The below “Country Addenda” supplement and form part of the Privacy Notice.
For consistency, capitalized terms have the meanings assigned to them here unless otherwise noted.
Please note that this page may be updated as necessary to address evolving operations and regulations.
This Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of the European Union (EU), United Kingdom (U.K.), or Switzerland, and describes how we collect, use, disclose, and store your Personal Information in accordance with the General Data Protection Regulation (GDPR), the United Kingdom General Data Protection Regulation (U.K. GDPR), and the Swiss Federal Act on Data Protection (revFADP), respectively.
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that applicable law considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of the EU, the U.K., or Switzerland.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Carrot collects and processes Personal Information from job applicants (“Candidates”) for the purposes of managing our recruitment process, including assessing your qualifications with respect to your application and to decide whether to enter into an employment relationship with you. This may include your name, contact details, CV, employment history, educational background, references, and any other information that you provide to us during the recruitment process, or that we receive from a recruitment agency, background check provider (to the extent permitted by applicable law) or other third party. We may also collect sensitive Personal Information if voluntarily provided by you, such as information relating to ethnic origin or disabilities for equal opportunities monitoring.
The legal basis for this processing is our legitimate interest in hiring qualified individuals and, where applicable, compliance with legal obligations. All Candidate Personal Information will be stored securely and will only be accessible by authorized personnel involved in the recruitment process. We may share your Personal Information with third-party service providers who assist us in the recruitment process, subject to appropriate data processing agreements or analogous contractual provisions.
Carrot will retain Personal Information of Candidates for as long as necessary to comply with our legitimate interests, which may include (among other purposes), reviewing applications that have previously been denied, and for the length of time necessary to comply with applicable law.
You can also file a complaint with the applicable local authority. When you consent to our processing your Personal Information for a specified purpose, you may withdraw your consent at any time, and we will stop any further processing of your data for that purpose.
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Serbia and describes how we collect, use, disclose, and store your Personal Information in accordance with the Law on Protection of Personal Data 2018.
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
Data Storage
In order to provide services, Carrot will store and process your Personal Information in the United States. For more information on how we store, protect, and retain your data, please see here.
International Data Transfers
Carrot operates globally and your Personal Information will be transferred to countries outside of Serbia that are subject to different standards of data protection. We will take reasonable and appropriate steps to ensure that transfers of your Personal Information comply with applicable law and are managed to protect your privacy rights and interests.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
You may file a complaint with the Commissioner for Information of Public Importance and Protection of Personal Data.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Turkey and describes how we collect, use, disclose, and store your Personal Information in accordance with the Law on the Protection of Personal Data (“LPPD”).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that the LPPD considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of Turkey.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of South Africa and describes how we collect, use, disclose, and store your Personal Information in accordance with the Protection of Personal Information Act (POPIA) and the Promotion of Access to Information Act (PAIA).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that the POPIA and/or PAIA consider this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of South Africa.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
You may submit a complaint to the Information Regulator regarding alleged interference with the protection of your information or with respect to a determination of an adjudicator.
You may also institute civil proceedings regarding an alleged interference with the protection of your Personal Information.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Chile and describes how we collect, use, disclose, and store your Personal Information in accordance with Law 19.628.
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal Information in the United States. For more information on how we store, protect, and retain your data, please see here.
Carrot operates globally and your Personal Information will be transferred to countries outside of Chile that are subject to different standards of data protection. We will take reasonable and appropriate steps to ensure that transfers of your Personal Information comply with applicable law and are managed to protect your privacy rights and interests.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Colombia and describes how we collect, use, disclose, and store your Personal Information in accordance with Law 1266 of 2008 and Law 1581 of 2012.
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
You have the right to submit a complaint to the Superintendency of Industry and Commerce if you believe there has been an infringement and/or violation of data protection.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Guatemala and describes how we collect, use, disclose, and store your Personal Information in accordance with the Constitutional Court of Guatemala.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Brazil and describes how we collect, use, disclose, and store your Personal Information in accordance with the Brazilian General Data Protection Law (“LGPD”).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
Data Storage
In order to provide services, Carrot will store and process your Personal Information in the United States. For more information on how we store, protect, and retain your data, please see here.
International Data Transfers
Carrot operates globally and your Personal Information will be transferred to countries outside of Brazil that are subject to different standards of data protection. We will take reasonable and appropriate steps to ensure that transfers of your Personal Information comply with applicable law and are managed to protect your privacy rights and interests.
When a Brazilian Data Controller (e.g., your employer) sends us an “Employee Eligibility File,” we will implement appropriate safeguards (e.g., executing Standard Contractual Clauses with the Data Controller/Exporter) that contractually obligate each party to ensure that Personal Information receives an adequate level of protection consistent with the requirements and standards of the LGPD.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of the People’s Republic of China and describes how we collect, use, disclose, and store your Personal Information in accordance with the Personal Information Protection Law (“PIPL”).
We will abide by the following principles with respect to your Personal Information: legality, legitimacy, necessity, good faith, transparency, responsibility, and reasonableness.
Personal Information refers to various information related to identified or identifiable natural persons recorded electronically or otherwise, excluding anonymized information. Sensitive Personal Information refers to Personal Information that, once leaked or illegally used, may easily lead to the infringement of the personal dignity of natural persons or the harm of personal and property safety, including biometrics, religious beliefs, specific identities, medical health, financial accounts, whereabouts and Personal Information of minors under the age of fourteen.
Legal Bases: Please see the following for more details related to how and why we process your information:
The Personal Information we generate, collect and obtain during our operations within the territory of the People’s Republic of China will be stored overseas. Unless otherwise stipulated by applicable law, we will only store your Personal Information for the shortest time necessary to achieve the purpose of processing.
We transfer Personal Information overseas in accordance with the requirements set forth in applicable law and as needed to fulfill our legal obligations with your Employer. We use commercially reasonable measures to protect the confidentiality and safety of your information.
In addition to the rights outlined here, you have the following data subject rights:
We do not charge a separate fee for you to exercise your rights. However, for repeated requests that exceed reasonable limits, we reserve the right to charge a separate fee. We have the right to refuse requests that are unreasonably repetitive, require excessive technical means, pose risks to the legitimate rights and interests of others, or are impractical.
Please contact us at the following email if you have questions or would like to exercise your rights: data-requests@get-carrot.com.
PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW. UNLESS THERE ARE SPECIAL CIRCUMSTANCES, WE WILL ACCEPT AND PROCESS YOUR COMPLAINTS AND REPORTS WITHIN 30 DAYS.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of the Philippines and describes how we collect, use, disclose, and store your Personal Information in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (“DPA”).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that the DPA considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of the Philippines.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Thailand and describes how we collect, use, disclose, and store your Personal Information in accordance with the Personal Data Protection Act 2019 (PDPA).
In order to provide services, Carrot will store and process your Personal Information in the United States. For more information on how we store, protect, and retain your data, please see here.
Carrot operates globally and your Personal Information will be transferred to countries outside of Thailand that are subject to different standards of data protection. We will take reasonable and appropriate steps to ensure that transfers of your data comply with applicable law and are managed to protect your privacy rights and interests.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
You may file a complaint with the Personal Data Protection Committee.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of India and describes how we collect, use, disclose, and store your Personal Information in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that the DPDPA considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of India.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Canada and describes how we collect, use, disclose, and store your Personal Information in accordance with the Personal Information Protection and Electronic Documents Act (“PIPEDA”).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that PIPEDA or applicable Provincial data privacy laws consider this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of Canada.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
You may be able to take advantage of the tool developed by the Digital Advertising Alliance of Canada to opt out of third-party advertising. Where available, this tool provides a list of parties that may target advertisements based on your online web-browsing activities and the ability to opt-out of their use of your information for that purpose. Please click the following link to access the tool: AdChoices in Canada - Learn about the blue icon & your choices .
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
Carrot, domiciled in the United States, is the Data Controller, which means we are responsible for and determine how your Personal Information is handled.
This country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Mexico and describes how we collect, use, disclose, and store your Personal Information in accordance with the Federal Law for Personal Data Protection in Possession of Individuals (the "Data Protection Law").
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal information in the United States.
To the extent that the Data Protection Law considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of Mexico.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Please contact us at the following email if you would like to exercise your rights: data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This Country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of Australia and describes how we collect, use, disclose, and store your Personal Information in accordance with the Australia Privacy Act of 1988 (“Privacy Act”) and its 13 Australian Privacy Principles (APPs).
In most circumstances, it is impractical for people to communicate with us anonymously. We need to identify you to assist you effectively. However, in circumstances where it is lawful and practicable to do so, we will provide you with the option of not identifying yourself, or using a pseudonym, when entering into communications with us.
We collect Personal Information about you when you voluntarily submit information to us when you use our Service. This can include information you provide to us when you register for an account, send us messages, subscribe to our mailing lists, newsletters or other forms of marketing communications related to the Service, participate in a survey, or use some other feature of our Service.
Please see here for more.
We also collect information about you through automated means, as detailed here.
Where we receive Personal Information about you which we have not requested (whether directly from you or from a third party), we will consider, within a reasonable period, whether we could have collected that Personal Information from you had we requested it.
Where we determine that we could have collected the Personal Information had it been requested, we will use, disclose, and store that Personal Information in the manner set out in our Privacy Notice.
Where we determine that we could not have collected the Personal Information had it been requested, we will destroy or de-identify that Personal Information as soon as practicable, provided it is lawful and reasonable to do so.
For a detailed description of how and why we use and disclose Personal Information (including information classified as “sensitive”), please see:
In order to provide Services, Carrot will store and process your Personal Information in the United States.
To the extent that this is considered an “international data transfer” under the Privacy Act:
For more information on how we store, protect, and retain your information, please see here.
Where we collect your Personal Information, it will usually be identified by a common identifier such as your name, address or contact details. Subject to certain exceptions under the Privacy Act, we will not disclose identifiers assigned by Government agencies or its agents, such as tax file numbers, or use those identifiers to identify your Personal Information.
In addition to the rights outlined here, you have the following data subject rights:
Access
Subject to any exceptions in the Privacy Act, if you have provided us with Personal Information, you have a right to request access to it. In the event that a request for access is made, we will review our records to determine what Personal Information relating to you we hold and endeavor to respond to your request within a reasonable period after the request is made, but in any event, within 30 days. Once we have notified you of the nature of the Personal Information relating to you which we hold, we will give you access to your Personal Information in the manner requested by you, if it is reasonable and practicable to do so. We do not levy a charge in respect of the making of a request for access to Personal Information held by us. However, we may charge you for the reasonable costs incurred by us in providing you with access to the Personal Information held by us. The Privacy Act provides instances where a holder of Personal Information may refuse to provide an individual with access to their Personal Information. If we refuse to give you access to your Personal Information, we will give you a written notice that sets out our reasons for the refusal and the mechanisms available to complain about our refusal.
Correction
Carrot takes reasonable steps to keep your Personal Information as accurate, complete, and up-to-date as possible. We make an effort to ensure this data is of high quality, but this relies on the accuracy and frequency of data provided by you. You can assist us by notifying us if your circumstances change, such as if your name changes. If we hold Personal Information about you and you request that we correct the information, we will take reasonable steps to rectify the situation free of charge if we are satisfied that the information we currently hold is inaccurate, out-of-date, incomplete, irrelevant, or misleading. If we refuse to correct your Personal Information, we will give you a written notice setting out our reasons for the refusal and the mechanisms available to complain about the refusal.
You may exercise these rights by contacting data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
If you wish to make a complaint about a breach of your privacy by Carrot, you may contact us at legal@get-carrot.com. All complaints will be investigated by an appropriately qualified representative of Carrot. We will endeavor to resolve your complaint as quickly as possible and, in any event, within 30 days. We will notify you of the outcome of the investigation, including how we propose to resolve your complaint and what, if any, corrective measures we will implement.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
This Country Addendum, which supplements and forms part of Carrot’s Privacy Notice, applies to you if you are a resident or citizen of New Zealand and describes how we collect, use, disclose, and store your Personal Information in accordance with the Privacy Act 2020 (“Privacy Act”).
Please click on the below links, respectively, to find out how and why we collect, use, and disclose your information:
Please note that, If you choose not to provide your Personal Information to us, we may not be able to provide you with access to our Service.
In order to provide services, Carrot will store and process your Personal Information in the United States.
To the extent that the Privacy Act considers this an “international data transfer,” we will comply with applicable requirements for transferring Personal Information outside of New Zealand.
For more information on how we store, protect, and retain your information, please see here.
In addition to the rights outlined here, you have the following data subject rights:
Access
Under the Privacy Act, individuals have the right to access information that an organization holds about them.
Correction
Where a person establishes that the Personal Information we hold about them is not accurate, complete, or up-to-date, or is misleading, we will correct our records as necessary. Depending on the nature and complexity of any such request, we may charge an administration fee for providing access to Personal Information.
You may exercise these rights by contacting us at data-requests@get-carrot.com. PLEASE NOTE: ALL REQUESTS ARE SUBJECT TO VERIFICATION OF YOUR IDENTITY. WE WILL RESPOND TO REQUESTS WITHIN THE TIME PERIOD REQUIRED BY APPLICABLE LAW.
Breach Notification
If we become aware of a data breach that we consider constitutes a notifiable privacy breach under the Privacy Act, we will notify the Office of the Privacy Commissioner and any affected individuals.
Complaints
If you wish to make a complaint about a breach of your privacy by Carrot, you may contact us at legal@get-carrot.com. All complaints will be investigated by an appropriately qualified representative of Carrot. We will endeavor to resolve your complaint as quickly as possible and, in any event, within 30 days. We will notify you of the outcome of the investigation, including how we propose to resolve your complaint and what, if any, corrective measures we will implement.
Please see here for pertinent details regarding updates to our Privacy Notice (including, as applicable, updates to this Addendum). If you have questions about our Privacy Notice, or this Addendum, please contact us at legal@get-carrot.com.
