process, including transport-layer encryption, access controls with role-based permissions, secure hosting environments, monitoring and audit logging, vulnerability management, incident-response procedures, and personnel training. NOTWITHSTANDING THE FOREGOING, NO METHOD OF TRANSMISSION OR STORAGE IS COMPLETELY SECURE, AND WE DO NOT AND CANNOT WARRANT OR GUARANTEE THE SECURITY OF ANY INFORMATION. TO THE FULLEST EXTENT PERMITTED BY LAW, YOU TRANSMIT INFORMATION TO US AT YOUR OWN RISK, AND OUR LIABILITY ARISING FROM ANY UNAUTHORIZED ACCESS, ACQUISITION, OR DISCLOSURE IS LIMITED AS SET FORTH IN OUR TERMS OF SERVICE.

8. Your Choices and Rights

You may access, update, or delete certain account information through your account settings where available. You may opt out of marketing emails via the unsubscribe link in each message; transactional and service communications will continue. You may manage cookies through your browser, subject to the functionality limits described above. Depending on your jurisdiction, you may have the right to know, access, correct, delete, port, restrict, or object to certain processing, to opt out of targeted advertising or sales or sharing of personal information, and to withdraw consent where processing is based on consent. Submit requests to privacy@prestonkwei.com. We will verify your identity before acting on a request, may deny requests as permitted by law, and will respond within the time periods required by applicable law. We will not discriminate against you for exercising a legal right, but certain features may be unavailable if you restrict processing necessary to provide them.

9. California Privacy Rights (CCPA/CPRA)

Categories Collected

In the preceding 12 months, we may have collected the following categories of personal information about California consumers: identifiers; customer records information; characteristics of protected classifications; commercial information; biometric information; internet or other electronic network activity; geolocation data; audio, electronic, visual, or similar information; professional or employment-related information; and inferences drawn from any of the foregoing to create a profile reflecting your preferences, characteristics, behavior, and attitudes.

Your Rights

Right to Know and Access: The categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of recipients.
Right to Delete: Deletion of personal information, subject to the statutory exceptions, which we invoke to the fullest extent available.
Right to Correct: Correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: We do not currently sell personal information for money. Certain disclosures to advertising partners may constitute "sharing" for cross-context behavioral advertising under the CPRA; you may opt out of such sharing by contacting us.
Right to Limit Sensitive Personal Information: Limitation of our use of sensitive personal information to permitted purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising these rights.

Submit requests to legal@prestonkwei.com. We will respond within 45 days, extendable by an additional 45 days where reasonably necessary. You may designate an authorized agent with written permission; we may verify your identity directly and deny requests from agents who cannot demonstrate authority.

10. Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights to confirm processing, access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sales, and certain profiling. Nevada residents may opt out of the sale of covered information; we do not currently sell covered information as defined under Nevada law. Exercise any of these rights by contacting privacy@prestonkwei.com. Where a state provides an appeal process, you may appeal a denial by replying to our decision, and we will respond as required by the applicable statute.

11. European and UK Data Protection (GDPR)

Legal Bases

Performance of a contract with you, or steps taken at your request before entering a contract;
Your consent, which you may withdraw at any time without affecting prior processing;
Our legitimate interests, including operating and securing the Services, preventing fraud, improving our offerings, and marketing, except where overridden by your fundamental rights;
Compliance with legal obligations, including record retention and responses to lawful requests.

Your Rights

If you are in the European Economic Area or United Kingdom, you may request access to, rectification or erasure of, restriction of, or objection to our processing of your personal data, and data portability in a structured, commonly used, machine-readable format. We may require identity verification before acting. You may lodge a complaint with your supervisory authority. Contact our data protection contact at privacy@prestonkwei.com for these requests or for information about any EU or UK representative we may be required to designate.

12. International Transfers

We are headquartered in the United States, and your information will be transferred to, stored in, and processed in the United States and other jurisdictions whose data protection laws may differ from, and be less protective than, those of your jurisdiction. By using the Services, you acknowledge and, where consent is a valid basis, consent to such transfers. For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses or other mechanisms permitted by applicable law. You may request a copy of the relevant safeguards at privacy@prestonkwei.com.

13. Automated Decision-Making and Profiling

We use automated processing, including profiling, to personalize content and advertising, detect fraud and abuse, secure the Services, and improve our products. Where automated processing produces legal or similarly significant effects on you and applicable law grants you rights in connection with it, we will provide the required safeguards, including the ability to request human review, express your point of view, and contest the decision. Absent such a legal requirement, our automated systems and their outputs are proprietary and we are not obligated to explain or alter them.

14. Do Not Track

There is no accepted standard for "Do Not Track" browser signals, and our Services do not respond to them. Where applicable law requires us to honor opt-out preference signals such as the Global Privacy Control, we will do so to the extent required for users in the relevant jurisdiction.

15. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has provided personal information, we will delete it. In jurisdictions with a higher age of digital consent, we will obtain parental or guardian consent where required before collecting personal information from minors below that age. Parents and guardians may contact us to review, correct, or delete information collected from their children.

16. Data Breach Notification

If a breach of security involving your personal information occurs, we will assess its scope and nature and notify affected individuals and regulators as and when required by applicable law, using email, telephone, prominent notice on our websites, or other lawful means. Notifications will describe the incident, the categories of data involved, the measures taken, and steps you can take to protect yourself. We will cooperate with relevant authorities. Our provision of notice is not an admission of fault or liability, and our liability for any incident remains limited as set forth in our Terms of Service.

17. Changes to This Policy

We may revise this Privacy Policy at any time, in our sole discretion. Revisions are effective upon posting unless otherwise stated. For material changes, we will provide notice as required by applicable law, such as email notice or a prominent statement on our websites. Your continued use of the Services after a revision becomes effective constitutes acceptance of the revised policy. If you do not accept it, you must discontinue use of the Services and may request deletion of your information as described in Section 8.

18. Contact

Direct privacy inquiries and requests to privacy@prestonkwei.com or by mail to PO Box 20987, Oakland, CA 94620.