Last revised November 5th, 2024

Your privacy is important to UNLESS (a trade name of Rocket Launcher BV). This Privacy Policy covers what we collect and how we use, disclose, transfer, and store your information when you visit our website. In GDPR terms, this means we are the “controller”. For additional policies that may apply when you become a customer and consequently use our platform as a “processor” instead, please check the Terms and Conditions and the Data Processing Addendum (DPA).

This Privacy Policy applies to the unless.com website, including all subpages, subdomains, and successor pages (collectively referred to as the “Website”). It also applies to all software and services that we offer, including services that we offer through our Website when you register for an UNLESS account (collectively referred to as the “Application Services”). By using our Website or Application Services, you are accepting the practices described in this Policy.

Contact

If there are any questions regarding this Privacy Policy you may contact us using the information in the colophon. Alternatively, our customers may submit inquiries regarding personal data protection, privacy, and security matters to our data protection officer.

What kind of information do we collect?

We may collect information in three ways.

• when you provide it directly to us;
• when we obtain information about you from third parties;
• passively through technology such as “cookies”.

The information that we collect and our use of that depend on what kind of user you are.

Visitor data

If you do nothing during your visit but browse through the website, read pages, or download information, we will gather and store certain information about your visit automatically. This information is anonymized and does not identify or track you personally. You may think of the following.

• The anonymized IP address from which you access our website;
• The type of browser, operating system, and device used to access our site;
• The date and time you access our site;
• The pages you visit, length of visits to certain pages, and page interactions;
• If you linked to the UNLESS website from another website, the address of that website.

User data

When you register for an account on our site, the following information may be collected when you voluntarily provide it to us.

• Your full name;
• Email addresses;
• Your location and address;
• Bank account information, credit and debit card names and numbers;
• Company names and job titles;
• Social media handles;
• Websites.

Customer account configuration

We collect your direct input to the Application Services after login, like the domain name(s) of the website(s) where you implement the Application Services and configuration of the content, design, and behavior of your web pages towards your website visitors (“End Users”).

What do we use your information for?

Any of the information we collect from you may be used for one or more of the following purposes.

• To personalize your experience;
• To improve our website;
• To identify you as a contracting party;
• To protect your account against illegitimate use;
• To enable secure login for you;
• To establish a primary channel of communication with you;
• To enable our payment provider to issue valid VAT invoices and to process transactions;
• To send emails.

The emails we send may contain:

• responses to inquiries, and/or other requests or questions
• information and updates pertaining to your order
• company news, product and feature updates
• service information, etc.

We agree to the following:

• Not use false or misleading subjects or email addresses;
• Identify the message as an advertisement in some reasonable way;
• Include the physical address of our business or site headquarters;
• Monitor third-party email marketing services for compliance, if one is used;
• Honor opt-out/unsubscribe requests quickly;
• Allow users to unsubscribe from future emails by using the link at the bottom of each email, when applicable.

How do we protect your information?

UNLESS implements the following technical, physical, and organizational measures to maintain the safety of your personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized use, unauthorized modification, disclosure or access, and against all other unlawful forms of processing.

Availability

The Application Services utilize the extensive features of the cloud environment to ensure high availability, like full redundancy, load balancing, automatic capacity scaling, continuous data backup and geo-replication along with a traffic manager for automatic geographical failover on datacenter level disasters. All failover mechanisms are fully automated.

Integrity

To ensure integrity, all data transits are encrypted to align with best practices for protecting confidentiality and data integrity. E.g. all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology and then encrypted into our payment gateway provider’s database only to be accessible by those who are authorized to access such systems and who are required to keep the information confidential.

Confidentiality

Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential.

Transparency

UNLESS will at all times keep you informed about changes to the processes to protect data privacy and security, including practices and policies.

Monitoring

We do not use vulnerability scanning and/or scanning to PCI standards. An external PCI compliant payment gateway handles all payment transactions. We use regular Malware Scanning.

Compromise of Personal Information

In the event that personal information is compromised as a breach of security, UNLESS will promptly notify our customers in compliance with applicable law.

Cookies and other tracking technologies

On our website, we currently do not use cookies. So, we do not use cookies for anonymous visitors.

However, the Application Services require cookies that are necessary for its operation. By accessing our Application Services as a registered user, you are accepting the use of such cookies. Please refer to the Terms and Conditions of the Unless platform for further details.

Disclosure of information to outside parties

UNLESS does not sell, trade or otherwise transfer to outside parties any personally identifiable information. This does not include trusted third parties, affiliates, or subcontractors who assist us in operating our website, conducting our business, or servicing you. Such trusted parties may have access to personally identifiable information on a need-to-know basis and will be contractually obliged to keep your information confidential.

We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety. Furthermore, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

In addition, in the event of a merger, acquisition, reorganization, bankruptcy, or other similar events, any information in our possession may be transferred to our successor or assignee.

Legally required disclosure

UNLESS will not disclose the customer’s data to law enforcement except when instructed by you or where it is required by law. When governments make a lawful demand for customer data from UNLESS, UNLESS strives to limit the disclosure. UNLESS will only release specific data mandated by the relevant legal demand. If compelled to disclose your data, UNLESS will promptly notify you and provide a copy of the demand, provided we are not legally prohibited from doing so.

Third-party links

Our website has links to the websites of other organizations. Once you visit another site, you are subject to the privacy policy of the new site.

Where do we store the information?

No Personal Identifiable Information (PII) will be stored or backed up outside of the European Union.

Access, data portability, migration, and transfer back assistance

You may at any time obtain confirmation from UNLESS as to whether or not personal data concerning you are being processed. You may at any time order a complete data copy, which you may transmit to another controller of the data. Your data will be delivered within 20 working days by UNLESS in machine-readable form. Logical relations between datasets will be preserved in the form of unique identifiers.

Request for rectification, restriction or deletion of the personal data

For any inquiries regarding your personal data, please reach out to our Data Privacy Officer.

Rectification

You may at any time obtain without undue delay rectification of inaccurate personal data concerning you.

Restriction of processing personal data

You may at any time request UNLESS to restrict the processing of personal data if any of the following applies.

• if you contest the accuracy of the personal data, for a period enabling UNLESS to verify the accuracy of the personal data;
• if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; or
• if UNLESS no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims.

Deletion

You may without undue delay request the erasure of personal data concerning you, and UNLESS shall erase the personal data without delay if one of the following situations applies.

• if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• if you withdraw your consent on which the processing is based, and where there is no other legal ground for the processing;
• if you object to the processing in case the processing is for direct marketing purposes;
• if the personal data have been unlawfully processed; or
• if the personal data have to be erased for compliance with a legal obligation in EU or national law.

Data retention

Due to tax regulations, Account Data will be retained for up to five full fiscal years from your cancellation of your Application Services account. Configuration Data will be erased immediately when you cancel the Application Services account.

Data retention for compliance with legal requirements

You cannot require UNLESS to change any of the default retention periods, except for the reasons for erasure, but may suggest changes for compliance with specific sector laws and regulations.

Data restitution and/or deletion

No data except Account Data will be retained after the termination of the contract. You may request a data copy before termination. You must not cancel the Application Services account until the data copy has been delivered, as UNLESS otherwise will not be able to deliver the data copy.

Accountability

UNLESS uses the extensive range of built-in logging features and audits trails provided by Amazon Web Services. UNLESS also logs all system updates, configuration changes, and access to provide an audit-trail if unauthorized or accidental changes are made.

Cooperation

UNLESS will cooperate with you in order to ensure compliance with applicable data protection provisions, e.g. to enable you to effectively guarantee the exercise of data subjects’ rights (right of access, rectification, erasure, blocking, opposition), to manage incidents including forensic analysis in case of security breach.

Use of this Website by minors

UNLESS will not intentionally collect any information from anyone under 13 years of age. Our website, products and services are all directed at people who are at least 18 years old or older.

Terms of Service

Please also visit our Service Conditions section establishing the use, disclaimers, and limitations of liability governing the use of our Application Services.

Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will post those changes on this page.

Complaint

You may at any time lodge a complaint with a supervisory authority regarding UNLESS’s collection and processing of your personal data. In the Netherlands, you can lodge a complaint with the Dutch Data Protection Agency.