VAREXA LLC
PRIVACY POLICY
Effective as of 3/25/2024
Last Updated 8/28/2024
At Varexa, LLC dba OUTFIGR (“Varexa” we respect the privacy of our customers, visitors,
users, and others (collectively "Users" or individually a “User”). This Privacy Policy ("Privacy Policy")
describes our privacy practices and applies to the websites, platform, software, and all other services
(collectively, “Services”) we offer to Users. Please read this Privacy Policy carefully to learn how we
collect, use, share and otherwise process personally identifiable information and information that can
reasonably be used to contact or distinguish a person (collectively "Personal Data"), and your rights and
choices regarding our processing of your Personal Data.
A reference to “we,” “us,” “our,” “Varexa” or the “Company” is a reference to Varexa, LLC. A reference
to “you” or “your” means the User, an individual or, if applicable, the company or legal entity you
represent.
Use of our Sites and Services is subject to our Terms of Use (“Terms of Use”), available here.
1. Activities Covered
This Privacy Policy applies to the following activities:
• Visiting any of our websites (“Sites”), such as OUTFIGR.com OUTFIGREDUCATION.com and
any other site that displays or link to this Privacy Policy;
• Using our software and platform, including our proprietary technology;
• Creating, changing or using a User account (“Account”);
• Browsing or interacting with our Sites and Services via the Internet;
• Use of social media platforms and applications, or demographics derived from the profiles Users
create;
• Analyzing, aggregating, and providing visualization for data collected by and licensed from third-
party vendors, including Commercial Data Sources, as defined in the Terms of Use, for Users;
• Interacting with our personnel, whether in person, on the telephone, via email or any other form
of communication;
• Processing payments through third-party service providers on our Sites for Varexa services;
• Interacting with and submitting inquiries to third-parties with whom we have a relationship; and
• Receiving communications from us, including our newsletter, texts, fax, notifications through
Varexa software or platforms, or emails.
This Privacy Policy does not apply to information collected by:
• Offline interactions with Varexa through any other means, including any application, software,
platform, or website provided by any third-party (even if co-branded with Varexa operated for
Varexa’s benefit, or developed by Varexa; or
• Any third-party, including any application or content (including advertising) that may link to or
be accessible from (or on) any Site or through the Services.
2. Responsible Entity
When Sites, Services, or other materials are provided by us and linked to this Privacy Policy, this Privacy
Policy applies. Our Sites may contain links to other websites, applications and services maintained by
third-parties. When visiting such websites, applications or services, this Privacy Policy does not apply.
The information practices of such other websites, applications or services are governed by the third-party
privacy policies, which we encourage you to review to better understand those third-parties’ privacy
practices.
3. What Personal Data Do We Collect and How?
The personal information that we collect depends on the context of your interactions with us and the
Services, the choices you make, and the products and features you use. Personal Data we collect directly
from you may include the following:
• Contact Information: This includes, but is not limited to, your name, email, address, and
telephone number(s).
• Entity Information: This includes, but is not limited to, the name of your legal entity or employer,
the jurisdiction of organization, and your affiliation or title.
• Account Information: This includes your account identification number, username, password, and
answers to your recovery/security questions.
• Billing Information: To the extent necessary for you to purchase products or services from us or a
third-party who offers products or services in connection with our Services, either Varexa or a
third-party payment processor will collect your credit card information, including your billing zip
code, and/or other payment information.
• Demographic Information: This includes, but is not limited to, your date of birth, your country of
citizenship, and/or your country of residence.
• Transaction Information: This includes details about your transaction history with Varexa including
contracts you may execute (by using your traditional, electronic or any other binding signature or
form of assent).
• Technical Data: If you use and interact with our Sites, we automatically collect log files and other
information about your device, browser and your usage of our sites through cookies, web beacons
or similar technologies, such as IP-addresses, media access control (MAC) addresses or other
identifiers, which may qualify as Personal Data (view the "Device and Usage Data We Process"
section below).
• Feedback and correspondence: This includes information you provide when you request information
from us, receive customer support, or otherwise correspond with us, including by interacting with our
pages on social networking sites or services. This includes your preferences for receiving marketing
communications and details about how you engage with our marketing communications
• Other Information. We may retain a record of any other information you provide us while using our
Services.
Additionally, we may collect data that is about you but does not individually identify you, such as your
domain server, device type, browser type, internet connection, search terms, operating systems, and other
information about your use of our Sites and the Services. We cannot identify you by this information
alone, but it is helpful for generally understanding our traffic when aggregated and improving Users’
experiences when using our Sites and Services.
We collect information:
• Directly from you when you provide it to us; and
• From third-parties, for example, our business partners, including vendors.
4. What Data Do We Process?
Processor Data may include, in addition to the above, the following:
• Technical Data: This includes, but is not limited to, device identification information such as
MAID or ADID for mobile devices.
• Geolocation Data: This includes, but is not limited to, location, latitude, longitude, and horizontal
accuracy.
• Timestamp Data: This includes, but is not limited to, date and time associated with the
geolocation data.
5. Vendors, Consultants, and Other Third-Party Providers
The following is a list of Third-Party Providers with whom we currently partner to place advertisements
across the Internet or provide other services to Varexa and Users. Others may be added at any time.
Name of Third-Party Link to Privacy Policy
Square Up https://squareup.com/us/en/legal/general/privacy/
Squarespace https://www.squarespace.com/privacy/
Stripe https://stripe.com/privacy/
PayPal https://www.paypal.com/us/legalhub/upcoming-policies-full/
TaxJar https://www.taxjar.com/privacy/
SmartVault https://www.smartvault.com/privacy-policy/
DocuSign https://www.docusign.com/privacy/
Google Workspace https://policies.google.com/privacy?hl=en-US
Slack https://slack.com/trust/privacy/privacy-policy/
LinkedIn https://www.linkedin.com/legal/privacy-policy
Medium https://help.medium.com/hc/en-us/articles/213481328-
To assist us in meeting business operations needs and perform certain services and functions, your
Personal Data may be shared with third-party providers of payment, hosting, shipping, customer relations
management software developers, website development, creative development, technical support,
network and security, e-mail communication, and customer support services.
For more details on the third parties that may place cookies through the Site, please see the “Cookies,
Web Beacons, and Other Tracking Technologies” section below. Following our instructions, these
parties may access, process or store Personal Data in the course of performing their duties for us.
6. Device and Usage Data We Process.
We use common information-gathering tools, such as log files, web beacons, and similar technologies to
automatically collect information, which may contain Personal Data, from your computer or mobile
device as you navigate our website or interact with emails and other messages, we send you.
Like many websites, our Sites gather certain other non-personally-identifying information (“Non-PII”)
automatically via log files. This collected Non-PII may include your Internet Protocol (IP) address (or
proxy server), device and application identification numbers, your location, your browser type, your
Internet service provider and/or mobile carrier, the pages and files you viewed, your searches, your
operating system and system configuration information, and date/time stamps associated with your usage.
This Non-PII is used to analyze overall trends, to help us provide and improve our Sites and Services and
to guarantee their security and continued proper functioning. We may also collect IP addresses and MAC
addresses from Users when they log into the services as part of the Company’s security features.
7. Cookies, Web Beacons, and Other Tracking Technologies
Our Third-Party Analytics and Service Providers may use cookies and similar technologies such as web
beacons, tags, and Javascript alone or in conjunction with cookies to compile information about usage of
our websites and interaction with emails from us.
When you visit our Sites, our servers or an authorized third-party may place a cookie on your browser,
which can collect information, including Personal Data, about your online activities over time and across
different sites. Cookies allow us to track overall usage, determine areas that you prefer, make your usage
easier by recognizing you and providing you with a customized experience.
We may use both session-based and persistent cookies. Session cookies exist only during one session and
disappear from your computer when you close your browser software or turn off your computer.
Persistent cookies remain on your computer or device after you close your browser or turn off your
computer. You can control the use of cookies at the individual browser level, but if you choose to disable
cookies, it may limit your use of certain features or functions on our websites or services. To opt-out of
tracking by Third-Party Analytics Providers, please use the specific opt-out mechanism as indicated in the
“Opting-Out from Collection of Device and Usage Data” section below.
We may also use web beacons on our websites and other electronic marketing. For example, we may
place web beacons in marketing emails that notify us when you click on a link in the email that directs
you to one of our websites. Such tracking technologies are used to operate and improve our websites and
digital communications and track the clicking of links or opening of messages.
As described above, we or third-parties may place or recognize a web beacon or unique cookie on your
browser when you visit our websites for the purposes of serving you targeted advertising (also referred to
as “online behavioral advertising” or “interest-based advertising”).
To manage the use of targeting or advertising cookies on our websites, consult your individual browser
settings for cookies. Various browsers may offer their own management tools for removing HTML5 local
storage.
8. Opting-Out from Collection of Device and Usage Data
You may opt-out from the collection of device and usage data by managing your cookies at the individual
browser level. In addition, if you wish to opt-out of interest-based advertising, click here. Please note,
however, that by blocking or deleting cookies and similar technologies used on our websites, you may not
be able to take full advantage of our Sites.
While some Internet browsers offer a “do not track” or “DNT” option that lets you tell websites that you
do not want to have your online activities tracked, these features are not yet uniform and there is no
common standard that has been adopted by industry groups, technology companies, or regulators.
Therefore, we do not currently commit to responding to browsers' DNT signals with respect to our Sites.
In other words, we do not alter our practices with respect to the collection of information based upon a
User’s selection of the DNT setting or other opt out setting. If a person selects DNT, we record and
maintain their preferences. The Company takes privacy and meaningful choice seriously and will make
efforts to continue to monitor developments around DNT browser technology and the implementation of a
standard.
To learn more about targeted advertising, advertising networks and your ability to opt out of collection by
certain third parties, please visit the opt-out pages of the Network Advertising Initiative here, and the
Digital Advertising Alliance, here. To learn how to manage privacy and storage settings for Flash cookies,
here.
9. Social Media Features
Our websites may use social media features or plugins, such as the Facebook “like” button, the Twitter
“Tweet” button and other sharing widgets (“Social Media Features”). You may be given the option by
such Social Media Features to post information about your activities on a website to a profile page of
yours that is provided by a third-party social media network in order to share with others within your
network. Because the Social Media Features are hosted by the respective social media networks, the latter
may receive information that you have visited our Sites from your IP address. If you are logged into your
social media account, it is possible that the respective social media network can link your visit of our
Sites with your social media profile.
Your interactions with Social Media Features are governed by the privacy policies of the companies
providing the relevant Social Media Features. Be aware that if you post or share any distinguishing
information anywhere online and corresponding information is available via your public social media
account, profile or other accessible information you could be identified, located and contacted as a result.
10. How We Use Your Personal Data
We use information that we collect about you or that you provide to us, including any Personal Data, for
the following:
• Scheduling: We will use your information to provide our Website to you, including to facilitate
scheduling; create and manage your account; and respond to your inquiries.
• Services: We will process your Personal Data to the extent necessary for the performance of the
Services through our contract with you for the use of our Site and Services and to fulfill our
obligations under our Terms of Use and other applicable contracts with you or other Users; where
we have not entered into a contract with you (or where our Terms of Use do not apply), we base
the processing of your Personal Data on our legitimate interest to operate and administer our Sites
and to provide you with content you access and request. Examples of how we use your Personal
Data in connection with the provision of Service include: (i) to process data on our platform as
part of the Services, including for other Users, (ii) to establish and manage your account,
including to communicate with you about changes or updates to our Services, technical and
security alerts, account verification, support, etc., and (iii) to provide, operate, maintain, improve,
and monitor the effectiveness of our Services.
• Marketing Communications: With your consent, we may use your contact data to send you
marketing and other promotional information about us, our products, or services. You may opt out
of marketing communications at any time by clicking on the “unsubscribe” link in any marketing
email or by following the applicable instruction in a communication from us.
• Users’ Requests: For the purposes for which you provided the information, for the legitimate
business purpose of fulfilling our Users’ requests.
• Administration of Services: To monitor and analyze information regarding your browsing and
viewing preferences and to diagnose problems of our Sites, for the legitimate business interest of
operating and administering our websites, platform and other Services.
• Anonymous Analytics: To carry out internal operations and to analyze our Users’ demographics
and interests on an anonymous basis by de-identifying certain demographic Personal Data from
our User’s names or other personally identifiable information, for the legitimate business interests
of understanding our current and potential User demographics.
• Security. For fraud prevention, internal operations, legal compliance, and other public and
security related purposes, to the extent this is necessary for the purpose of our legitimate interests
in promoting the safety and security of the systems and application used for our Sites, and
protecting our rights and the rights of others.
• Contract Enforcement: We may use your Personal Data to investigate, enforce, and apply our
Terms of Use, this Privacy Policy, or any other agreement we may have with a User or third-party
vendor.
• Legal Compliance: We will process your Personal Data when cooperating with public and
government authorities, courts or regulators in accordance with our legal obligations under
applicable laws to the extent this requires the processing or disclosure of Personal Data to protect
our rights, and is necessary for our legitimate interests to protect against misuse or abuse of our
websites, to protect personal property or safety, to pursue remedies available to us and limit our
damages, to comply with a judicial proceedings, court order or legal process, and/or to respond to
lawful requests.
• With Consent: To fulfill any other purpose for which you provide Personal Data, with your
consent.
11. Who Do We Share Personal Data With?
• Social Media/Advertising Networks. We share Personal Data with third–party social networks,
advertising networks and websites, which usually act as separate controllers, so that the Company
can market and advertise on third party platforms and websites.
• Advisors. In individual cases we may also share Personal Data with professional advisors acting
as processors or joint controllers including lawyers, bankers, auditors and insurers who provide
consultancy, banking, legal, insurance, and accounting services.
• Internal Disclosures. We may share Personal Data within our headquarters and among affiliates,
other companies and brands owned or controlled by Varexa and other companies owned by or
under common ownership as Varexa, which also includes our subsidiaries (i.e., any organization
we own or control) or our ultimate holding company (i.e., any organization that owns or controls
us) and any subsidiaries it owns. Personal Data will only be available to those who need such
access for purposes consistent with this Privacy Policy, including without limitation product
development, product management, customer support, account management, marketing, sales,
and operations, or where required by applicable law.
• Service Providers. We engage certain trusted third-parties to perform functions and provide
services to us (e.g., verification providers, website hosting providers and other parties who assist
us in operating our Sites, conducting the Services, managing our marketing campaigns and
mailings, performing tax and accounting activities, performing analytics, or serving our
customers). We may share your Personal Data with these third-parties, but only to the extent
necessary to perform these functions and provide such services. We also require these third-
parties to maintain the privacy and security of the Personal Data they process on our behalf.
• CRM. We may share certain Personal Data with a customer relations management provider.
• Other Disclosures. If we are involved in a merger or reorganization, a financing that involves due
diligence, bankruptcy, receivership, transition to different service providers, sell business unit, or
if all or a portion of our business, assets or stock are acquired by another company, we may
transfer some or all of your Personal Data to such third party. In accordance with applicable laws,
we will use reasonable efforts to notify you of any such transfer of Personal Data to an
unaffiliated third party as processing of your Personal Data will be required for the purposes set
out in " How We Use Your Personal Data" section above.
12. How Long Do We Keep Your Personal Data?
We may retain your Personal Data for a period of time consistent with the original purpose of collection.
We determine the appropriate retention period for Personal Data on the basis of the amount, nature,
contact frequency, and sensitivity of your Personal Data, the potential risk of harm from unauthorized use
or disclosure, and whether we can achieve the purposes of the processing through other means, as well as
the applicable legal requirements (such as applicable statutes of limitation).
13. Your Rights Relating to Your Personal Data
You may have certain rights regarding your Personal Data, subject to local data protection laws. These
may or may not include the following rights:
• To access your Personal Data held by us (“Right to Access”);
• To rectify inaccurate Personal Data and ensure it is complete (“Right to Rectification”);
• To erase/delete your Personal Data to the extent permitted by other legal obligations (“Right to
Erasure; Right to be Forgotten”);
• To restrict our processing of your Personal Data (“Right to Restriction of Processing”);
• To transfer your Personal Data to another controller, to the extent possible (“Right to Data
Portability”);
• To object to any processing of your Personal Data carried out on the basis of our legitimate
interests (“Right to Object”). Where we process your Personal Data for direct marketing purposes
or if we share it with third-parties for their own direct marketing purposes, you can exercise your
right to object at any time to such processing without having to provide any specific reason for
such objection;
• Not to be subject to a decision based solely on automated processing, including profiling, which
produces legal effects ("Automated Decision-Making"); Automated Decision-Making currently
does not take place on our Sites; and
• To the extent we base the collection, processing, and sharing of your Personal Data on your
consent, to withdraw your consent at any time, without affecting the lawfulness of the processing
based on such consent before its withdrawal.
The specific rights to which you are entitled are based upon your geographic location, and the location of
where your Personal Data is stored.
14. Notice to California and Nevada Residents
If you are a resident of California, the California Consumer Protection Act (“CCPA”) provides you with
certain rights over your personal information (defined under the CCPA as information which identifies,
relates to, describes, is reasonably capable of being associated with, or could reasonably be linked,
directly or indirectly, with a particular consumer or household). In addition, the term “sale” is defined
broadly under the CCPA. To the extent that “sale” under the CCPA is interpreted to include interest based
advertising or other data uses described in this Privacy Policy, we will comply with applicable law as to
those activities. You can read more about your rights and choices with respect to your personal
information that is held by us under the CCPA at here.
We reserve the right to disclose your Personal Data to any of our: (i) affiliates that referred you to our site
for purposes of sales by us, and (ii) resellers that may re-sell our products or services to you. We may
also disclose your Personal Data to any marketing partners that may participate in the offer or related
fulfillment as described herein. Understand that you originated with these affiliates and resellers, and that
the information you may provide to them is subject to their privacy policies also. California Civil Code
Sec. 1798.83 permits California residents to request certain information regarding disclosure of their
Personal Data to third-parties for purposes of direct marketing. You may request further information
about our compliance with California Civil Code Section 1798.83 at the following email address:
privacy@OUTFIGR.com
If you are a Nevada resident, you have the right to opt out of the sale of your Personal Data collected by
us through the Site.
15. Notice to Canadian Residents
We may process your information if you have given us specific permission (i.e., express consent) to use your
personal information for a specific purpose, or in situations where your permission can be inferred (i.e.,
implied consent). You can withdraw your consent at any time.
In some exceptional cases, we may be legally permitted under applicable law to process your information
without your consent, including, for example:
• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an
insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the
accuracy of the information and the collection is reasonable for purposes related to investigating a breach
of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to
the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the
collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations
16. How to Exercise Your Rights
To exercise your rights, please contact us in accordance with the “Contact Us” section on our browser. We
try to respond to all legitimate requests within one month and will contact you if we need additional
information from you in order to honor your request. Occasionally it may take us longer than a month,
considering the complexity and number of requests we receive.
In addition, if you have registered for an account with us, you may generally update your User settings,
profile, organization’s settings or event registration by logging into the applicable website with your
username and password and editing your settings or profile. To update any financial information we have,
discontinue your account, and/or request return or deletion of your Personal Data and other information
associated with your account, please contact us.
17. Security
We take precautions including organizational, technical, and physical measures, to help safeguard against
accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, the Personal
Data we process or use. These precautions include rule-based access management, email verification, and
two-factor authentication.
While we follow generally accepted standards to protect Personal Data, no method of storage or
transmission is 100% secure. You are solely responsible for protecting your password, limiting access to
your devices, and signing out of websites after your sessions. If you have any questions about the security
of our websites, please contact us via the “Contact Us” section below.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we take
steps to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted to
our Sites or Services. Any transmission of Personal Data or information is at your own risk. We are not
responsible for circumvention of any privacy settings or security measures contained on the Sites or the
Services.
18. Changes to this Privacy Policy
We will update this Privacy Policy from time to time in our sole discretion to reflect changes in our
practices, technology, legal requirements, and other factors. If we do, we will update the effective date at
the top of this Privacy Policy. If we make an update, we may provide you with notice prior to the update
taking effect, such as by posting a conspicuous notice on our Sites or by contacting you using the email
address you provided.
We encourage you to periodically review this Privacy Policy to stay informed about our collection,
processing and sharing of your Personal Data.
19. Children
Our websites are not directed at children. We do not knowingly collect Personal Data from children under
the age of 13. The Services are intended for Users over the age of 18. If you are a parent or guardian and
believe your child has provided us with Personal Data without your consent, please contact us as
described in the “Contacting Us” section below and we will take steps to delete such Personal Data from
our systems.
20. Contact Us
To exercise your rights regarding your Personal Data, or if you have questions regarding this Privacy
Policy or our privacy practices please mail us at:
Varexa, LLC dba OUTFIGR
6801 Jefferson St NE Ste 150 PMB 3175
Albuquerque, New Mexico 87109
Attention: Privacy Policy
privacy@outfigr.com
We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.
THE REST OF THIS PAGE IS INTENTIONALLY LEFT BLANK