These US Privacy Terms form a legally binding contract between you and Snap, and are incorporated into the Business Services Terms. Some terms used in these US Privacy Terms are defined in the Business Services Terms.

“CLA Personal Information” means personal information you provide to Snap via Customer List Audience of consumers in a US State with an in force State Privacy Law.

“Customer Personal Information” means CLA Personal Information and Non-CLA California Personal Information.

“Non-CLA California Personal Information” means personal information you provide to Snap of California consumers via Business Services other than Customer List Audience.

“State Privacy Laws” means any applicable US comprehensive or similar consumer privacy law, such as, without limitation, the: (a) the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”); (b) the Colorado Privacy Act; or (c) Washington’s My Health My Data Act, in all cases as such laws may be amended from time to time. 

“Subprocessors” means third parties authorised under these US Privacy Terms to access and process Customer Personal Information in order to provide the Business Services.

As used in these US Privacy Terms, the terms “consumers,” “de-identified data,” “personal information,” “processing,” ”processor,” “sell,” “service provider,” “share,” and “targeted advertising” have the meanings given in the State Privacy Laws, as applicable.

a. Each party agrees it will comply with its obligations under State Privacy Laws relating to any Customer Personal Information it processes or provides under or in relation to these US Privacy Terms. Each party will notify the other party if it determines that it can no longer meet its obligations under these US Privacy Terms or State Privacy Laws. You are solely liable for your compliance with each of the State Privacy Laws in your use of the Business Services.

b. If you have a reasonable belief that Snap is processing Customer Personal Information of California residents in an unauthorised manner, you have the right to notify Snap of such belief, and Snap and you will work together in good faith to remediate the allegedly violative processing activities, if necessary. 

c. During the term of these US Privacy Terms, upon reasonable request and where required by the State Privacy Laws, Snap will make available to you all information reasonably necessary to demonstrate Snap’s compliance with these US Privacy Terms with respect to Customer Personal Information.

d. You will remove from the Business Services the Customer Personal Information of any consumers who have: (i) withdrawn consent; (ii) opted out of targeted advertising; or (iii) opted out of the sale or sharing of personal information.

e. You will rectify or remove any Customer Personal Information from the Business Services that you learn is inaccurate or outdated.   

f. Each party will comply with the requirements for processing de-identified data as required by the State Privacy Laws, with respect to any de-identified data it receives from the other party pursuant to the Business Services Terms.

g. Snap will process Non-CLA California Personal Information for the limited purposes described in the Business Services Terms and as otherwise permitted by CCPA/CPRA.

h. Snap will use reasonable security measures that are designed to secure Customer Personal Information from unauthorised disclosure or access, and, to the extent required by the State Privacy Laws, Snap will notify you without undue delay and, where feasible, no more than 72 hours after becoming aware of the unauthorised disclosure or access to, Customer Personal Information by a third party on systems managed or controlled by Snap.