DotDash Privacy Policy
Controller Details:
Company Name: DotDash
Website: https://getdotdash.today
Email: hello@getdotdash.today
Data Protection Officer: dpo@getdotdash.today
Scope and Applicability:
This Privacy Policy applies to all users of the DotDash mobile app, including visitors, registered users, and customers globally.
2. Legal Basis for Processing
Consent: Obtained for marketing communications and optional features.
Contract: Necessary for service delivery and account management.
Legitimate Interests: Used for analytics, security, and business operations, with a balancing test to ensure user rights are not overridden.
Legal Obligation: Compliance with tax records, safety reporting, and regulatory requirements.
Vital Interests: Processing in emergency situations if applicable.
3. Data Processing Matrix
| Data Category
| Processing Purpose
| Legal Basis
| Retention Period
|
|---|
| Account Information
| Service delivery, account management
| Contract
| Until account deletion or 3 years after last activity
|
| Service Data
| Mobile app operations
| Contract
| Until account deletion or 3 years after last activity
|
| Technical Data
| Security, bug tracking
| Legitimate Interest
| 12 months
|
| Communication Data
| Support, feedback
| Legitimate Interest
| 3 years
|
## 4. Information We Collect
Account Information: Name, email, username (for service delivery - Contract basis)
Service Data: Specific to Mobile App operations
Technical Data: IP address, browser info (Legitimate Interest for security)
Communication Data: Support tickets, feedback (Legitimate Interest for service improvement)
5. Automated Decision-Making Disclosure
We do not use automated decision-making that produces legal effects.
Service Delivery (Contract): Core functionality, account management
Service Improvement (Legitimate Interest): Analytics, feature development, bug fixes
Communication (Contract/Consent): Service updates, marketing (with opt-out)
Security (Legitimate Interest): Fraud prevention, system security
Legal Compliance (Legal Obligation): Regulatory requirements, law enforcement
7. Data Sharing & Third Parties
Service Providers: Hosting (AWS/Google Cloud), email services
Analytics: Google Analytics, usage tracking (with anonymization where possible)
Legal Disclosures: Data may be shared in response to court orders or regulatory requests.
Business Transfers: M&A scenarios with data protection continuity
8. International Data Transfers
Primary Processing: Global
Transfer Mechanisms: Standard Contractual Clauses (2021), adequacy decisions
Third-Party Processors: Verified adequate protection or use appropriate safeguards
9. Data Retention & Deletion
Account Data: Until account deletion requested or 3 years after last activity
Technical Logs: 12 months for security and service optimization
Support Records: 3 years for quality assurance and legal protection
10. Your Privacy Rights
Access: Request copy of your data (free, 30-day response)
Rectification: Correct inaccurate information (immediate where possible)
Erasure: Request data deletion, subject to legal retention exceptions.
Portability: Export your data in a common format (JSON/CSV).
Restriction: Limit processing while disputes are resolved
Objection: Opt-out of processing based on legitimate interests.
Consent Withdrawal: Withdraw consent without affecting other legal basis
Process: Email requests to privacy@getdotdash.today with identity verification.
11. Supervisory Authority Complaint Rights
Right to lodge complaints with supervisory authorities
Specific authority contact information for global
No prejudice to other administrative or judicial remedies
Internal complaint resolution process
12. Data Security
Encryption: Data is encrypted in transit (TLS 1.3) and at rest (AES-256)
Access Controls: Role-based access and multi-factor authentication for staff
Regular Audits: Security assessments and penetration testing
Incident Response: 72-hour breach notification to authorities, user notification
Staff Training: Regular data protection training and confidentiality agreements
13. Cookie Policy Integration
Essential: Authentication, security, basic functionality (Legitimate Interest)
Analytics: Usage statistics, performance monitoring (Consent in EU, with opt-out)
Marketing: Advertising, retargeting (Consent-based with controls)
Cookie Management: Via browser settings and preference center
14. Children's Privacy
Age Limit: 13+ (US), 16+ (EU), with age verification procedures
Parental Controls: Consent mechanisms and account management for minors
Special Protections: Limited data collection, enhanced security
15. Updates & Changes
Notification: Email notice 30 days before material changes
Version Control: Clear version history and effective dates
User Options: Continued use implies acceptance, with the option to delete account
Note: Missing required information such as phone number and postal address is marked for compliance.
If you have any questions about this Privacy Policy, please contact us:
Email: hello@getdotdash.today
Website: https://getdotdash.today
Response Time: We will respond to your inquiry within 30 days.
Data Protection Officer: For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@getdotdash.today