EFFECTIVE FEBRUARY 22, 2023
Examples of Personal Data We Collect
- First and last name
- Email address
- Phone number
- Mailing address
Categories of Third Parties With Whom We Share the Personal Data
- Service Providers
- Analytics Partners
- Unique identifiers such as account name and passwords
- Analytics Partners
- Driver’s license number
- Motor Vehicle History (MVH) Check Partners (for commute drivers)
- Web page interactions (including with ads)
- Analytics Partners
- Proof of vaccination
Other Identifying Information that You Voluntarily Choose to Provide
- Identifying information in emails or letters you send us
Categories of Sources of Personal Data
We collect Personal Data about you from the following categories of sources:
- When you provide such information directly to us.
- When you create an account or use our interactive tools and Services.
- When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys or questionnaires.
- When you send us an email or otherwise contact us.
- When you use the Services and such information is collected automatically.
- If you use a location-enabled browser, we may receive information about your location.
- If you download and install certain applications and software we make available, we may receive and collect information transmitted from your computing device for the purpose of providing you the relevant Services, such as information regarding when you are logged on and available to receive updates or alert notices.
- We may use analytics providers to analyze how you interact and engage with the Services, or third parties may help us provide you with customer support.
Combination of Information
Our Commercial or Business Purposes for Collecting or Disclosing Personal Data
We use the information we collect from users for a variety of reasons, including, but not limited to, the following:
- Provide the Services (such as to connect Riders with Drivers and to communicate with one another);
- Provide you with user support;
- Analyze how the Scoop community uses the Services for research and development and building the Scoop community;
- Communicate with you via email, push notification, direct mail or SMS/text, either directly or through one of our partners, including for informational, marketing, and promotional purposes*;
- Personalize the Scoop experience for you, your friends, and your contacts;
- Facilitate services and programs with Affiliated Partners (defined below);
- Calculate prices and facilitate payments;
- Maintain the security and safety of the Scoop community and the Services (such as through authenticating users; verifying that Drivers meet eligibility requirements; encouraging safe driving behavior; finding and preventing fraud; and blocking and removing unsafe or fraudulent users from the Services);
- And to meet legal requirements and enforce legal terms.
*If you do not wish to receive digital marketing or promotional communications from us, you can unsubscribe from emails via the link on our last communication to you, and unsubscribe from SMS/text by replying “STOP” to the last SMS text message you received.
How does Scoop share the information we collect?
Scoop does not sell your personal information. To provide the Services, we share your personal information with other users, third parties, and service providers. This section explains when and why we share your information.
Sharing Between Users
For workplace planner, we want to help your workplace and co-workers understand who will be physically present at your work location each day. To facilitate that, we may share the days that you have indicated you are planning on going into your work location.
For commute, we want to provide you with a great commuting experience and introduce you to our community. To facilitate this experience, certain information is available to Scoop and other users on your profile, such as your name, employer, photo and statistics about your usage. Additionally, after being matched with other Scoop users, we share more of your information with them, such as your location, pick-up and drop off addresses, your contact information and other preferences in your profile to facilitate a meaningful and easy commute.
Sharing Between Scoop and Third Parties
If you change organizations such that you are no longer affiliated with an Affiliated Partner program, it is your responsibility to update your account with your new information, such as new work email address. Your prior organization will not have access to any future trip information, but will continue to have access to the information associated with your usage while a part of their affiliated program. For workplace planner, we share certain information about your use of the Services, such as your frequency of usage, name, email, work location, the days that you are planning on going into your work location, and the date and time of your confirmation of symptom-free status. We may also share additional information such as the date and time of your entrance or exit from your work location.
Scoop has two types of integration partners: ones to which you voluntarily connect your Scoop account, and others to which Scoop independently connects. In each case, we may share information about your use of our Services with the partner, and may receive certain content and/or information about you from the partner in order to improve our Services to you and our Affiliated Partners. The information we share may include any information that you authorize Scoop to obtain or transmit over time, as well as any information we collect automatically.
Third Party Services
The Services may allow you to connect with other websites, products, or services to enhance your experience, such as allowing you to connect to alternative transportation solutions. If you use these services, we will provide the third party with information about you to allow them to provide the service to you. We can’t speak to the privacy practices of these third parties, and we encourage you to read their privacy policies before deciding whether to use their services.
We may share your information with third parties in the following cases:
- While negotiating or in relation to a change of corporate control such as a restructuring, merger or sale of our assets; for example if Scoop (or its assets) are acquired or if Scoop goes out of business, enters bankruptcy, or undergoes some other change of control, your information may be one of the assets transferred or acquired by a third party;
- If a government authority requests information and we think disclosure is required or appropriate in order to comply with laws, regulations, or a legal process;
- With law enforcement officials, government authorities, or third parties if we think doing so is necessary to protect the rights, property, or safety of the Scoop community, Scoop or the public;
- If you signed up for a promotion with another user’s referral or promotion code, with your referrer to let them know about your redemption of or qualification for the promotion;
- To provide information about the use of Scoop to potential business partners in aggregated or de-identified form that can’t reasonably be used to identify you; and
- Whenever you consent to the sharing.
What choices do I have about my information?
Our Services require certain information to be shared with other users and third parties in order to facilitate the Services. There is information which we receive that isn’t required, and you can opt not to disclose that information to us, but keep in mind this information may be needed to take advantage of some of our features. In certain cases, you may also be able to add, update, or remove information on your public profile.
Scoop retains user profile, transaction, and other personal data for as long as necessary to provide the Services to you and our other users, and as long as you maintain your Scoop account. You may request deactivation or deletion of your account by emailing email@example.com. If you request account deletion, we may be unable to delete it if there is an issue with your account related to trust, safety, or fraud. When we delete your account, we may retain certain information for legitimate business purposes or to comply with legal or regulatory obligations. For example, if Scoop deactivates a user’s account because of unsafe behavior or security incidents, Scoop may retain certain information about that account to prevent that user from opening a new Scoop account in the future. Upon resolution of any issue preventing deletion, Scoop will delete the account as described above.
Your California privacy rights:
California law permits residents of California to request certain details about how their personal information is shared with third parties or affiliated companies. If you are a California resident and would like to make such a request, please contact us through your account in the Scoop app or by emailing us at: firstname.lastname@example.org. You must put the statement “Your California Privacy Rights” in the subject field. We are not responsible for notices that are not properly labeled or sent, or do not have complete information.
California residents may also take advantage of the following rights:
- Right to Know: You may request, up to two times each year, that we disclose to you the categories and specific pieces of personal information that we have collected about you in the last 12 months, the categories of sources from which your personal information is collected, the business or commercial purpose for collecting this personal information, the categories of personal information that we disclosed for a business purpose, the categories of third parties with whom we have shared your personal information, and the business or commercial purpose for sharing your personal information.
- Right to Delete: You may request that we delete personal information that we have collected from or about you. Note that there are some reasons we will not be able to fully address your request, such as for unresolved transactions or disputes, safety, security, fraud prevention, to comply with legal obligations, or to make other internal and lawful uses of the information that are compatible with the context in which you provided it.
- We collect the following categories of personal information: contact information (such as name and address), personal identification numbers (such as credit card and driver’s license numbers), personal characteristics (such as profile pictures and gender), transactional information (such as usage of the Services), employment information, Internet or other electronic network activity information, geolocation, sensory data and inferences drawn from the above.
- We may disclose the following categories of personal information for a business purpose: contact information (such as name and address), personal identification numbers (such as credit card and driver’s license numbers), personal characteristics (such as profile pictures and gender), transactional information (such as usage of the Services), employment information, Internet or other electronic network activity information, geolocation, sensory data and inferences drawn from the above.
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to ask us for a notice identifying the categories of personally identifiable information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties.
If you are a California resident and would like to take advantage of any of these rights, and given that we are a purely online business, please contact us at email@example.com. We will require confirmation of your identity via email address verification. We value your privacy and will not discriminate in response to your exercise of your privacy rights. We will respond to your request within 45 days of receipt of your request, after proper verification, unless we need additional time, in which case we will let you know.
We endeavor to protect the privacy of your account and personally identifiable information we hold in our records, but unfortunately we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.
European Union and United Kingdom Data Subject Rights
EU and UK Residents
If you are a resident of the European Union (“EU”), United Kingdom (“UK”), Lichtenstein, Norway, or Iceland, you may have additional rights under the EU or UK General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined below.
For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage, and disclosure. Scoop will be the controller of your Personal Data processed in connection with the Services.
Personal Data We Collect
The “Categories of Personal Data We Collect” section above details the Personal Data that we collect from you.
Personal Data Use and Processing Grounds
The “Our Commercial or Business Purposes for Collecting Personal Data” section above explains how we use your Personal Data.
We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below.
- Profile or Contact Data (First and last name, email address, phone number)
- Identifiers (Driver’s license number)
- Online Identifiers (Unique identifiers such as account name and passwords)
Legitimate Interest: We process the following categories of Personal Data when we believe it furthers the legitimate interest of us or third parties:
- Web Analytics (Web page interactions)
- Other Identifying Information that You Voluntarily Choose to Provide (Identifying information in emails or letters from users)
- We may also de-identify or anonymize Personal Data to further our legitimate interests.
Examples of these legitimate interests include (as described in more detail above):
- Providing, customizing, and improving the Services.
- Marketing the Services.
- Corresponding with you.
- Meeting legal requirements and enforcing legal terms.
- Completing corporate transactions.
- Consent: In some cases, we process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection.
- Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
EU Data Subject Rights
You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at firstname.lastname@example.org. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
- Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data by emailing email@example.com.
- Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. You can also correct some of this information directly by logging on to your account.
- Erasure: You can request that we erase some or all of your Personal Data from our systems.
- Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may not be able to utilize some or all of our Services.
- Portability: You can ask for a copy of your Personal Data in a machine-readable format.
- Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
- Restriction of Processing: You can ask us to restrict further processing of your Personal Data.
- Right to File Complaint: You have the right to lodge a complaint about Scoop’s practices with respect to your Personal Data with the supervisory authority of your country or EU Member State. A list of Supervisory Authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en.
Transfers of Personal Data
The Services are hosted and operated in the United States (“U.S.”) through Scoop and its service providers, and if you do not reside in the U.S., laws in the U.S. may differ from the laws where you reside. By using the Services, you acknowledge that any Personal Data about you, regardless of whether provided by you or obtained from a third party, is being provided to Scoop in the U.S. and will be hosted on U.S. servers, and you authorize Scoop to transfer, store, and process your information to and in the U.S., and possibly other countries. In some circumstances, your Personal Data may be transferred to the U.S. pursuant to a data processing agreement incorporating standard data protection clauses.
- 4 Embarcadero Ctr, Ste 1400, San Francisco, CA 94111