Contacts Plus LLC Privacy Policy

Last Updated: July 23, 2025

1. Introduction

Contacts Plus LLC, a Delaware limited liability company with offices at 3366 S. Geyer Road, Suite 100, Saint Louis, MO 63127 ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy governs how we collect, use, disclose, and protect your personal information, as defined under GDPR Article 4(1) and CCPA Section 1798.140, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4), in connection with your access to and use of our website at contactsplus.com (the "Site"), the Contacts Plus mobile application (the "App"), and related contact management and synchronization services, including APIs and integrations (collectively, the "Services"). We are the data controller under GDPR, the business under the CCPA, as amended by the CPRA, and comply with other applicable data protection laws (e.g., Virginia CDPA, Colorado CPA, Canada PIPEDA). This Privacy Policy applies to all Users, including individual End Users, organizational Clients, and Developers, as defined in our Terms of Use (available at contactsplus.com/terms). Capitalized terms not defined herein have the meanings given in our Terms of Use. For inquiries, contact us at support@contactsplus.com or, for GDPR-related requests, our Data Protection Officer at dpo@contactsplus.com.

Overview

This Privacy Policy covers:

  • Information We Collect (Terms of Use, Section 4)
  • How We Use Your Information (Terms of Use, Section 4.1)
  • How We Share Your Information (Terms of Use, Sections 3.3, 4)
  • Data Retention (Terms of Use, Section 4.4)
  • Third-Party Websites (Terms of Use, Section 4)
  • Children's Privacy (Terms of Use, Section 1.1)
  • Data Security and International Transfers (Terms of Use, Section 4.4)
  • Cookies and Tracking Technologies
  • Your Privacy Rights (Terms of Use, Section 4.3)
  • Complaints and Dispute Resolution
  • Do Not Sell or Share My Personal Information
  • Financial Incentives
  • Changes to This Privacy Policy (Terms of Use, Section 7.1)
  • How to Contact Us

2. Information We Collect

2.1 Types of Data We Collect

"Personal Information" means any data that allows someone to identify or contact an individual data subject, including, for example, name, address, telephone number, email address, or other non-public information associated with such data. "Anonymized Data" means data that cannot be linked to an identifiable individual, per GDPR Recital 26. We collect Personal Information and Anonymized Data, as described below.

2.2 Information You Provide to Us

We collect the following Personal Information, as defined in our Terms of Use (Section 4), when you interact with our Services:

  • Account Information: When you register for an Account, we require information such as your full name, organization (if applicable), phone number, email address, and password. You may optionally sign in using a third-party service (e.g., Google). If you choose this option, you will be asked to consent to the third-party service providing us with limited information, such as your name, email address, and profile photo, in compliance with the Google API Services User Data Policy, including Limited Use requirements, and our Terms of Use (Section 4.1). Only data necessary for account creation is collected.
  • Profile Information: You may voluntarily provide profile information, including your name, photo, email, phone number, URLs, physical address, instant message handles, job title, bio, interests, or other details. Sensitive information, such as gender or dates (e.g., birthdays), is optional and processed only with your explicit consent, per GDPR Article 6(1)(a).
  • Referral Information: When you use the Services to refer others, we collect contact information you provide (e.g., name, email) for the invitee, excluding data of minors under 13, per our Terms of Use (Section 1.1). We generate automated invitations based on this information, processed under GDPR Article 6(1)(b) (contract performance).
  • Payment Information: For paid Services, we collect billing information (e.g., name, billing address) via third-party payment processors (e.g., Stripe) under data processing agreements compliant with GDPR Article 28 and CCPA. We do not store or share payment card details, per our Terms of Use (Section 4.4).
  • Communication Information: When you contact us (e.g., via email, phone, or support requests), we collect your name, email address, phone number, and any content you provide. With your explicit consent (GDPR Article 6(1)(a)), we may record customer support conversations to improve service quality, subject to applicable laws. We also collect event logs and survey responses to diagnose issues and enhance support, processed under GDPR Article 6(1)(f) (legitimate interests).
  • Additional Information: You may provide information through forms, searches, Account updates, surveys, feedback, forums, promotions, or other features. We collect such information only when clearly indicated at the point of collection, per GDPR Article 13 and CCPA Section 1798.130.

CCPA Categories: Identifiers, personal information, commercial information.

GDPR Categories: Personal data, sensitive data (e.g., gender) with consent.

You may exercise your rights over this information (e.g., access, deletion) as outlined in our Terms of Use (Section 4.3) and Section 9 below.

 

2.3 Information We Collect from Your Use of Our Services

We collect the following Personal Information, as defined in our Terms of Use (Section 4), from your interactions with the Services:

2.3.1 Contacts (End User Contact Data)

Our Services enable you to manage contact information ("Contacts" or "End User Contact Data", as defined in our Terms of Use, Section 4.1), including names, email addresses, phone numbers, URLs, social handles, online identifiers, physical addresses, organizational affiliations, job titles, birthdays, key dates, gender, general location, relationships, skills, interests, preferences, notes, photos, tags, or other categorizations. Sensitive data (e.g., gender) is processed only with your explicit consent (GDPR Article 6(1)(a)). Contacts are collected via:

  • Connected Services: Third-party platforms (e.g., email providers, social networks, calendar applications) you authorize, per GDPR Article 6(1)(b) (contract performance).
  • User Interfaces: Direct entry or edits via the Site or App, including voice interfaces, with consent for voice data (GDPR Article 6(1)(a)).
  • APIs: Submission through our APIs for contact management or lookup, per Terms of Use (Section 4.1).
  • Uploaded Files: Contact lists you upload for processing.
  • Third-Party Applications: Manual or automated transfers from third-party apps, with your authorization.
  • Contact Extraction: Features like business card scanning or email signature extraction, processed only with your explicit consent (GDPR Article 6(1)(a)).
  • Shared Contacts: Contacts shared by other Users, per Terms of Use (Section 4.1).
  • Caller ID (Android Only): Call log data for caller identification, collected with your consent (GDPR Article 6(1)(a); CCPA: opt-out available, Section 9).

CCPA Categories: Identifiers, personal information (Cal. Civ. Code § 1798.80(e)), commercial information.

GDPR Categories: Personal data; sensitive data (e.g., gender) with consent.

2.3.2 Relationship Information

We collect data to manage relationships, inferred from:

  • Your Contacts: Relationships indicated by contact details (e.g., mobile numbers, shared addresses) or interaction frequency, processed under GDPR Article 6(1)(f) (legitimate interests).
  • Connected Services: Data from authorized platforms (e.g., social network connections), per GDPR Article 6(1)(b) (contract performance).
  • Communication Metadata: Data like contact identity, time, and duration from App-initiated communications or connected services (e.g., email providers), collected with consent (GDPR Article 6(1)(a)). Content is not processed without explicit consent.
  • Appointment Data: Calendar data (e.g., time, location, participants) from connected services, per GDPR Article 6(1)(b).

CCPA Categories: Identifiers, internet activity.

GDPR Categories: Personal data.

2.3.3 Location Information

  • Geolocation: Approximate or precise location from IP addresses or device GPS, collected with your consent (GDPR Article 6(1)(a), CCPA: opt-out available, Section 9). You may disable location services in your device settings.
  • Map Services: Use of Google Maps, Apple Maps, or similar services, subject to their terms and privacy policies, per Terms of Use (Section 4).

CCPA Categories: Geolocation data.

GDPR Categories: Personal data.

2.3.3 Location Information

  • Geolocation: Approximate or precise location from IP addresses or device GPS, collected with your consent (GDPR Article 6(1)(a), CCPA: opt-out available, Section 9). You may disable location services in your device settings.
  • Map Services: Use of Google Maps, Apple Maps, or similar services, subject to their terms and privacy policies, per Terms of Use (Section 4).

CCPA Categories: Geolocation data.

GDPR Categories: Personal data.

2.4 Information We Receive from Third Parties

  • Usage Information: Interactions with the Services (e.g., logins, page visits, button clicks), processed under GDPR Article 6(1)(f) (legitimate interests).
  • Log Data and Device Information: Automatically collected data, including IP address, access times, hardware/software details, device identifiers, crash data, and cookie data, per GDPR Article 6(1)(f).
  • Cookies and Similar Technologies: Cookies, pixels, or mobile identifiers for functionality and analytics, with EU/EEA consent via our cookie tool (ePrivacy Directive) and CCPA opt-out via contactsplus.com/privacy (Section 9). Non-EU users may opt-out via browser settings or contactsplus.com/privacy. Disabling cookies may affect functionality. We do not respond to "Do Not Track" signals due to lack of standardization.

2.3.4 Usage and Device Information

We may receive Personal Information about you from third parties, combined with data collected via the Services, per our Terms of Use (Section 4.1).

  • Shared Contacts: Information provided by other Users (e.g., via shared Contacts), excluding minors under 13, per Terms of Use (Section 1.1).
  • Public Data: Information from public or licensed APIs, processed under GDPR Article 6(1)(f) (legitimate interests). We do not control third-party processing practices.
  • Analytics Providers: Data from providers like Google Analytics for usage statistics and demographics, under data processing agreements (GDPR Article 28) and with consent (GDPR Article 6(1)(a), CCPA: opt-out available, Section 9).
  • Third-Party Services: Registration or profile data from authorized services (e.g., Google), per GDPR Article 6(1)(b) and Google API Limited Use requirements.
  • Other Sources: Demographic or interest data from partners, processed under GDPR Article 6(1)(f) or with consent, as permitted by law.

CCPA Categories: Identifiers, personal information, internet activity.

GDPR Categories: Personal data.

You may opt-out of third-party data sharing via contactsplus.com/privacy (Section 9).

3. How We Use Your Information

We use, store, and process your Personal Information, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4), to provide, improve, and secure our Services, comply with legal obligations, and, where applicable, conduct marketing with your consent. No automated decision-making or profiling producing legal effects occurs, per GDPR Article 22.

3.1 Provide, Maintain, and Support the Services

We process your Personal Information to deliver the Services and honor our Terms of Use (Section 4.1), including:

  • Contact Management: Processing Contacts for storage, backup, editing, synchronization, deduplication, search, tagging, sharing, and grouping (GDPR: contract performance, Article 6(1)(b)).
  • Relationship Management: Using relationship information to determine, classify, or rank relationships and recommend communication actions or appointments (GDPR: contract performance, Article 6(1)(b)).
  • Account and Security: Facilitating Account creation, securing your Account, verifying ownership (e.g., via email or SMS), and sending service, support, or security notifications (GDPR: contract performance, Article 6(1)(b)).
  • Fraud Prevention: Detecting and preventing fraud, spam, or abuse, per Terms of Use (Section 4.5) (GDPR: legitimate interests, Article 6(1)(f)).
  • Technical Support: Reviewing Account data to troubleshoot and resolve issues you report, with your consent where required (GDPR: contract performance or consent, Article 6(1)(a)(b)).

CCPA Categories: Identifiers, personal information, commercial information.

GDPR Categories: Personal data.

3.2 Improve and Personalize the Services

We use Personal Information to enhance and personalize the Services, including:

  • Troubleshooting errors, performing data analysis, and testing (GDPR: legitimate interests, Article 6(1)(f)).
  • Conducting research and surveys to improve user experience (GDPR: consent, Article 6(1)(a)).

Developing new features and services (GDPR: legitimate interests, Article 6(1)(f)).

  • Developing new features and services (GDPR: legitimate interests, Article 6(1)(f)).

CCPA Categories: Internet activity, identifiers.

GDPR Categories: Personal data.

3.3 Marketing and Referrals

With your consent, we may process Personal Information for marketing, including:

  • Sending promotional communications about our Services or third-party campaigns (GDPR: consent, Article 6(1)(a), CCPA: opt-out available, Section 9).
  • Administering referral programs, rewards, surveys, or promotions (GDPR: consent, Article 6(1)(a)).
  • Suggesting contacts for referral invitations based on your Contacts or relationship information (GDPR: contract performance, Article 6(1)(b)).

You may opt-out of marketing communications via unsubscribe instructions, Account settings, or contactsplus.com/privacy, per our Terms of Use (Section 4.3). We do not discriminate against users exercising opt-out rights, per CCPA Section 1798.125.

CCPA Categories: Identifiers, commercial information.

GDPR Categories: Personal data.

3.4 Enhanced Features (Deduplication and Contact Enrichment)

We combine your Contacts and relationship information with other Users’ data and public sources to create Completed Contact Data, as defined in our Terms of Use (Section 4.1), for enhanced features:

  • Deduplication: Merging duplicate Contact records by matching elements (e.g., phone number, email) in Completed Contact Data, processed under GDPR Article 6(1)(b) (contract performance). Limited data (e.g., business emails, public social handles) may be shared with other Users, with your consent or via pseudonymization (e.g., cryptographic hashing) to prevent identification (GDPR: legitimate interests, Article 6(1)(f), CCPA: opt-out available, Section 9).
  • Contact Enrichment: Matching your Contacts to Completed Contact Data to provide additional details (e.g., job titles, public social handles), with your consent (GDPR: consent, Article 6(1)(a)).
  • Contact Search: Enabling Users to retrieve Completed Contact Data based on search criteria, using only non-private elements unless you authorize sharing (GDPR: contract performance, Article 6(1)(b)).

Private data (e.g., personal phone numbers, emails, notes) is not shared without your explicit consent, per Terms of Use (Section 4.2). You may opt-out of data sharing for these features via contactsplus.com/privacy (Section 9).

CCPA Categories: Identifiers, personal information, commercial information.

GDPR Categories: Personal data, sensitive data (e.g., gender) with consent.

3.5 Anonymized Data

We create Anonymized Data by excluding identifiable information, ensuring it cannot be re-identified, per GDPR Recital 26. Anonymized Data is used to analyze usage patterns, enhance Services, and improve Site navigation, and may be shared with third parties at our discretion (GDPR: not applicable; CCPA: not personal information).

3.6 Google API Services User Data Policy

Contacts+’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with this policy, we affirm that our application:

 

  • Only uses access to read, write, modify, or control Google user data to provide the app's user-facing features.
  • Does not transfer user data to others, except as necessary to provide or improve features, comply with applicable laws, or as part of a merger, acquisition, or sale of assets with user consent.
  • Does not use any Google user data for serving advertisements.
  • Does not allow humans to read user data unless we have the user's affirmative consent, for security purposes, to comply with laws, or for internal operations in line with our privacy policy.
  • Does not use data from Google Workspace APIs to develop, improve, or train generalised AI and/or machine learning models.

Data received from Google APIs is processed solely to provide and improve the Services, comply with legal obligations, or facilitate mergers, acquisitions, or asset sales, per our Terms of Use (Section 4.1).

4. How We Share Your Information

We may share your Personal Information, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4), as follows, per our Terms of Use (Sections 3.3, 4). You may exercise your rights over shared data (e.g., opt-out, deletion) as outlined in our Terms of Use (Section 4.3) and Section 9 below. We do not share information of minors under 13, per our Terms of Use (Section 1.1).

4.1 With Your Consent

We share your Personal Information when you explicitly authorize us, such as:

  • Connecting third-party applications or websites to your Account (e.g., Google login), per GDPR Article 6(1)(a) (consent) and Terms of Use (Section 4.1).
  • Participating in promotional activities with partners.
  • Authorizing sharing through Service features (e.g., contact sharing). You may withdraw consent at any time via support@contactsplus.com or contactsplus.com/privacy (Section 9).

CCPA Categories: Identifiers, personal information, commercial information.

GDPR Categories: Personal data.

4.2 With Other Users

To provide the Services, we may share limited Personal Information with other Users (e.g., for Teams products, deduplication, or contact enrichment), as necessary for contract performance (GDPR Article 6(1)(b)) or our legitimate interests (GDPR Article 6(1)(f)), per Terms of Use (Section 4.1). Private data (e.g., personal phone numbers, notes) is not shared without your explicit consent. You may opt-out of sharing via contactsplus.com/privacy (Section 9).

CCPA Categories: Identifiers, commercial information.

GDPR Categories: Personal data.

4.3 For Legal Compliance and Protection

We may disclose Personal Information in good faith if necessary to:

  • Comply with legal obligations or investigations (GDPR Article 6(1)(c)).
  • Respond to requests from public or government authorities, including outside your country of residence, or to subpoenas/warrants.
  • Protect our rights, property, or safety, or that of Users, per Terms of Use (Section 4.5) (GDPR: legitimate interests, Article 6(1)(f)).
  • Investigate or prevent violations of the law, this Privacy Policy, or Terms of Use.

If required by law (e.g., GDPR Article 15, CCPA Section 1798.110), we may disclose stored Personal Information to individuals without identifying you as the source, unless legally required.

CCPA Categories: All collected categories.

GDPR Categories: Personal data.

4.4 With Service Providers

We share Personal Information with third-party service providers (e.g., hosting, analytics, payment processors like Stripe) to deliver the Services, per Terms of Use (Section 4.1). Providers are bound by data processing agreements compliant with GDPR Article 28 and CCPA, ensuring use only for disclosed purposes. Data transfers to providers in regions like Europe, India, or the Americas are protected by Standard Contractual Clauses or the EU-US Data Privacy Framework, per GDPR Article 46 (see Section 8).

CCPA Categories: Identifiers, personal information, commercial information.

GDPR Categories: Personal data.

4.5 With Corporate Affiliates

We may share Personal Information with our subsidiaries or parent companies to support Service provision (e.g., technical infrastructure, customer support), per Terms of Use (Section 4.1). Sharing complies with GDPR Article 28 and local data protection laws, using appropriate transfer mechanisms (Section 8).

CCPA Categories: Identifiers, personal information.

GDPR Categories: Personal data.

4.6 With Social Media Platforms

With your consent, we may share pseudonymized data (e.g., cryptographically hashed emails) with social media platforms (e.g., Google) to generate leads or promote Services, per GDPR Article 6(1)(a). No profiling occurs. You may opt-out via contactsplus.com/privacy or support@contactsplus.com (Section 9). We do not control social media platforms’ processing practices; review their privacy policies.

CCPA Categories: Identifiers.

GDPR Categories: Personal data.

4.7 For Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, bankruptcy, or insolvency, we may transfer Personal Information as part of our assets, including during due diligence, per GDPR Article 6(1)(f) (legitimate interests) and CCPA Section 1798.110.

CCPA Categories: All collected categories.

GDPR Categories: Personal data.

4.8 Anonymized Data

We may share Anonymized Data, which cannot be re-identified (GDPR Recital 26), for purposes like analytics, marketing, or compliance. Anonymized Data is not Personal Information under GDPR or CCPA and may be shared at our discretion.

5. Data Retention

We retain your Personal Information, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4), only as long as necessary to provide the Services, improve our Database for enhanced features (Section 3.4, Terms of Use, Section 4.1), or comply with legal obligations (e.g., tax, auditing, legal reporting), per GDPR Article 5(1)(c) and CCPA Section 1798.105. We do not retain information of minors under 13, per our Terms of Use (Section 1.1).

You may request deletion of your End User Contact Data or closure of your Account via the Site, App, or by contacting support@contactsplus.com, as outlined in our Terms of Use (Sections 2.3, 4.3). We will process deletion requests within one month (GDPR Article 12(3)) or 45 days (CCPA Section 1798.130), extendable as permitted by law. We do not discriminate against users exercising deletion rights, per CCPA Section 1798.125.

Please note the following regarding deletion:

  • Fraud Prevention: We may retain limited information for fraud detection and prevention, per GDPR Article 6(1)(f) (legitimate interests) and Terms of Use (Section 4.5). For example, if an Account is suspended for fraud, certain data may be retained to prevent new Account creation.
  • Legal Obligations: We may retain information as required for tax, legal reporting, or auditing purposes (GDPR Article 6(1)(c)).
  • Third-Party Systems: Data shared with third-party systems (e.g., Google, social networks) may persist in those systems. Contact those providers directly to request deletion, per Section 9.
  • Database and Logs: Copies of your information (e.g., log records) may remain in our Database but are disassociated from personal identifiers per GDPR Recital 26.
  • Backups: Residual copies may remain in secure backups to protect against data loss, retained for up to 12 months and anonymized to prevent re-identification.

You may exercise your rights over retained data (e.g., access, deletion) as outlined in Section 9 and our Terms of Use (Section 4.3).

6. Third-Party Websites

When you click a link to a third-party website or service (e.g., Google Maps, social networks) from our Site, App, or Services, you will leave our Services, and a third party may collect Personal Information or Anonymized Data, as defined in our Terms of Use (Section 4). We do not control, review, or assume responsibility for the data collection, use, or handling practices of these third-party websites or services, nor do the terms of this Privacy Policy apply to them. We do not share information of minors under 13 with third parties, per our Terms of Use (Section 1.1). Third-party data collection is not a "sale" or "sharing" of Personal Information by Contacts Plus LLC under CCPA Section 1798.120. To exercise your rights (e.g., access, deletion) over data collected by third parties, review their privacy policies and contact them directly, as outlined in Section 9. For data transfers to third parties outside the EU/EEA, third parties are responsible for GDPR-compliant mechanisms (e.g., Standard Contractual Clauses, Article 46).

7. Children's Privacy

Our Services are not intended for or designed to attract individuals under 13, per our Terms of Use (Section 1.1) and the Children’s Online Privacy Protection Act (COPPA, 15 U.S.C. § 6502). We do not knowingly collect Personal Information, as defined in our Terms of Use (Section 4), from children under 13. For users in the EU/EEA aged 13–16, we require verifiable parental consent to process Personal Information, per GDPR Article 8. If a parent or guardian becomes aware that their child has provided Personal Information without consent, they should contact us at support@contactsplus.com. We will delete such information from our Database within one month (GDPR Article 12(3)) or 45 days (CCPA Section 1798.130), extendable as permitted by law. We do not discriminate against users or parents exercising deletion rights, per CCPA Section 1798.125.

You may exercise your rights over minors’ data (e.g., access, deletion) as outlined in Section 9 and our Terms of Use (Section 4.3). We also comply with other applicable child privacy laws (e.g., Canada’s PIPEDA).

8. Data Security and International Transfers

8.1 Data Security

We implement and regularly update technical and organizational measures to protect your Personal Information, including End User Contact Data and Completed互通

System: It looks like the response was cut off due to length. Here's the continuation of the revised Contacts Plus LLC Privacy Policy text, starting from the incomplete section:


We implement and regularly update technical and organizational measures to protect your Personal Information, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4), against unauthorized access, loss, destruction, or alteration, per GDPR Article 32 and CCPA Section 1798.81.5. These measures include:

  • Encryption of data in transit and at rest (e.g., AES-256).
  • Firewalls and secure server environments.
  • Access controls limiting data access to authorized personnel.
  • Regular security audits and vulnerability assessments.

If you suspect that your Account credentials have been lost, stolen, or compromised, or if you detect unauthorized use of your Account, contact us immediately at support@contactsplus.com, per our Terms of Use (Section 4.4). You may exercise your rights over your data (e.g., access, deletion) as outlined in Section 9 and Terms of Use (Section 4.3).

8.2 Data Breach Notification

In the event of a personal data breach, we will notify affected users and relevant authorities (e.g., EU/EEA supervisory authorities) within 72 hours, as required by GDPR Article 33, or promptly, per CCPA Section 1798.82. Notifications will include details of the breach and steps to mitigate risks, where applicable. Contact support@contactsplus.com for breach-related inquiries.

8.3 International Data Transfers

To provide the Services, we may transfer, store, and process your Personal Information within our corporate affiliates or with service providers in regions such as Europe, India, Asia, and the Americas, per our Terms of Use (Section 4.1). For EU/EEA residents, transfers outside the European Economic Area are protected by the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs), per GDPR Article 46. We also comply with other applicable data transfer laws (e.g., Canada’s PIPEDA). For details, contact our Data Protection Officer at dpo@contactsplus.com.

9. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to enhance functionality, analyze usage, and personalize the Services, per our Terms of Use (Section 4.1). Essential cookies enable core features, while analytics cookies (e.g., Google Analytics) track usage patterns under data processing agreements (GDPR Article 28). EU/EEA users are prompted for consent via our cookie tool, per GDPR Article 7 and the ePrivacy Directive. California residents may opt-out of non-essential cookies via contactsplus.com/privacy (CCPA Section 1798.120). Non-EU users may opt-out via browser settings or contactsplus.com/privacy. Disabling cookies may affect functionality. We do not respond to “Do Not Track” signals due to lack of standardization. For details, contact support@contactsplus.com.

10. Your Privacy Rights

Contacts Plus LLC is the data controller for Personal Information, including End User Contact Data and Completed Contact Data (as defined in our Terms of Use, Section 4), processed under our Services, per GDPR Article 4(7) and CCPA Section 1798.140. You have rights over your Personal Information, as outlined below and in our Terms of Use (Sections 2.3, 4.3). We do not discriminate against users exercising these rights, per CCPA Section 1798.125. No automated decision-making or profiling producing legal effects occurs, per GDPR Article 22.

10.1 Communication Choices

With your consent (GDPR Article 6(1)(a)), we may send newsletters or promotional emails about our Services or third-party products. You may opt-out by following unsubscribe instructions in emails, updating Account settings, or visiting contactsplus.com/privacy. Service-related communications (e.g., Terms of Use or Privacy Policy updates, security alerts) are not subject to opt-out, per Terms of Use (Section 4.1).

10.2 Data Subject Rights

You may exercise the following rights over your Personal Information via support@contactsplus.com, our “Claim Profile” page (https://www.contactsplus.com/sar), or the Site/App:

  • Access: Request details of your Personal Information we hold (GDPR Article 15, CCPA Section 1798.110).
  • Rectification: Correct inaccurate or incomplete Personal Information (GDPR Article 16, CCPA Section 1798.110).
  • Deletion: Request deletion of your Personal Information, subject to exemptions (e.g., legal obligations, GDPR Article 17(3), CCPA Section 1798.105). Deleted data is removed from our Database, except for limited retention for fraud prevention or legal compliance (Section 5).
  • Portability: Request your Personal Information in a structured, commonly used, machine-readable format (e.g., CSV) or transmission to another controller, where feasible (GDPR Article 20, CCPA Section 1798.100).
  • Restriction: Restrict processing in cases such as contested accuracy (GDPR Article 18).

11. Complaints and Dispute Resolution

If you have concerns about our data practices, contact us at support@contactsplus.com or dpo@contactsplus.com. We respond within one month (GDPR Article 12(3)) or 45 days (CCPA Section 1798.130). EU/EEA residents may lodge complaints with their local data protection authority (GDPR Article 77) or seek judicial remedy (Article 79). California residents may contact the California Privacy Protection Agency (CCPA Section 1798.199). We aim to resolve disputes promptly and fairly.

12. Do Not Sell or Share My Personal Information

California residents may opt-out of the “sale” or “sharing” of Personal Information (e.g., for analytics, contact enri chment, social media platforms) via contactsplus.com/privacy, per CCPA Section 1798.120. Submit requests at support@contactsplus.com. We process opt-outs within 15 business days and do not discriminate against users exercising this right (Section 1798.125).

13. Financial Incentives

If you subscribe to paid tiers (e.g., premium accounts), we may offer enhanced features, valued based on subscription fees. Participation is optional, and you may opt-out of data sharing without losing access to core Services, per CCPA Section 1798.125. Contact support@contactsplus.com for details.

14. Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes in our Services, legal requirements, or data processing practices, per our Terms of Use (Section 7.1). For material changes (e.g., new data uses or sharing practices), we will notify you at least 30 days in advance by emailing the address associated with your Account and posting a prominent notice on our Site (contactsplus.com). EU/EEA users must provide affirmative consent (e.g., via Account settings) for material changes affecting Personal Information processing, per GDPR Article 7. You may exercise your rights (e.g., opt-out, deletion) in response to changes, as outlined in Section 10. Continued use of the Services after non-material changes indicates acknowledgment of the updated policy. We do not discriminate against users exercising rights, per CCPA Section 1798.125. For inquiries, contact our Data Protection Officer at dpo@contactsplus.com.

15. How to Contact Us

For questions, complaints, or to exercise your rights (Section 10), contact us at:

Email: support@contactsplus.com

Data Protection Officer: dpo@contactsplus.com (for GDPR inquiries and complaints)

Organization: Contacts Plus LLC, 3366 S. Geyer Road, Suite 100, Saint Louis, MO 63127

Toll-Free Number: 800-430-4095 (for California residents)

We respond to inquiries within one month (GDPR Article))^) Article 12(3)) or 45 days (CCPA Section 1798.130), extendable as permitted by law. Additional information is available at https://www.contactsplus.com/privacy-notice.