This supplemental privacy notice applies to personal data processing activities in accordance with Brazilian data protection law. This notice supplements the information in our Privacy Policy. Certain terms used below have the meanings given to them in Lei Geral de Proteção de Dados (“LGPD”). If you have any questions about this supplemental privacy notice, you can contact our Data Protection Officer, Ayisha Gelin, at [email protected].

Services: Because Branch is a vendor that processes data on behalf of its Clients, any requests relating to Brazilian Users’ exercise of their rights under LGPD must be provided to Branch by a Client. Clients can notify Branch of these requests here.

Moreover, Branch supports functionality to allow Clients to respect granular controls regarding User data privacy rights. Clients can flag in the Branch SDK that a particular User has requested that their data not be processed by Branch, in which case Branch will no longer process engagement data on behalf of the Client for that User.

Website: Under applicable law, Branch is the data controller of Personal Data we collect from the Website. If you are a Website User who is a resident of Brazil, you may have certain rights under LGPD. Brazilian law may permit you to request that we: confirm whether we process your data; provide access to and/or a copy of certain information we hold about you; correct incomplete, inaccurate and outdated data; anonymize, block or delete data that is unnecessary, excessive or not being processed in accordance with Brazilian data protection law; port your personal data to another service or product vendor; delete personal data processed with your consent, when applicable; provide you with information regarding the public and private entities to which we disclose data; provide you with information about the possibility of withdrawing consent and the consequences of such withdrawal, where applicable; and / or withdraw your consent.

You can submit such requests at https://preferences.branch.io/, which will be processed in line with applicable law. To protect your privacy, we will take commercially reasonable steps to verify your identity before granting access to or making any changes to your Personal Data.