Modern iO Privacy Policy
Modern iO Privacy Policy
Last Updated: 6/3/2026
Modern iO is a marketing technology and direct mail retargeting solution offered by Iris Group, Inc. d/b/a Modern Postcard and its relevant affiliates (“Modern iO,” “Modern Postcard,” “we,” “our,” or “us”).
This Privacy Policy explains how Modern iO collects, uses, discloses, shares, and otherwise processes personal information in connection with Modern iO services, including direct mail retargeting, website visitor identification, campaign measurement, marketing attribution, suppression processing, and related direct mail marketing services.
This Privacy Policy is intended to describe our privacy practices and the privacy rights available to certain individuals under applicable laws, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA/CPRA”), where applicable. This Privacy Policy has also been updated to reflect our review of current privacy requirements and regulatory updates, including CCPA/CPRA regulations effective January 1, 2026.
Modern iO works with clients that use our services to help identify, analyze, and engage website visitors and prospective customers through direct mail and related marketing activities. Clients remain responsible for maintaining their own privacy notices, consent mechanisms, website disclosures, and compliance with applicable laws and regulations.
Modern iO provides tools, documentation, and operational support intended to help clients understand and disclose how Modern iO services may collect and process information. Additional Modern Postcard privacy policies and related privacy resources are available through the Modern Postcard Privacy Policy page.
Please click the following links to learn more about our Privacy Policy:
- What Modern iO Does
- Information We May Collect or Process
- How Information Is Collected
- How We Use Information
- How Information May Be Disclosed or Shared
- Client Responsibilities and Privacy Disclosures
- Cookies, Tags, Pixels, and Similar Technologies
- Security and Safeguards
- Data Retention
- California Privacy Rights and Additional Disclosures
- How to Exercise Your Rights
- Children’s Privacy
- International Transfers of Data
- Policy Updates
- Contact Information
1. What Modern iO Does
Modern iO provides direct mail retargeting services that help businesses reach certain website visitors and prospective customers through direct mail campaigns.
Depending on the services used by a client, Modern iO may use website technologies such as JavaScript tags, cookies, pixels, analytics tools, and similar technologies to help identify website activity, apply client-selected campaign rules, support audience matching, and measure campaign performance.
Modern iO may also use information obtained from trusted service providers and data partners to help associate website activity with a mailable postal address, support audience identification, suppress existing customers from campaigns when requested by a client, measure campaign effectiveness, and support direct mail marketing activities.
Modern iO is designed to support direct mail marketing and campaign measurement. It is not intended to collect sensitive personal information or to make decisions that produce legal or similarly significant effects concerning consumers.
2. Information We May Collect or Process
The categories of personal information collected or processed through Modern iO services may vary depending on the client’s implementation, website configuration, campaign settings, and services selected.
Modern iO may collect or process the following categories of information:
Identifiers
This may include names, postal addresses, email addresses, IP addresses, cookie identifiers, device identifiers, or other similar identifiers.
Internet or Other Electronic Network Activity Information
This may include information about website activity, such as pages visited, date and time of visits, referring pages, page views, session activity, abandoned cart activity, or interactions with specific website content.
Commercial Information
This may include information related to products or services viewed, considered, purchased, or otherwise associated with website activity, where applicable.
Inferences
This may include information derived from website activity or campaign activity to help support audience selection, campaign measurement, attribution, or direct mail marketing performance.
Client-Provided Information
Clients may provide information such as suppression files, customer lists, campaign rules, target geographic criteria, budget settings, creative preferences, and other campaign-related information.
Information From Service Providers and Data Partners
Modern iO may receive information from trusted service providers and data partners to support audience identification, address matching, suppression processing, campaign measurement, and direct mail marketing activities.
Sensitive Personal Information
Modern iO is not designed to collect or use sensitive personal information for the purpose of inferring characteristics about individuals. If sensitive personal information is incidentally processed, we seek to limit its use to purposes permitted by applicable law, such as providing requested services, maintaining security, preventing fraud, or complying with legal obligations.
3. How Information Is Collected
Information may be collected or processed through:
- Modern iO website tags, cookies, pixels, or similar technologies placed on client websites;
- Client-provided campaign information, suppression files, or business rules;
- Trusted service providers and data partners used to support address matching, campaign fulfillment, analytics, and attribution;
- Modern Postcard and Modern iO systems used to manage, process, print, mail, and measure direct mail campaigns; and
- Communications between Modern iO, clients, service providers, and business partners.
The exact information collected or processed depends on the client’s website, campaign setup, technology implementation, and service configuration.
4. How We Use Information
Modern iO may use personal information for business and commercial purposes that are reasonably necessary and proportionate to providing Modern iO services, supporting client campaigns, maintaining security, and complying with legal obligations.
We may use information to:
- Provide direct mail retargeting services;
- Identify website visitors or prospective customers who may qualify for a direct mail campaign;
- Match website activity to available postal address information;
- Apply client-selected campaign rules, filters, budgets, and suppression settings;
- Suppress existing customers or other audiences when requested by a client;
- Create, print, mail, and fulfill direct mail pieces;
- Measure campaign performance and attribution;
- Provide reporting, analytics, and dashboard functionality;
- Improve Modern iO services, technology, and campaign processes;
- Maintain system security, prevent fraud, and detect unauthorized activity;
- Respond to privacy requests, client requests, or legal obligations;
- Enforce agreements and protect the rights, property, and safety of Modern iO, Modern Postcard, our clients, consumers, and others.
5. How Information May Be Disclosed or Shared
Modern iO may disclose information to affiliates, service providers, contractors, data partners, fulfillment partners, and business partners as necessary to provide Modern iO services, support client campaigns, maintain business operations, and comply with applicable laws.
Examples of service providers and partners may include those that assist with:
- Website technology and tag functionality;
- Audience identification and address matching;
- Data processing and campaign rules;
- Printing, mailing, and fulfillment;
- Analytics, reporting, and attribution;
- Security monitoring and fraud prevention;
- Cloud hosting and technology infrastructure;
- Professional services such as legal, accounting, and compliance support.
We require service providers and contractors to use personal information only for authorized business purposes consistent with applicable agreements and legal requirements.
Modern iO does not use personal information collected or processed through a client’s Modern iO program for unrelated third-party services or for purposes outside the scope of the client’s Modern iO campaign. Information is used to provide, support, measure, and improve the Modern iO services requested by the client, including audience matching, suppression, campaign fulfillment, reporting, and attribution.
Depending on applicable law, client implementation, and the specific technologies or partners involved, certain disclosures associated with Modern iO services, website technologies, audience matching, analytics, or marketing activities may be considered “sharing” under California privacy laws. Individuals may exercise applicable privacy rights, including opt-out rights, as described in this Privacy Policy.
6. Client Responsibilities and Privacy Disclosures
Modern iO provides tools, resources, disclosures, and operational support intended to assist clients in addressing applicable privacy and data protection requirements. However, each client remains responsible for its own compliance with applicable laws and regulations.
Clients using Modern iO services should maintain clear and conspicuous privacy notices that accurately describe their own data collection, use, disclosure, sharing, cookie, tracking, direct mail marketing, and opt-out practices.
Depending on how Modern iO services are implemented, client privacy notices should generally disclose, where applicable:
- The use of website technologies such as cookies, pixels, JavaScript tags, or similar technologies;
- The use of direct mail retargeting or similar marketing services;
- The possibility that website activity may be associated with postal address information through service providers or data partners;
- How visitor information may be used for direct mail marketing, audience identification, suppression, attribution, or campaign measurement;
- How individuals may exercise applicable privacy rights, including opt-out, deletion, access, correction, and Do Not Sell or Share requests;
- How cookie and tracking preferences may be managed; and
- Any other disclosures required by applicable law based on the client’s business practices.
Modern iO may provide guidance and recommendations to clients regarding privacy disclosures, but clients are responsible for ensuring that their own websites, notices, forms, consent mechanisms, contracts, and business practices comply with applicable laws.
7. Cookies, Tags, Pixels, and Similar Technologies
Modern iO services may use cookies, pixels, JavaScript tags, and similar technologies to support direct mail retargeting, campaign measurement, attribution, audience matching, and reporting.
These technologies may help determine whether a website visitor meets client-selected campaign criteria, such as visiting certain pages, interacting with specific content, abandoning a cart, meeting geographic criteria, or satisfying other client-defined campaign rules.
Most browsers allow users to manage cookies through browser settings. Disabling or blocking certain cookies or similar technologies may affect whether Modern iO or our clients can provide certain features, reporting, or campaign functionality.
Certain browsers and browser extensions may also support Global Privacy Control (“GPC”) signals or similar privacy preference technologies. Modern iO continues to evaluate applicable legal requirements and technical standards relating to such signals. Individuals may also submit privacy-related requests using the methods described in this Privacy Policy.
8. Security and Safeguards
Modern iO maintains administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction.
Our security practices may include:
- Access controls designed to limit access to authorized personnel on a need-to-know basis;
- Secure transfer methods and encryption technologies used to protect information in transit and, where appropriate, at rest;
- Segmented and access-controlled processing environments;
- Logging, monitoring, and security review processes;
- Vulnerability management and patch management practices;
- Authentication and account security controls, including multi-factor authentication where appropriate;
- Employee security awareness and training;
- Incident response, backup, and business continuity procedures.
Where file transfers are required, secure transmission methods may be used, including encrypted file-sharing platforms and other secure transfer technologies.
While we take reasonable measures to protect personal information and maintain a security program designed to reduce risk, no method of transmission over the Internet, electronic storage system, or security control can guarantee absolute security.
9. Data Retention
Modern iO retains personal information for as long as reasonably necessary to provide services, support client campaigns, comply with legal obligations, resolve disputes, enforce agreements, protect our rights, maintain security, and support legitimate business operations.
When determining appropriate retention periods, we consider factors such as:
- The nature and sensitivity of the information;
- The purpose for which the information was collected or processed;
- The length of the client relationship or campaign;
- Applicable legal, regulatory, accounting, tax, and contractual requirements;
- Applicable statutes of limitation;
- Security, fraud prevention, and business continuity requirements; and
- The impact that deletion may have on our ability to provide services, maintain business records, or support campaign history.
Modern iO address data, such as identifiers and contact mailing information, may be retained for up to three (3) years after the last interaction, campaign activity, or account activity. This retention period supports ongoing service needs, reporting, legal and financial compliance, campaign history, suppression, attribution, and related business operations. Shorter retention may be accommodated through a valid deletion request, subject to applicable legal, contractual, operational, or compliance exceptions.
Client-provided campaign data, suppression files, website activity data, match-related data, reporting data, and other Modern iO service records may be retained for the period reasonably necessary to provide the requested services, support campaign performance, maintain records, comply with applicable obligations, or fulfill the purposes described in this Privacy Policy.
Additional information regarding Modern Postcard and Modern iO data retention can be found on the Data Retention Policy page:
https://www.modernpostcard.com/about/privacy-policy/data-retention
10. California Privacy Rights and Additional Disclosures
Residents of certain U.S. states, including California residents covered by the CCPA/CPRA, may have privacy rights regarding their personal information. This section supplements the rest of this Privacy Policy and applies solely to individuals entitled to such rights under applicable law.
Depending on your state of residence and applicable law, you may have the following rights:
Right to Know and Access
You may request information regarding:
- The categories of personal information collected about you;
- The categories of sources from which personal information is collected;
- The business or commercial purposes for collecting, using, disclosing, or processing personal information;
- The categories of third parties to whom personal information is disclosed; and
- The specific pieces of personal information collected about you.
Right to Delete
You may request deletion of personal information collected about you, subject to applicable legal exceptions.
Right to Correct
You may request correction of inaccurate personal information maintained about you.
Right to Data Portability
Where applicable, you may request a portable copy of personal information that you have provided.
Right to Opt-Out of Sale or Sharing
Depending on applicable law, you may have the right to direct us not to sell or share personal information for certain advertising or marketing purposes.
Right to Limit the Use of Sensitive Personal Information
California residents may have the right to limit the use and disclosure of sensitive personal information. Modern iO is not designed to use sensitive personal information for purposes beyond those reasonably necessary to provide requested services or as otherwise permitted by applicable law.
Right to Non-Discrimination
You have the right to receive equal service and pricing even if you choose to exercise your privacy rights.
Automated Decision-Making and Profiling
Modern iO does not currently engage in automated decision-making or profiling activities that produce legal or similarly significant effects concerning consumers. If such practices are implemented in the future, additional disclosures will be provided as required by law.
11. How to Exercise Your Rights
You may submit a verifiable privacy request through any of the following methods:
Privacy Rights & Request Portal:
https://www.modernpostcard.com/about/privacy-policy/privacy-request
Email:
privacy@modernpostcard.com
Telephone:
800-959-8365
You may also contact the operator of the website you visited if your request relates to data collected through a client website using Modern iO services. The client may coordinate with Modern iO as needed to review and process applicable requests.
We will verify your identity before processing applicable requests and may request additional information as necessary to complete the verification process and protect against fraud.
Where required by law, we will respond to verifiable consumer requests within applicable statutory timeframes.
Authorized agents may submit requests on behalf of a consumer where permitted by law. We may require proof of authorization and may verify the identity of both the consumer and the authorized agent before fulfilling a request.
If we deny a request to exercise a privacy right, we will provide an explanation of the basis for the decision and, where required by applicable law, information regarding any available appeal process.
12. Children’s Privacy
Modern iO services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from individuals under 16 years of age.
If you believe that a child under the age of 16 has provided personal information to us through Modern iO services, please contact us using the information provided in this Privacy Policy.
If we become aware that we have collected personal information from a child under the age of 16 without appropriate authorization, we will take reasonable steps to delete such information in accordance with applicable law.
13. International Transfers of Data
Modern iO operates primarily within the United States. Personal information may be accessed, processed, stored, or transferred within the United States by Modern iO, Modern Postcard, their affiliates, service providers, contractors, and technology partners as necessary to provide services, fulfill contractual obligations, support business operations, or comply with legal requirements.
As a result, personal information may be transferred across state, national, or international borders. Privacy and data protection laws in the jurisdictions where information is processed may differ from those in your jurisdiction and may not provide the same level of protection.
Where required by applicable law, we implement reasonable administrative, technical, contractual, and organizational safeguards designed to protect personal information and support lawful transfers of data.
14. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, products, services, or privacy obligations.
When updates are made, the “Last Updated” date at the beginning of this Privacy Policy will be revised accordingly. We encourage you to periodically review this Privacy Policy to remain informed about our current privacy practices.
Any changes will become effective upon posting the updated Privacy Policy unless otherwise required by applicable law.
For material changes that significantly affect how we collect, use, disclose, or protect personal information, we may provide additional notice where required by applicable law.
15. Contact Information
If you have questions about this Privacy Policy, wish to exercise privacy rights, submit a privacy-related request, or have concerns regarding our collection, use, retention, or disclosure of personal information, please contact us using one of the methods below.
Privacy Rights & Request Portal:
https://www.modernpostcard.com/about/privacy-policy/privacy-request
Email:
privacy@modernpostcard.com
Mail:
Modern Postcard
Attn: Privacy Policy
1675 Faraday Avenue
Carlsbad, CA 92008