Privacy Policy

Welcome to the Anomaly website. Protecting your personal privacy is important to Anomaly (“we,” “us,” or “Anomaly”). The purpose of this Privacy Policy is to help you understand how Anomaly collects, uses and safeguards the information you provide to us. This Privacy Policy applies only to the website located at https://www.anomaly.com (the “Site”), and not to any other website or service.

By using or accessing the Site, you signify your agreement to be bound by this Privacy Policy. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MAY NOT ACCESS OR OTHERWISE USE THE SITE.

Personally Identifiable Information That We Collect

Anomaly will not collect personally identifiable information from you unless you voluntarily provide it to us. Personally identifiable information may include your name, email address, physical address and other information that specifically identifies you. Anomaly also will not sell your personal information to third-parties.

Non-Personal or Aggregate Information That We Collect

When you access the Site, we may automatically collect non-personally identifiable information from you (through cookies and other methods), such as IP address, web pages viewed, browser type, referring service, usage and browsing habits on the Site, and similar data.

Information Use

We will only use your personally identifiable information as described below, unless you have specifically consented to another type of use, either at the time the personally identifiable information is collected from you or through some other form of consent from you or notification to you:

  • We may use your personally identifiable information to respond to your inquiries or requests.

  • We may use your personally identifiable information to send emails from time to time, but we will not provide your personally identifiable information to third parties for them to contact you directly unless otherwise permitted by this Privacy Policy or if you provide your consent.

  • We may permit our vendors and subcontractors to access your personally identifiable information, but they are only permitted to do so in connection with performing services for us. They are not authorized by us to use the information for their own benefit.

  • We may disclose personally identifiable information as required by law or legal process.

  • We may disclose personally identifiable information to investigate suspected fraud, harassment or other violations of any law, rule or regulation, or the terms or policies for our services or our clients.

  • We may transfer your personally identifiable information in connection with the sale or merger or change of control of the Site, Anomaly or the division responsible for the services with which your personally identifiable information is associated.

  • We may share your personally identifiable information with an affiliate of Anomaly who is in the same corporate family as us as long as their privacy practices are substantially similar to ours.

  • Non-personally identifiable or aggregate information may be shared with any number of parties, provided that such information shall not specifically identify you.

Client Data

We provide services for our clients, and may collect and process information about individuals at the direction of our clients (“Client Data”). Our processing of Client Data is governed by the terms of our service agreements with our clients, and not this Privacy Policy. We are not responsible for how our clients treat the information we collect on their behalf, and we recommend you review their own privacy policies. Anomaly acknowledges that you may have rights in connection with Client Data. If your information has been processed by ANomaly on behalf of a client and you wish to exercise any rights you have with such information, please inquire with our client directly. If you wish to make your request directly to Anomaly, please provide the name of the Anomaly client on whose behalf Anomaly processed your information. We will refer your request to that client, and will support them to the extent required by applicable law in responding to your request.

Security

We take appropriate commercially reasonable physical, electronic, and other security measures to help safeguard personal information from unauthorized access, alteration, or disclosure. Even though we follow reasonable procedures to try to protect the information in our possession, no security system is perfect and we cannot promise, and you should not expect, that your information will be secure in all circumstances

Rights and Choices for California Residents

The California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2023 (“CPRA”) provides California residents with specific rights regarding their personal information. This section describes your CCPA and CPRA rights and explains how to exercise those rights.

Right to Know

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (“the Right to Know”). Once we receive your request and confirm your identity, we will disclose to you:

  • The categories of personal information we collected about you.

  • The categories of personal information that we disclosed about you for a business or commercial purpose and an explanation of the business or commercial purpose that the personal information was used for.

  • The categories of third parties with whom we share that personal information.

  • The specific pieces of personal information we collected about you (also known as a data portability request).

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the “right to delete”). Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us to:

  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities, to the extent that the use of your personal information is reasonable and proportionate for these purposes;

  • Debug to repair and identify and repair errors that impair functionality;

  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;

  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code §1546 et. seq.);

  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;

  • Comply with a legal obligation; and

  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal information not subject to one of these exceptions from our records and direct any of our service providers to take similar action.

Correct Inaccurate Personal Information

You have the right to request that we correct any potential incorrect personal information that we may have about you.

Exercising Your Rights

To exercise your rights to know or delete described above, please submit a request by either:

  • Calling Us at 917-595-2200

  • Emailing Us at legal@anomaly.com

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information.

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information; and

  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us.

We hope to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing, by mail or electronically.

Upon verifying your request to delete, we will delete your personal information from our records, and notify any Service Providers or Contractors to delete your personal information. We will also notify any Third Parties that we may have shared the personal information with to delete it unless this proves impossible, involves disproportionate effort or the personal information is subject to one of the exceptions listed above.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons that we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA or CPRA rights.

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code §1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make a request please send an email to legal@anomaly.com or write to us at Anomaly, Attn: Legal Department, 536 Broadway, 11th Floor, New York NY 10012.

Children

We do not intentionally collect personally identifiable information from children under the age of 13. When we become aware that personally identifiable information from a child under 13 has been collected without such child’s parent or guardian’s consent, we will use all reasonable efforts to delete such information from our database.

Third-Party Links

The Site may link to websites operated by third parties that we do not control. We do not monitor, control, or endorse the information collection or privacy practices of any third parties. We strongly encourage you to become familiar with the privacy practices of every website you visit and to contact them if you have any questions about their respective privacy policies and practices.

Changes to this Privacy Policy

We reserve the right, at our discretion, to change, modify, add or remove portions from this Privacy Policy at any time. However, if at any time in the future we plan to use personally identifiable information in a way that materially differs from this Privacy Policy, including sharing such information with more third parties, we will post such changes here and provide you the opportunity to opt-out of such differing uses. Your continued use of the Site following the posting of any changes to this Privacy Policy means you accept such changes.

Site Terms of Use

Use of the Site is governed by and subject to the Terms of Use posted on the Site. This Privacy Policy is incorporated into such Terms of Use.

Contact Information

If you have any questions regarding this Policy, contact Anomaly at legal@anomaly.com or by mail at Anomaly, Attn: Legal Department, 536 Broadway, 11th Floor, New York NY 10012.

Effective Date

This Privacy Policy was last updated on October 20, 2022.