Privacy and Data Protection Policy

Phone: 1-800-616-6728

General/Privacy Email: info@casamediahouse.com

Sales Email: sales@casamediahouse.com

This Privacy Policy applies to personal information handled by Casa Media House in connection with our website, marketing activities, business operations and services.

It does not govern the independent privacy practices of third-party websites, platforms or services that may be linked from our Site.

Where Casa Media House processes information on behalf of a client through Casa CRM™, Casa Intelligence™, a white-label engagement or another managed service, the client may also act as the organization responsible for determining how that information is collected and used.

In those situations, individuals may need to direct certain privacy requests to the applicable Casa client.

Information You Provide Directly

We may collect:

• first and last name;
• business or organization name;
• job title;
• email address;
• telephone or mobile number;
• website URL;
• business address;
• service interests;
• advertising or marketing budget information;
• project requirements;
• information submitted through forms;
• consultation or appointment details;
• communications and correspondence;
• feedback;
• support requests;
• account information; and
• other information you voluntarily provide.

Client and Business Information

When you become a client or partner, we may also collect information necessary to provide services, such as:

• business contact information;
• website credentials;
• advertising-account information;
• CRM information;
• analytics access;
• social-media account information;
• campaign information;
• billing contacts;
• project assets;
• brand materials;
• customer or lead information supplied by the client;
• technical information; and
• other data required to perform contracted services.

Payment Information

Payments may be processed through third-party payment providers such as Stripe or other authorized payment processors.

Where a third-party payment processor is used, Casa Media House generally does not receive or store complete payment-card details.

We may receive limited transaction information such as payment status, transaction identifiers, billing name, invoice information and the last digits or type of payment method.

Website and Device Information

When you visit our Site, we or our technology providers may automatically collect information such as:

• IP address;
• browser type;
• operating system;
• device type;
• approximate geographic location;
• referring webpage;
• pages viewed;
• time spent on pages;
• interactions with the Site;
• advertising identifiers;
• cookie identifiers; and
• related technical or analytics information.

We may collect information through:

• website forms;
• contact forms;
• quote requests;
• consultation bookings;
• telephone communications;
• SMS and MMS;
• email;
• CRM systems;
• cookies;
• analytics tools;
• advertising technologies;
• social-media platforms;
• client onboarding;
• contracts and proposals;
• customer-support interactions;
• integrations and APIs; and
• information supplied by clients or business partners.

Casa Media House may use personal information to:

• respond to inquiries;
• provide requested information;
• prepare proposals or quotes;
• schedule consultations or appointments;
• deliver contracted services;
• provide customer support;
• communicate with clients;
• manage client accounts;
• administer Casa CRM™ and Casa Intelligence™;
• operate marketing automation;
• send permitted email or SMS communications;
• manage advertising campaigns;
• analyze website and campaign performance;
• improve our Site and services;
• personalize communications;
• prevent fraud and abuse;
• protect the security of our systems;
• administer billing and payments;
• comply with contractual and legal obligations;
• maintain business and financial records;
• manage white-label agency relationships;
• conduct internal analytics and reporting;
• maintain consent and opt-out records; and
• exercise or defend legal rights.

We limit collection and use of personal information to purposes that are reasonable and appropriate in the circumstances.

Where required, Casa Media House obtains meaningful consent before collecting, using or disclosing personal information.

The type of consent required may depend on:

• the sensitivity of the information;
• the purpose for which it is collected;
• applicable law;
• the nature of the communication; and
• the individual's relationship with Casa.

Consent may be express or, where legally permitted, implied.

You may withdraw consent subject to legal, contractual or operational restrictions and reasonable notice.

Withdrawing consent may affect our ability to provide certain services.

Casa Media House may retain records relating to SMS consent and messaging compliance, including:

• telephone number;
• date and time of consent;
• opt-in source;
• method of consent;
• webpage or form used;
• disclosure presented when consent was collected;
• applicable messaging program;
• consent status;
• STOP requests;
• opt-out history; and
• other records reasonably required for compliance.

Consent records may be retained for as long as reasonably necessary to demonstrate compliance with applicable laws, telecommunications requirements or provider policies.

Casa Media House may use Twilio Inc. and its services as telecommunications infrastructure for functionality such as:

• SMS;
• MMS;
• telephone numbers;
• voice calls;
• messaging;
• appointment reminders;
• lead follow-up;
• notifications;
• verification;
• automated communications; and
• communications integrated with Casa CRM™ or Casa Intelligence™.

When Twilio processes information in connection with its services, Twilio's applicable privacy, data-protection and service terms may apply.

Official Twilio resources include:

• Twilio Privacy Notice
• Twilio Terms of Service
• Twilio Acceptable Use Policy
• Twilio Messaging Policy
• Twilio Data Protection Addendum
• Twilio Service and Country Specific Requirements
• Twilio A2P 10DLC Information

Twilio, telecommunications carriers and other communications providers may process communications-related data in accordance with their respective policies and legal obligations.

Casa Media House may register applicable U.S. application-to-person messaging programs through A2P 10DLC, Twilio, The Campaign Registry, telecommunications carriers or other verification systems.

Information submitted for messaging registration may include:

• Casa Media House's legal name;
• business registration information;
• business address;
• tax or registration information where required;
• website;
• Privacy Policy URL;
• Terms and Conditions URL;
• messaging use case;
• sample messages;
• consent procedures;
• opt-in mechanisms;
• opt-out procedures; and
• other business information requested for verification.

Information submitted for these purposes may be disclosed to Twilio, The Campaign Registry, telecommunications carriers or other entities involved in registration, verification or messaging compliance.

Casa Media House may send commercial electronic messages where permitted by applicable law.

For commercial electronic communications subject to Canada's Anti-Spam Legislation ("CASL"), Casa Media House seeks to comply with applicable requirements concerning:

• consent;
• sender identification;
• contact information; and
• functioning unsubscribe mechanisms.

You may unsubscribe from promotional email communications through the unsubscribe link contained in the applicable message or by contacting us.

Unsubscribing from promotional communications does not necessarily prevent Casa from sending transactional, account, contractual, security or service-related communications where those communications are otherwise permitted.

Casa Media House may use cookies, pixels, tags and similar technologies to:

• operate the Site;
• maintain security;
• understand Site usage;
• measure advertising;
• analyze performance;
• remember preferences;
• improve user experience; and
• support marketing and advertising.

These technologies may include essential, analytics, functional or advertising cookies.

Where required by applicable law, Casa will seek appropriate consent before using non-essential cookies or similar technologies.

You may control cookies through your browser settings and, where available, Site consent controls.

Blocking certain cookies may affect Site functionality.

Casa may use Google technologies such as:

• Google Analytics;
• Google Tag Manager;
• Google Ads;
• conversion tracking; and
• related Google measurement services.

These technologies may collect information regarding Site visits, device information, interactions, advertising performance and conversion activity.

Google processes information according to its own privacy practices.

For information regarding Google's privacy practices, visit: https://policies.google.com/privacy

Casa may use technologies provided by Meta Platforms, Inc., including:

• Meta Pixel;
• Facebook advertising;
• Instagram advertising;
• conversion measurement; and
• related audience or advertising tools.

These technologies may collect information about interactions with our Site or advertising.

Meta handles information according to its own privacy policies.

For information regarding Meta's privacy practices, visit: https://www.facebook.com/privacy/policy/

Casa may use Stripe or other payment processors to process payments.

Payment information is generally submitted directly to the applicable payment processor.

Stripe maintains its own privacy practices, available at: https://stripe.com/privacy

Casa may receive information relating to payment status, invoices and transactions but generally does not store complete payment-card details processed through Stripe.

Casa may use trusted service providers to support functions such as:

• website hosting;
• cloud infrastructure;
• security;
• email delivery;
• telecommunications;
• CRM;
• analytics;
• advertising;
• payment processing;
• file storage;
• software development;
• automation;
• customer support; and
• business operations.

We seek to disclose only the information reasonably necessary for the provider to perform the relevant service.

Service providers may have their own independent legal and regulatory obligations.

Casa Media House provides white-label marketing and technology services to agencies and other business clients.

As part of those engagements, Casa may process personal information relating to a client's customers, prospects, employees or business contacts.

Where Casa processes personal information on behalf of another organization, Casa uses that information for purposes connected with providing the contracted service and subject to applicable contractual requirements.

The client is responsible for ensuring that it has the authority and appropriate legal basis to provide personal information to Casa.

Casa may disclose personal information:

• to service providers supporting Casa operations;
• to technology and telecommunications providers;
• to payment processors;
• to analytics and advertising providers;
• to professional advisers;
• when required by law, court order or legal process;
• to protect Casa's rights, security or property;
• to investigate fraud, abuse or security incidents;
• in connection with a merger, sale, financing, reorganization or transfer of business assets; or
• with your consent or at your direction.

Casa does not sell personal information for monetary consideration.

The specific mobile information and SMS consent restrictions in Section 8 apply regardless of this general sharing section.

Casa does not sell personal information for money.

Certain analytics, cookies or digital advertising technologies may be considered "sharing," "targeted advertising" or similar regulated activity under some U.S. state privacy laws.

Where applicable law provides an individual with rights relating to such processing, Casa will respond to valid requests as required by law.

You may contact us using the information at the bottom of this Policy.

Casa Media House operates in Canada and the United States and uses technology providers that may operate internationally.

Personal information may therefore be stored or processed in:

• Canada;
• the United States; or
• other jurisdictions where Casa or its service providers maintain operations or infrastructure.

When personal information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement authorities or governmental agencies in accordance with applicable law.

Casa uses reasonable contractual, administrative and technical measures appropriate to the circumstances when engaging service providers that process personal information.

Casa retains personal information only for as long as reasonably necessary to:

• fulfill the purposes for which it was collected;
• provide services;
• maintain business records;
• satisfy contractual requirements;
• demonstrate consent;
• manage disputes;
• prevent fraud;
• satisfy tax, accounting or legal requirements; or
• comply with applicable laws and provider requirements.

Retention periods vary based on the type of information and purpose for which it is processed.

Information that is no longer reasonably required will be deleted, anonymized or securely disposed of where appropriate.

Casa Media House uses reasonable administrative, technical and organizational safeguards appropriate to the sensitivity of the personal information under our control.

Safeguards may include:

• access controls;
• password protections;
• account permissions;
• encryption where appropriate;
• secure hosting and infrastructure;
• software updates;
• security monitoring;
• backups;
• employee or contractor access restrictions; and
• reasonable vendor-management practices.

No internet transmission, electronic storage system or technology environment can be guaranteed to be completely secure.

Casa maintains reasonable procedures for responding to suspected privacy or security incidents.

Where Casa determines that a breach of security safeguards involving personal information triggers notification or reporting obligations under applicable law, Casa will take the steps required by law.

For breaches subject to PIPEDA, this may include reporting qualifying breaches to the Office of the Privacy Commissioner of Canada, notifying affected individuals where a breach presents a real risk of significant harm and maintaining legally required breach records.

Depending on applicable law and your relationship with Casa, you may have rights to:

• request access to personal information held about you;
• ask how your information has been used or disclosed;
• correct inaccurate or incomplete information;
• withdraw consent where permitted;
• request deletion of certain information where legally available;
• opt out of promotional communications;
• challenge Casa's compliance with applicable privacy practices; and
• submit a complaint regarding our handling of personal information.

Certain information may need to be retained despite a request where required for legal, security, contractual, regulatory or legitimate business purposes.

We may need to verify your identity before processing certain privacy requests.

Residents of certain U.S. states may have additional privacy rights where the applicable state privacy law applies to Casa and the relevant processing activity.

Depending on applicable law, these may include rights to:

• access personal information;
• obtain a copy of certain information;
• correct information;
• request deletion;
• opt out of certain targeted advertising or data-sharing activities; and
• appeal certain privacy decisions.

Casa will respond to valid requests where required by applicable law.

You may unsubscribe from marketing communications at any time.

Email

Use the unsubscribe link contained in the marketing email or contact Casa directly.

SMS

Reply:

to the applicable message.

Marketing opt-outs do not prevent Casa from sending permitted transactional, service, security, billing or contractual communications.

Casa may use artificial intelligence, machine-learning or automated technologies to support activities such as:

• research;
• analytics;
• content development;
• coding;
• campaign management;
• workflow automation;
• customer support; and
• internal business processes.

Where personal information is processed using such tools, Casa seeks to use the information in accordance with this Privacy Policy, applicable contractual requirements and applicable law.

Automated technologies may also be incorporated into Casa Intelligence™ or client implementations.

Our Site may contain links to third-party websites or services.

Casa does not control and is not responsible for the independent privacy practices of third-party websites.

We encourage users to review the privacy policies of any third-party services they use.

Casa Media House's Site and services are primarily intended for businesses and adults and are not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 through our Site for marketing purposes.

If we become aware that personal information from a child has been collected contrary to applicable requirements, we will take reasonable steps to address the situation.

Casa may update this Privacy Policy periodically to reflect:

• changes in law;
• regulatory guidance;
• new technologies;
• changes to our services;
• new service providers;
• changes to our data practices; or
• operational requirements.

The current version will be posted at: https://casamediahouse.com/privacy-policy/

The "Last Updated" date at the top of this Policy will identify the most recent revision.

Material changes may also be communicated through additional notice where appropriate.

Use of the Casa Media House Site and services may also be governed by our Terms and Conditions:

https://casamediahouse.com/terms-and-conditions/

The SMS, telecommunications and A2P provisions contained in our Terms and Conditions should be read together with this Privacy Policy.