Privacy Policy

1. INTRODUCTION

This website is operated by EarnCanyon LLC, a Wyoming limited liability company registered at 30 N Gould St, Ste R, Sheridan, WY 82801, United States (hereinafter the ‘Company’, ‘we’, ‘us’ or ‘our’).

We determine the purpose and the means of processing your personal data, and for this reason, we are considered as data controllers in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data (hereinafter the 'General Data Protection Regulation').

We keep what we collect to the minimum the service needs, and we tell you plainly what that is.

This policy (hereinafter the 'Privacy Policy') aims to:

(i) set out what data we collect about you;

(ii) regulate how personal data is processed and stored;

(iii) regulate the manner in which we can disclose your details to anyone else; and

(iv) explain the basis on which personal data and information are collected.

By using the Site you agree to this Privacy Policy, our Terms and Conditions and our Cookie Policy.

The terms set out in this Privacy Policy shall be read in conjunction with our Terms and Conditions.

2. DEFINITIONS

Within this Privacy Policy, the term:

'GDPR' means the General Data Protection Regulation, that is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016;

‘Personal Data’ or ‘Data’ means any information relating to a customer or Site user (hereinafter ‘data subject’, ‘you’, ‘your’ or ‘user’) which may lead to your identification, whether directly or indirectly. Examples include your name, surname, date of birth, email address, country, and any identity document you submit for verification;

‘Services’ means everything the Company makes available on the Site, including offers and surveys, the daily bonus, coin drops, races, referrals and payouts;

‘Site’ means earncanyon.com, including every page on it and our mobile application;

'Special Category Data' means data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, amongst others; and

‘Terms and Conditions’ means the agreement published at earncanyon.com/legal/terms.

3. THE DATA WE COLLECT AND PROCESS

3.1 To register an account we require a display name and your email address. We also record the country you access the Site from. Once the account is open a short questionnaire asks two things: your age bracket, which we use to confirm you meet the minimum age we require, and how you would rather be paid, which we store as a preference so that your wallet can show the kind of payout you chose first whenever more than one kind is available. The following is requested only if identity verification is triggered before a payout:

(i) your legal name and surname;

(ii) your country of residence;

(iii) a government issued identity document and a selfie taken live;

along with anything else we are required to collect in order to meet our legal obligations.

3.2 If you would rather not give us this information, we cannot run an account for you, so please do not sign up.

3.3 When collecting, processing, or storing Special Category Data, we would ask for your explicit consent. We will only process Special Category Data (i) when necessary, (ii) if instructed by a competent Court or Authority and/or (iii) when required to do so by any law or regulation. Special Category Data will be processed under strict conditions and with an appropriate legal basis.

3.4 When you use the Site or the app we also receive technical information about the connection and the device: your IP address, the characteristics your browser or phone reports, the country your SIM and mobile network belong to, your time zone and your language. On the Android app we additionally read identifiers the device provides, and these are converted into a one way code on the device itself before they are sent, so we can tell that two visits came from the same handset without ever holding the identifier.

3.5 We use this only to keep the service honest: to recognise a device, to stop one person running many accounts, and to protect payouts from fraud. We do not use it for advertising and we do not sell it. Where we can answer a question with a code rather than the original value, we do.

3.6 The identity check itself is run by our verification partner. Your document and the selfie are captured on their systems and are never stored on ours. What we keep from a completed check is the outcome, the country and the type of document, the age the document states, and a one way code standing for the document and for the person named on it. Those codes let us tell whether a later check was passed with the same document, without us ever holding the document number, your name or your date of birth. Delete your account and everything we hold from the check goes with it.

4. WHY WE COLLECT YOUR DATA

We use the Data you give us to make the Services available to you in line with our Terms and Conditions. Processing your Personal Data is necessary so that we can record the offers, surveys and tasks you complete, the rewards credited to your Coin balance, and the payouts you request.

We look at how the Site is used so we can find what is broken and fix it.

We occasionally email you about the Site and about promotions we think you will care about. You can turn marketing off from the unsubscribe link in any marketing email, from your notification settings, or by emailing [email protected].

We also send you service messages about your account, such as a payout receipt or a security alert. These go to the email address on your account and to your notifications inside the Site, and they are separate from marketing, so your marketing choice does not switch them off.

As data controllers we are bound by a number of legal duties, including fraud prevention and our duties on money laundering. We process your Personal Data in order to meet them.

5. LEGAL BASIS

We process the categories of Personal Data set out below, namely your name, email address, date of birth, country, server logs and any identity document you submit, for the following purposes:

Response to queries and provision of feedback;

Marketing email about the Site and about promotions, where you have opted in;

Service messages about your account, such as a payout receipt or a security alert;

Processing your payout requests and keeping the records that support them;

To let you complete the offers and surveys on the Site and take part in the community chat;

Compliance, bookkeeping and banking purposes; and

Statistical evaluation. For more information please refer to our Cookie Policy.

The legal bases on which we rely are your consent, our legitimate interest, the necessity to comply with our legal obligations, and the performance of our contract with you. We also score signups and payout requests automatically, using network and device signals, to detect fraud. A high score can pause a withdrawal for a person to review, and you may ask us to look at that decision by hand.

6. CHANGES TO YOUR PERSONAL DATA

6.1 It is important that the Personal Information we hold about you is current and accurate. Therefore, it is your sole responsibility to keep us informed should any of your personal information change.

7. DISCLOSURE OF PERSONAL DATA

7.1 We may share your Personal Data with:

(i) Our advertising and market research network partners, who deliver the offers and surveys you choose to complete, and who receive only what is needed to credit your completion;

(ii) Service Providers: our payout partners, who receive only what is needed to pay you; our identity verification partner, who checks the documents you submit when we are required to confirm who you are; our hosting and email providers; and our lawyers and advisers where a matter requires them to see personal information;

(iii) If we sell the business: should we transfer or sell the business behind the Site, we may pass your Personal Data to the buyer and its advisers.

7.2 Where Data is shared in line with clause 7.1 above, it is shared with those partners only where they genuinely need it to do their job for us.

7.3 Save as described in this Privacy Policy, we will not disclose the Personal Data we collect or store to anyone outside the Company, unless the law obliges us to.

7.4 We will also not share your Data with any third parties for the purposes of direct marketing.

7.5 We use outside processors for parts of the service. Each is bound by an agreement, may act only on our instructions, and keeps your data only for as long as we tell them to or the law requires.

7.6 You acknowledge that there might be instances, where we will be legally obliged to share information, such as, for example, when compelled to do so under a court order or where we are asked to cooperate with other competent authorities. We might also share information with other regulatory bodies and competent authorities, in order to further their, and or our objectives. In any scenario, we will ensure that we have a lawful basis on which to share the information.

8. YOUR RIGHTS AS DATA SUBJECT

8.1 As a data subject, you have a number of rights in relation to your Personal Data.

8.2 We respect your privacy rights and will endeavour to uphold such rights to the extent that they apply to the way in which we process your Personal Data.

8.3 Your principal rights are:

The right to be informed;

The right to access;

The right to rectification;

The right to erasure;

The right to restrict processing;

The right to data portability;

The right to know of the existence of automated decision making;

The right to lodge a complaint with the supervisory authority and/or seek judicial remedy in cases where you believe that your data protection rights have been infringed following the processing of your Personal Data; and

The right to withdraw consent.

8.4 If you wish to exercise any of these rights, please email [email protected].

8.5 Any request made will be given appropriate consideration within the timescales required by data protection legislation.

8.6 Before we act on your request, and where it is reasonably necessary, we will ask you to prove who you are. This is so that we never hand your Personal Data to someone who is not you. We may ask for more detail in order to answer you faster. We reserve the right to withhold your personal data where disclosing it would harm the rights and freedoms of others.

8.7 Generally, when exercising your rights, no fees are applicable. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee.

9. THIRD PARTY CONTENT, SITES AND CONTRIBUTIONS

Our Site links to other websites and applications that other companies run.

We do not control those websites or applications, and this Privacy Policy does not cover them.

Please read their terms and their privacy policy so you know how they collect and use your information.

10. COOKIES

For more information regarding Cookies, kindly visit our Cookie Policy.

11. DATA RETENTION

11.1 We keep account and payout records for as long as tax, accounting and fraud prevention duties require, and we delete or anonymise them once those periods end. Personal Data is never kept for longer than it needs to be.

11.2 We will retain your Personal Data for as long as we need it to comply with our obligations under applicable law, to enforce our contractual agreements, and if relevant, for the establishment, exercise, and defense of legal claims.

11.3 In circumstances where it is impossible for us to specify in advance the periods for which your Personal Data will be retained, we will determine the retention period based on the following criteria:

the purpose(s) for which it was collected;

whether there are any statutory obligations obliging us to continue to process your information;

whether we have a legal basis in place to continue to process your information, including but not limited to, consent;

the value attached to your information;

whether there are any industry practices stipulating how long the information should be retained;

the risk, cost, and liability attached to such retention; and

any other relevant circumstances.

11.4 You also acknowledge that we may keep your data for a longer period for legal or regulatory reasons which may include:

(i) establishing, bringing and/or defending legal claims;

(ii) evidencing that we treated you fairly;

(iii) responding to your requests, queries, complaints, and/or questions;

(iv) if it becomes necessary or required to meet legal or regulatory requirements, to prevent fraud and abuse and to enforce our terms and conditions; and/or

(v) compliance purposes.

12. SECURITY

12.1 We undertake to take all appropriate security measures in order to protect your Personal Data against loss, misuse, unauthorized access, alteration, disclosure, or destruction of information.

12.2 The security measures we have in place to protect information sent over our Site or stored in our systems include the following:

(i) We serve the Site over encrypted connections only;

(ii) Passwords are stored hashed, never in readable form;

(iii) Access to production data is restricted and logged;

(iv) Backups are encrypted; and

(v) Our hosting providers maintain the physical security of the buildings the servers sit in.

12.3 No method of electronic storage is 100% secure. For this reason, we cannot warrant or ensure the security of any information shared with us, but this is done at your own risk.

12.4 We also cannot warrant or in any way guarantee that such information will not be accessed, disclosed, altered, or destroyed by any breach of our physical, technical, and/or organizational safeguards.

12.5 We do have in place procedures to deal with any suspected Personal Data security breach, and we will notify the relevant authorities of any such breach where we are required to do so. We will also inform you, as the data subject, of the occurrence of a breach and the steps to take to safeguard your rights.

13. TRANSFER OF PERSONAL DATA OUTSIDE OF YOUR JURISDICTION

Our servers and some of our providers sit outside the European Economic Area, mostly in the United States. Where that happens we rely on the Standard Contractual Clauses approved by the European Commission.

14. PRIVACY BY DESIGN AND DEFAULT

When introducing new technologies, policies, or processes, we will ensure that your privacy is considered at the 'design' stage. Where applicable, and in line with the GDPR, we will carry out a Data Protection Impact Assessment.

15. SEVERABILITY

The invalidity or unenforceability of any provision of this Privacy Policy, as determined by a court of competent jurisdiction, shall in no way affect the validity or enforceability of any other provision thereof.

16. CONTACT DETAILS

If you have any questions in connection with this Privacy Policy, if you feel that your Personal Data has been compromised or if you wish to make a complaint about the processing of your Personal Data, please contact us at any time:

a. By post: EarnCanyon LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. b. Via email: [email protected]

c. By using the contact form available on the Site.

17. UPDATES

17.1 We may update this Privacy Policy from time to time, to reflect changes in how we store, and process your Personal Data, or to comply with any new legal requirements and obligations.

17.2 Any changes we make to this Privacy Policy, will be reflected on this page and where appropriate, you will be notified via email.

17.3 The date at the top of this page shows when we last changed it.