International Use Policy

European Union & European Economic Area

For users in the EU and EEA, IKON processes personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). Our lawful bases for processing are:

• Contract performance (Art. 6(1)(b)): Processing necessary to deliver the IKON service to you
• Legitimate interests (Art. 6(1)(f)): Platform security, fraud prevention, analytics, and product improvement
• Legal obligation (Art. 6(1)(c)): Compliance with tax, financial, and other regulatory requirements
• Consent (Art. 6(1)(a)): For optional analytics cookies and specific marketing communications

Your GDPR Rights:

• Right of access (Art. 15): Request a copy of all personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to erasure / "Right to be forgotten" (Art. 17): Request deletion of your personal data where no legitimate retention basis exists
• Right to restriction of processing (Art. 18): Request that we limit processing in certain circumstances
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format (JSON/CSV) to transfer to another provider
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior lawful processing
• Right to lodge a complaint: File a complaint with your local Data Protection Authority (DPA)

To exercise these rights, contact contact@ikonmarketing.net. We will respond within 30 days (or 72 hours for breach notifications).

Our EU representative, available to data subjects and supervisory authorities: contact@ikonmarketing.net.

United Kingdom

For users in the United Kingdom, IKON processes personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Your rights under UK GDPR are equivalent to those listed under Section 3 above. Complaints may be filed with the Information Commissioner's Office (ICO) at ico.org.uk.

Data transfers from the UK to the US are covered by the UK International Data Transfer Agreement (IDTA).

California, USA

For California residents, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides additional rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected, the purposes for collection, and the categories of third parties with whom it is shared
• Right to Delete: Request deletion of personal information, subject to certain exceptions
• Right to Opt-Out of Sale or Sharing: IKON does not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: Request that IKON limit its use of sensitive personal information to the purposes specified in the CPRA
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights

To exercise California privacy rights, contact us at contact@ikonmarketing.net with "CCPA Request" in the subject line. We respond within 45 days.

Canada

PIPEDA (Personal Information Protection and Electronic Documents Act): For Canadian users, IKON collects, uses, and discloses personal information only with your knowledge and consent (express or implied), for purposes a reasonable person would consider appropriate in the circumstances. You have the right to access your personal information and challenge its accuracy. Contact the Office of the Privacy Commissioner of Canada (OPC) to file complaints: priv.gc.ca.

Canada's Anti-Spam Legislation (CASL): IKON's platform enables businesses to send commercial electronic messages (CEMs). Users are solely responsible for obtaining required express or implied consent from their recipients before sending CEMs through IKON, maintaining consent records, and including a functional unsubscribe mechanism in every CEM. IKON provides tools to facilitate compliance but is not responsible for users' compliance failures.

Australia

IKON handles the personal information of Australian users in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and request correction of personal information IKON holds about you. Complaints regarding IKON's handling of your personal information may be lodged with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.