Supplemental Privacy Notice for Residents of the European Economic Area and United Kingdom
Updated: January 2025
Table of Contents
- Introduction
- Lawful Basis for Processing Personal Information
- Storage of Personal Information Outside the EEA or UK
- Your Rights to Your Personal Information
- Complaints Regarding Our Privacy Practices
- How to Make a Rights Request
- Failure to Provide Personal Data
I. Introduction
This Supplemental Privacy Notice (“Supplemental Notice”) is part of and supplements the GeorgeTom Inc. (hereafter, “GeorgeTom,” “we,” “us,” “our,” or the “Company”) Privacy Policy and further describes how GeorgeTom collects, uses, and shares Personal Information. This Supplemental Notice applies to the Company’s online and offline information gathering and dissemination practices in connection with the Company’s website (the “Site”) and Personal Information we may collect or receive through other means. This Supplemental Notice applies only to Personal Information collected about consumers in the European Economic Area (“EEA”) and the United Kingdom (“UK”) in accordance with Article 13 of the EU General Data Protection Regulation 2016/679 (“GDPR”), and the UK General Data Protection Regulation (“UK GDPR”).
The Company serves as the data controller of Personal Information collected and processed through its Site. We can be contacted at:
Chief Legal Officer
GeorgeTom Inc.
PO Box 158067
1906 Glen Echo Road
Nashville TN 37215
Email: [email protected]
II. Lawful Basis for Processing Personal Information
Our lawful basis for processing Personal Information collected and covered by this Supplemental Notice will depend on the nature of information collected and the purpose of processing that information as described in the chart below.
Types of Personal Information | Purpose of Processing | Lawful Basis |
Contact Information (e.g., name and email address) | Communicate and manage our relationship with you | Legitimate Business Purpose |
Gender | Marketing analytics and offerings Develop, improve, and provide content and services to you related to our website | Consent |
Date of Birth | Marketing analytics and offerings Develop, improve, and provide content and services to you related to our website | Consent |
Device/Internet information (such as computer, device, and connection information, including IP address, browser type, operating system, website usage data, etc.) | Cybersecurity Marketing analytics and offerings | Legitimate Business Purpose |
Geolocation | Marketing analytics and offerings Develop, improve, and provide content and services to you related to our website | Consent |
III. Storage of Personal Information Outside the EEA or UK
Personal Information collected by us through the Site will be processed in the United States. Visitors and users of the Site acknowledge that Personal Information provided and collected through our Site will be stored in the United States.
IV. Your Rights to Your Personal Information
In certain circumstances and in accordance with applicable local laws, you have rights under data protection laws with respect to your Personal Information. Your rights include the (i) right of access; (ii) right to correction; (iii) right to erasure; (iv) right to restriction of processing; (v) right to data portability; (vi) right to object to certain types of processing; and (vii) right to withdraw consent to certain types of processing.
V. Complaints Regarding Our Privacy Practices
If you have any complaints regarding our privacy practices, you have the right to make a complaint with your national data protection authority. However, we would appreciate the opportunity to address any concern that you may have by emailing us at [email protected].
VI. How to Make a Rights Request
A. Instructions for Submitting a Rights Request to Us
If you wish to exercise any of the rights summarized above, you can do so in one of the following ways:
Click on this link to complete and submit the referenced web form; or
Reach us by email or U.S. mail at:
Chief Legal Officer
GeorgeTom Inc.
PO Box 158067
1906 Glen Echo Road
Nashville TN 37215
Email: [email protected]
Upon receiving a verifiable request, we will confirm receipt of the request within 10 days, provide information about how we will verify and handle the request, and advise when you should expect to receive a response.
B. Verification Of the Person Making a Consumer Rights Request
Of course, we need to be reasonably sure that the person making the request is you! So, we may need some information from you to verify that you are the person whose Personal Information you are asking to know about or to delete. Accordingly, the verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify whether you are the person about whom we collected Personal Information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
VII. Failure to Provide Personal Data
Where you fail to provide Personal Information by law or by any contract we have with you, we may not be able to fulfill the contract or service we have or are trying to enter into with you. In this case, we may have to cancel a service or order you have with us, but we will notify you if that is the case at the time.