District 4 Labs Website Privacy Policy (“Website Policy”)
Updated: 22 September 2023
At District 4 Labs, LLC (“District 4”), we take privacy seriously. This Website Privacy Policy (the “Website Policy”) explains how we collect, share, use, and protect your Personal Data (defined in our Database Privacy Policy) when you visit our website.
Note: District 4’s collection, use, processing, and protection of data collected from the internet for use in Darkside are separately governed by our Database Privacy Policy. In the event of any conflict between the Database Policy and this Website Policy, the Database Policy shall prevail.
By using or accessing our website in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Website Policy.
This Website Policy covers how we treat Personal Data that we gather when you access or use our website services, or other online serves accessed through our website or some other method, including a user interface for Darkside, collective referred to as (“Services”).
Personal Data We Collect
We collect Personal Data about you from the following categories of sources:
- You: When you provide such information directly to us or when Personal Data about you is automatically collected in connection with your use of our Services.
- Third Parties: Third parties may provide us with Personal Data about you. Third parties that share your Personal Data with us include clients and internal, District 4 service providers.
We receive and store information that you provide to us. For example, through the registration process and/or through your account settings, we may collect information such as your first name, last name, email address, phone number, and your company name, and your title.
Our Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser and tell us how and when you visit and use our Services, to analyze trends, to learn about our user base and to operate and improve our Services. Cookies are small pieces of data – usually text files – placed on your computer, tablet, phone, or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that because of our use of Cookies, the Services do not support “Do Not Track” requests sent from a browser at this time.
We use the following types of Cookies:
- Essential Cookies. Essential Cookies are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Services. Disabling these Cookies may make certain features and services unavailable.
- Functional Cookies. Functional Cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and recognize you when you return to our Services. These Cookies help us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
- Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Services such as by collecting information about the number of visitors to the Services, what pages visitors view on our Services and how long visitors are viewing pages on the Services. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising. For example, Google Inc. (“Google”) uses cookies in connection with its Google Analytics services. Google’s ability to use and share information collected by Google Analytics about your visits to the Services is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You have the option to opt-out of Google’s use of Cookies by visiting the Google advertising opt-out page at www.google.com/privacy_ads.html or the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout/.
You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways.
How We Use Your Personal Data
We process Personal Data to operate, improve, understand and personalize our Services. We use Personal Data for the following purposes:
- Acceptable Use, as defined in the Database Privacy Policy
- Communication with you about our Services or Offerings, as defined in in the Database Privacy Policy
- Testing and improvement of our Services and Offerings
- Compliance with applicable laws and regulations
We will not use the Personal Data we collect for materially different, unrelated, or incompatible purposes without providing you notice.
How We Share Your Data
District 4 makes every effort to limit the number of third parties with whom we share Personal Data. We do share data with vetted clients who purchase our Services and Offerings for the purpose of detecting or deterring fraud or investigating illegal activity. We also share data with service providers that help us provide our Services and Offerings, including payment processors, security and fraud prevention providers, hosting and other technology and communications providers, analytics providers, and staff augmentation and contract personnel.
Security & Retention
We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. All Personal Data is encrypted while under our control.
We retain Personal Data about you for as long as necessary to provide our Services and Offerings. In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes, or collect fees owed, or is otherwise permitted or required by applicable law, rule, or regulation.
Personal Data of Children
We do not knowingly collect or solicit Personal Data about children under 16 years of age; if you are a child under the age of 16, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 16 years of age, we will delete that information as quickly as possible.
California Resident Rights
If you are a California resident, you have the rights set forth in this section.
If there are any conflicts between this section and any other provision of this Website Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at info@district4labs.com
Please follow the instructions and requirements described below and on our website when submitting your requests. Requests that fail to comply with any of these instructions and requirements may result in delayed or no response.
To exercise the rights described below as a California resident, you must send us a request (1) that provides sufficient information (including, without limitation, email verification) to allow us to verify that (i) you are the person about whom we have collected Personal Data, (ii) you, as the requester, are the same person as the data subject for whose information you’re requesting (or such person’s parent/guardian), (2) that describes your request in sufficient detail to allow us to understand, evaluate and respond to it, (3) that declares, under the penalty of perjury, that you’re exercising your rights under the CCPA as a California resident solely for lawful purposes, and (4) in a way that does not and would not unduly burden or otherwise abuse our data request system, our Darkside, and/or our Services. Each request that meets all of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will use commercially reasonable efforts to determine whether a request may be for harmful, fraudulent, deceptive, threatening, harassing, defamatory, obscene, or otherwise objectionable purposes, and we reserve the right not to respond to such request. We will only use Personal Data provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request. You may submit a Valid Request by emailing us at info@district4labs.com
You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.
You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. In response to a Valid Request, we will provide you with the following information:
- The categories of Personal Data that you requested and that we can reasonably determine, via a review of Darkside, that we have collected about you.- The categories of sources that we can reasonably determine, via a review of Darkside, from which that Personal Data was collected.
- The business or commercial purpose for collecting or selling your Personal Data.
- The categories of third parties with whom we have shared your Personal Data.
- The specific pieces of Personal Data that you explicitly requested and that we can reasonably determine, via a review of Darkside, that we have collected about you.
If we have disclosed your Personal Data to any third parties for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient, unless we’re restricted from doing so by law or court order. If we have sold your Personal Data over the past 12 months, we will identify the categories of Personal Data sold to each category of third party recipient, unless we’re restricted from doing so by law or court order.
You acknowledge that in some cases, we may not know whether your Personal Data is contained in Darkside. For example, if a password happens to be contained in Darkside, we have no way to know whether that password, absent any other information clearly identifying you as the source of the password, is your Personal Data (or possibly the Personal Data of someone else who uses the same password).
You have the right to request that we delete the Personal Data that we have collected about you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Offerings or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request, even if it otherwise constitutes a Valid Request. You acknowledge that we are constantly collecting exposed identity information found in open sources on the open, deep, and dark web, and placing that information into Darkside. With that in mind, in the event that we delete your Personal Data in response to a Valid Request, you acknowledge that nothing will prevent the possible collection of that Personal Data at some future time, if that Personal Data happens to be contained in other sources.
We will not discriminate against you for exercising your rights under the CCPA.
European Union Data Subject Rights
If you are a resident of the European Union (“EU”), United Kingdom, Lichtenstein, Norway or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) with respect to your Personal Data. For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure.
If there are any conflicts between this section and any other provision of this Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. Note that we may also process Personal Data of our customers’ end users or employees in connection with our provision of our Services and Offerings, in which case we are the processor of Personal Data. If we are the processor of your Personal Data (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data.
We may need to collect and process Personal Data in order to provide requested information, provide the Services or Offerings to you, or because we are legally required to do so.
You can contact us at info@district4labs.com with any questions, concerns, or relevant requests. In compliance with data protection regulations, District 4 has appointed a Data Protection Officer (DPO).
Information Obtained From Our Website
We collect information from you, including Personal Data, when you fill out a form. When registering on our website, you may be asked to enter your name or e-mail address. You also may, however, visit our website anonymously. We will use your Personal Data for providing the different Services you may contract with us to provide, schedule a demonstration of our Offerings, administer promotions or surveys or any other website feature, send periodic emails, and respond to other requests or questions you may raise.
Lawful Basis
For the processing of your Personal Data, our legal basis depends on how you interact with the Services. We may base the processing of data on other legal bases, such as our legitimate interests as a company, the fulfillment of a legal obligation, or the management of our contractual relationship.
Changes to this Policy
We may need to update or change this policy in the future. We will alert you to any such changes by placing a notice on our website and/or by some other means.
Contact Information
You can reach District 4 at info@district4labs.com
Click here to return to District 4 home page.