United States

California (CCPA/CPRA)

In CCPA/CPRA terms:

• We do not sell personal information, and we have not sold it in the preceding 12 months.
• "Sharing": on our nine websites with advertising tags (cueta.cuesoft.io, cuelabs.cuesoft.io, cuehire.cuesoft.io, cueprise.cuesoft.io, storefront.cuesoft.io, cuelearn.cuesoft.io, cuesoft.io, clients.cuesoft.io and account.cuesoft.io), and only if you opt in through that site’s consent banner, we "share" identifiers and internet-activity data with the advertising platforms listed on each collection page for cross-context behavioral advertising. Google signals is part of that sharing: with it switched on, a visit made while you are signed in to Google with Ads Personalisation enabled can be connected to your Google account and used by Google for its own ads personalisation. The documentation sites carry no advertising tags and nothing is shared from them. You can opt out of further sharing at any time via the Cookie preferences link.
• Opt-out preference signals. We treat Global Privacy Control as a valid opt-out of sharing, and it overrides a stored opt-in: if your browser sends GPC, no tag loads at all: not the advertising tags and not Google Analytics, so the Google signals sharing described above stops with them (even if you previously pressed Accept) for as long as the signal is present. With no prior opt-in, nothing was ever shared to begin with.
• Categories collected: identifiers (name, email, phone); internet or network activity; a cross-device identifier, where Google signals connects an opted-in visit to your signed-in Google account; approximate geolocation: a country derived at the edge by Cloudflare and stored with a form submission whether or not you opt in, and, if you do opt in, a coarse location Google Analytics derives from your IP address before discarding the address itself; and, depending on the form you use, professional or employment-related and commercial information (role interest and availability on CueLABS™, company and project briefs on CueHIRE™, programme intent on CueTA™), all described on the collection pages, collected from you directly and from your browser. Purposes: processing applications and enquiries, running and securing the websites, and (opt-in only) advertising measurement, cross-context behavioural advertising, and (where Google signals connects the visit to your signed-in Google account) Google’s own ads personalisation. Disclosed to: the service providers on the processors page under contracts limiting their use of it, and, only on opt-in, the advertising platforms, as independent businesses.
• We do not collect or use sensitive personal information beyond what is necessary to provide the services, and we do not use it to infer characteristics.
• Your CCPA rights: to know/access, to correct, to delete, to opt out of sale/sharing, to limit use of sensitive personal information, and to non-discrimination: we will never deny services, charge different prices or degrade quality because you exercised a privacy right.
• Authorised agents may submit requests on your behalf; we verify the agent’s authority and your identity, as the rights page describes.

Other state privacy laws

Residents of states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others) hold comparable rights of access, correction, deletion, portability and opt-out of targeted advertising. Each website’s own consent banner is our opt-in mechanism for targeted advertising everywhere, and a choice made on one site does not carry to another (the default is off on every site in every state) and the rights page is the single door for every request. Where a state grants an appeal right for refused requests, tell us you are appealing and a different reviewer will decide; if we still refuse, we will point you to your state attorney general.

Breach notification

Where a breach affects US residents, we notify affected individuals and, where required, state authorities and consumer-reporting agencies, per the breach-notification law of each affected resident’s state: see breach notification.

Do Not Track and preference signals

By default our sites run no cross-site tracking to disable: the analytics and advertising tags on all nine websites that carry them are opt-in, so the state Do Not Track signals were designed for is where every visit starts. If you do accept, the advertising tags are used for remarketing, which is cross-context behavioural advertising and is the "sharing" described in the California section above; the Cookie preferences link ends it. Global Privacy Control is honoured as a valid opt-out that overrides a stored opt-in, as the California section above states.