Privacy Policies
Last updated: 21.03.2026
1. Data Controller and Contact
The data controller for personal data processed in connection with Slidesfolder is:
Goopiel Ventures GmbH
Dr. Thomas Gigant
Pohlstraße 4, 10785 Berlin, Germany
Email: contact@slidesfolder.com
If you have questions about this Privacy Policy or about how we process your personal data, please contact us at the email address above.
2. Categories of Personal Data We Process
Depending on how you interact with Slidesfolder (as a website visitor, customer, potential customer, or newsletter recipient), we may process the following categories of personal data:
Identification and contact details: Name, company name, job title, postal address, email address, phone number, country, and company registration or VAT number where relevant.
Account and usage data: Login identifiers, account settings, license information, feature usage, log files, timestamps, and technical identifiers (such as IP address, browser type, device and operating system data).
Commercial information: Purchase history, subscription plan, invoices, payment status, and discounts or coupons used.
Payment data: Limited payment details (amounts, timestamps, last four digits, expiry month and year). Full card data is processed by our payment processor, Stripe, and is not stored by Slidesfolder. Stripe’s privacy policy is available at https://stripe.com/privacy.
Communication data: Content of emails or messages sent to us, support requests, feedback, and survey responses.
Marketing and newsletter data: Subscription preferences, newsletter open and click data where legally permitted, and campaign or referral information.
Cookies and similar technologies: Online identifiers, IP address, device identifiers, and behavioral data collected via cookies and similar tools. See Section 4 for details.
We do not intentionally collect special categories of personal data (such as health data or political opinions) and ask that you do not submit such data through Slidesfolder.
3. Purposes and Legal Bases (GDPR)
Under the GDPR, each processing activity requires a specified purpose and legal basis. We process personal data for the following purposes:
3.1 Managing Customers and Providing the Service
Purposes: Creating and managing user accounts; providing access to Slidesfolder and its features (including templates and integrations); processing orders, subscriptions, and payments; and providing customer support.
Legal basis: Performance of a contract or pre-contractual steps at your request (GDPR Article 6(1)(b)). Compliance with legal obligations such as tax and accounting requirements (Article 6(1)(c)) where applicable.
3.2 Marketing, Newsletters, and Relationship Building
Purposes: Sending newsletters and product updates; informing you of new features, offers, and events; and maintaining customer relationships.
Legal basis: Legitimate interests (Article 6(1)(f)) in promoting our business and providing relevant information to existing customers, subject to applicable e-privacy and marketing rules. Consent (Article 6(1)(a)) where required, such as for email marketing to non-customers or in specific jurisdictions. You may withdraw consent at any time via the unsubscribe link in any email or by contacting us.
3.3 Analytics, Cookies, and Service Improvement
Purposes: Operating our website and digital services; understanding how visitors and users interact with Slidesfolder; and improving performance, user experience, and security.
Legal basis: Consent via our cookie banner for non-essential cookies (Article 6(1)(a)). Legitimate interests for strictly necessary cookies and limited analytics required to operate a secure and functional website (Article 6(1)(f)).
3.4 Social Media
Purposes: Operating our company page on LinkedIn; receiving aggregated visitor statistics; and responding to messages or comments.
Legal basis: Legitimate interests (Article 6(1)(f)) in promoting Slidesfolder and interacting with users on social media.
For LinkedIn Page Insights, Slidesfolder and LinkedIn Ireland Unlimited Company act as joint controllers under GDPR Article 26. LinkedIn’s Page Insights Joint Controller Addendum governs this arrangement. LinkedIn’s privacy policy (https://www.linkedin.com/legal/privacy-policy) applies in addition to this policy. You may exercise your rights regarding Page Insights data against either Slidesfolder or LinkedIn.
3.5 AI-Based Features
Slidesfolder may offer optional AI-based features, such as a layout or content search powered by an external AI API (currently Google Gemini).
Purposes: When you explicitly activate an AI-based feature, we analyze the content you choose to send (such as a screenshot or structured description of a slide) in order to provide recommendations, layout suggestions, or similar outputs.
Data processed: An image or representation of the specific content you chose to submit, together with technical identifiers necessary to deliver the feature.
Legal basis: Performance of a contract or provision of the requested feature (Article 6(1)(b)). Legitimate interests (Article 6(1)(f)) in providing advanced functionality, combined with your explicit action to trigger the feature.
Important information about AI data handling:
Slidesfolder does not use content submitted through AI features to train its own models.
Content sent to our AI provider (Google Gemini) is processed under Google’s Cloud Data Processing Addendum. Google states that customer data submitted through its Gemini API is not used to train Google’s foundation models. For current details, see Google’s data governance documentation for the Gemini API.
Content submitted through AI features is retained by Slidesfolder only for the time technically necessary to process the request, and is not stored afterward.
The AI features do not involve automated decision-making that produces legal or similarly significant effects on you within the meaning of GDPR Article 22. The outputs are suggestions and recommendations that you are free to accept, modify, or disregard.
4. Cookies and Tracking Technologies
Slidesfolder does not currently set its own cookies or use analytics, marketing, or retargeting technologies.
However, third-party infrastructure providers that help deliver our website may set limited, strictly necessary cookies as part of their normal operation. For example, Cloudflare may set a bot-management cookie to protect the site from malicious traffic. These cookies are essential for security and cannot be disabled.
If we introduce analytics, preference, or marketing cookies in the future, we will update this section, provide a detailed cookie list, and implement a consent banner in accordance with GDPR and applicable e-privacy rules before deploying any non-essential cookies.
4.1 Do Not Track and Global Privacy Control Signals
Some browsers send a “Do Not Track” (DNT) or Global Privacy Control (GPC) signal. As Slidesfolder does not currently use any tracking technologies, these signals do not require a change in our behavior. If we implement tracking in the future, we will honor GPC signals as required by applicable US state privacy laws and update this section accordingly.
5. Recipients and Sharing of Personal Data
Slidesfolder shares personal data only where necessary and in accordance with data protection law:
5.1 Sub-Processors
We use the following service providers that process personal data on our behalf under data processing agreements:
Stripe, Inc. (San Francisco, USA) — Payment processing. Privacy policy: https://stripe.com/privacy
Cloudflare, Inc. (San Francisco, USA) — Content delivery, DDoS protection, and DNS. Privacy policy: https://www.cloudflare.com/privacypolicy/
Framer B.V. (Amsterdam, Netherlands) — Website hosting. Privacy policy: https://www.framer.com/privacy/
Resend, Inc. (San Francisco, USA) — Transactional email delivery. Privacy policy: https://resend.com/legal/privacy-policy
Google LLC (Mountain View, USA) — AI API services (Gemini) for optional AI features. Privacy policy: https://policies.google.com/privacy
We may engage additional sub-processors from time to time. We will update this list when material changes occur.
5.2 Other Recipients
Payment and financial partners: Banks and accounting providers in connection with payment processing and bookkeeping.
Professional advisors: Lawyers, auditors, or similar advisors bound by confidentiality obligations, where necessary to protect our rights or comply with legal obligations.
Public authorities: Supervisory authorities, tax authorities, or law enforcement when required by applicable law.
LinkedIn: As described in Section 3.4, LinkedIn acts as a joint controller for Page Insights data. LinkedIn’s privacy policy applies in addition to this policy.
5.3 No Sale of Personal Data
We do not sell your personal information, nor do we “share” it for cross-context behavioral advertising, within the meaning of the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), or similar US state privacy laws. If this ever changes, we will update this policy and provide the required opt-out mechanisms.
6. International Data Transfers
Several of our sub-processors are located in the United States (Stripe, Cloudflare, Resend, Google). When personal data is transferred outside the EU/EEA to countries that do not benefit from an adequacy decision by the European Commission, we ensure an adequate level of protection by:
Relying on an adequacy decision where available (for example, the EU–US Data Privacy Framework for certified US organizations).
Using the European Commission’s Standard Contractual Clauses (SCCs), supplemented by additional technical and organizational safeguards where necessary.
You can obtain more information about international transfers and copies of the relevant safeguards by contacting contact@slidesfolder.com.
7. Retention of Personal Data
We retain personal data only as long as necessary for the purposes described in this policy:
Customer and account data: For the duration of your contractual relationship and for a statutory retention period afterward, up to 10 years under German commercial and tax law (§ 257 HGB, § 147 AO), depending on the type of record.
Marketing data: Until you unsubscribe or withdraw consent, unless shorter retention is required by law.
Technical logs: For limited periods necessary for security and troubleshooting, typically from a few days to several months.
AI feature content: Retained only for the time technically necessary to process your request. Not stored by Slidesfolder afterward. For retention by our AI provider, see Google’s Gemini API data governance documentation.
Cookie data: As described in the cookie table in Section 4, varying by cookie type and provider.
We may retain data for longer where necessary to establish, exercise, or defend legal claims.
8. Your Rights Under the GDPR
If you are in the EU/EEA or another region with similar data protection rights, you have the following rights, subject to legal conditions and limitations:
Right of access: Obtain confirmation whether we process your personal data and receive a copy.
Right to rectification: Have inaccurate or incomplete data corrected.
Right to erasure: Have your data deleted in certain circumstances.
Right to restriction: Request restriction of processing in specific cases.
Right to data portability: Receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
Right to object: Object to processing based on our legitimate interests, including direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds.
Right to withdraw consent: Where processing is based on consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise your rights, contact contact@slidesfolder.com. We will respond without undue delay and within one month, extendable by two further months where necessary due to complexity.
Right to lodge a complaint: If you are not satisfied with our response, you may lodge a complaint with your local supervisory authority. For users in Berlin, the competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (https://www.datenschutz-berlin.de). A list of EU supervisory authorities is available on the European Data Protection Board website.
9. Additional Information for US Residents
If you are a resident of California, Colorado, Connecticut, Virginia, Texas, or another US state with a comprehensive privacy law, additional rights may apply to you. This section supplements the rest of this Privacy Policy.
9.1 Categories of Personal Information
In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA/CPRA): identifiers (name, email address, IP address); commercial information (purchase history, subscription details); internet or electronic network activity (usage data, log data); and professional information (job title, company name).
9.2 Your Rights
Depending on your state of residence, you may have the right to:
Know what personal information we collect, use, and disclose about you.
Request deletion of your personal information.
Correct inaccurate personal information.
Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. As stated in Section 5.3, we do not currently sell or share your personal information in this manner.
Not be discriminated against for exercising your privacy rights.
To exercise these rights, contact contact@slidesfolder.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.
9.3 Shine the Light (California Civil Code § 1798.83)
We do not disclose personal information to third parties for their own direct marketing purposes.
10. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, Slidesfolder will:
Notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33.
Where the breach is likely to result in a high risk to your rights and freedoms, notify affected individuals without undue delay, in accordance with GDPR Article 34.
Document all breaches, including their effects and the remedial actions taken.
11. Security
Slidesfolder implements appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
Encryption in transit (HTTPS/TLS) and at rest where appropriate.
Access controls and role-based permissions.
Regular security updates, logging, and monitoring.
Internal policies on data protection and incident response.
No system can be completely secure, but we work continuously to maintain and improve the security of Slidesfolder.
12. Children’s Privacy
Slidesfolder is not directed at children under 16 (or a higher age threshold where required by local law), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact contact@slidesfolder.com so we can take appropriate steps.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or technological developments.
The latest version will always be available on our website and will indicate the date of the last update. For material changes that significantly affect your rights or how we use your data, we will provide additional notice (for example, via email or through our website) and, where required, seek your consent.
Privacy Policies
Last updated: 21.03.2026
1. Data Controller and Contact
The data controller for personal data processed in connection with Slidesfolder is:
Goopiel Ventures GmbH
Dr. Thomas Gigant
Pohlstraße 4, 10785 Berlin, Germany
Email: contact@slidesfolder.com
If you have questions about this Privacy Policy or about how we process your personal data, please contact us at the email address above.
2. Categories of Personal Data We Process
Depending on how you interact with Slidesfolder (as a website visitor, customer, potential customer, or newsletter recipient), we may process the following categories of personal data:
Identification and contact details: Name, company name, job title, postal address, email address, phone number, country, and company registration or VAT number where relevant.
Account and usage data: Login identifiers, account settings, license information, feature usage, log files, timestamps, and technical identifiers (such as IP address, browser type, device and operating system data).
Commercial information: Purchase history, subscription plan, invoices, payment status, and discounts or coupons used.
Payment data: Limited payment details (amounts, timestamps, last four digits, expiry month and year). Full card data is processed by our payment processor, Stripe, and is not stored by Slidesfolder. Stripe’s privacy policy is available at https://stripe.com/privacy.
Communication data: Content of emails or messages sent to us, support requests, feedback, and survey responses.
Marketing and newsletter data: Subscription preferences, newsletter open and click data where legally permitted, and campaign or referral information.
Cookies and similar technologies: Online identifiers, IP address, device identifiers, and behavioral data collected via cookies and similar tools. See Section 4 for details.
We do not intentionally collect special categories of personal data (such as health data or political opinions) and ask that you do not submit such data through Slidesfolder.
3. Purposes and Legal Bases (GDPR)
Under the GDPR, each processing activity requires a specified purpose and legal basis. We process personal data for the following purposes:
3.1 Managing Customers and Providing the Service
Purposes: Creating and managing user accounts; providing access to Slidesfolder and its features (including templates and integrations); processing orders, subscriptions, and payments; and providing customer support.
Legal basis: Performance of a contract or pre-contractual steps at your request (GDPR Article 6(1)(b)). Compliance with legal obligations such as tax and accounting requirements (Article 6(1)(c)) where applicable.
3.2 Marketing, Newsletters, and Relationship Building
Purposes: Sending newsletters and product updates; informing you of new features, offers, and events; and maintaining customer relationships.
Legal basis: Legitimate interests (Article 6(1)(f)) in promoting our business and providing relevant information to existing customers, subject to applicable e-privacy and marketing rules. Consent (Article 6(1)(a)) where required, such as for email marketing to non-customers or in specific jurisdictions. You may withdraw consent at any time via the unsubscribe link in any email or by contacting us.
3.3 Analytics, Cookies, and Service Improvement
Purposes: Operating our website and digital services; understanding how visitors and users interact with Slidesfolder; and improving performance, user experience, and security.
Legal basis: Consent via our cookie banner for non-essential cookies (Article 6(1)(a)). Legitimate interests for strictly necessary cookies and limited analytics required to operate a secure and functional website (Article 6(1)(f)).
3.4 Social Media
Purposes: Operating our company page on LinkedIn; receiving aggregated visitor statistics; and responding to messages or comments.
Legal basis: Legitimate interests (Article 6(1)(f)) in promoting Slidesfolder and interacting with users on social media.
For LinkedIn Page Insights, Slidesfolder and LinkedIn Ireland Unlimited Company act as joint controllers under GDPR Article 26. LinkedIn’s Page Insights Joint Controller Addendum governs this arrangement. LinkedIn’s privacy policy (https://www.linkedin.com/legal/privacy-policy) applies in addition to this policy. You may exercise your rights regarding Page Insights data against either Slidesfolder or LinkedIn.
3.5 AI-Based Features
Slidesfolder may offer optional AI-based features, such as a layout or content search powered by an external AI API (currently Google Gemini).
Purposes: When you explicitly activate an AI-based feature, we analyze the content you choose to send (such as a screenshot or structured description of a slide) in order to provide recommendations, layout suggestions, or similar outputs.
Data processed: An image or representation of the specific content you chose to submit, together with technical identifiers necessary to deliver the feature.
Legal basis: Performance of a contract or provision of the requested feature (Article 6(1)(b)). Legitimate interests (Article 6(1)(f)) in providing advanced functionality, combined with your explicit action to trigger the feature.
Important information about AI data handling:
Slidesfolder does not use content submitted through AI features to train its own models.
Content sent to our AI provider (Google Gemini) is processed under Google’s Cloud Data Processing Addendum. Google states that customer data submitted through its Gemini API is not used to train Google’s foundation models. For current details, see Google’s data governance documentation for the Gemini API.
Content submitted through AI features is retained by Slidesfolder only for the time technically necessary to process the request, and is not stored afterward.
The AI features do not involve automated decision-making that produces legal or similarly significant effects on you within the meaning of GDPR Article 22. The outputs are suggestions and recommendations that you are free to accept, modify, or disregard.
4. Cookies and Tracking Technologies
Slidesfolder does not currently set its own cookies or use analytics, marketing, or retargeting technologies.
However, third-party infrastructure providers that help deliver our website may set limited, strictly necessary cookies as part of their normal operation. For example, Cloudflare may set a bot-management cookie to protect the site from malicious traffic. These cookies are essential for security and cannot be disabled.
If we introduce analytics, preference, or marketing cookies in the future, we will update this section, provide a detailed cookie list, and implement a consent banner in accordance with GDPR and applicable e-privacy rules before deploying any non-essential cookies.
4.1 Do Not Track and Global Privacy Control Signals
Some browsers send a “Do Not Track” (DNT) or Global Privacy Control (GPC) signal. As Slidesfolder does not currently use any tracking technologies, these signals do not require a change in our behavior. If we implement tracking in the future, we will honor GPC signals as required by applicable US state privacy laws and update this section accordingly.
5. Recipients and Sharing of Personal Data
Slidesfolder shares personal data only where necessary and in accordance with data protection law:
5.1 Sub-Processors
We use the following service providers that process personal data on our behalf under data processing agreements:
Stripe, Inc. (San Francisco, USA) — Payment processing. Privacy policy: https://stripe.com/privacy
Cloudflare, Inc. (San Francisco, USA) — Content delivery, DDoS protection, and DNS. Privacy policy: https://www.cloudflare.com/privacypolicy/
Framer B.V. (Amsterdam, Netherlands) — Website hosting. Privacy policy: https://www.framer.com/privacy/
Resend, Inc. (San Francisco, USA) — Transactional email delivery. Privacy policy: https://resend.com/legal/privacy-policy
Google LLC (Mountain View, USA) — AI API services (Gemini) for optional AI features. Privacy policy: https://policies.google.com/privacy
We may engage additional sub-processors from time to time. We will update this list when material changes occur.
5.2 Other Recipients
Payment and financial partners: Banks and accounting providers in connection with payment processing and bookkeeping.
Professional advisors: Lawyers, auditors, or similar advisors bound by confidentiality obligations, where necessary to protect our rights or comply with legal obligations.
Public authorities: Supervisory authorities, tax authorities, or law enforcement when required by applicable law.
LinkedIn: As described in Section 3.4, LinkedIn acts as a joint controller for Page Insights data. LinkedIn’s privacy policy applies in addition to this policy.
5.3 No Sale of Personal Data
We do not sell your personal information, nor do we “share” it for cross-context behavioral advertising, within the meaning of the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), or similar US state privacy laws. If this ever changes, we will update this policy and provide the required opt-out mechanisms.
6. International Data Transfers
Several of our sub-processors are located in the United States (Stripe, Cloudflare, Resend, Google). When personal data is transferred outside the EU/EEA to countries that do not benefit from an adequacy decision by the European Commission, we ensure an adequate level of protection by:
Relying on an adequacy decision where available (for example, the EU–US Data Privacy Framework for certified US organizations).
Using the European Commission’s Standard Contractual Clauses (SCCs), supplemented by additional technical and organizational safeguards where necessary.
You can obtain more information about international transfers and copies of the relevant safeguards by contacting contact@slidesfolder.com.
7. Retention of Personal Data
We retain personal data only as long as necessary for the purposes described in this policy:
Customer and account data: For the duration of your contractual relationship and for a statutory retention period afterward, up to 10 years under German commercial and tax law (§ 257 HGB, § 147 AO), depending on the type of record.
Marketing data: Until you unsubscribe or withdraw consent, unless shorter retention is required by law.
Technical logs: For limited periods necessary for security and troubleshooting, typically from a few days to several months.
AI feature content: Retained only for the time technically necessary to process your request. Not stored by Slidesfolder afterward. For retention by our AI provider, see Google’s Gemini API data governance documentation.
Cookie data: As described in the cookie table in Section 4, varying by cookie type and provider.
We may retain data for longer where necessary to establish, exercise, or defend legal claims.
8. Your Rights Under the GDPR
If you are in the EU/EEA or another region with similar data protection rights, you have the following rights, subject to legal conditions and limitations:
Right of access: Obtain confirmation whether we process your personal data and receive a copy.
Right to rectification: Have inaccurate or incomplete data corrected.
Right to erasure: Have your data deleted in certain circumstances.
Right to restriction: Request restriction of processing in specific cases.
Right to data portability: Receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
Right to object: Object to processing based on our legitimate interests, including direct marketing. We will cease such processing unless we demonstrate compelling legitimate grounds.
Right to withdraw consent: Where processing is based on consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise your rights, contact contact@slidesfolder.com. We will respond without undue delay and within one month, extendable by two further months where necessary due to complexity.
Right to lodge a complaint: If you are not satisfied with our response, you may lodge a complaint with your local supervisory authority. For users in Berlin, the competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (https://www.datenschutz-berlin.de). A list of EU supervisory authorities is available on the European Data Protection Board website.
9. Additional Information for US Residents
If you are a resident of California, Colorado, Connecticut, Virginia, Texas, or another US state with a comprehensive privacy law, additional rights may apply to you. This section supplements the rest of this Privacy Policy.
9.1 Categories of Personal Information
In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA/CPRA): identifiers (name, email address, IP address); commercial information (purchase history, subscription details); internet or electronic network activity (usage data, log data); and professional information (job title, company name).
9.2 Your Rights
Depending on your state of residence, you may have the right to:
Know what personal information we collect, use, and disclose about you.
Request deletion of your personal information.
Correct inaccurate personal information.
Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. As stated in Section 5.3, we do not currently sell or share your personal information in this manner.
Not be discriminated against for exercising your privacy rights.
To exercise these rights, contact contact@slidesfolder.com. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.
9.3 Shine the Light (California Civil Code § 1798.83)
We do not disclose personal information to third parties for their own direct marketing purposes.
10. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, Slidesfolder will:
Notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33.
Where the breach is likely to result in a high risk to your rights and freedoms, notify affected individuals without undue delay, in accordance with GDPR Article 34.
Document all breaches, including their effects and the remedial actions taken.
11. Security
Slidesfolder implements appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
Encryption in transit (HTTPS/TLS) and at rest where appropriate.
Access controls and role-based permissions.
Regular security updates, logging, and monitoring.
Internal policies on data protection and incident response.
No system can be completely secure, but we work continuously to maintain and improve the security of Slidesfolder.
12. Children’s Privacy
Slidesfolder is not directed at children under 16 (or a higher age threshold where required by local law), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact contact@slidesfolder.com so we can take appropriate steps.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or technological developments.
The latest version will always be available on our website and will indicate the date of the last update. For material changes that significantly affect your rights or how we use your data, we will provide additional notice (for example, via email or through our website) and, where required, seek your consent.