Privacy Policy
1.  Consent and Scope
By using DataRolls or creating a member account, you consent to the data practices described in this Privacy Policy.
This Policy governs how DataRolls (“the Company”, “we”, “us”, or “our”) collects, uses, discloses, and protects your Personal Information.
Please note that this Policy applies only to websites and services operated by DataRolls. It does not apply to any third-party websites, services, or organizations that we may link to.
2.  General
“Personal Information” refers to any data that can be used to identify an individual, including but not limited to first and last name, email address, phone number, or other contact information.
In certain areas of our website or services, such as account registration, customer support, or transactions, we may ask you to provide Personal Information to enhance your experience, enable certain features, or complete transactions.
Providing this information is voluntary, but certain functionalities or services may not be available without it.
3.  Updating Your Personal Information
You can review and update your Personal Information, or change your marketing preferences, at any time by logging in to your account and accessing the “My Account” section.
4.  Support and Contact
If you contact DataRolls, we may retain a record of your correspondence and collect your email address for reference and service purposes.
We will not sell, transfer, or otherwise misuse your contact details.
Our website may include links to external websites. DataRolls is not responsible for the privacy practices or content of those third-party sites.
We encourage users to review the privacy statements of any website that collects personally identifiable information.
5.  Cookies
DataRolls uses both session and persistent cookies to improve site functionality and user experience.
• Session cookies expire when you close your browser.
• Persistent cookies remain on your device for a set period or until you delete them.
Cookies help us analyze traffic, understand usage patterns, record survey participation, and deliver relevant promotions.
You may remove or block cookies through your browser settings, but this may affect site performance or functionality.
We do not share personally identifiable cookie data with third parties, except as described under “Sharing” below.
6.  Market Research
We may share certain personal or demographic information (e.g., unique ID, postal code, gender, marital status, education, employment data, or non-identifiable household information) with approved Third-Party Market Research Companies (“Third Party MR Companies”).
This allows us to identify survey opportunities you may qualify for.
If eligible, the Third Party MR Company will send a unique survey link through us - we will never share your name, email address, or phone number with them.
Data shared for these purposes may be processed or stored outside your country of residence.
To opt out of DataRolls survey invitations, please visit the DataRolls Survey Panel or contact us directly.
Participation in such surveys does not establish membership or entitle you to any benefits from the Third Party MR Companies.
7.  Sharing
We may disclose Personal Information if required by law or when we believe in good faith that such disclosure is necessary to:
• comply with legal obligations, court orders, or government requests,
• protect our rights, safety, or property, or that of others,
• investigate or prevent fraud or other illegal activities, or
• enforce our terms of service.
8.  Business Transitions
In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Information may be transferred as part of the business assets, provided that such transfer complies with applicable privacy laws.
9.  Opt-Out
You may unsubscribe from communications or delete your DataRolls account at any time by clicking “Remove Account” or emailing us.
We will process removal requests within 10 business days, though typically within 24 hours.
10.  Changes to This Privacy Policy
DataRolls may update this Policy periodically.
We will notify you of significant changes by posting a prominent notice on our website or by direct communication when appropriate.
11.  Personal Information We Collect
We may collect the following categories of information:
• Personal Profile Information: Name, email, password (or via linked social media accounts).
• Contact Information: Phone number or other contact details for survey delivery or communication.
• Questionnaire Data: Information about your background, education, occupation, consumer habits, and optionally health-related information.
• Opinion Data: Survey and research responses, including written, audio, or video submissions.
• User Experience Data: Login activity, comments, ratings, poll responses, and site interactions.
• Rewards Information: Details necessary to issue rewards or manage credit point balances.
• Correspondence Data: Communications you send to us.
• Social Media Information: Data shared via social media integration or feeds.
• Device and Technical Data: Information such as device ID, operating system, browser type, IP address, time zone, MAC address, or geolocation data (if permitted).
12.  Geo-Location Data
With your explicit consent, the DataRolls App or website may collect geo-location data to:
• Offer location-based surveys,
• Analyze aggregated location patterns for research, or
• Deliver relevant local content or ads.
You can withdraw consent by changing your device’s privacy settings. Once disabled, location-based services may become unavailable.
13.  Deletion of Your Personal Information
You may request deletion of your Personal Information at any time by:
1.Emailing us at DataRolls Contact Email
2.Clicking “Remove Account” in your account settings.
Upon deletion, your account will be permanently closed and cannot be reinstated.
Requests are processed within 10 business days (typically within 24 hours).
14.  App Data
When using the DataRolls mobile application, we may collect limited system and performance information (such as device model, operating system version, advertising ID, and app version) for validation, security, and fraud prevention purposes.
15.  Cookies and Advertising Technologies
We and our third-party partners may use cookies, web beacons, and embedded scripts for analytics, personalization, and fraud prevention.
These technologies help us enhance your experience and provide relevant advertising, content, and rewards.
You may manage your cookie preferences through your browser settings or opt-out tools provided in our Cookie Policy.
16.  GDPR Privacy
Legal Basis for Processing Personal Data under GDPR
We may process Personal Data under the following conditions:
• Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
• Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
• Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
• Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.
• Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
• Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.
In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Your Rights under the GDPR
The Company undertakes to respect the confidentiality ofYour Personal Data and to guarantee You can exercise Your rights.
You have the right under this Privacy Policy, and by law if You are within the EU, to:
• Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.
• Request correction of the Personal Data that We hold about You. You have the right to to have any incomplete or inaccurate information We hold about You corrected.
• Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.
• Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.
• Request the transfer of Your Personal Data. We will provide to You, or to a third- party You have chosen, Your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.
• Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, We may not be able to provide You with access to certain specific functionalities of the Service.
Exercising of Your GDPR Data Protection Rights
You may exercise your rights of access, rectification, cancellation and opposition by contacting us. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will try our best to respond to you as soon as possible.
We will respond to your request without undue delay and in any event within one month of receipt of your request. In case the complexity or number of requests requires an extension of this period, we will inform you of any such extension within one month of receipt of your request, together with the reasons for the delay. In this case, the period period may be extended by two further months where necessary.
You have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, if you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA.
17.  CCPA Privacy
Your Rights under the CCPA
Under this Privacy Policy, and by law if You are a resident of California, You have the following rights:
• The right to notice. You must be properly notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
• The right to access / the right to request. The CCPA permits You to request and obtain from the Company information regarding the disclosure of Your Personal Data that has been collected in the past 12 months by the Company or its subsidiaries to a third-party for the third party's direct marketing purposes.
• The right to say no to the sale of Personal Data. You also have the right to ask the Company not to sell Your Personal Data to third parties. You can submit such a request by visiting our "Do Not Sell My Personal Information" section or web page.
• The right to know about Your Personal Data. You have the right to request and obtain from the Company information regarding the disclosure of the following:
      - The categories of Personal Data collected.
      - The sources from which the Personal Data was collected
      - The business or commercial purpose for collecting or selling the Personal Data
      - Categories of third parties with whom We share Personal Data
      - The specific pieces of Personal Data we collected about You
• The right to delete Personal Data. You also have the right to request the deletion of Your Personal Data that have been collected in the past 12 months.
• The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your Consumer's rights, including by:
      - Denying goods or services to You
      - Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
      - Providing a different level or quality of goods or services to You
      - Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services.
Exercising Your CCPA Data Protection Rights
In order to exercise any of Your rights under the CCPA, and if you are a California resident, You can email or call us or visit our "Do Not Sell My Personal Information" section or web page.
The Company will disclose and deliver the required information free of charge within 45 days of receiving Your verifiable request.The time period to provide the required information may be extended once by an additional 45 days when reasonable necessary and with prior notice.
18.  VCDPA privacy
Information for Virginia consumers
This part of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the controller running this Application and, if the case may be, its parent, subsidiaries and affiliates (for the purposes of this section referred to collectively as “we”, “us”, “our”).
The provisions contained in this section apply to all Users (Users are referred to below, simply as “you”, “your”, “yours”), who are consumers residing in the Commonwealth of Virginia, according to the “Virginia Consumer Data Protection Act" (the “VCDPA”), and, for such consumers, these provisions supersede any other possibly divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term “personal data” as defined in the VCDPA.
Categories of personal data we collect and process
We have collected the following categories of personal data: E-Mail
We will not collect additional categories of personal data without notifying you.
Why we process your personal data
To find out why we process your personal data, you can read the sections titled “Information we collect” and “Legal bases for processing” within this document.
We won’t process your information for unexpected purposes, or for purposes incompatible with the purposes originally disclosed, without your consent.
You can freely give, deny, or withdraw such consent at any time using the contact details provided in this document.
Processing of your personal data for targeted advertising
We do not process your personal data for targeted advertising. If we decide to do so, we will inform you beforehand and will grant your right to opt out of the processing of your personal data for targeted advertising.
Your privacy rights under the Virginia Consumer Data Protection Act and how to exercise them
You may exercise certain rights regarding your data processed by us. In particular, you have the right to do the following:
• access personal data: the right to know. You have the right to request that we confirm whether or not we are processing your personal data. You also have the right to access such personal data.
• correct inaccurate personal data. You have the right to request that we correct any inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
• request the deletion of your personal data. You have the right to request that we delete any of your personal data.
• obtain a copy of your personal data. We will provide your personal data in a portable and usable format that allows you to transfer data easily to another entity – provided that this is technically feasible.
• opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
• non-discrimination. We will not discriminate against you for exercising your rights under the VCDPA. This means that we will not, among other things, deny goods or services, charge you a different price, or provide a different level or quality of goods or services just because you exercised your consumer privacy rights. However, if you refuse to provide your personal data to us or ask us to delete or stop selling your personal data, and that personal data or sale is necessary for us to provide you with goods or services, we may not be able to complete that transaction. To the extent permitted by the law, we may offer a different price, rate, level, quality, or selection of goods or services to you, including offering goods or services for no fee, if you have exercised your right to opt out, or our offer is related to your voluntary participation in a bona fide loyalty, rewards, premium features, discounts, or club card program.
How to exercise your rights
To exercise the rights described above, you need to submit your request to us by contacting us via the contact details provided in this document.
For us to respond to your request, we need to know who you are.
We will not respond to any request if we are unable to verify your identity using commercially reasonable efforts and therefore confirm that the personal data in our possession actually relates to you. In such cases, we may request that you provide additional information which is reasonably necessary to authenticate you and your request.
Making a consumer request does not require you to create an account with us. However, we may require you to use your existing account. We will use any personal data collected from you in connection with your request solely for the purposes of authentication, without further disclosing the personal data, retaining it longer than necessary for purposes of authentication, or using it for unrelated purposes.
If you are an adult, you can make a request on behalf of a minor under your parental authority.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases and at the latest within 45 days of its receipt. Should we need more time, we will explain to you the reasons why, and how much more time we need. In this regard, please note that we may take up to 90 days to fulfill your request.
Should we deny your request, we will explain to you the reasons behind our denial without undue delay, but in all cases and at the latest within 45 days of receipt of the request. It is your right to appeal such decision by submitting a request to us via the details provided in this document. Within 60 days of receipt of the appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may contact the Attorney General to submit a complaint.
19.  LGPD Privacy
On September 18, 2020, the Lei Geral de Proteção de Dados Pessoais (LGPD) came into effect for Brazilian residents. In addition to the rights outlined in our Privacy Policy, as a user located in Brazil, you may be able to exercise the following rights with respect to the personal information that we have collected, subject to certain limitations:
• The right to confirmation of the existence of the processing. You have the right to ask that we confirm whether we process your personal data.
• The right to access the data. You have the right to access the personal data we hold about you and certain information about how we use it and who we share it with, including information about any public and private entities we have shared your personal data with.
• The right to correct incomplete, inaccurate, or out-of-date data. If you want to correct or revise any of the data we retain on you, you may do so by accessing your account and the information contained within it or contacting our team.
• The right to anonymize, block or delete unnecessary or excessive data or data that is not being processed in compliance with the LGPD. Please note that, depending on the request, this may result in a suspension or discontinuation of certain services and may be governed by legal and/or contractual retention guidelines.
• The right to the portability of data to another service or product provider, by means of an express request. We provide you with the ability to move any of your account data to a third party, at any time.
• The right to delete personal data processed with the consent of the data subject. You have a right to request the permanent deletion of your data, subject to certain exceptions. However, please note that exercising this right may result in a suspension or discontinuation of services and may also be governed by legal and/or contractual retention guidelines.
• The right to information about the possibility of not giving consent and about the consequences of the refusal. You have the right to ask us to provide information about the possibility of not giving consent for the processing of your personal data and the consequences of such refusal.
• The right to revoke consent.
Please note that not all of these rights listed above are absolute, and limitations/exceptions apply in some cases. For example, we may not be able to fully comply with your request if we are bound by certain legal restrictions or contractual requirements, but in those circumstances, we will still respond to notify you of such a decision.
Exercising Data Portability and Deletion Rights
To exercise the data portability and deletion rights described above, please submit a verifiable consumer request to us
We will need to verify your identity before processing your request. The verifiable consumer request must:
• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or a legal representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within 15 days of its receipt but no more than 30 days. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
20.  Philippines DPA Privacy
Legal Basis for Processing Personal Data under the Data Privacy Act of 2012 (DPA)
We may collect and process Personal Data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and issuances of the National Privacy Commission (NPC).
We process Personal Data under one or more of the following lawful criteria:
Consent: You have given your consent for the processing of your Personal Data for one or more specific purposes.
Contractual necessity: Processing is necessary for the performance of a contract to which you are a party, or in order to take steps prior to entering into such contract.
Legal obligation: Processing is necessary for compliance with a legal obligation to which the Company is subject.
Vital interests: Processing is necessary to protect your life, health, or safety, or that of another individual.
Public authority: Processing is necessary for the performance of a task carried out in the interest of the public or in the exercise of official authority.
Legitimate interest: Processing is necessary to pursue the legitimate interests of the Company or a third party, except where such interests are overridden by your fundamental rights and freedoms.
In all cases, the Company ensures that your Personal Data is processed fairly, lawfully, and transparently, and only for purposes that are declared, specified, and legitimate.
Your Rights under the Data Privacy Act
Under the DPA, you are entitled to the following rights regarding your Personal Data:
Right to be informed: You have the right to be notified and informed before your Personal Data is collected and processed, including the purpose and scope of processing.
Right to object: You have the right to object to the processing of your Personal Data, including processing for direct marketing, automated processing, or profiling.
Right to access: You have the right to request access to your Personal Data that we hold and obtain a copy of it in an intelligible form.
Right to rectification: You have the right to dispute any inaccuracy or error in your Personal Data and have it corrected immediately.
Right to erasure or blocking: You have the right to suspend, withdraw, or order the blocking, removal, or destruction of your Personal Data if it is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the declared purpose.
Right to data portability: When applicable, you have the right to obtain and electronically move, copy, or transfer your Personal Data for further use.
Right to damages: You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your Personal Data.
Exercising Your DPA Data Protection Rights
To exercise any of your rights under the DPA, or for any inquiries or complaints, you may contact us using the contact details provided in this Privacy Policy. We may require you to verify your identity before processing your request.
We will respond to your request within a reasonable period, and in accordance with the Data Privacy Act and applicable regulations.
If you believe that your privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) through its official website: https://privacy.gov.ph
21.  Saudi Arabia Privacy
Legal Basis for Processing Personal Data under the Personal Data Protection Law (PDPL)
We collect and process Personal Data in accordance with the Saudi Arabia Personal Data Protection Law (PDPL), its Implementing Regulations, and the guidance of the Saudi Data & Artificial Intelligence Authority (SDAIA).
We may process your Personal Data under one or more of the following lawful bases:
Consent: You have given clear consent for the processing of your Personal Data for one or more specific purposes.
Contractual necessity: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into such a contract.
Legal obligation: Processing is necessary for compliance with a legal or regulatory obligation to which the Company is subject.
Vital interests: Processing is necessary to protect your vital interests or those of another individual.
Public interest: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Legitimate interest: Processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party, provided that such interests do not prejudice your fundamental rights and freedoms.
In all cases, the Company ensures that your Personal Data is processed fairly, lawfully, and transparently, and only for declared, specific, and legitimate purposes.
Your Rights under the Saudi PDPL
Under the PDPL, you have the following rights concerning your Personal Data:
Right to be informed: You have the right to be notified before your Personal Data is collected or processed, including the purpose, type of data, method of collection, and identity of the data controller.
Right to access: You have the right to request access to the Personal Data we hold about you and obtain a copy in an intelligible format.
Right to rectification: You have the right to request correction or completion of any inaccurate or incomplete Personal Data we hold about you.
Right to deletion: You have the right to request the deletion, destruction, or anonymization of your Personal Data when it is no longer necessary for the purposes for which it was collected, or if it was processed unlawfully.
Right to withdraw consent: Where processing is based on consent, you have the right to withdraw such consent at any time, without affecting the lawfulness of processing prior to withdrawal.
Right to data portability (when applicable): You have the right to request to receive your Personal Data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
Right to lodge a complaint: You have the right to file a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) if you believe that your privacy rights under the PDPL have been violated.
Exercising Your PDPL Data Protection Rights
If you wish to exercise any of your rights under the PDPL, or if you have any questions or concerns about how we handle your Personal Data, please contact us using the contact details provided in this Privacy Policy.
We may need to verify your identity before processing your request to ensure security and compliance.
We will respond to your request within a reasonable time and in accordance with the PDPL and applicable regulations.
You may also contact the Saudi Data & Artificial Intelligence Authority (SDAIA) for more information or to submit a complaint through their official website: https://sdaia.gov.sa
22.  Australia & New Zealand Privacy
Legal Basis for Processing Personal Data
We collect and process Personal Data in accordance with the Australian Privacy Act 1988 (including the Australian Privacy Principles) and the New Zealand Privacy Act 2020 (including the Information Privacy Principles).
We may process your Personal Data under one or more of the following lawful bases:
Consent: You have provided your explicit consent for the collection and processing of your Personal Data for one or more specific purposes.
Contractual necessity: Processing is necessary to perform a contract with you or take steps prior to entering into a contract.
Legal obligation: Processing is necessary to comply with applicable legal or regulatory obligations.
Legitimate interests / Public functions: Processing is necessary for legitimate business interests or for performing functions authorized by law, provided that such interests do not override your rights or freedoms.
We will always process your Personal Data fairly, lawfully, transparently, and only for declared, specific, and legitimate purposes.
Your Rights under Australian and New Zealand Privacy Laws
Under the Australian Privacy Act 1988 and New Zealand Privacy Act 2020, you are entitled to the following rights regarding your Personal Data:
Right to be informed: You have the right to know what Personal Data is being collected and how it is used.
Right to access: You may request access to your Personal Data held by us and obtain a copy.
Right to correction / rectification: You may request correction of your Personal Data if it is inaccurate, incomplete, or outdated.
Right to deletion / erasure: You may request that your Personal Data be deleted where permitted by law.
Right to object: You may object to the processing of your Personal Data in certain circumstances.
Right to complain: You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or the New Zealand Privacy Commissioner if you believe your privacy rights have been violated.
Data Breaches
If a data breach occurs that poses a risk of serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme in Australia and the notification requirements under New Zealand Privacy Law. This includes notifying affected individuals and the relevant authority in accordance with the law.
International Data Transfers
Your Personal Data may be transferred to third parties outside Australia or New Zealand for processing in connection with the services we provide.
We ensure that appropriate safeguards are in place to protect your Personal Data in accordance with applicable privacy laws.

Last Update: Oct 23, 2025