Privacy Policy

Last revised: September 9, 2026

This “Privacy Policy” applies to https://cloverleaf.me/ (“Website”) as well as Cloverleaf’s assessment and coaching platform and services (which includes its features and other Cloverleaf branded or co-branded websites and applications, including sub-domains, international versions, widgets and chat bots, mobile versions and mobile apps) (together, the assessment and coaching platform and services are referred to collectively as the “Services”), each of which is owned and operated by Cloverleaf. This Policy applies to information and data collected or processed by us, (“Personal Data”) and does not apply to any data collection or processing by third-parties that are not affiliated or otherwise acting under the direction and control of Cloverleaf. 

For purposes of this Privacy Policy, the Terms of Use, and Our AI Philosophy, any reference to “Cloverleaf” or “Company” or “we” or “us” refers to Cloverleaf.me, Inc., a corporation formed in the United States under the laws of the state of Delaware, with a registered office at 310 Culvert Street, Suite 301, Cincinnati, Ohio 45202. 

At Cloverleaf, We value and respect Your right to privacy and Your right to understand how certain information that relates to You is being collected and used. This Privacy Policy describes the personal data Cloverleaf collects, how that information is used, when and why that information is shared, and what Your rights are regarding Your personal data. 

By providing Your personal data to Cloverleaf, You consent and agree to the terms of this Privacy Policy, the associated Terms of Use, Our AI Philosophy, and Responsible Use Policy as well as the collection, use, storage and disclosure of information as set forth in this Privacy Policy, Terms of Use, and Our AI Philosophy.  

IF YOU DO NOT AGREE WITH ANY OF THE TERMS OF THIS PRIVACY POLICY. OUR TERMS OF USE, AND OUR AI PHILOSOPHY (INCLUDING ANY MODIFICATIONS THERETO), YOU SHOULD NOT PROVIDE ANY PERSONAL INFORMATION TO CLOVERLEAF AND SHOULD EXIT THE WEBSITE. HOWEVER, THIS PRIVACY POLICY, THE TERMS OF USE, AND OUR AI PHILOSOPHY, WILL APPLY TO ALL OF YOUR INFORMATION AND ACTIONS PRIOR TO EXITING THE WEBSITE(S).

Cloverleaf’s Data Protection Officer can be contacted by email at support@cloverleaf.me or at the following postal address:310 Culvert St Suite 301 Cincinnati, OH 45202. 

DATA CONTROLLER AND PROCESSOR ROLES

Cloverleaf may act as either a Data Controller or a Data Processor.  Cloverleaf acts as a Data Controller when it collects Personal Data directly from You through its Website and the Services, including without limitation the Self-Assessment Data, Role Play exercise, or Coaching exercise.  Cloverleaf acts as a Data Processor when it obtains Your Personal Data from a third-party in order to use the Cloverleaf Services. 

TYPES OF PERSONAL DATA COLLECTED

THROUGH THE WEBSITE AND SERVICES

We may collect the following types of Personal Data through the Website and Services:

• Individual identifiers and contact information – such as information that You provide for the purpose of registering with the Website or creating an account (e.g., Your real name, telephone number, email, other contact information, username and password, mobile phone number);
• Information used by the Services – such as information provided by You when using the Services – e.g., to complete a Self-Assessment, Role Play exercise, or Coaching exercise (as defined below) – including behavioral assessment data, personality profiles, coaching interactions, and relationship dynamics across teams, and data You enable the Services to retrieve from other systems or programs (e.g., calendar systems, social media pages, etc.);
• Commercial information – such as information You provide in connection with ordering or purchase transactions when You place an order online as well as Your activities on the Website, including search history and other information (e.g., items added to Your cart, online purchases, online product reviews, product preferences or specific interests, items not purchased, and any promotional information related to the session); 
• Transaction information – such as information associated with transactions, including those conducted over the Website including method of payment, credit/debit card or financial account information, and shipping information for order fulfillment; 
• Computer, internet and network activity information – such as information We obtain from Your use of the Website (e.g., Your server log information, queries or searches, browsing history, internet protocol address, unique device identifiers, location information derived from Your IP address, mobile network information, or other information You choose to provide); 
• Other electronic information – such as information from communications with Us and other user-generated content submitted by You to Us through e-mail, chat, telephone, and social media channels; and 
• Marketing and promotional information – such as information You provide for the purpose of enrolling or participating in any programs, promotions or contests offered by Cloverleaf or third parties. 

Cloverleaf and its authorized service providers, contractors and third parties obtain these categories of personal data from the following sources: 

• Directly from You.  For example, the information You provide directly to Us or to Our authorized service providers and contractors either online through the Website, through using the Services, or off-line to a Company representative; 
• Indirectly from You.  For example, the information from devices You use to access the Website or the Services; or information that is automatically collected about You by Us and Our authorized service providers, contractors and third parties as a result of Your use of Our Website or Services, including digital tracking tools such as cookies and similar technology; and 
• Information obtained by third parties.  For example, information obtained by third parties as a result of the use of Our Website, Our Services, and other websites. 

HOW WE USE YOUR PERSONAL DATA 

Cloverleaf, on its own or through authorized service providers, contractors and third parties, may use Your personal data that You provide to Us or that is collected about You for various business or commercial purposes, including to: 

• administer the Website and present the Website and its contents to You, as well as to facilitate and improve Your experience on the Website; 
• process Your registration and manage Your online account; 
• personalize the Website for You; 
• enable Your access to use the Website and its services; 
• provide You with products and conduct transactions (including purchases and returns); 
• process payments; 
• process, fulfill, and ship purchase requests, and complete returns and exchanges; 
• send You statements and invoices; 
• send You advertising, promotional and marketing communications, including direct mail and direct email, and process promotions, surveys, contests, giveaways, sweepstakes, and related prizes or incentives; 
• provide You with product and service recommendations based upon Your interests; 
• contact You or communicate with You; 
• address customer service issues You may have; 
• protect against fraud and unauthorized transactions; 
• address legal issues including to enforce Our legal rights or to meet compliance requirements and obligations;
• create analytic reports; 
• perform internal systems diagnostics, analysis, monitoring, debugging, and troubleshooting; 
• respond to a subpoena or other legal process by a governmental entity or third party, or if otherwise required by law;
• protect or enforce our rights including with respect to our assets and properties; and 
• provide products or services requested including the self-assessment test providers.

Cloverleaf may process the personal data you provide for the following reasons and legal bases (If you reside in the EU, EEA or UK, this section applies to you):

Why we process your data	Legal basis for processing
To allow us to connect your accounts to our Services.	Performance of a contract with you or your organization
To help you build your user profile on our Services.	Performance of a contract with you or your organization
To confirm your identity.	Performance of a contract with you or your organization
To receive your feedback that you submit through social media comments and to communicate with you.	Legitimate interest to manage our website
To market new services that are of interest to you through email.	Consent
To perform compliance checks with relevant financial and regulatory laws.	Necessary to comply with our legal obligation
To allow you to exercise your data privacy rights.	Necessary to comply with our legal obligation

In addition, Cloverleaf may disclose Your personal data to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise, or defend its legal rights. Cloverleaf may also disclose Your personal data in connection with negotiations for or any actual sale, acquisition, or transfer of all or a portion of Our business or assets. 

We may share Your personal data internally at Cloverleaf so that We can personalize Our interactions with You and provide You with the information and/or offers tailored to Your interests. 

Your posting of any content to any aspect of the Services is subject to our Terms of Use.  Please note that if You voluntarily submit any personal data for posting on Our Website or any other website (including without limitation any social media website), the information may become publicly available and can be accessed and used by Us and by others. Therefore, You should use care before posting any personal data online. 

YOUR ORGANIZATION AND YOUR PERSONAL DATA 

We are not responsible for the policies, practices and procedures of Your organization that may be applicable to any information that You choose to post to the Services, use by Your organization of any of the information that may be available to or accessible by it, or for the accuracy of any information about You. Cloverleaf has no control over how Your organization may use the information that is available to the organization and its representatives from the Services, including the information that is part of the Self-Assessment Data or Role Play and Coaching scenarios (see below for a brief general description of those Services).  We cannot prevent such information from being used by Your organization or other authorized third parties in a manner that may violate Cloverleaf’s Privacy Policy, the law, or your personal privacy. Use of the Services are subject to our Terms of Use, Our AI Philosophy, and Responsible Use Policy. 

The Services are not intended to make decisions that impact an employee’s fundamental rights, health, safety, or contractual terms.  However, Cloverleaf does not have any control over how Your organization may use the information from the Services.

USE OF ARTIFICIAL INTELLIGENCE 

We use artificial intelligence (“AI”), including machine learning models and automated processing tools, to process and review Self-Assessment Data and provide personalized recommendations in the Role Play and Coaching scenarios.  Most information that You provide when using a Service is anonymized and aggregated before going into our AI model. 

For more information on Our AI policy, please review Our AI Philosophy.   

We limit the data used by AI to what is necessary for the stated purposes and in accordance with applicable data protection laws. 

At this time, we do not make automated decisions about You using AI that may affect Your access to the Website or Services or the nature and scope of the Services provided to You.

SELF-ASSESSMENT DATA

Utilizing our Services may involve you taking one or more self-assessment tests and providing information – including personal data – about yourself (collectively, “Self-Assessment Data”). For more information about Our self-assessment tests and information that we will collect and process from you in connection with Our self-assessment tests, please visit this link https://help.cloverleaf.me/en/collections/1757272-assessments. 

Any Self-Assessment Data that you provide through the Services becomes part of Your user profile, which may be shared with Your organization and their authorized third parties and consultants, if any, and applicable self-assessment test providers.  If Your user profile is placed into teams or groups within Your organization, individuals within such teams or groups may have access to Your profile and Self-Assessment Data based on your visibility settings.   

If You share Self-Assessment Data with an organization, other individuals within that organization may have access to Your Self-Assessment Data.

Our Service dashboard enables users to manage their information (e.g., keep it up to date, re-take self-assessment test, share information and results with others, and submit a request to delete information). 

The information that You put into the self-assessment will not be made available by Cloverleaf outside of Your organization and their authorized third parties and consultants, if any, and applicable self-assessment test providers without Your consent. 

Cloverleaf is not responsible for verifying the accuracy of your Self-Assessment Data or any information that You post to Your profile. 

ROLE PLAY AND COACHING 

You may use the Role Play and Coaching scenarios of the Services that permit You to ask the automated system questions based on real-world scenarios and receive real-time feedback. The Role Play and Coaching scenarios use data uploaded to its closed AI platform to make recommendations in response to Your questions and the scenarios presented. 

The inquiries and employee scenarios uploaded to Role Play and Coaching are confidential and will not be shared with Your organization unless the content therein poses an imminent risk of serious harm to Yourself or others, is deemed to be illegal content, disclosure is required by legal process or compulsion, or the content violates the Terms of Use, Our AI Philosophy, or Responsible Use Policy.

COOKIES, BEACONS AND ANALYTICS

When you interact with the Website, we strive to make your experience easy and meaningful. Our Website uses technology, or those of third-party service providers, such as cookies, web beacons (clear GIFs, web bugs) and similar technologies to track user activity and collect Website data. We may combine this data with the Personal Data we have collected from you.

• COOKIES

We (including our subprocessors) use cookies for Website functionality and to track visitor activity on the Website. A cookie is a text file that a website transfers to your computer’s hard drive for record-keeping purposes. Our cookies assign a random, unique number to each visitor’s computer. They do not contain information that would personally identify the visitor, although we can associate a cookie with any identifying information that is or has been provided to us while visiting the Website. We use cookies that remain on your computer for a specified period of time or until they are deleted (persistent cookies). We may also use cookies that exist only temporarily during an online session (session cookies) – these cookies allow us to identify you temporarily as you move through the Website. Most browsers allow users to refuse cookies but doing so may impede the functionality of some portions of our Website.

Using cookies and other tracking technologies helps Us do a number of things to enhance Your experience as a customer or potential customer of Cloverleaf, including to: 

• identify users and visitors to the Website, including new visitors and returning customers; 
• process and save Your preferences for future visits; 
• ensure You do not need to login multiple times through user identification tracking; 
• compile analytics, statistics and reports on Our Website and web traffic activity; 
• track and target Your interests to enhance Your experience on Our Website, including searches and web traffic adjacent to activity on the Website; 
• allow for integration with social media; 
• offer products and advertising that may be aligned with Your interests; and 
• provide other services related to the Website. 

You may block or limit the storage of cookies via browser controls or other software.  You may also delete cookies manually from Your device through Your internet browser, operating systems or other programs.  Please note that portions of Our Website may not function properly or be available if You block or delete certain cookies.

• WEB BEACONS

Web beacons are tiny graphics with a unique identifier, similar in function to cookies, that are used to track the online movements of Website users. In contrast to cookies, which are stored on your computer’s hard drive, Web beacons are embedded invisibly on webpages or e-mails and may not be disabled or controlled through your browser. 

PERSONAL DATA PROVIDED TO OTHER PARTIES WORKING WITH US

We partner with authorized service providers, contractors and third parties as an essential part of Our business operations, which allows Us to make the Website available, offer the Services to You, process and deliver Your orders, and provide information and promotional material about products that may be of interest to You.

Cloverleaf does not sell or share Your personal data in exchange for money.

• SERVICE PROVIDERS AND CONTRACTORS 

Cloverleaf employs authorized service providers and contractors to assist with Website operations, online transactions, marketing, and analytics (such as for Website hosting, search engine optimization, customer service and relationship management, payment card processing services, advertising and marketing services, order fulfillment and delivery services, cloud storage services and other third-party technology services). Cloverleaf and these authorized service providers and contractors collect personal data and non-personal data, which may be provided to Cloverleaf or to these authorized service providers and contractors.  Cloverleaf may also provide Your personal data to its authorized service providers and contractors to facilitate processing, fulfilling, and delivering the Services that You request. 

An authorized service provider or contractor receiving any of Your personal data from Cloverleaf is required to use and maintain that personal information only as authorized by Cloverleaf and in accordance with the terms of this Privacy Policy. 

• THIRD PARTIES 

Cloverleaf shares Your personal data from the Website – (i.e., individual identifiers and information, commercial information, transaction information, computer, internet and network activity information, and marketing and promotional information) – with authorized third party partners for commercial purposes.

OTHER INFORMATION COLLECTED 

Cloverleaf, on its own or through authorized service providers, contractors and third parties, may also collect and use other information from and about You and users of the Website that does not specifically identify the user individually. Without limitation, this may include: 

• preferences information (including marketing and communication preferences); 
• information from Your internet browser whenever You visit or use the Website (sometimes called “Log Data” or “Log Files”); 
• device information and usage data; 
• internet service provider; 
• referring and exiting websites and pages; 
• operating system; 
• which pages You visit on Our Website; and 
• the time and date of Your visit and use of Website pages. 

SENSITIVE PERSONAL DATA – NOT COLLECTED 

Except for certain specific financial information that may be required in connection with completing a purchase or other transaction with Cloverleaf, We do not collect, nor do We request or require that You provide any sensitive data as defined in applicable omnibus privacy statutes (e.g., social security number, driver’s license number, state identification card, passport number, information related to racial or ethnic origin, political opinions, religious, or other beliefs, information related to sex life or sexual orientation, health data, biometric or genetic characteristics, criminal convictions and offenses, or trade union membership).  You should not send Us and should not disclose to Us any sensitive personal data on or through the Website or the Services. 

AGGREGATING AND COMBINING INFORMATION 

At times, We may aggregate certain personal data and/or non-personal data in a manner that does not identify You to determine information about Our customers, including product trends, sales histories, and where Our customers are located. 

We may also combine personal data with non-personal data . If We do so, We will treat such combined information as personal data. 

USING NON-PERSONAL DATA 

Because non-personal data does not identify You individually, We may collect, use, and disclose non-personal data for any lawful purpose in Our sole discretion. 

INTEREST-BASED ADVERTISING AND OTHER TARGETED ADVERTISING 

We collect data about Your activities on Our Website for use in providing tailored advertising to You while using Our Website as well as through e-mails and other direct marketing channels that We utilize. To provide You with a consistent experience, We may also associate various devices You utilize (e.g., smartphones, tablets, and desktop computers) by using the other information We have about You, Your interaction with Our Website and Your Website history. 

We may share Your personal data about activities on Our Website with advertisers, advertising networks or cooperatives administered by third parties. These ad networks use this information to provide You advertisements that are tailored to Your individual interests. You can opt-out of Us sharing Your personal data with these advertisers, networks and cooperatives by completing an opt-out request available through the opt-out process described in the applicable “Consumers Rights to Personal Data” section below or the Do Not Sell or Share My Personal Information link at the bottom of the homepage. 

We also have partnered with certain third parties, including social media platforms (e.g., Pinterest, Facebook, Reddit) that may use their own digital tracking tools, such as cookies and pixels, to track Your online activities over time and across Our Website and other websites by collecting information about You through automated means. These third parties will provide You with ads based upon Your interests, activities, and preferences. As a result, You may see certain ads on other websites based on prior activities on Our Website. You may be able to disable these digital tracking tools by changing the settings for cookies on the browser for each device You use to access the Website. In addition, You may be able to opt-out of their digital tracking tools by changing Your preferences on each social media platform. 

These third parties may allow consumers to opt-out of receiving advertisements through the Digital Advertising Alliance –https://youradchoices.com/control – or the Network Advertising Initiative – https://optout.networkadvertising.org/?c=1. 

THIRD-PARTY LINKS

The Services may contain links or allow connections to other sites (including social media sites) that are not owned or controlled by Cloverleaf. Cloverleaf is not responsible for the content, actions, privacy policies or information privacy and security practices of any other sites including the collection and use of Your personal data and the use of tracking technologies.  We encourage You to review the privacy policies of those sites. Cloverleaf is not responsible for Your use of any linked sites, or any information (including Your personal data) collected, posted, used, or displayed by operators of any linked sites. In addition, Cloverleaf is not responsible for any third party, or their affiliates or agents, failure to use Your personal data in accordance with such third party’s privacy policy, or any contractual or other legal obligations to which such third party, their affiliates, or agents, may be subject. 

PROMOTIONAL EMAILS

We may also send you news and offers about our products and services, or those of our chosen partners via e-mail. Examples include, but are not limited to, our blog, newsletter, information about special offers, or other products or offerings. If, at any time, you would like to stop receiving promotional e-mails, you may follow the opt-out instructions contained in any such e-mail. Please note that it may take a few business days for us to process opt-out requests. 

INTENDED WEBSITE AUDIENCE AND NOTICE
REGARDING CHILDREN’S PRIVACY 

Our Website and Services are not intended for children under 18 years of age. We will not knowingly solicit or collect personal data from children under 18, or the relevant minimum age under applicable local legal requirements, except as permitted under applicable law. If We learn that We have received information directly from a child under 18 without his or her parent’s or legal guardian’s consent, We will make commercially reasonable efforts to delete such information. If a parent or guardian becomes aware that his or her child under 18 has provided Us with information without his or her consent, he or she should contact Us as set forth in the “Contacting Us” section below. 

RETENTION AND STORAGE OF PERSONAL INFORMATION 

We store all categories of the personal data that We collect – (i.e., individual identifiers and information, commercial information, transaction information, computer, internet and network activity information, and marketing and promotional information) – for as long as You have an account with Us or the period of time necessary for the purpose for which it was collected, or as required by or permitted by applicable law. 

To determine the appropriate duration of the retention of personal data, We consider a variety of factors, including the following: 

• The amount, nature, and sensitivity of the personal data; 
• The potential risks of harm to consumers; 
• Our recordkeeping and legal compliance requirements; 
• The need to protect the rights or safety of You, Us or others, including the resolution of inquiries or complaints; 
• The need to exercise or defend legal claims; and 
• The need to prevent fraud, protect assets and promote data security. 

Once retention of the personal data is no longer necessary for the purposes outlined above, We will either delete or deidentify the personal data or, if this is not possible (for example, because personal data has been stored in backup archives), then We will store and protect the personal data until deletion or deidentification is possible.

GLOBAL PRIVACY CONTROL

We honor Global Privacy Control (GPC) signals as required by applicable law to automatically opt You out of Cloverleaf selling or sharing Your personal data that it collects on the Website for targeted advertising. GPC is a technical specification in Your browser settings that automatically signals Your privacy preferences to websites Your visit. Specifically, it allows You to express a request to opt-out of the sale or sharing of Your personal data or the use of Your personal data for targeted advertising without having to manually submit a request on each website. To learn more about the GPC and how to set it up in Your browser, visit the Global Privacy Control website by clicking here.                                              

When We detect a valid GPC signal, We will apply Your opt-out preference to the specific browser or device sending the signal. We may not be able to associate the signal with a known consumer. If You want to extend Your opt-out preferences to Your consumer profile more broadly, submit a request through our Data Subject Access Request (DSAR) Form or contact Us directly by using the contact information provided in the “Contact Us” section.

DO NOT TRACK INFORMATION 

Some browsers have a “Do Not Track” feature that lets You tell websites that You do not want to have Your online activities tracked. There is currently no uniform browser signal for this feature and no industry standard on how to respond to these signals. Therefore enabling/disabling the Do Not Track feature in Your browser does not ensure that all websites You visit will respond to the request. 

Cloverleaf does not recognize or respond to Do Not Track signals at this time. 

CONSUMER’S RIGHTS – CALIFORNIA RESIDENTS 

If You are a resident of California, You have the following rights: 

• Right to Correct: You have the right to request that We correct inaccuracies in Your personal data.
• Right to Delete: You have the right to request that We delete personal data that We have collected from or obtained about You (subject to certain exceptions).
• Right to Know: You have the right to request that We disclose to You what personal data We collect about You, including the right to request that We provide You the categories of personal data, the categories of sources from which the personal data is collected, the business or commercial purpose for collecting the personal data, the categories of third parties to whom We disclose personal data, and the specific pieces of personal data We have collected about You (typically for the 12-month period preceding Your request).
• Right to Know About Sale or Sharing: You have the right to request that We disclose to You what personal data We sell or share with third parties, including the right to request that We provide to You the categories of personal data We have collected, the categories of personal data about You which We sold or shared to third parties, the categories of third parties with whom We sold or shared such personal data and the categories of personal data We disclosed about You for a business purpose (typically for the 12-month period preceding Your request).
• Right to Opt-out of Sale of Personal Data: You may request that We stop sharing data in a way that is considered a “sale.”
• Right to Opt-out of Sharing of Personal Data: You may request that We stop disclosures of Your personal data to a third party for cross-context behavioral advertising (i.e., targeted advertising).
• Right to Non-Discrimination: You have the right not to be discriminated against because You exercised any of these rights.
• Right to Appeal: If we deny a privacy rights request in full or in part, You have the right to appeal that decision. If we deny Your appeal, You may also contact Your state Attorney General to lodge a complaint and we will provide You with an online mechanism to do so when we communicate our denial to you. 

To exercise any of these rights (other than non-discrimination), please complete and submit the Data Subject Access Request (DSAR) Form or contact Us by calling (855) 921-5323 or by email to support@cloverleaf.me.

Opt-Out Request. If You select a Right to Opt-Out, an email will be sent to the address You provided confirming that We have received Your request and that processing has begun. Once Your request has been processed, You will receive a follow-up email confirming that Your request has been processed. Please note that in some cases, We may be unable to fulfill Your request if We cannot locate any relevant data in Our systems.

If You would like to opt-out of the sale or sharing of Your personal data by Cloverleaf with third parties, You can also click on the link entitled Do Not Sell or Share My Personal Information at the bottom of the Website homepage. The processed opt-out preference will be implemented by Cloverleaf for the specific consumer account You have identified in the request. 

Other Data Rights Request. If You submit any request other than a Right to Opt-Out,  We will verify Your identity by sending You an email and asking You to verify Your email address.

Once We have verified Your identity, We will begin processing Your request. In certain cases, We may require You to provide additional information to verify Your identity. This may include submitting additional pieces of identifying information, such as order numbers of previous orders of Our products and services, the last four digits of a credit or debit card used to make a purchase, or signing a declaration confirming Your identity. If additional verification is required, You will receive an email providing instructions for how You can securely submit the necessary documentation.

Please note that there may be certain circumstances when We may not completely fulfill Your request, as permitted under the applicable California statute and regulations. For example, in connection with a Request to Delete, We may need to retain certain information to complete a transaction, detect fraud, or comply with a legal obligation. 

With limited exceptions, You may only make a verifiable consumer Request to Know Your personal data twice within a 12-month period. 

If You are a California resident, You may have additional personal rights and choices with regard to Your Personal Data. For example, California’s “Shine the Light” law (Civil Code Section § 1798.83) requires covered entities to permit California residents to request certain information regarding the business’s disclosure of personal data to third parties for their direct marketing purposes. It is our policy not to disclose personal data of individuals to third parties for the third parties’ direct marketing purposes if the individual has exercised their cost-free right to opt-out of such disclosure for such purposes as provided above. 

CONSUMER’S RIGHTS – NEVADA RESIDENTS 

If You are a Nevada resident, You may have the right to opt-out of the sale of certain covered Personal Data. However, we do not currently sell covered information, as “sale” is defined by Nevada law. 

CONSUMER’S RIGHTS – U.S. RESIDENTS OTHER THAN CALIFORNIA  

Depending on where You reside, comprehensive state privacy laws may offer You certain rights that You may exercise where applicable. Based on Your state of residence, You may have one or more of the following rights: 

• Right to Confirm and Access: You may have the right to confirm whether We are processing Your personal data and request access to Your personal data.  If You are a Tennessee resident, You also have the right to a list of the categories of personal data about You that are sold (if any), the categories of 3rd parties to whom each category of personal data was sold, and the categories of personal data about You that are disclosed for a business purpose. 
• Right to Correct: You may have the right to request that We correct inaccuracies in Your personal data. 
• Right to Delete: You may have the right to request that We delete personal data that We have collected from or obtained about You (subject to certain exceptions); 
• Right to Obtain a Copy: You may have the right to obtain a copy of any personal data in digital format We may hold about You.  If You are a Delaware, Maryland, Minnesota or Oregon resident, You also have the right to a list of third parties with whom We share personal data.  
• Right to Opt-out of Sale of Personal Data: You may have the right to request that We stop sharing Your personal data in a way that is considered a “sale.” 
• Right to Opt-out of Certain Processing of Your Personal Data:  You may have the right to request that we stop processing Your personal data for purposes of:  
  • targeted advertising:  
  • the sale of personal data; or 
  • Profiling in furtherance of a decision that produces a legal or similarly significant effects.  Please note that We do not profile in a manner that would result in legal or similarly significant effects and as such do not offer this right. 
• Right to Appeal: If You are unsatisfied with Our actions related to exercising one of Your privacy rights above, You may appeal Our decision. 
• Right to Non-Discrimination: You may have the right not to be discriminated against because You exercised any of these rights. 

To exercise any of these rights (other than non-discrimination), please complete and submit the Data Subject Access Request (DSAR) Form or call (855) 921-5323.

Opt-Out Request. If You select the Right to Opt-Out and it is available to You under applicable law, an email will be sent to the address You provided confirming that We have received Your request and that processing has begun. Once Your request has been processed, You will receive a follow-up email confirming that the request has been processed. Please note that in some cases, We may be unable to fulfill Your request if We cannot locate any relevant data in Our systems.

Other Data Rights Request. If You submit any request other than a Right to Opt-Out and it is available to You under applicable law, We may seek to verify Your identity by sending You an email and asking You to verify Your email address.  Once We have verified Your identity, We will begin processing Your request. In certain cases, We may require You to provide additional information to verify Your identity.

Please note that there may be certain circumstances when We may not completely fulfill Your request, as permitted under the applicable statute or regulation. For example, in connection with a Request to Delete, We may need to retain certain information to complete a transaction, detect fraud, or comply with a legal obligation.  In addition, We may be unable to fulfill Your opt-out request if We cannot locate any applicable data related to You in Our system. 

EUROPEAN ECONOMIC AREA (EEA), EUROPEAN UNION (EU), AND
UNITED KINGDOM (UK) RESIDENTS’ DATA SUBJECT RIGHTS 

If You reside in the EEA, the EU, or the UK, You have the following rights regarding Your Personal Data: 

• Right to request access to Your personal data;
• Right to request rectification (correction) of Your personal data;
• Right to request erasure of Your personal data (right to be forgotten;
• Right to object to our processing of Your personal data, where we are relying on a legitimate interest (or those of a third party) (note that should Your personal data be processed solely for direct marketing purposes, You can object to that processing at any time without providing any justification); 
• Right to request restrictions of processing Your personal data;
• Right to request portability of Your personal data (note that under the GDPR, this right only applies to automated data where our legal basis for processing it was either Your prior consent or for the performance of a contract with you);
• Where we are relying on consent to process Your personal data, the right to withdraw Your consent at any time, without affecting the lawfulness of any processing based on consent before its withdrawal; and
• Right to lodge a complaint with Your supervisory authority. 

You can exercise any of the rights set out above by contacting us as provided below. We will respond to all requests in accordance with applicable data protection laws. We may need to request specific information from You to help us confirm Your identity. If we reject Your data subject request, we will notify You of our reason for doing so. 

If we make automated decisions about You based on Your personal data that may affect Your access or Services provided to you, and subject to certain limitations and exceptions, You have the rights: 

• To know the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the expected consequences of such processing for the data subject;
• To opt-out of any profiling in furtherance of decisions that produce legal or similarly significant effect;
• Not to be subject the automated decision-making so long as the decision is not necessary for the performance of the contract with You or required by legal obligation; and
• To contest the decision and request human intervention in the decision-making process, if such decision making is necessary.

At this time we do not make automated decisions about You that may affect Your access or Services provided to You through the Website or Services.

If You believe that we have not used Your personal data in accordance with the applicable data protection laws, You have the right to lodge a complaint at any time, as applicable, with Your local Data Protection Authority (contact information for EU member authorities is available here) or supervisory authority (such as the UK Information Commissioner’s Office (ICO), here) and to seek judicial remedy. 

Please note there are some instances where we cannot honor these requests and may be required by law or other legitimate reasons to continue processing Your Personal Data. 

CONSUMER’S RIGHTS – ALL OTHER LOCATIONS AND JURISDICTIONS  

If You reside in a jurisdiction other than the United States, the European Union, the European Economic Area, or the United Kingdom, you may have similar, complementary or additional rights under the laws applicable to the location of Your residence.  To exercise any such rights, You may contact Our Data Privacy Officer at support@cloverleaf.me .   

VISITORS FROM OUTSIDE THE UNITED STATES – CROSS-BORDER TRANSFER 

Cloverleaf is located in the United States.  The Website is hosted in the United States and is intended for use only by individuals who are 18 years or older. The information Cloverleaf collects is governed by applicable laws of the United States. If You are visiting the Website, using the Services, or contacting Cloverleaf for any reason from outside the United States, Your information will be transferred to, stored and processed in the United States or other countries. 

The data protection and other applicable laws of the United States may not be as comprehensive as those laws or regulations in other countries or may otherwise differ from the data protection or consumer protection laws in other countries. 

By using the Website or Services and/or providing personal data to Cloverleaf by any means or methods, You consent to the collection, processing and use of Your personal data by Cloverleaf in the United States and as set forth and described in this Privacy Policy, Our Terms of Use, and Our AI Philosophy.  You are also consenting to the application of the laws of the United States for all matters concerning Our Website and Service. 

DATA SECURITY 

The security of Your personal data is very important to Us. We follow generally accepted industry standards to protect the personal data submitted to Us, and that We collect, both during transmission and once We receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while We strive to use commercially acceptable means to protect Your personal data, We cannot guarantee the absolute security of the personal data provided by You or collected by Us through use of the Website or Services. 

UPDATES TO THIS PRIVACY POLICY 

We may update Our Privacy Policy from time to time and use of the information We collect now is subject to the Privacy Policy in effect at the time of use. The “LAST UPDATED” legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised, and We encourage You to check Our Privacy Policy periodically. Any changes will become effective when We post the revised Privacy Policy on Our Website. Your use of the Website and Services, and/or Your purchase of a product or service following these changes means that You accept the revised Privacy Policy. 

TO EXERCISE YOUR RIGHTS OR OTHERWISE CONTACT US

If You have any questions about this Privacy Policy, or would like more information, You may contact us at (855) 921-5323 and support@cloverleaf.me and 310 Culvert St Suite 301 Cincinnati, OH 45202. 

To exercise any rights in your personal information, please complete and submit the Data Subject Access Request (DSAR) Form, or call us at (855) 921-5323 or email us at support@cloverleaf.me.