Cherry Rain Privacy Notice

Last Updated: 1 March 2025

Introduction

At Cherry Rain, we prioritize protecting your personal information (“PI”), including sensitive personal information (“SPI”), in compliance with relevant privacy and data protection laws across the jurisdictions where we operate. “Cherry Rain,” “we,” “us,” or “our” refers to Cherry Rain LLC., its subsidiaries (collectively, the “Cherry Rain Network”), and Cherry Rain services. The entity you engage with, Cherry Rain Solutions, Inc., or its relevant subsidiary, acts as the controller of your PI. If we process your PI without a direct contract, the entity providing this Privacy Notice is the controller.

“You” or “your” refers to individuals whose PI we process, such as customers, client representatives, employees, or beneficial owners of entities, in connection with:

• Providing services to prospective or current clients;
• Transactions we undertake, including those on behalf of clients;
• Services provided to us by vendors.

If you contract with a Cherry Rain Network entity, that entity controls your PI. For customers of Cherry Rain services, the managing entity and, if applicable, the service as a separate legal entity, are controllers. This Privacy Notice governs your relationship with Cherry Rain.

This notice explains how we collect, use, share, and protect PI, as well as your rights regarding your PI. Additional agreements or terms may also apply to how we handle your PI and should be reviewed alongside this notice.

PI We Collect

Personal information (PI) identifies an individual, either alone or combined with other data. Anonymized data, where identity is removed, is not PI. In some regions, sensitive personal information (SPI) includes data like race, ethnicity, government IDs, precise geolocation, religious beliefs, sexual orientation, health, or biometric data.

The type of PI we collect depends on our services, legal requirements, and our relationship with you. Categories include (non-exhaustive):

• Identity Data: Name, title, date of birth, gender, ID numbers (e.g., passport, driver’s license), signature.
• Contact Data: Home address, email, phone number.
• Communication Monitoring Data: Recorded communications (e.g., calls, emails, chats), where legally allowed.
• Financial Data: Account details, transaction history, payment records.
• Marketing and Usage Data: Preferences, website/app usage (see our Cookie Notice).
• Professional Data: Company name, job role, work history, business contact details, professional social media IDs (e.g., LinkedIn).
• Interaction Data: Account credentials, service requests, survey responses, marketing engagement.
• Service Data: Details of services you provide us or we provide you, payment records.
• Premises Security Data: Visitor logs, CCTV footage at our facilities.
• Technical Data: IP address, browser details, device type, access times, referring sites.
• SPI: Criminal records (if required), dietary needs (for events), accessibility needs, or political affiliations (to identify politically exposed persons). Some PI may be deemed “sensitive” under specific laws.

We collect PI from:

• You directly (e.g., through service applications or forms).
• Your employer or organization, if you’re a representative.
• Our ongoing interactions, such as updated details or service changes.
• Public sources (e.g., company websites, professional networks like LinkedIn, regulatory filings).
• Marketing campaigns, surveys, or website visits (via cookies or analytics).
• Events or training sessions hosted by Cherry Rain.
• Third parties like credit agencies or data providers.
• Records we generate, such as interaction logs, per applicable law.

Unless noted as optional, requested PI is required to provide services. Without it, we may be unable to deliver those services.

Why and How We Process Your PI

We process PI for specific purposes, grounded in legal bases, as outlined below:

Vendor-Related Processing

Who We Share Your PI With

We may share PI for the above purposes with:

• Cherry Rain Network entities;
• Service providers (e.g., IT, analytics, financial advisors, brokers, consultants);
• Vendors for marketing, payments, or debt collection;
• Clients/partners subscribed to Cherry Rain services;
• Regulatory or legal authorities, where required;
• Potential buyers or partners in business transactions;
• Agencies for fraud or anti-money laundering checks;
• Parties permitted or required by law.

International Data Transfers

To deliver global services, we may transfer PI to locations outside your country, such as Cherry Rain centers in North America, Europe, or Asia. We apply consistent security measures and require third-party providers to meet our standards via contracts. For EEA transfers, we ensure protections through adequacy decisions or standard contractual clauses approved by the EU Commission.

Marketing and Opt-Out Options

In some regions, you must consent to receive marketing communications. Logged-in users may experience personalized content based on usage. You can opt out by:

• Using unsubscribe links in marketing emails;
• Contacting your Cherry Rain representative;
• Emailing [email protected];
• Adjusting cookie settings (per our Cookie Notice).

Third-Party Marketing and PI Sharing

Some Cherry Rain Network entities may share Identity, Contact, and Professional Data with clients for marketing purposes. We share Interaction, Technical, and Marketing/Usage Data for targeted advertising. We do not knowingly share PI of individuals under 16.

In Texas, certain Cherry Rain entities are registered data brokers with the Texas Secretary of State (see https://www.sos.state.tx.us/).

How Long We Keep Your PI

We retain PI only as long as needed for its purpose, legal obligations, or to resolve disputes.

PI Security

We implement robust security measures, including:

• Staff training on data protection;
• System integrity and resilience;
• Data access restoration protocols;
• Access controls, encryption, and anti-malware tools;
• Physical security at facilities;
• Regular security audits and vendor checks;
• Comprehensive cybersecurity measures.

While we strive to protect PI, internet-based data transmission carries risks, and we cannot guarantee absolute security.

Your Rights

Depending on your jurisdiction, you may have rights to:

• Access: Obtain a copy of your PI and details on its processing.
• Object: Challenge processing based on legitimate interests or marketing.
• Opt Out: Stop PI sales/sharing for advertising (email [email protected] or adjust cookie settings).
• Withdraw Consent: Revoke consent without affecting prior processing.
• Correct: Update inaccurate PI.
• Delete: Request PI deletion, unless legally required to retain.
• Restrict: Limit PI processing under certain conditions.
• Portability: Receive PI in a standard electronic format.
• Challenge Automated Decisions: Request human review of impactful automated decisions.

To exercise these rights, email [email protected]. We may verify your identity and, where permitted, charge a fee. Authorized agents need written proof of authorization, and we may confirm your identity directly.

You will not face discrimination for exercising your rights.

U.S. Metrics (Example)

Contact Us

Reach our Privacy Officer at:

Cherry Rain Solutions
456 Data Way
San Francisco, CA 94105
Email: [email protected]
Phone (U.S.): +1 866 555 1234

Complaints

For concerns about PI processing, email [email protected]. You may also contact a data protection authority in your region. To appeal a rights request decision, email [email protected] with “Appeal” in the subject line.

Cookie Notice

Refer to our separate Cookie Notice for details.

Third-Party Websites

This notice does not cover third-party websites we do not control or where our ads appear.

Updates to This Notice

We may revise this notice periodically. Check our website for updates. Significant changes will be communicated through appropriate channels.