Last updated: May 15, 2024

Privacy Notice

Name: One Design Company
Price range: $

Please read this “Privacy Notice” carefully. This Privacy Notice describes the data collection, use, protection, and privacy practices of Quilt Systems Inc. (hereinafter, “Quilt”, “we”, “our” or “us”) in connection with our products, services, and business. If you have any questions regarding this Privacy Notice and/or our data practices, please Contact Us.

By visiting, accessing, or using the Product and/or Services (as defined in Section 1 below – Quilt’s Services and Scope of Privacy Notice) you acknowledge and agree that you have received and reviewed this Privacy Notice. We may update this Privacy Notice as described in Section 2 below - Changes to this Privacy Notice.

Please also review the applicable Terms of Service, which also apply to the use of our Product and Services. Terms that are defined in the Terms of Service have the same meaning in this Privacy Notice unless this Privacy Notice specifies differently.

If you're a resident of California or Nevada or visiting us from the European Economic Area (“EEA”), Switzerland, United Kingdom (“UK”), or other Non-U.S. Territory, you should read the applicable sections below for specific rights applicable to residents of California, Nevada, and Europe and other Non-U.S. Territories.

1. Quilt’s Services and Scope of Privacy Notice

Quilt’s Products and Services

Quilt owns, operates, and provides:

our “Websites” located at www.quilt.com, their subdomains, and any other websites that include an authorized link to this Privacy Notice;
Quilt’s ductless heat pump heating and cooling system (the “Product”); and
Quilt’s mobile application for controlling and managing the Product (the “Application”).

When we refer to the “Services” throughout this Privacy Notice, we mean, collectively, the Websites, the Application, and any other websites, services, and/or applications provided by us and that include a link and/or reference to this Privacy Notice, and any related services and/or new features and/or functionality provided by us through or in connection with any of the foregoing and/or our Product.

Scope of this Privacy Notice

This Privacy Notice applies to personal data that may be collected, received, and processed by us relating to:

“Visitors” browsing or using our Websites or who interact with us through any pages or feeds of our accounts on any social media sites or platforms, such as through LinkedIn, Twitter, and/or any Meta platforms (“Social Media Platforms”).
“Customers” who purchase our Product and/or Services or who register an account with us to access or use our Product or Service.
“Users” of the Product and/or Services, whether registered or unregistered, including Customers and Authorized Users (as defined in the Terms of Service), and Visitors who sign-up for our waitlist, or other marketing or newsletter communications.

The term “personal data” means any information about an individual from which that person may be identified. For example, it may include a person’s name, telephone number, email address, IP Address, or other unique identifiers. It does not include data from which the identity of an individual has been definitively removed along with any identifiers connected to such individual (also known as anonymous or anonymized data).

2. Changes to this Privacy Notice

Quilt reserves the right to update or modify this Privacy Notice at any time. Except for material changes as described below in this Section, all updates and modifications to this Privacy Notice will be effective from the day they are posted online at www.quilt.com/privacy-notice. If we make any material changes to this Privacy Notice, we will provide you with reasonable notice prior to such change taking effect by sending a notification to the email address we have on file for you, and may also post a prominent notice of any such changes on our Websites. Material changes to this Privacy Notice will become effective on the date set forth in the notice, and all other changes will become effective from the day they are posted on our Websites. It is your responsibility to regularly visit and review this Privacy Notice.

If you do not agree to any updates or modifications to the Privacy Notice, cease all use of the Services and Product. Continued use of the Services by you after the applicable effective date of the revised Privacy Notice, signifies to us that you acknowledge and agree to be bound by the revised Privacy Notice.

3. Information We Collect

We collect information provided directly by Visitors, Customers and Users, as explained in the Section Information Provided Directly by Visitors, Customers, and Users, and in certain circumstances, we automatically collect certain information when accessing or using the Product and/or Services as explained in the Section Information Collected Automatically. In addition, we may receive personal data from third party sources as described in the Section Information Collected from Third Party Sources.

a. Information Provided Directly by Visitors, Customers, and Users

The personal data we collect in connection with the use of the Product and/or Services depends on how and why you use the Product and/or Services. For example, the information that we may process about Visitors is more limited than the information we may process if you are a Customer. Note that you may choose not to provide personal data directly to us or to not use the Product and Services. However, some personal data is necessary so that we can provide you with the Product and/or Services you have requested. Failure to provide this information may prevent us from providing you with access to our Product and/or Services.

Contact Information: We may collect contact information, such as, your first and last name, phone number, email address and/or mailing address, when you register an account to use the Services (an “Account”) or sign-up to receive our marketing communications and/or newsletters.
Login Credentials: When you login to your Account as a registered user, we collect your username, password and/or other login credentials.
User Submissions, Surveys, Feedback, Communications & Support. We collect the messages, photos, video, audio, images, data, information, text and/or any other content or materials that you submit, upload, generate, and/or transmit through the Application or otherwise provide to us in connection with your use of the Product and/or Services (collectively, “Submissions”). For example, Submissions include any photos, videos, or recordings you share with us for installation of the Product (e.g., to determine where the units should be placed or where electrical panels are located), or any Submissions provided when you fill out forms, answer surveys, or contact us (such as your feedback, requests for support, or other communications (whether by email, phone or through our chatbot).
Payment Transaction Information: If you purchase our Product or access to the Services, we may collect certain limited payment information (for example, partial payment or credit card information, and limited transaction information like the date of purchase). Quilt does not directly collect or store any payment information. Payment information (including the limited information we receive described here), is collected and processed by our third-party payment processors. For more information, please see the Payment Processors section of this Privacy Notice.
Purchase History: We collect information regarding your purchase history of Product and Services, including those purchased, obtained, or considered.
Usage Data: We collect Usage Data as described below in the Section titled Information Collected Automatically.

Please be advised that we may ask you to update your information from time to time in order to keep it accurate. Additionally, if you provide personal data to us about someone else, you must ensure that you are entitled to disclose that information to us and, without us having to take any further steps required by data protection laws, that we may collect, use and disclose such information for the purposes described in this Privacy Notice. For example, you should ensure the individual concerned is aware of the terms detailed in this Privacy Notice and that they have not objected or do not object to you sharing their information with us.

b. Information Collected Automatically

When you visit, use, or interact with the Product and/or Services, we may receive the following information about your visit, use, or interactions (collectively, “Usage Data”). Typically, this data is transmitted and collected automatically (without action by you) using cookies and similar technologies as described in Section 4 below.

Log Data: Information that your browser or device automatically sends when you use our Product and/or Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Product and/or Services.
Usage and Analytics: Information and analytics about your use of the Product and/or Services, such as the types of content that you view or engage with, the features you use and the actions you take, non-identifiable request IDs, statistics associated with the interaction between your device or browser and the Product and/or Services, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, your computer connection, searches and other actions you take, websites, apps and/or ads that referred you to the website, advertising and language preferences.
Device Information: Information regarding the device used to access the Services, which may depend on the type of device you use and its settings, but generally includes, name of the device, operating system, system configuration information, device identifiers, and browser you are using.
Diagnostic Information: Diagnostic analytics and information collected automatically by the hardware units of the Product, such as how the system consumes power, or unexpected changes in temperature.
Approximate Location Data: We may collect your approximate location (city and state) based on your IP address.

c. Information Collected from Third Party Sources

In some instances, we process personal data from third parties, which consists of:

Service Providers: We receive information from third party service providers as described in Section 9.a below (“Service Providers”), that help us in the operation, provision, administration and management of the Services, such as our cloud or hosting service providers, customer support providers, and our analytics providers.
Business Partners: We receive information from third parties that partner with us in offering various services, that you have a relationship or that you authorize us to engage (“Business Partners”), such as:
- Third Party Integrations: If you use any products, services, software, content, and/or features (including, without limitation, data products and services) that Quilt has integrated with, and/or has otherwise made accessible for use through, our Services (collectively, “Third Party Integrations”), we may receive information about you from the providers of such Third Party Integrations related to your use thereof in connection with our Services.
- Installation Providers: If you opt to use one of the third party installation providers with whom we partner (“Installation Providers”) to install the Product, we may receive information about you from the Installation Provider related to such installation.
- Financing Service Providers: If you choose to enroll in or receive any third party financing services offered by one of the third party financing service providers with whom we partner (“Financing Service Providers”) to finance the purchase of our Product(s), we may receive information about you from the applicable Financing Service Providers with whom you engage, such as whether you have secured financing or are eligible to finance the Product. We will not receive any payment data or any additional personal data from the Financing Service Provider(s).
- Referral Partners: If you choose to receive services from one of our Referral Partners (as defined in Section 8 below), we may receive information about you from such Referral Partner such as, your contact information or other identifiers and the services you purchased.
- Promotional Partners: If you choose to receive services from one of the third party service providers with whom we partner to offer joint promotional offers or opportunities, such as realtors, interior designers, and architects (“Promotional Partners”), we may receive information about you from the applicable Promotional Partners with whom you engage, such as contact information, e.g., your name or email address.

Information that is shared with us through Business Partners is used by us as described in this Privacy Notice.

Other Third Parties & Sources: We may receive data and information from third party partners, and/or other data licensors and/or providers that we have a relationship with, and/or information collected from publicly available sources, such as online business profiles, social media accounts, and/or webpages, which may include your name, or a publicly available business address, and related activity on such profiles, social media accounts, and/or webpages.
Social Media Networks: If you interact with us through any Social Media Platforms, we may collect information such as your name, username, demographic information, contact information such as email address, location, interests, and publicly posted data such as your social media activity.
App Stores: We may receive information from the App Store (as defined below in Section 15) when you download the Application, such as the total number of downloads of the Application.

d. Aggregated or De-Identified Data

With the personal information and other data (including, Usage Data) collected by us, we may aggregate or de-identify such data and information so that it can no longer be used to identify you. We use this information to analyze the effectiveness of our Product and/or Services, to improve and add features to our Product and/or Services, to conduct research and for other similar purposes. In addition, from time to time, we may share or publish aggregated information like general user statistics with third parties. We collect this information through the Product and/or Services, through cookies, and through other means described in this Privacy Notice. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to re-identify the information, unless required by law.

4. Cookies & Similar Technologies

We or authorized third parties or agents may collect certain information by automated means using cookies and/or similar technologies such as, web beacons, embedded scripts, pixels, and browser analysis tools (collectively, “Cookies”). Cookies collect information such as Usage Data.

We do not currently engage in any targeted advertising; however, we may in the future use third party advertising partners (e.g., Google, Bing, LinkedIn, and Meta) who use targeting/advertising Cookies and similar technologies to deliver advertisements that are more relevant to you and your interests and/or advertise the Quilt Service. These cookies and similar technologies are typically used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns. We will update and notify you of any future changes in the use of targeted advertising in accordance with this Privacy Notice.

For more information on our use of Cookies, please see our Cookie Policy.

5. Payment Processors

Quilt does not directly collect or store your payment information. If you make payments to us via credit card, the credit card payment information accessible by us only includes partial payment or credit card information, and limited transaction information via our payment processors’ portals. We use third-party, PCI-compliant payment processors to collect and process payments on our behalf, currently Stripe. Your full credit card information is processed by our payment processors, and our payment processors may provide us with limited information to confirm the transaction. Information collected by these third-party payment processors is governed by the applicable third-party payment processor’s privacy policy. You should review the applicable privacy policy (currently located at https://stripe.com/privacy) prior to submitting any information to the applicable third-party payment processors.

6. Children’s Privacy

Quilt does not target the Product and/or Services to persons under the age of 18, nor does Quilt knowingly collect personal data of persons under the age of 18. Therefore, we ask you not to provide us with personal data of persons under the age of 18. If we learn that personal data of persons under the age of 18 has been collected on or through the Product and/or Services, then we may deactivate the account or otherwise terminate access to the Product and/or Services and/or make the information inaccessible.

7. Sensitive Data

Quilt does not require you to provide any sensitive data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health and genetics, or biometric data to use the Product and/or Services.

8. Quilt’s Purposes for Processing

Depending on whether you are a Visitor, Customer, or User, and how you use or interact with the Product and/or Services, Quilt processes personal data for the following purposes:

Providing, Customizing and Improving our Products and Services

To host the Websites and the online aspects of the Services.
To perform and provide the Product and/or Services to our Users and related support and assistance.
To facilitate the shipment, delivery, and/or installation of the Product.
To create and manage User Accounts or other User profiles.
To meet or fulfill the reason you provided the information to us, including to provide you with the Product or information they request.
To process orders or other transactions and for billing purposes.
To enable access to certain Third Party Integrations that you use in connection with the Services.
To maintain, debug, enable, upgrade, update, improve, and/or enhance the Product and/or Services, and develop new features, functionality, and/or other products and services.
To conduct analytics related to the Product and/or Services, such as to understand how they are being used and where improvements may be needed.
To personalize our Product and/or Services, content on our Websites, and communications, such as remembering your information so that you will not have to re-enter it during your visit or the next time you visit the Services.
To detect any fraudulent or illegal activity against Quilt, you, and our other users and for security purposes.

Marketing our Product and Services

Deliver direct marketing communications to you regarding our products and services that we may think are of interest to you.
Notify you of third party products, services, or offers that we may think be of interest to you (however, we do not share your information with such third parties unless you tell us to).

Providing Recommendations and Referrals

If you have opted-in, to draw inferences from diagnostic information obtained from the Product that you use, so that we may provide recommendations for energy savings, recommend updates or modifications to your home to help with improving energy efficiency, heating, cooling, etc., (“Recommendations”).
To provide you referrals that you request for services provided by certain third parties that can assist in carrying out Recommendations (“Referral Partners”).

Communicating with Users

Respond to your queries and requests, or otherwise communicate directly with you.
To keep you updated about changes to policies related to the Product and/or Services (including this Privacy Notice).
To send emails and other communications according to your preferences.

Meeting Legal Requirements and Enforcing Legal Terms (as further described below in Legal Obligations and Security)

To comply with a legal or regulatory obligation (for example, keeping records of our sales for tax compliance) and investigating security incidents.
Protecting the rights, property or safety of you, Quilt, or another party.
To respond to regulatory bodies when legally required (for example, responding to a valid court order).
To enforce our rights under our contracts and agreements.

9. Sharing Personal Data

Aside from disclosing your information to those of our employees, contractors and agents who are authorized to process the information in order to provide the Product and/or Services and who are committed to confidentiality, we disclose your personal data only to the third parties as described below.

a. Service Providers

We share personal data with our Service Providers that help us in the operation, provision, administration and management of the Product and/or Services, and to otherwise operate our business. Depending on how you use the Product and/or Services, the following categories of third parties collect or receive personal data on our behalf as our Service Providers:

Hosting and technology providers;
Internet Service providers;
Analytics providers,
Payment processing providers;
Providers of business operations and communication tools;
Product fulfillment and delivery providers;
Other third-party service providers that help us provide features and functions for the Services (e.g., customer support providers), and
Professional service providers, such as auditors, lawyers, consultants, accountants and insurers.

For a list of all Service Providers we use, please contact us via email at [email protected]. We require all Service Providers to respect the security of your personal data and to treat it in accordance with the law.

b. Business Partners

When you enable or use a Third Party Integration, certain information may be shared between Quilt and the provider of the applicable Third Party Integration.
When you elect to use an Installation Provider, certain information may be shared between Quilt and such Installation Provider to facilitate the installation, such as name, home address, phone number, email address, and/or information about your home, such as size and number of bedrooms.
If you choose to enroll in or receive any third party financing services from a Financing Service Provider, certain information may be shared between Quilt and such Financing Service Provider to facilitate your receipt of such services, such as name, address, email address, phone number, and any other identifiers or information that you authorize us to provide, and as required by the financing provider in order to evaluate your financing eligibility. For the avoidance of doubt, Quilt does not collect or share any financial data or information from or with Financing Service Providers, and Quilt does not provide any financial services.
When you choose to obtain services from one of our Referral Partners, certain information may be shared between Quilt and such Installation Provider to facilitate your receipt of such services, such as name and contact information.
With respect to our Promotional Partners, we may share contact information, such as your name or email address, if you ask to be connected with such partners. We do not share personal data with Promotional Partners unless you have opted-in.

Note that Business Partners are not our service providers. The applicable Business Partners may use personal information differently than we do and we do not control their use of your information. Please review the privacy notices for the applicable Business Partners that you use or engage with in connection with our Product and/or Services.

c. To Third Parties at Your Request or Authorization

If you request or direct us to share your information, including, through any share, send, or similar functionality available via our Product and/or Services, with third parties (including, Third Party Integrations and Business Partners), we will share your information with such third parties.

Note that the third parties described in this Section with whom you choose to share your information are not our service providers, and if you choose to share your information with those third parties, they may use your personal information differently than we do, and we do not control their use of your information.

Please make your choice to share your information carefully and review the privacy notices of all other third parties you decide to share your information with, if applicable. Quilt will not be able to contain or retrieve personal information once it has been shared or disclosed, and Quilt will have no responsibility or liability for any consequences that may result because you have released or shared personal information with others.

d. Business Transfers

We may also share data with third parties to whom we choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.

e. Affiliates and Subsidiaries

Personal data that we collect about you may be shared with the employees, contractors, and agents of Quilt and our affiliated and subsidiary entities (“Affiliates”) who are involved in providing or improving the Product and/or Services that we offer to you. We obligate the employees, contractors and agents of Quilt and our Affiliates to ensure the security and confidentiality of your personal data and to act on that personal data only in a manner consistent with this Privacy Notice.

f. Legal Obligations and Security

Regulatory and Government Bodies – Compliance with Law

We may disclose your information to regulatory agencies and official government bodies, as required to comply with or satisfy any laws, rules, or regulations applicable to Quilt.

Required Disclosures – Responding to Legal Orders

If we are required to disclose personal data by law, such as pursuant to a subpoena, warrant or other judicial or administrative order, our policy is to respond to requests that are properly issued by law enforcement within the United States. Under such circumstances, unless prohibited by applicable law, we will attempt to provide you with prior notice that a request for your personal data has been made in order to give you an opportunity to object to the disclosure. We will attempt to provide this notice by email, if you have given us an email address. However, government requests may include a court-granted non-disclosure order, which prohibits us from giving notice to the affected individual. In cases where we receive a non-disclosure order, we will notify you when it has expired or once we are authorized to do so.

Exigent Circumstances & Enforcement/Protection of Our Rights

Your information, including the contents of all of your online communications in our Services and between you and Quilt may be accessed and monitored as needed to provide our Service and may be disclosed to law enforcement, regulatory agencies, official government bodies, and other third parties, as we, in our sole discretion, believe necessary or appropriate:

To enforce our rights under our Terms of Service, and any other terms of use, terms of service, customer agreements and/or any other terms and conditions applicable to the use of the Product and/or Services;
In connection with an investigation of fraud, intellectual property infringement, piracy or other unlawful activity or activity that may expose us or our affiliates, partners and/or agents to legal liability; and/or
If we receive information that provides us with a good faith belief that there is an exigent emergency involving the danger of death or serious physical injury to a person.

g. With Your Consent

There may be situations where you are asked to consent to share personal data with third parties for additional reasons not included in this Privacy Notice. In such event, we will only share such personal data if we have received your prior consent and only for the purposes as listed in the request to share such information.

Except where otherwise required by applicable law, your consent for the use and/or disclosure of your personal data in specific situations will continue in full force and effect until you revoke that consent, which you may do by contacting us via email at [email protected]. For the avoidance of doubt, the revocation of consent shall only apply to the use the information after our receipt and processing of such request (which we shall process promptly and in accordance with applicable law), and not to any use or disclosure prior to such revocation in compliance with your consent.

10. Marketing Communications

a. Direct Marketing

If you have not otherwise opted out (or with your consent where required by applicable law), or if you have opted in to receive direct marketing emails from us, we may use your personal data to send you marketing information about the Quilt business, our Product and/or Services, new product releases, new feature releases of the Product and/or Services, and/or other products and services, that we think may interest you. We carry out direct marketing by email and push notifications, as described below, and may also do so by physical mail.

If you no longer wish to receive marketing communications, you have the right at any time to opt out as further explained in Your Choices.

b. Push Notifications

If you have installed the Application, we may send push notifications to your mobile device regarding your use of the Product and/or Services, such as, notices about applicable fees and charges, transactional information, service communications (e.g., scheduling service visits), promotional or marketing-related messages, and other information concerning or related to your use of the Product or Services.

If you no longer wish to receive marketing communications or push notifications, you have the right at any time to opt out as further explained in Your Choices.

11. Your Choices

a. Accessing, Updating and Correcting Personal Data

If you would like to access, update, and correct personal data, please contact us via email at [email protected], and we will use reasonable efforts to correct and/or update such information.

b. Direct Marketing

You may manage the receipt of marketing and non-transactional communications sent by email by clicking on the “unsubscribe” link located on the bottom of any of our marketing e-mails.

We will use commercially reasonable efforts to process such requests in a timely manner. Note that you cannot opt out of receiving transactional e-mails or communications related to the Product and/or Services (e.g., requests for support), which, for clarification, are not marketing communications.

c. Push Notifications

You may disable these by declining them or changing the notification settings for the Application in your device settings or by changing your settings within the Application.

d. Cookies & Targeted Advertising

You can manage your cookie and tracking preferences as described in our Cookie Policy.

e. Additional Rights for Non-U.S. Residents

If you are visiting from the EEA, Switzerland or UK, or from another territory outside the U.S., you may have additional rights you can exercise as described here.

12. Data Retention

Personal data is processed for the period necessary to fulfill the purposes for which it is collected, to comply with legal and regulatory obligations and for the duration of any period necessary to establish, exercise or defend any legal rights.

Typically, we retain personal data about you for as long as you have an open Account with us or as otherwise necessary to provide you with our Product and Services. In some cases, we retain personal data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We retain user device and IP address data for as long as we need to ensure that our systems are working appropriately, effectively, and efficiently.

In order to determine the most appropriate retention periods for your personal data, we consider the amount, nature and sensitivity of your information, the reasons for which we collect and process your personal data, and applicable legal requirements.

In some instances, we may choose to anonymize personal data instead of deleting it. When we choose to anonymize, we make sure that there is no way that the personal data can be linked back to any specific individual.

13. Data Security and Protection

We have put in place reasonable and appropriate security measures designed to prevent your personal data from being accidentally lost, altered, disclosed, used or accessed in an unauthorized way. For example, we may use encryption, firewalls, and password protection. In addition, we limit access to personal data to those employees, agents, contractors and the third parties who have a business need-to-know. We also have procedures in place to deal with any suspected data security breach.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and while we take reasonable steps to provide secure services, by using the Product and/or Services, you understand and assume the risks associated with your activities on the internet.

Additionally, we cannot control the actions of other users with whom you may choose to share your information. Further, even after information posted on the Services is removed, caching and archiving services may have saved that information, and other users or third parties may have copied or stored the information available on the Services. To the fullest extent permitted under applicable law, we cannot and do not guarantee that information you post on or transmit to the Services will not be viewed by unauthorized persons.

14. Third-party Social Media Plug-ins

On or through the Services we may provide third-party “share” buttons which enable you to share certain content via social media sites (e.g., Facebook, Twitter, Instagram, YouTube, and LinkedIn). These “share” buttons may function as web beacons when you interact with the button. Please note that when you “share” using the buttons, you may send to the third party provider of the “share” button the information that you are viewing. If you are not logged into your account with the third party provider, then the third party may not know your identity. If you are logged in to your account with the third party, then the third party may be able to link information or actions about your interactions with the Services to your account with the applicable third party provider. Please refer to each third party’s privacy policies to learn more about its data practices.

15. External Websites and App Stores

On or through the Services we may provide or make available, for informational purposes only, links to other websites or resources with which we do not have a contractual relationship and over which we do not have control (“External Websites”). Such links do not constitute an endorsement by Quilt of those External Websites, and are provided to you only as a convenience. By clicking on links to External Websites, the operators of the External Websites may collect your personal data. We are not responsible for the content or data collection practices of those External Websites, and your use of External Websites is subject to their respective terms of use and privacy policies.

If you download any of our Applications in connection with the Product and/or Services, your app store (e.g., Apple App Store or Google Play) (“App Store”) may collect certain information in connection with your use of the Applications, including, without limitation, personal data, geolocational information, and other usage-based data. We have no control over the collection of such information by a third-party App Store, and any such collection or use will be subject to that third party App Store’s applicable privacy policies.

16. Notice to California Residents - Shine the Light Disclosure

California residents who have provided us with personal data have the right (under California Civil Code§ 1798.83) to request and obtain from us, once each year, the details of any personal data we shared with a third party for that third party’s direct marketing purposes during the prior calendar year. The details would include the categories of personal data and the names and addresses of the third party with which it was shared.

To request information about this sharing, you may submit a request via email to [email protected] with "Your California Privacy Rights" in the subject line, along with your first and last name, and complete mailing address (including street address, city, state, and zip code).

17. Notice to Nevada Residents

Under Nevada law, Nevada “consumers” (individuals who are seeking or acquiring goods/services for personal, family, or household purposes) may opt out of the sale of covered personal information.

Quilt does not currently sell covered information of Nevada consumers as defined under applicable Nevada law.

You may submit an opt-out request by sending your request to [email protected], along with your full name, complete mailing address (including street address, city, state, and zip code), email address (so that we can contact you, if needed, in connection with the request) and confirmation that you are a Nevada resident.

18. Notice to European and Non-U.S. Residents

This notice supplements the information provided in this Privacy Policy to address certain disclosures under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other similar comprehensive data protection law and applies only to individuals who are within the scope of this Privacy Notice and located in the EEA, UK, Switzerland, or another country with a similar comprehensive data protection law.

For the purposes of the GDPR and relevant local data protection laws, Quilt is (a) the data controller of personal information about Users. Personal Data as used in this Notice to European Residents means "personal data," as defined in Article 4(1) of the GDPR or the relevant section of the local data protection laws. If you have any questions about how we process your personal data, or to exercise your data protection rights please contact us using the methods provided in the “Contact Us” section of this Privacy Notice below.

a. Our Legal Basis for Processing

Generally, we process your personal data for one or more of the following legal bases:

Performance of a Contract: In order to perform the Services and fulfill our obligations under the contract we are about to enter into or have entered into with you. This may also include disclosure to the third parties who help us perform our obligations to you in connection with your use of the Product and/or Services, such as hosting providers, and payment processors.
Legitimate Interests: When it is reasonably necessary to achieve our legitimate business interests (or those of a third party), and your interests and fundamental rights do not override those interests. For example, for security purposes and protection against fraud.
Legal Obligations: Where we need to comply with a legal or regulatory obligation. For example, keeping records of our sales for tax compliance.
Vital Interests: Where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
Consent: Where you have given us specific consent to use your personal data in a specific purpose. Please note that for this specific legal basis, you have the right to withdraw your consent at any time.

b. Data Subject Rights

Depending on your country of residence, your rights may include

The right to be informed – that’s an obligation on us to inform you how we use your personal data (and that’s what we’re doing in this Privacy Notice);
The right of access – that’s a right to make what’s known as a ‘data subject access request’ for a copy of the personal data we hold about you;
The right to rectification – that’s a right to request that we correct personal data about you that may be incomplete or inaccurate (though we generally recommend first making any changes in your account if you have one);
The right to erasure (also known as the ‘right to be forgotten’) – that’s where in certain circumstances you can ask us to delete the personal data we have about you (unless there’s an overriding legal reason we need to keep it);
The right to restrict processing – that’s a right for you, in certain circumstances, to ask us to suspend processing personal data;
The right to data portability – that’s a right for you to ask us for a copy of your personal data in a common format (for example, a .csv file);
The right to object – that’s a right for you to object to us processing your personal data (for example, if you object to us processing your data for direct marketing); and
Rights in relation to automated decision-making and profiling – that’s a right you have for us to be transparent about any profiling we do, or any automated decision-making.
Withdraw consent—that’s the right to revoke any consent you may have previously given us at any time, if we have collected and processed your personal data with your consent. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
File a complaint—that’s the right to file a complaint with a supervisory authority about our collection and processing of your personal data.

c. Exercising Your Rights

These rights are subject to certain rules around when you can exercise them. If you wish to exercise any of the rights set out above, please contact us.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights) unless your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We will respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated as required by law.

If you no longer wish to receive our marketing/promotional information, you may opt out as described in the Your Choices section above.

Finally, you have the right to make a complaint at any time to the supervisory authority for data protection issues in your country of residence. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us first.

19. International Transfers

Quilt is based in the United States. The personal data that we process is stored, hosted and processed on servers located in the United States. Additionally, Quilt operates globally and may transfer the personal information that we process to our other offices and to the third parties described above. These recipients may be situated outside of your country or regional area of residence and may process personal information outside of your country or regional area. In particular, information provided to us or collected by us likely will be transferred to and processed in the United States by us or our Affiliates and our respective agents and contractors. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in your country of residence.

We rely on legally-provided mechanisms to transfer personal information across borders where and as required under applicable law.

20. How to Contact Us

General Questions; Data Subject Requests: If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact us as follows:

By email: [email protected]; Subject Line: Privacy Request

By mail: Quilt Systems, Inc.
Attn: Quilt Privacy Request
1800 Broadway, Suite 2
Redwood City, CA 94063