Socket Mobile Privacy Policy

Examples of personal information we collect are as follows:

• When you order products from our web store, we collect legally necessary data to process the payment and fulfill the order. We may be required to collect your name, company, address, and email to generate and send you a bill. We request your shipping information so we know where to ship the products, and we request credit card or PayPal information from you for payment for the products you've ordered.
• When you receive products from us as a customer, you are directed to a Companion Application downloaded from your platform app store to assist you in starting up and using the product. We retrieve the Bluetooth MAC address from the product to validate the product warranty.
• When you return products to us for replacement or repair, we request shipping information so we know where to send them. If the replacement or repair is not covered under warranty, we request credit card information from you for payment.
• As part of our customer service, we collect data that you voluntarily wish to provide us via online forms or email. These data are processed, based on your consent, exclusively to respond to your request for information.
• When you sign up for newsletters or other information that we distribute by email, we request contact information, including name, address, or email address, so we know where to send the requested information.
• When you register as a developer to use our software developer kit with your software applications, we request contact information, including name, address, email address, and phone number, so we know where to send the requested and future developer-related information. We request a credit card or other financial information to enable you to pay a small initial administrative fee. We may also ask for additional information about your areas of interest as a developer, including the markets you are addressing with your applications, to enable us to be responsive to your needs as a developer.
• We collect personal information in surveys. These data are anonymized and only collected for internal statistics about our apps, software, and products.
• We may collect personal information at trade shows for follow-up after the show is completed.
• We maintain contact information from our vendors who supply us with inventory components or services.
• We obtain names and addresses of non-objecting shareholders from time to time to assist us in identifying and communicating with our shareholders.
• 30 days after purchase from our website, we contact all customers to confirm that they are satisfied with the performance of their Socket Mobile product and include details of how to contact us for assistance. During this contact, we invite the customer to complete a voluntary registration process and provide feedback via a short survey.

Personal information about children under 13 requires parental consent. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers. If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Third-party processors - We employ the services of third-party companies and/or individuals to:

• facilitate or provide our service to you on your behalf, and
• assist us in the collection of personal information or analysis for internal statistics about our apps, software, and products.

These third parties may have access to your personal information or may collect your personal information in order to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purposes, subject to provisions listed in their own Privacy Policies. For example, we may engage third parties to process certain transactions, such as fulfilling your orders for products that are ordered through our web stores or processing your credit card if payment for product purchases or services is required. We transfer personal information to third-party processors sufficient to carry out the service provided by the processor, such as the fulfillment of your order. We confirm with each third-party processor that they maintain the confidentiality of your personal information and provide at least the same level of protection of your personal information as we do.

Processing personal information - You consent to our collection, use, and processing of your personal information when you provide us with it. We use and process your personal information to accomplish a stated purpose, such as supplying a product or providing a service that requires the use of personal information or to fulfill a contractual obligation. In each case, we request consent to be freely given, to be specific to accomplish a specified task, to be informed by describing the limited use of the personal information, and to be unambiguous as relating to a specific task.

Transactional and Marketing Correspondence - Personal information collected, as described above, may be used to communicate with you when the purpose is transactional or relationship-based. This includes, but is not limited to, store order updates, communications linked to product registrations and feedback surveys, Developer community sign-up, MFi submission updates, Technical Support cases, and RMA notifications. We will only send commercial and marketing emails to you if you have opted in to this. All commercial and marketing emails include an option to unsubscribe should your preferences change.

Your rights

You have the right under this Privacy Policy, and by law if You are within the EU, to:

• Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. Upon your request, by filling out our Personal Information Request Form, we will provide you with a copy of your personal data in electronic format at no charge;
• Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.
• Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.
• Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.
• Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.
• Request erasure of Your Personal Data. You have the right to ask Us to rectify, delete or remove Personal Data. Upon your request, we will anonymize any personal information you’ve provided to us (right to be forgotten) but will retain non-personal information. We may delay the anonymization of personal information while a related transaction you authorized with the personal information is pending;
• The right to data portability. You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions;
• to give specific instructions concerning the processing of your data following your death.

You can assert these rights by filling out our Personal Information Request Form.

Location data for Socket Mobile apps

Some of our mobile apps may be capable of accessing your location data to operate. Socket Mobile is not accessing, collecting, or using your location data when you run this app. However, some devices may ask you to authorize access to your device's location to allow Bluetooth operation. Our app will be disabled if you deny permission.

Data safety

To protect your personal information:

• We do not store personal information for longer than is necessary in order to achieve the purposes for which they were collected. To determine the appropriate storage period, we shall consider the quantity, nature, and sensitivity of data and the purposes for which we process it;
• We delete or anonymize your personal information in accordance with applicable laws;
• We remind you that the collection of your personal information is used exclusively for the successful delivery of our services and, therefore, to optimize the experience;
• We protect our systems and data from unauthorized access, accidental or unlawful processing, loss, destruction, damage, theft, alteration, or disclosure of personal information through a combination of firewalls, security monitoring systems, data encryption, and access controls.

Data Breach. Should we become aware of an unauthorized breach of personal information, we shall identify the affected data records and notify you under applicable law. For example, should a data breach occur, and the affected parties are within the European Union, when feasible, Socket Mobile will notify the supervisory authority of the affected parties within 72 hours of detection. Our third-party processors are required to notify us in the event they detect unauthorized access to your personal information.

California Residents. California Residents Under California Civil Code Section 1798.83 (also known as S.B. 27), if a Client/User is a California resident and the Client/User’s business relationship with Socket Mobile is primarily for personal, family, or household purposes, the Client/User may request certain data regarding Socket Mobile’s disclosure, if any, of Personal Information to third parties for the third-party’s direct marketing purposes. To make such a request, please fill out an inquiry form; the Client/User may make such a request up to once per calendar year. If applicable, we will provide You, by e-mail, a list of the categories of Personal Information disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, along with the third parties’ names and addresses. Please note that not all Personal Information sharing is covered by S.B. 27’s requirements.

Choice of Law. This Privacy Policy shall be subject to and governed by the laws of the state of California. Any dispute, controversy, or claim arising out of or in connection with or relating to this Privacy Policy or any breach or alleged breach hereof, will, upon the request of any party involved, be submitted to, and settled by, arbitration in Fremont, California, pursuant to the American Arbitration Association rules of arbitration. Any award rendered shall be final and conclusive upon the parties and a judgment thereon may be entered in the highest court of the forum, state or federal, having jurisdiction. In the event that neither party requests Arbitration, each Client hereby consents to the exclusive jurisdiction of Alameda County, California, Superior Court in any action on a claim arising hereunder

Contact Information - We value your comments and opinions. If you have questions or comments about our Privacy policy or if you want to exercise your rights under this policy, please contact us by filling out our Personal Information Request Form or changing your authorization relating to your location data.

Exercising of Your GDPR Data Protection Rights. You may exercise Your rights of access, rectification, cancellation and opposition by contacting Us. Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, We will try our best to respond to You as soon as possible. You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.