PRIVACY POLICY

Quest Analytics, L.L.C. 9225 Indian Creek Pkwy, Suite 200, Overland Park, KS 66210, United States of America

Last Updated: May 21, 2025 Effective Date: May 21, 2025

1. Introduction

This Privacy Policy describes the policies of Quest Analytics, L.L.C., 9225 Indian Creek Pkwy, Suite 200, Overland Park, KS 66210, United States of America (the “Company,” “We,” “Us,” or “Our”), email: legal@questanalytics.com, phone: (920) 739-4552, on the collection, use, and disclosure of Your information when You use our website (https://questanalytics.com/) (the “Service”). The Service is a business-to-business informational website used to provide information about Our products and services and to facilitate business inquiries. The Service is not directed to individual consumers for the purchase of goods or services for personal, family, or household use.

By accessing or using the Service, You consent to the collection, use, and disclosure of Your information in accordance with this Privacy Policy. If You do not consent to the same, please do not access or use the Service. Where applicable law requires a specific form of consent for particular processing activities (such as opt-in consent for Sensitive Personal Information in certain jurisdictions), We will obtain such consent separately.

We use Your Personal Data to provide and improve the Service. This Privacy Policy tells You about Your privacy rights and how the law protects You.

We may update this Privacy Policy from time to time. For non-material changes (such as typographical corrections, updated contact information, or minor clarifications that do not alter the substance of Our data practices), changes will be effective immediately upon posting. A change is “material” only if it (a) expands the categories of Personal Data We collect, (b) introduces a new purpose for processing that is incompatible with the purposes disclosed herein, or (c) materially reduces the rights available to You under this Privacy Policy. For material changes, the revised Privacy Policy will become effective fourteen (14) days after it is posted on the Service with an updated “Last Updated” date. We may, but are not obligated to, also provide notice of material changes by email to the address associated with Your Account (if any) or by other reasonable means. Your continued access or use of the Service after the effective date of any revised Privacy Policy constitutes Your acceptance of the revised Privacy Policy.

2. Interpretation and Definitions

2.1 Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

2.2 Definitions

For the purposes of this Privacy Policy:

“Account” means a unique account created for You to access our Service or parts of our Service.

“Affiliate” means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.

“Business” for the purpose of the CCPA/CPRA (California Consumer Privacy Act, as amended by the California Privacy Rights Act), refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of the processing of Consumers’ personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers’ personal information, that does business in the State of California.

“Company” (referred to as either “the Company,” “We,” “Us,” or “Our” in this Privacy Policy) refers to Quest Analytics, L.L.C., 9225 Indian Creek Pkwy, Suite 200, Overland Park, KS 66210. To the extent the GDPR applies to Our processing activities, the Company acts as the Data Controller.

“Consumer” for the purpose of the CCPA/CPRA, means a natural person who is a California resident. A resident, as defined in the law, includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.

“Cookies” are small files that are placed on Your computer, mobile device, or any other device by a website, containing the details of Your browsing history on that website among its many uses.

“Country” refers to Kansas, United States.

“Device” means any device that can access the Service such as a computer, a cellphone, or a digital tablet.

“Do Not Track” (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.

“Personal Data” (also referred to as “Personal Information”) is any information that relates to an identified or identifiable individual. To the extent the GDPR applies, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity. For the purposes of the CCPA/CPRA, Personal Data means any information that identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.

“Sale” (or “Sell”) for the purpose of the CCPA/CPRA, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s Personal Information to another business or a third party for monetary or other valuable consideration.

“Sensitive Personal Information” means, to the extent actually collected or processed by the Company, Personal Data that reveals (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) precise geolocation; (d) racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of mail, email, or text messages (where the Company is not the intended recipient); (f) genetic data; (g) biometric information processed for the purpose of uniquely identifying an individual; (h) information concerning health or mental health condition or diagnosis; (i) information concerning sex life or sexual orientation; (j) citizenship or immigration status; or (k) personal data collected from an individual the Company has actual knowledge is a child under the age of sixteen (16). For purposes of state privacy laws that define “sensitive data” or “sensitive personal information” to include categories not enumerated above (such as status as transgender or nonbinary, or sex or gender including pregnancy), the applicable state-law definition shall govern the rights and obligations set forth in the state-specific subsections of Section 11 of this Privacy Policy.

“Share” (or “Sharing”) for the purpose of the CCPA/CPRA, means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s Personal Information by the Business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions in which no money is exchanged.

“Service” refers to the Website.

“Service Provider” means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service, or to assist the Company in analyzing how the Service is used. To the extent the GDPR applies, Service Providers are considered Data Processors.

“Third-Party Social Media Service” refers to any website or any social network website through which a User can log in or create an account to use the Service.

“Usage Data” refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

“Website” refers to Quest Analytics, accessible from https://questanalytics.com.

“You” means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable. To the extent the GDPR applies, You may be referred to as the Data Subject.

3. Information We Collect

3.1 Personal Data

We may collect and process the following personal information about You, depending on how You interact with the Service:

  • Name (first name and last name)
  • Email address
  • Phone number (mobile)
  • Address, State, Province, ZIP/Postal Code, City
  • Work Address
  • Social Media Profile (where You choose to interact with Us through a Third-Party Social Media Service, to facilitate communication and to enable Us to respond to inquiries submitted through social media channels)
  • Date of Birth (where required for identity verification in connection with consumer rights requests or age-gating requirements under applicable law)

3.2 Sensitive Personal Information

In the ordinary course of operating the Service, We do not collect Personal Data that falls within the definition of Sensitive Personal Information (or “Sensitive Data”) under applicable U.S. state privacy laws. The Personal Data We collect (including Date of Birth, Social Media Profile, and the other categories listed in Section 3.1) consists of standard identifiers, professional contact information, and Usage Data — none of which are classified as “sensitive” under the California Consumer Privacy Act, the Texas Data Privacy and Security Act, the Virginia Consumer Data Protection Act, or other applicable state privacy laws. If We begin collecting Personal Data that qualifies as Sensitive Personal Information under any applicable state law, We will update this Privacy Policy and, where required by law, obtain Your consent prior to such processing.

  • For residents of states that require affirmative opt-in consent prior to processing Sensitive Data as defined under that state’s law (including Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Delaware, New Jersey, Indiana, Tennessee, New Hampshire, Nebraska, Minnesota, and Maryland, but excluding Iowa, which uses an opt-out model), We will obtain Your consent before processing any such Sensitive Data. Because We do not currently collect data falling within any state’s definition of Sensitive Data in the ordinary course of the Service, this consent obligation is not currently triggered.

3.3 Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as Your Device’s Internet Protocol address (i.e., IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers, and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

4. Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.

You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close your web browser.

We use both session and persistent Cookies for the purposes set out below:

Necessary / Essential Cookies. Type: Session Cookies. Administered by: Us. Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

Cookie Policy / Notice Acceptance Cookies. Type: Persistent Cookies. Administered by: Us. Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

Functionality Cookies. Type: Persistent Cookies. Administered by: Us. Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

Tracking and Performance Cookies. Type: Persistent Cookies. Administered by: Third Parties. Purpose: These Cookies are used to track information about traffic to the Website and how users use the Website. The information gathered via these Cookies may directly or indirectly identify you as an individual visitor. This is because the information collected is typically linked to a pseudonymous identifier associated with the device you use to access the Website. We may also use these Cookies to test new pages, features, or new functionality of the Website to see how our users react to them.

Advertisement Cookies. Type: Persistent Cookies. Administered by: Third Parties. Purpose: These Cookies are used to provide visitors with relevant advertisements based on the pages You visited previously and to analyze the effectiveness of advertising campaigns. We may use third-party advertising technology providers that place Cookies on the Service to deliver targeted advertisements on Our behalf on third-party websites and platforms. The specific advertisement Cookies deployed on the Service, their providers, and their durations are described in our Cookie Policy, which is updated periodically to reflect Our current cookie inventory.

The specific Cookies deployed on the Service, including their names, providers, purposes, and durations, may change from time to time. For the most current and detailed information about the Cookies We use, including how to manage Your Cookie preferences, please refer to our Cookie Policy, available on the Service. The Cookie Policy is incorporated herein by reference.

5. How We Use Your Information

We will use the information that We collect about You for the following purposes:

  • To provide and maintain our Service, including to monitor the usage of our Service
  • To manage Your Account: to manage Your registration as a user of the Service
  • For the performance of a contract: the development, compliance, and undertaking of the purchase contract for the products, items, or services You have purchased or of any other contract with Us through the Service
  • Marketing and promotional purposes
  • Customer feedback collection
  • To enforce our Terms and Conditions
  • Customer support
  • Administration information
  • Targeted advertising (to deliver relevant information about Our business-to-business products and services to professionals and businesses that may benefit from them)
  • Site protection
  • To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation
  • To provide You with news, special offers, and general information about other goods, services, and events which We offer that are similar to those that You have already purchased or enquired about, unless You have opted not to receive such information
  • To manage Your requests: To attend and manage Your requests to Us

If We want to use Your information for any other purpose that is materially incompatible with the purposes described in this Privacy Policy, We will seek Your explicit, affirmative consent (e.g., through a checked box, written confirmation, or equivalent affirmative act) prior to any such use, and We will use Your information only on receiving Your consent and then, only for the purpose(s) for which You grant consent unless We are required to do otherwise by law. We will maintain records of such consent.

6. How We Share Your Information

We will not transfer Your personal information to any third party without seeking Your consent, except in limited circumstances as described below.

We may share Your personal information with the following categories of recipients:

  • Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, for advertising and marketing services, analytics, and data processing. We require such third parties to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose. Service Providers that process Personal Data on Our behalf are contractually obligated to maintain the confidentiality and security of such information.
  • Business Transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company. If the Service or our Company is merged or acquired with another company, Your information will be one of the assets that is transferred to the new owner.
  • Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners, or other companies that We control or that are under common control with Us.
  • Business Partners: We may share Your information with Our business partners to offer You certain products, services, or promotions.

We may also disclose Your personal information for the following purposes: (1) to comply with applicable law, regulation, court order, or other legal process; (2) to enforce Your agreements with Us, including this Privacy Policy; (3) to respond to claims that Your use of the Service violates any third-party rights; (4) to protect and defend the rights or property of the Company; (5) to prevent or investigate possible wrongdoing in connection with the Service; (6) to protect the personal safety of Users of the Service or the public; or (7) to protect against legal liability.

7. Retention of Your Information

We will retain Your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected as described in this Privacy Policy. The criteria We use to determine retention periods include: (a) the duration of Our ongoing relationship with You (e.g., whether You have an active Account or continue to engage with Our Service); (b) whether there is a legal obligation to which We are subject (e.g., record-keeping requirements under applicable law); (c) whether retention is advisable in light of Our legal position (e.g., applicable statutes of limitations, litigation holds, or regulatory investigations); and (d) the nature and sensitivity of the information.

We may need to retain certain information for longer periods such as record-keeping or reporting in accordance with applicable law, or for other legitimate reasons like enforcement of legal rights, fraud prevention, resolving disputes, and enforcing our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Residual anonymous information and aggregate information, neither of which identifies You (directly or indirectly), may be stored indefinitely.

8. Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country, or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy, and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

9. Security

The security of Your information is important to Us, and We will use reasonable security measures to prevent the loss, misuse, or unauthorized alteration of Your information under Our control. However, given the inherent risks of transmitting information over the Internet, We cannot guarantee absolute security and consequently, We cannot ensure or warrant the security of any information You transmit to Us and You do so at Your own risk.

10. Detailed Information on the Processing of Your Personal Data

10.1 Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

Google Analytics. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy Terms web page.

10.2 Email Marketing

We may use Your Personal Data to contact You with newsletters, marketing, or promotional materials and other information that may be of interest to You. You may opt-out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send or by contacting Us. We may use Email Marketing Service Providers to manage and send emails to You.

11. Your Rights

Depending on the law that applies, You may have a right to access and rectify or erase Your personal data or receive a copy of Your personal data, restrict or object to the active processing of Your data, ask Us to share (port) Your personal information to another entity, withdraw any consent You provided to Us to process Your data, a right to lodge a complaint with a statutory authority, and such other rights as may be relevant under applicable laws. To exercise these rights, You can write to Us at legal@questanalytics.com. We will respond to Your request in accordance with applicable law.

Do note that if You do not allow Us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, You may not be able to access or use the services for which Your information was sought.

11.1 Your Rights Under the GDPR (European Economic Area Residents)

Quest Analytics is a U.S.-based company that does not maintain an establishment in the European Economic Area (“EEA”) and does not direct the Service to individuals located in the EEA. To the extent that the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) applies to Our processing of Your Personal Data — for example, if You are located in the EEA and Your Personal Data is processed in connection with the offering of goods or services to You or the monitoring of Your behavior within the EEA — You may have the following rights under the GDPR:

  • Right of Access: The right to obtain confirmation as to whether We are processing Your Personal Data and, where that is the case, to access such data and receive a copy thereof.
  • Right of Rectification: The right to have any incomplete or inaccurate Personal Data We hold about You corrected.
  • Right to Object: The right to object to processing based on legitimate interests or direct marketing, on grounds relating to Your particular situation.
  • Right to Erasure: The right to request deletion of Your Personal Data where there is no compelling reason for Us to continue processing it.
  • Right to Data Portability: The right to receive Your Personal Data in a structured, commonly used, machine-readable format, where processing is based on consent or contract performance and carried out by automated means.
  • Right to Restrict Processing: The right to request restriction of processing in certain circumstances (e.g., where You contest the accuracy of Your Personal Data).
  • Right to Withdraw Consent: Where processing is based on consent, You have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising Your GDPR Rights. To exercise any of the rights described above, contact Us at legal@questanalytics.com. We may ask You to verify Your identity before responding. We will respond to Your request within thirty (30) days, which may be extended by up to sixty (60) additional days where necessary, taking into account the complexity and number of requests. You also have the right to lodge a complaint with a supervisory authority in the EEA member state of Your habitual residence, place of work, or place of the alleged infringement.

Legal Basis for Processing. To the extent the GDPR applies, We process Personal Data under the following lawful bases: (a) Consent — where You have given consent for one or more specific purposes (e.g., acceptance of non-essential cookies via Our Cookie Policy consent tool); (b) Performance of a contract or pre-contractual steps — where processing is necessary for the performance of a contract with You or to take steps at Your request prior to entering into a contract (e.g., responding to a business inquiry You submit through the Service); (c) Legitimate interests — where processing is necessary for the purposes of Our legitimate interests (e.g., website analytics, service improvement, fraud prevention, and direct marketing to existing business contacts), provided such interests are not overridden by Your fundamental rights and freedoms; and (d) Legal obligations — where processing is necessary for compliance with a legal obligation to which the Company is subject.

11.2 Your Rights Under the CCPA/CPRA (California Residents)

If You are a resident of California, You have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA/CPRA”):

  • The Right to Notice: You must be properly notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
  • The Right to Access / The Right to Request: The CCPA permits You to request and obtain from the Company information regarding the disclosure of Your Personal Data that has been collected in the past 12 months by the Company or its subsidiaries to a third party for the third party’s direct marketing purposes.
  • The Right to Say No to the Sale or Sharing of Personal Data: You have the right to direct the Company not to Sell or Share Your Personal Data to third parties. You can submit such a request by visiting our “Do Not Sell or Share My Personal Information” section or by contacting Us as described below.
  • The Right to Correct Inaccurate Personal Data: You have the right to request that We correct inaccurate Personal Data that We maintain about You, taking into account the nature of the Personal Data and the purposes of the processing.
  • The Right to Know About Your Personal Data: You have the right to request and obtain from the Company information regarding the disclosure of the following: the categories of Personal Data collected; the sources from which the Personal Data was collected; the business or commercial purpose for collecting or selling the Personal Data; categories of third parties with whom We share Personal Data; and the specific pieces of Personal Data we collected about You.
  • The Right to Delete Personal Data: You have the right to request the deletion of Your Personal Data that We have collected, subject to certain exceptions permitted by law (including where retention is necessary to complete the transaction for which the Personal Data was collected, to detect security incidents, to comply with legal obligations, or for other purposes permitted under CCPA/CPRA).
  • The Right Not to Be Discriminated Against: You have the right not to be discriminated against for exercising any of Your Consumer’s rights, including by: denying goods or services to You; charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties; providing a different level or quality of goods or services to You; or suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services.

Exercising Your CCPA/CPRA Rights. To exercise any of Your rights under the CCPA/CPRA, You may: (1) email Us at legal@questanalytics.com; (2) call Us at (920) 739-4552; or (3) visit our “Do Not Sell or Share My Personal Information” page on the Service. We will acknowledge receipt of Your request and respond within forty-five (45) days. The response period may be extended once by an additional forty-five (45) days when reasonably necessary, with prior notice to You. You may make a verifiable consumer request up to two (2) times within a twelve (12) month period.

Do Not Sell or Share My Personal Information. Quest Analytics does not Sell Personal Information for monetary consideration. However, certain third-party advertising technology providers that We use on the Service may collect information from You (such as device identifiers, browsing activity, and cookie data) in a manner that may constitute “Sharing” of Personal Information for cross-context behavioral advertising as defined under the CPRA. To opt out of such Sharing, You may click the “Do Not Sell or Share My Personal Information” link available on the Service, adjust Your Cookie preferences via Our Cookie Policy consent tool, or submit a request using the contact methods above.

11.3 Your Rights Under the TDPSA (Texas Residents)

If You are a resident of Texas, You have the following rights under the Texas Data Privacy and Security Act (“TDPSA”), effective July 1, 2024: the right to confirm whether We are processing Your Personal Data and to access such data; the right to correct inaccuracies in Your Personal Data; the right to delete Personal Data You have provided to Us or that We have obtained about You; the right to obtain a copy of Your Personal Data in a portable, readily usable format; and the right to opt out of the processing of Your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of a decision that produces a legal or similarly significant effect concerning You. To exercise these rights, contact Us at legal@questanalytics.com or (920) 739-4552. We will respond within forty-five (45) days of receipt of Your request.

If We decline to take action on Your TDPSA request, You may appeal that decision by contacting Us at legal@questanalytics.com with the subject line “TDPSA Appeal.” We will respond to Your appeal within sixty (60) days. If the appeal is denied, You may contact the Texas Attorney General to submit a complaint.

11.4 Your Rights Under the DPDPA (Delaware Residents)

If You are a resident of Delaware, You have the following rights under the Delaware Personal Data Privacy Act (“DPDPA”), effective January 1, 2025: the right to confirm whether We are processing Your Personal Data and to access such data; the right to correct inaccuracies; the right to delete Personal Data; the right to obtain a copy of Your Personal Data in a portable format; and the right to opt out of the processing of Your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of a decision that produces a legal or similarly significant effect. To exercise these rights, contact Us at legal@questanalytics.com or (920) 739-4552. We will respond within forty-five (45) days of receipt of Your request, which may be extended once by an additional forty-five (45) days with notice.

11.5 Your Rights Under the NJDPA (New Jersey Residents)

If You are a resident of New Jersey, You have the following rights under the New Jersey Data Privacy Act (“NJDPA”), effective January 15, 2025: the right to confirm whether We are processing Your Personal Data and to access such data; the right to correct inaccuracies; the right to delete Personal Data; the right to obtain a copy of Your Personal Data in a portable format; and the right to opt out of the processing of Your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, contact Us at legal@questanalytics.com or (920) 739-4552. We will respond within forty-five (45) days of receipt of Your request, which may be extended once by an additional forty-five (45) days with notice.

If We decline to take action on a request submitted under the DPDPA or NJDPA, You may appeal that decision by contacting Us at legal@questanalytics.com with the subject line “Privacy Rights Appeal.” We will respond to Your appeal within sixty (60) days. If Your appeal is denied, You may contact the attorney general of Your state to file a complaint.

11.6 Your Rights Under the MCDPA (Minnesota Residents)

If You are a resident of Minnesota, You have the following rights under the Minnesota Consumer Data Privacy Act (“MCDPA”), effective July 31, 2025: the right to confirm whether We are processing Your Personal Data and to access such data; the right to correct inaccuracies in Your Personal Data; the right to delete Personal Data You have provided to Us or that We have obtained about You; the right to obtain a copy of Your Personal Data in a portable, readily usable format; and the right to opt out of the processing of Your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning You. To exercise these rights, contact Us at legal@questanalytics.com or (920) 739-4552. We will respond within forty-five (45) days of receipt of Your request, which may be extended once by an additional forty-five (45) days with notice to You.

If We decline to take action on Your MCDPA request, You may appeal that decision by contacting Us at legal@questanalytics.com with the subject line “MCDPA Appeal.” We will respond to Your appeal within sixty (60) days. If Your appeal is denied, You may contact the Minnesota Attorney General to submit a complaint.

11.7 Your Rights Under the MODPA (Maryland Residents)

If You are a resident of Maryland, You have the following rights under the Maryland Online Data Privacy Act (“MODPA”), effective October 1, 2025: the right to confirm whether We are processing Your Personal Data and to access such data; the right to correct inaccuracies in Your Personal Data; the right to delete Personal Data You have provided to Us or that We have obtained about You; the right to obtain a copy of Your Personal Data in a portable, readily usable format; and the right to opt out of the processing of Your Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning You. MODPA also requires Us to provide data minimization protections — We collect and process only Personal Data that is reasonably necessary and proportionate to the purposes disclosed in this Privacy Policy. To exercise these rights, contact Us at legal@questanalytics.com or (920) 739-4552. We will respond within sixty (60) days of receipt of Your request, which may be extended once by an additional thirty (30) days with notice to You.

If We decline to take action on Your MODPA request, You may appeal that decision by contacting Us at legal@questanalytics.com with the subject line “MODPA Appeal.” We will respond to Your appeal within sixty (60) days. If Your appeal is denied, You may contact the Maryland Attorney General’s Consumer Protection Division to submit a complaint.

11.8 Additional State Privacy Rights

Residents of certain other states may have additional privacy rights under their respective state privacy laws, including but not limited to Virginia (Virginia Consumer Data Protection Act), Colorado (Colorado Privacy Act), Connecticut (Connecticut Data Privacy Act), Oregon (Oregon Consumer Privacy Act), Montana (Montana Consumer Data Privacy Act), Iowa (Iowa Consumer Data Protection Act), Indiana (Indiana Consumer Data Protection Act), Tennessee (Tennessee Information Protection Act), New Hampshire (New Hampshire Privacy Act), Nebraska (Nebraska Data Privacy Act), Minnesota (Minnesota Consumer Data Privacy Act), and Maryland (Maryland Online Data Privacy Act). To the extent that any of these laws apply to Our processing of Your Personal Data (based on applicable thresholds and criteria set forth in each law), You may have rights similar to those described above, including the right to access, correct, and delete Your Personal Data; the right to data portability; and the right to opt out of targeted advertising, the sale of Personal Data, and (where applicable) profiling. To exercise any such rights, contact Us at legal@questanalytics.com or (920) 739-4552. We will respond to Your request in accordance with the applicable law.

If We decline to take action on Your request under any applicable state privacy law that provides an appeal right (including Virginia, Colorado, Connecticut, Oregon, Montana, Minnesota, and Maryland), You may appeal Our decision by contacting Us at legal@questanalytics.com with the subject line “Privacy Rights Appeal.” We will inform You of the result of Your appeal within the time period required by the applicable law (generally forty-five (45) to sixty (60) days). If Your appeal is denied, We will provide You with information on how to contact the attorney general of Your state, if applicable.

Verification of Requests. When You submit a consumer rights request, We will verify Your identity by matching information You provide with information We already maintain. For requests to know categories of Personal Data, We will verify Your identity to a reasonable degree of certainty (e.g., by matching at least two data points). For requests to access specific pieces of Personal Data or to delete Personal Data, We will verify Your identity to a reasonably high degree of certainty (e.g., by matching at least three data points and obtaining a signed declaration under penalty of perjury). If We cannot verify Your identity, We may not be able to fulfill Your request.

Authorized Agents. You may designate an authorized agent to submit a consumer rights request on Your behalf. To do so, You must provide the authorized agent with written permission to act on Your behalf, and We may require the authorized agent to provide proof of such authorization. We may also require You to verify Your own identity directly with Us, even when using an authorized agent, unless the agent provides a valid power of attorney.

Categories of Personal Information Disclosed. In the preceding twelve (12) months, We have collected and disclosed the following categories of Personal Information for a business purpose: (a) Identifiers (e.g., name, email address, phone number, IP address); (b) Professional or employment-related information (e.g., work address, company name); (c) Internet or other electronic network activity information (e.g., browsing history on the Service, interactions with advertisements); and (d) Inferences drawn from the above categories to create a profile reflecting preferences and characteristics. We have not Sold Personal Information for monetary consideration. Certain third-party advertising technologies deployed on the Service may constitute Sharing of Internet or other electronic network activity information for cross-context behavioral advertising purposes.

12. Opt-Out Preference Signals and Do Not Track

Do Not Track (DNT). Our Service does not respond to web browser “Do Not Track” (DNT) signals. DNT is a voluntary, non-standardized mechanism, and there is no industry consensus on how to interpret or respond to DNT signals. You can enable or disable DNT by visiting the preferences or settings page of Your web browser.

Global Privacy Control (GPC) and Universal Opt-Out Signals. Separate from DNT, certain state laws require Us to honor browser-based opt-out preference signals, such as the Global Privacy Control (“GPC”). We will process GPC signals as valid opt-out requests as follows: (a) For California residents, We will treat a GPC signal as a valid request to opt out of the Sale and Sharing of Personal Information, as required by the CCPA/CPRA and California Attorney General regulations (11 CCR § 7025). (b) For residents of Colorado, Connecticut, Texas, Montana, Delaware, New Jersey, Oregon, and any other state that requires recognition of universal opt-out mechanisms, We will treat a GPC signal as a valid request to opt out of targeted advertising and/or the sale of Personal Data, as required by the applicable state law. A GPC signal will be applied to the specific browser or device from which it is sent. If You are logged into an Account, We will apply the opt-out to Your Account across devices where technically feasible.

13. Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers. For residents of California, consistent with California Consumer Privacy Act § 1798.120(d), We do not knowingly collect Personal Data from individuals We have actual knowledge are between 13 and 16 years of age for purposes of sale or sharing for cross-context behavioral advertising without their affirmative opt-in consent. If We become aware that We have collected such data from a 13-to-16-year-old without the required opt-in consent, We will cease any sale or sharing of that data and take steps to address the collection.

14. California-Specific Provisions

14.1 California’s Shine the Light Law

Under California Civil Code Section 1798 (California’s Shine the Light law), California residents with an established business relationship with Us can request information once a year about sharing their Personal Data with third parties for the third parties’ direct marketing purposes. If You’d like to request more information under the California Shine the Light law, You can contact Us using the contact information provided below.

14.2 California Privacy Rights for Minor Users

California Business and Professions Code Section 22581 allows California residents under the age of 18 who are registered users of online sites, services, or applications to request and obtain removal of content or information they have publicly posted. To request removal of such data, and if You are a California resident, You can contact Us using the contact information provided below, and include the email address associated with Your account. Be aware that Your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

14.3 Sensitive Personal Information (California)

As noted in Section 3.3 above, We do not currently collect Personal Data that falls within the definition of Sensitive Personal Information under the CPRA. Accordingly, the right to limit the use and disclosure of Sensitive Personal Information under CPRA § 1798.121 is not currently triggered. If Our data collection practices change such that We begin collecting Sensitive Personal Information as defined under the CPRA, We will update this Privacy Policy and provide a mechanism to limit such use as required by applicable regulations (11 CCR § 7027(m)).

14.4 Mobile Devices

Your mobile device may give You the ability to opt out of the use of information about the apps You use in order to serve You ads that are targeted to Your interests:

  • “Opt out of Interest-Based Ads” or “Opt out of Ads Personalization” on Android devices
  • “Limit Ad Tracking” on iOS devices

You can also stop the collection of location information from Your mobile device by changing the preferences on Your mobile device.

15. Third-Party Links

Our Service may contain links to other websites that are not operated by Us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

16. Grievance / Data Protection Officer

If You have any queries or concerns about the processing of Your information that is available with Us, You may email our Grievance Officer at Quest Analytics, L.L.C., 9225 Indian Creek Pkwy, Suite 200, email: legal@questanalytics.com. We will address Your concerns in accordance with applicable law.

17. Contact Us

If You have any questions about this Privacy Policy, You can contact Us: