This privacy policy as well as our Terms of Service found here: https://gotengo.me/terms.html (the "Terms of Service") govern your access of https://gotengo.me (and subsites), https://www.whatifmachines.com (and subsites), as well as the Gotengo application (collectively, the "Products") , whether: (a) accessed on a computer connected to the internet at https://gotengo.me (and subsites), https://www.whatifmachines.com (and subsites) (collectively, the "Sites") (b) on the What If Machines, Inc. owned social media properties (including those carrying the Gotengo name); or (c) by mobile device, either through an app download or by accessing the Sites (individually and collectively, (a), (b) and (c) are the Products), as owned and operated by What If Machines, Inc., a Canadian corporation having its location at 80 Atlantic Ave, Suite 400, Toronto, ON M6K 1X9 (referred to in these Terms as "we", "us", "WIM", "What If Machines" or the ?Company").

Gotengo and our affiliates and subsidiaries are committed to maintaining the confidentiality, integrity and security of any Personal Information (as defined below) about users of our Products. We aim to deliver to our users compelling Products, while respecting your privacy expectations and protecting your Personal Information. This privacy policy (the "Privacy Policy"), describes how we collect, use, disclose and protect the Personal Information of our customers and website users ("you"), describe the types of information we may collect from you or that you may provide when you visit the Site, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

We will only use your Personal Information in accordance with this policy unless otherwise required by applicable law. We will take steps to ensure that the Personal Information that we collect about you is relevant, not excessive, and used for limited purposes.

Privacy laws in Canada generally define "personal information" as any information about an identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a single person. Personal information does not include business contact information, including your name, title, or business contact information.

Gotengo collects sensitive personal information, specifically physical characteristics (such as height, weight, and age) that you choose to provide to us. You are not required to provide this information to use our services. You may also choose to connect this personal information to an email address supplied by you to create a user account, but you are not required to do so to use our services. This data is used to provide you with a personalized experience and hyper-personalized recommendations if you choose to use these features. You have the right to permanently delete this personal information at any time as well as the right to limit the use of your sensitive personal information to only what is necessary to perform the services you requested. You can exercise this right at any time by changing or deleting your settings on the "Personalize" webpage of our website.

Other personal information, including billing and payment information is stored by Gotengo?s e-commerce and payment processing partners and is not retained by Gotengo.

This policy applies to information we collect, use, or disclose about our customers and the Website and Product users:

• On this Website and Products;
• In email, text, and other electronic messages between you and this Website and Products;
• Through mobile and desktop applications you download, which provide dedicated non-browser-based interaction between you and this Website and Products;
• When you interact with our advertising and applications on third party websites and services if those applications or advertising include links to this policy.

The Website and Products may include links to third-party websites, plug-ins, services, social networks, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. If you follow a link to a third-party website or engage a third-party plugin, please note that these third parties have their own privacy policies and we do not accept any responsibility or liability for these policies. We do not control these third-party websites, and we encourage you to read the privacy policy of every website you visit.

Please read this policy carefully to understand our policies and practices for collecting, processing, and storing your information. If you do not agree with our policies and practices, your choice is not to use our Website and Products. By accessing or using this Website and the Products, you indicate that you understand, accept, and consent to the practices described in this policy. This policy may change from time to time (See Amendments to This Privacy Policy).

In accordance with the Terms of Service, by using the Website and Products, you represent and warrant that you are the legal age of majority under applicable law to form a binding contract with the Company and meet all of the foregoing eligibility requirements. If you do not meet all of these requirements, you must not access or use the Website or Products.

We may amend or change this Privacy Policy at our sole discretion at any time, and in accordance with the amendment provisions set out in the Terms of Service. The use of the information we collect at any given point is subject to the Privacy Policy in effect at the time of collection. Your continued use of this Website and the Products after we make changes indicates that you accept and consent to those changes, so please check the policy periodically for updates. We will notify you in advance of any material changes to this policy and obtain your consent to any new ways that we collect, use, and disclose your Personal Information.

Information You Give to Us

We receive, store and process information, including Personal Information, that you make available to us when accessing our Products. This includes:

• information that you provide by filling in forms on our Website or Products. This includes information provided at the time of accepting the terms and conditions of use, providing personalized details for hyper-personalized recommendations and customizations, the uploading of images, preferences, or other similar actions;
• records and copies of your correspondence (including email address), if you contact us;
• your responses to surveys that we may ask you to complete for research purposes;
• details of transactions you carry out through our Website or Products and of the fulfillment of your orders. You may be required to provide financial information before placing an order through our Website or Products;
• your search queries on the Website or Products;
• any other type of information provided by you, the user.

Information We Collect Through Cookies and Other Automatic Data Collection Technologies

As you navigate through and interact with our website or Products, we automatically collect, store and process certain data. We use a global opt-in consent model for all non-essential data collection. This means that we do not automatically place any tracking cookies or collect any behavioral data until you have given us your explicit consent via our cookie banner. This data is usually about your device (or browser, or other technology), as well as usage of our Products. The information we collect automatically is statistical information and may include Personal Information and we may maintain it or associate it with Personal Information we collect in other ways that you provide to us, or receive from third parties. It helps us to improve our Website and our Products to deliver a better and more personalized service, including by enabling use to: estimate our audience size and usage patterns, store information about your preferences allowing us to customize our Website and our Products according to your individual interests, speed up searches, and recognize you when you return to our Website and our Products. Furthermore, we may collect or track the following:

• We collect usage stats from you, telling us which items you view and/or buy through Gotengo, and other behavioural data within our Products.
• We may collect your IP address and some device or browser data.
• We use cookies and other similar technologies, such as mobile application and other device identifiers in our Products. We may also allow our business partners to use their cookies and other tracking technologies in our Products (refer to "3rd Party Data Collection" for details) if you have consented to share this information. As a result, when you use our Products, you will provide or make available certain information to us and our business partners.
• We honor your privacy preferences. Given our global opt-in consent model, we do not automatically place any non-essential tracking technologies on your browser or device until you have given us your explicit consent. Therefore, a separate 'Do Not Track' signal is not required for you to exercise control over your personal data. We will respect your choices made through our cookie consent banner.

3rd Party Data Collection

We use certain third-party services for our Products to enhance the experience and quality of what we offer to users.

• We currently use Google Global Site Tag/Tag Manager in our Products to provide additional usage statistics for outlining how our Products are used. Google Global Site Tag/Tag Manager may place a cookie or other tracking device on your device or browser to facilitate collection of these usage statistics of our Products.
• We currently use Posthog in our Products to provide additional usage statistics for outlining how our Products are used. Posthog is implemented as a cookieless solution that does not retain tracking information between page views while collecting anonymous usage data.
• We currently use MailerLite to manage our opt-in mailing list. When you provide an email address or other information that confirms your desire to be placed on our mailing list, the information you provide to sign up to the mailing list will be stored and managed by MailerLite.
• We currently make use of Zendesk to manage communication with our users. When you contact us through our Products, a record of the communication(s) will be stored and managed by Zendesk.
• We offer the ability share item recommendations, blog articles and more through various social networks and other communication platforms in our Products. Any data you share with those platforms is between you and the platform in question (for example, usernames, passwords, your contacts, and so on) ? we do not see or record any of that information.
• When you choose to buy an item on Gotengo, your credit card will be processed by a third-party payment processor. We currently make use of Stripe to process payments. Currently, Gotengo does not store any credit card information on its servers. All payment information is stored exclusively by Stripe, is subject to Stripe?s applicable terms and conditions, and is not retained by Gotengo.
• If you have opted in to receive certain emails from us but no longer wish to have your email address/contact information used by the Company to promote our own Products or Services, you can opt-out by checking the relevant box located on the form on which we collect your data or at any other time by unsubscribing from the email list using the instructions found within the email we have sent.

We use your information to improve recommendations and provide better content to users of our Products.

We may process your personal information, including physical characteristics and preferences you provide, through automated means to create a user profile for you if you choose to use these profiling features offered by our Products. This profiling allows us to provide you with hyper-personalized recommendations and content that we believe will be a better fit for you, such as clothing or style suggestions. Our profiling activities do not constitute automated decision-making that produces legal effects or similarly significant effects concerning you. The purpose of our profiling is limited to enhancing your experience and providing personalized content when using our Products.

We may also share, in aggregate, analyzed and/or segmented data based on your usage behaviour, information supplied by you, information collected automatically by us, and third party data collection information we receive through the usage of our Products, with business partners. Business partners may use this aggregate data to make business decisions, or combine with other data they have access to. We are required to provide customer data and shipping data to business partners in order to fulfill the contract agreement between you, the customer, and Gotengo. You consent to us providing your Personal Information to business partners for such purposes.

We may share your Personal Information with affiliates, third-party vendors, consultants or other service providers (collectively, "Service Providers") who help us to run our operations or to otherwise fulfill your request or as required by law. Our Service Providers are restricted from using your Personal Information in any way other than for the service they are providing. We ensure that such third parties maintain reasonable and appropriate safeguards. In general, we may use your Personal Information to:

• enforce our Terms of Service;
• provide customer service and support, administrative messages, resolve disputes, and troubleshoot problems including helping third-party service providers fulfill their functions;
• fulfill your requests for certain features of our Products;
• customize, measure, and improve our Products;
• offer or provide you with products and services including providing you information relating to receipts, technical notices, updates, and security alerts;
• inform you of targeted marketing, service updates, and promotional offers if you have opted into such communications;
• assist us to measure our performance and to share performance information with others;
• carry out our obligations and enforce our rights arising from any contracts with you, including for billing and collection;
• comply with legal or regulatory requirements (as described below); and
• fulfill other purposes, subject to your explicit consent.

From time to time, we may offer you the opportunity to participate in contests, giveaways and other promotions. Any information submitted in connection with such activities will be treated in accordance with this Privacy Policy, except as specifically set forth in the rules for those contests, giveaways or promotions. From time to time, we may also ask you to participate in surveys designed to help us improve our Products. Any Personal Information provided to us in connection with any survey will be used only in relation to that survey and as elsewhere set forth in this Policy.

In the event that the Company, or all or a portion of our business, or one or more of its divisions, is acquired by one or more third parties as a result of an acquisition, merger, sale, reorganization, consolidation, liquidation or another similar transaction, your Personal Information shall be one of the transferred assets.

Notwithstanding the foregoing, we reserve the right (and you authorize the Company) to share or disclose your Personal Information when we determine, at our sole discretion, that the disclosure of such information is necessary or appropriate:

• to comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law;
• to enforce our rights against you or in connection with a breach by you of this Privacy Policy or the Terms of Service;
• to investigate or respond to suspected illegal or fraudulent activity or to protect the safety, rights, or property of us, our users, or others;
• to prevent prohibited or illegal activities; or
• when required by any applicable law, rule, regulation, subpoena, or other legal process.

Categories of Personal Information We Collect

We collect the following categories of personal information from our users:

Identifiers: Your name, alias, postal address, email address, account name, and unique personal identifier.

Customer Records Information: Your name and financial information related to transactions, which we collect, but do not retain on our servers.

Commercial Information: Records of products or services you purchased, obtained, or considered, as well as other purchasing histories or tendencies.

Internet or Other Electronic Network Activity Information: Your browsing history, search history, and information about your interaction with our website, products, or advertisements.

Geolocation Data: Your location data if you permit us to collect it while using our Products.

Sensory Information: Visual information from images you choose to upload.

Inferences: A profile created to reflect your preferences, characteristics, and predispositions based on the information you provide.

Sensitive Personal Information: Physical characteristics (e.g., height, weight, and age) and any other information you provide that falls under this category.

We collect and process your personal information only when we have a valid legal basis to do so, as required by laws such as the GDPR, Quebec?s Law 25, and other applicable regulations. The legal bases on which we rely include:

Consent

We process your personal information based on your explicit consent for specific purposes.

This includes:

• Personal Information you provide to us: Such as physical characteristics (e.g., height, weight, age) that you choose to provide for hyper-personalized recommendations.
• Non-essential data collection: We process certain data, such as behavioral usage statistics, IP address, and location data, for analytics and to improve our services, only after you have given us explicit consent via our cookie consent banner.
• Mailing list subscriptions: We process your email address for marketing communications only when you have explicitly opted in to our mailing list.

You have the right to withdraw your consent at any time for these processing activities.

Performance of a Contract

We process your personal information when it is necessary to fulfill our contractual obligations to you. This includes:

• Fulfilling your requests and transactions: We process information related to your orders, including the disclosure of your personal information to third-party payment processors like Stripe and to our business partners for order fulfillment and shipping.
• Providing customer service and support: We process your correspondence and other information to provide you with support, resolve disputes, and troubleshoot problems, as this is necessary to provide the services outlined in our Terms of Service.

Legitimate Interests

We may process your personal information for our legitimate business interests, provided that these interests do not override your fundamental rights and freedoms. This includes:

• Improving and customizing our services: We analyze aggregated or anonymized usage data to customize, measure, and improve our Products and to understand audience size and usage patterns.
• Security and fraud prevention: We may process your information to investigate or prevent suspected illegal or fraudulent activity, and to protect the safety, rights, or property of our company, our users, or others.
• Enforcing our legal rights: We process personal information to enforce our Terms of Service and to carry out our obligations arising from contracts with you.

Legal Obligation

We may process or disclose your personal information when we are legally required to do so. This includes:

• Compliance with legal processes: We may disclose your information to comply with any court order, law, or legal process, including responding to government or regulatory requests.
• Audit and reporting: We may retain your data for a certain period to satisfy legal, accounting, or reporting requirements.

We may transfer Personal Information that we collect or that you provide as described in this policy to our contractors, service providers, and other third parties we use to support our business, such as analytics, search engine, and payment providers. These third parties are contractually obligated to keep Personal Information confidential and to use it only for the specific purposes for which we disclose it to them.

We process, store, and transfer your Personal Information to the following locations outside of your resident jurisdiction: Canada, the United States, and the European Union.

For our European users, such transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring that appropriate safeguards are in place to protect your data.

For our Quebec users, these transfers are conducted in accordance with the law, and we ensure that the data receives a comparable level of protection to that provided under Quebec law. We conduct the appropriate Privacy Impact Assessments required for such transfers.

In these circumstances, the governments, courts, or law enforcement or regulatory agencies of those jurisdictions may be able to obtain access to your Personal Information through the laws of that country.

You are welcome to contact us to obtain further information about our policies regarding service providers outside of your jurisdiction.

Links to sites controlled or operated outside of our domain (each individually a "Third-Party Site" and, collectively, the "Third-Party Sites") are provided as a convenience to you only and do not imply an endorsement by us of a Third-Party Site or the company it purports to represent. We do not assume any responsibility for information and materials found on, or the privacy practices of, a Third-Party Site. This Privacy Policy does not apply to Third-Party Sites.

We take your privacy very seriously. To keep your Personal Information secure, you are required to safeguard your access information in accordance with the Terms of Service. In addition, we restrict unauthorized access through protective policies, procedures, and technical measures, including:

• providing reasonable physical, electronic, and administrative safeguards with regard to the storage of Personal Information;
• limiting access to your Personal Information to those employees or contractors who we reasonably believe need to come into contact with that information to provide products or services to you or in order to do their jobs; and
• governing employees and other contractors by strict standards and policies to ensure that Personal Information is secure and treated with the utmost care and respect, and in compliance with all relevant laws and regulations.

Please note that no data transmission over the internet or otherwise can be guaranteed to be completely secure. As a result, while we strive to protect your Personal Information, we cannot warrant the security of any information you transmit to us, and you do so at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website. If you have a security related concern, please contact us by filling out the contact form here. We will work closely with you to ensure a quick and personal response to your concerns.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period for different types of data is as follows:

Financial and Transactional Data: We retain personal information related to your financial transactions, billing, and order fulfillment (including shipping data) for a minimum of seven (7) years from the date of the transaction. This is to comply with our legal obligations for tax and financial record-keeping, including those required by the Canada Revenue Agency (CRA).

Customer Support and Correspondence: Records of your communications with us, such as through Zendesk, are retained for a period of seven (7) years from the last date of interaction. This allows us to provide ongoing support, address future inquiries, and defend against potential legal claims.

Analytics and Behavioral Data: Data collected for analytics and to improve our services, such as usage statistics from our analytics tools, is retained for up to a period of one (1) year. This period is sufficient for our business analysis and helps us to understand user behavior and optimize our products.

Personalized Profile Data: The personal information you provide to create a profile for hyper-personalized recommendations (e.g., physical characteristics) is retained while you have an active user account. If you choose to delete your account, this data will be permanently deleted from our systems.

Anonymized and Aggregated Data: Under some circumstances, we may anonymize or de-identify your personal information so that it can no longer be associated with you. We may then retain and use this anonymous data for any legitimate business purpose, such as improving our products or conducting research, without further notice or consent from you.

It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes. By law you have the right to request access to and to correct the Personal Information that we hold about you.

You can review and change your Personal Information by logging into the Website and visiting your account profile page.

If you want to review, verify, rectify, or withdraw consent to the use of your Personal Information you may also send us a message by filling out the contact form here to request access to, correct, or delete any Personal Information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the Personal Information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the Personal Information that we hold about you, or we may have destroyed, erased, or made your Personal Information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your Personal Information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

We will provide access to your Personal Information, subject to exceptions set out in applicable privacy legislation. Examples include:

• Information protected by solicitor-client privilege.
• Information that is part of a formal dispute resolution process.
• Information that is about another individual that would reveal their Personal Information or confidential commercial information.
• Information that is prohibitively expensive to provide.

For our European users, you have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to request that we transmit this data to another data controller, where technically feasible. You can exercise this right by contacting our Privacy Officer using the contact information provided in this policy.

If you are concerned about our response or would like to correct the information provided, you may contact us through the contact information provided below.

IF YOU CHOOSE TO ACCESS OUR PRODUCTS, YOU DO SO AT YOUR OWN RISK, AND ARE RESPONSIBLE FOR COMPLYING WITH ALL LOCAL LAWS, RULES AND REGULATIONS. WE MAY LIMIT THE AVAILABILITY OF OUR PRODUCTS IN WHOLE OR IN PART, TO ANY PERSON, GEOGRAPHIC AREA AND/OR JURISDICTION WE CHOOSE, AT ANY TIME AND IN OUR SOLE DISCRETION. OUR PRIVACY POLICY DOES NOT COVER THE INFORMATION PRACTICES OF OTHER COMPANIES AND ORGANIZATIONS WHO ADVERTISE OUR SERVICES, AND WHO MAY USE COOKIES, PIXEL TAGS, AND OTHER TECHNOLOGIES TO SERVE AND OFFER RELEVANT ADVERTISEMENTS.

In the unlikely event that we believe that the security of your Personal Information in our possession or control may have been compromised, we may seek to notify you of that development. If a notification is appropriate, we may notify you by the primary notification method we have on file.

We will never send messages to customers requesting confidential information such as passwords, credit card numbers, or social security or social insurance numbers. Please do not act on any such emails as you may compromise your Personal Information by replying or by following links to a fraudulent website.

This Privacy Policy is designed to comply with applicable data protection and privacy laws in the jurisdictions where we operate, including Canada, the United States, and the European Union. If any portion of this Privacy Policy is deemed unlawful, void or unenforceable by any arbitrator or court of competent jurisdiction, this Privacy Policy as a whole shall not be deemed unlawful, void or unenforceable, but only that portion of this Privacy Policy that is unlawful, void or unenforceable shall be stricken from this Privacy Policy. The insertions of headings are for convenient reference only and are not to affect the interpretation of this Privacy Policy.

If you have questions or concerns regarding our policy or practices, please contact our Privacy Officer:

Title: Privacy Officer
Email: privacy@whatifmachines.com

What If Machines, Inc.
80 Atlantic Ave, Suite 400
Toronto, Ontario
M6K 1X9

We have procedures in place to receive and respond to complaints or inquiries about our handling of Personal Information, our compliance with this policy, and with applicable privacy laws. To discuss our compliance with this Privacy Policy please contact us using the contact information listed above.

If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.

If you reside in the European Union, you may contact your national Data Protection Authority. Detailed contact information for your supervisory authority can typically be found on its official website.

If you reside in Quebec, you may contact the Commission d'accès à l'information du Québec (CAI).

If you reside elsewhere in Canada, you may contact the Office of the Privacy Commissioner of Canada (OPC).

If you reside in California, you may contact the California Privacy Protection Agency (CPPA).

This section applies to California residents and supplements the information in the rest of our Privacy Policy. It is provided to comply with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA).

The CPRA gives California residents the right to opt-out of the "sale" or "sharing" of their personal information.

"Selling" personal information means providing it to another business or third party for monetary or other valuable consideration.

"Sharing" personal information means disclosing it to a third party for cross-context behavioral advertising.

We do not sell personal information in exchange for monetary compensation. Furthermore, because we operate on a global opt-in consent model, we do not "share" your personal information for cross-context behavioral advertising without your explicit consent.

Right to Opt-Out of the Sale or Sharing of Personal Information

To exercise your right to opt-out of the sale or sharing of your personal information, please use our dedicated request form or send an email to our Privacy Officer. The "Your Privacy Choices" link located on our website's footer is provided for your convenience.

Request Form: Your Privacy Choices

Email: privacy@whatifmachines.com (with the subject line "Do Not Sell or Share My Personal Information Request")