LAST UPDATED: January 10, 2023
Data That We Collect and Receive
When you interact with us through the Website or Store, we may collect data from you or from other sources. This “data” may be information that you directly provide to us, such as personal information you provide when you visit the Website or Store, or information that is passively or automatically collected from you, such as anonymous information collected from your browser or device. The categories of other sources from which we collect personal data include our affiliates, partners, vendors, and public sources.
The data we collect consists of personal identifiers, commercial information, Internet/other electronic network activity information, geolocation data, professional or employment-related information, characteristics of protected classifications, and inferences drawn from this information. More specifically, the data we collect includes, but is not limited to:
- Data that you provide directly when you register for, or use, the Store or services on the Website. This data will vary, but typically consists of name, email address, postal address, phone number and other similar contact data. We also receive data from the communications you send to us, such as customer service inquiries, product reviews and other feedback.
- User credentials, such as username, password, password hints and similar security information used to create an account and authenticate users of the Website or Store.
- Demographic data, such as age, gender, country and language preference.
- Payment data, such as credit card information and billing address.
- Device data, such as type of device, operating system and other software installed on the device, device settings, IP address, device identifiers and error reports.
- Usage data, such as the programs and features you access, items you purchase, and the timing, frequency and duration of your interactions through the Website or Store.
- Location data, such as IP addresses received from your device.
How We Use Data
We use the data we collect for the following purposes:
- Operating our business. We use the data we collect to operate our business, including providing and improving the Website and Store. For example, to diagnose and fix problems with the Services and providing other customer support services.
- Communicating with you. We use the data we collect to communicate with you, including responding to your requests or inquiries.
- Marketing and advertising. We use the data we collect for marketing or advertising purposes, including, without limitation, to send you promotional messages and deliver advertisements about products, services, or events that may be of interest to you.
- Security, compliance and enforcement. We use the data we collect for security, compliance and enforcement purposes, including to detect and prevent abuse, fraud or other unlawful or unauthorized activities, or to resolve disputes.
- Other. We may also use your data in any other manner as disclosed at the time of collection, or when we have otherwise obtained consent.
How We Share and Disclose Data
There are times when the data we collect may be shared by Firefly. We share your data for the following purposes:
- When necessary under certain circumstances. We may disclose your personal data when we believe that disclosure is necessary to:
- Comply with applicable law or respond to valid legal process.
- Protect the safety and security of our fans or our Services.
- Prevent fraud, abuse or other unlawful or unauthorized activities.
- Protect the rights or property of us or third parties, including enforcing the terms of our agreements.
- We may also share your data for any other purpose as disclosed at the time of collection, or when we have otherwise obtained consent.
What Choices You Have
You have many choices about how we collect, use and share your data.
- You can choose whether you wish to receive promotional messages from Firefly and which types of messages you wish to receive. If you receive promotional messages from us and would like to opt out, you may do so by following instructions within those messages. Please note that these preferences do not apply to informational or transactional communications regarding the Store or other communications that have their own unsubscribe method.
- You also have choices about the data you provide directly to us when you register for or use the Services. Please note, however, that if you choose not to provide data that is necessary to provide certain features of the Website or Store, your use of the Website or Store may not include those features.
Cookies and Similar Technologies
- Cookies. Cookies are small text files that are unique to your device or browser. They can either be session-based (i.e., lasting only while your browser is open and automatically deleted when you close your browser) or persistent (i.e., lasting until you delete them or they expire).
- Locally stored objects. Locally stored objects (“LSOs”), also commonly called “Flash cookies,” are stored on your device or browser to provide Services that use Adobe Flash technology.
- Web beacons. “Web beacons” or clear GIFs are small pieces of code placed on a Service to collect data about users of that Service.
- Software development kits. Software Development Kits (“SDKs”) are bits of computer code used by mobile app developers to enable or enhance various features of a mobile app.
- We use Tracking Technologies for the following purposes:
- To store your sign-in information. This allows the Website or Store to remember your user preferences and give you a more tailored experience based on those preferences. It also allows you to use the Website or Store without having to sign-in on each page or each time you return.
- To gather usage and performance data about the Website and Store.
- To track how many users have seen or clicked on an advertisement. This allows us to learn which advertising campaigns are most effective and also to help limit the number of times a user is shown the same advertisement.
- In some cases, we may work with third parties to synchronize our unique, anonymous identifiers (such as those associated with Tracking Technologies) with the third party’s own identifiers. This enables us to better achieve each of the purposes described above.
- Managing Tracking Technologies. Most web browsers give you the ability to manage Tracking Technologies used on a website, including blocking or deleting them. Please note that if you choose to block Tracking Technologies, you may not be able to use certain features that depend on those Tracking Technologies. If you choose to delete Tracking Technologies, any settings and preferences that were associated with those Tracking Technologies will also be deleted and may need to be reset.
Security of Data
Firefly takes security seriously. We take a number of steps to protect your data from unauthorized access, use or disclosure. These steps take into account the sensitivity of the data we collect and use, as well as the current state of technology. This includes, for example, storing your data on systems that have limited access and are maintained in controlled facilities. We also use, and require our vendors to use, industry standard security protocols when processing any payments for your use of the Services.
It is important to remember that no system can be guaranteed to be 100% secure. We recommend that you help us keep your data safe by taking reasonable steps such as keeping your passwords private and not disclosing sensitive personal data in places that can be accessed publicly.
Children and Parents
Although there are Firefly fans of all ages, the Website and Store are not directed at children under the age of 16, and our policy is to not knowingly collect personal data from children under the age of 13. We encourage parents and guardians to monitor their children’s online behavior, put parental control tools in place, and teach children not to provide their personal data through the Services without parental consent.
We retain personal data for as long as necessary to provide the services on the Website and Store and fulfill the transactions you have requested, or for other necessary purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these factors vary for different types of personal data, actual retention periods may vary.
California Privacy Rights
- The categories of personal information we collect about you.
- The categories of sources for the personal information we collect about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information collected about you.
- If we disclosed your personal information for a business purpose, a list of the categories of personal information we have disclosed in the prior twelve months.
- If we sold your personal information for a business purpose, a list of the categories of personal information we have sold in the prior twelve months.
You also have the right to request that we delete any of your personal information. In some circumstances we may not be able to honor your request for deletion – for example, if we need to hold on to your information to protect the security or functionality of our operations, to service your account, or to comply with legal obligations.
You also have the right to direct us not to sell your personal information at any time.
You have the right to designate an authorized agent to make any of these requests under the CCPA on your behalf. We will not deny services, charge different prices, offer a different quality of service or otherwise discriminate against you for exercising your rights under the CCPA.
European Privacy Rights
We adhere to applicable data protection laws in the European Union (“EU”). In accordance with the General Data Protection Regulation (“GDPR”), users who are located in the EU have the following rights:
- If the processing of personal data is based on your consent, the right to withdraw consent for future processing of that data.
- The right to request from Firefly, a “data controller” as defined under the GDPR, access to and rectification of your personal data.
- Subject to limitations as provided for in the GDPR, the right to request restriction of the processing of your personal data.
- Subject to limitations as provided for in the GDPR, the right to request erasure of your personal data.
Policy Changes; How to Contact Us
Firefly Aerospace Inc.
Attn: General Counsel
1320 Arrow Point Drive #109
Cedar Park, Texas 78613 USA