Privacy Policy

Last Updated: 5/6/2026

The operator of the website, storefront, online store, platform, or service where this Privacy Policy appears or is linked (“Company,” “we,” “us,” or “our”) respects the privacy of our users and has created this Privacy Policy to describe our policy about the collection, use, security and disclosure of information we obtain from users of our website and all other websites, mobile sites, applications, platforms and tools where this Privacy Policy appears or is linked, and through the use of our services (“Site”). This Privacy Policy also describes the choices available to you regarding our use of your personal information and how you can access and update this information.

We collect, use and are responsible for certain personal information about you. When we do so, we may be subject to various laws in the United States, the United Kingdom General Data Protection Regulation, the General Data Protection Regulation which applies across the European Union, and other privacy and data protection laws, and we may be responsible as “controller,” “business,” or equivalent term for that personal information for the purposes of those laws.

We encourage you to take time to read and understand this Privacy Policy, and to contact us if you have any questions or concerns regarding this Privacy Policy. This Privacy Policy is incorporated into and subject to the Terms of Service for this Site.

By using the Site, creating an account, placing an order, or providing information to us (by any means, whether in correspondence, via our Site, or otherwise) you acknowledge that you have read and understood our collection, use and disclosure of your information, including personally identifiable information, as described in this Privacy Policy.

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY OR OUR PRACTICES, YOU MAY NOT USE OUR SITE. THIS PRIVACY POLICY MAY CHANGE FROM TIME TO TIME AND YOUR CONTINUED USE OF OUR SITE CONSTITUTES YOUR ACCEPTANCE OF THOSE CHANGES. WE ENCOURAGE YOU TO REVIEW THIS PRIVACY POLICY PERIODICALLY.

1. Information Collected by the Company

We receive and store any information you enter on this Site or give us in any other way, including information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you (“personal information”), when you register for an account, access our Site, including certain content or features, place orders, enter into Company programs or offerings, or if you send us personal correspondence such as emails. We may collect the following types of personal information about you as described below:

  • Personal information you provide to us,
  • Personal information we may automatically collect, and
  • Personal information we may receive from third parties.

A. Personal Information You Provide to Us

In using our Site, you may provide us with personal information, which may include, but are not limited to, the following:

  • Identifiers, e.g. your contact information such as name, email address, postal address and telephone number(s), country of residence;
  • Characteristics of protected classifications, e.g. demographic information such as birth date;
  • Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, e.g. account information and log in credentials, including unique identifiers such as username and password, payment and transaction information including credit card or bank information;
  • Internet or other electronic network activity information, e.g. your device information;
  • Commercial information, e.g. products ordered and any related customization;
  • Preferences for communications;
  • Communications and opinions in chat rooms, message boards, forums, surveys, polls, and online forms;
  • Sensory data, e.g. photos, artwork, designs, logos, images and/or videos;
  • Professional or employment-related information, e.g. type and nature of business and where located; and
  • Any additional information that we describe to you, when we collect your data with your consent.

B. Personal Information We May Automatically Collect About You

We may automatically receive and store certain types of information, including, but not limited to, the following:

  • Information about your use of our Site;
  • Commercial information about any orders you place through the Site, such as your order identification number, items ordered and the cost of your order;
  • Internet or other electronic network activity information;
  • Your interactions with other users on the Site, the type of web browser you are using, the website that led you to our Site, the website you go to after leaving our Site, the dates and times you access our Site; and the pages you view on our Site and your movement and activity within the Site, which may be aggregated with other personal information;
  • IP address, which is the number associated with the service through which you access the Internet, such as through your Internet service provider;
  • Domain server from which you are using the Site;
  • Type of computer, search engine used, operating system, or platform you use; and
  • Mobile device information, including the type of device you use, operating system version, and the device identifier.

We may also collect Site visitation statistical information through cookies, tools such as Google Analytics, and other technology, as further described in the “Cookies” Section, to speed navigation of the Site by allowing the Site to recognize each user and his or her access privileges and to track the user’s usage of the Site.

Log Files

The Site server automatically recognizes the Internet Uniform Resource Locator (“URL”) from which you access the Site. We may also log your Internet protocol (“IP”) address, which may be helpful, for example, for system administration and troubleshooting purposes. An IP address indicates the location of your computer on the Internet.

C. Personal Information We May Receive from Third Parties

If you access the Site through a third-party social media account or other third-party source, such as OpenID, Google, Facebook, LinkedIn, Twitter/X, Instagram, third-party data providers, storefront partners, business customers, licensors, payment processors, shipping providers, fraud prevention providers, advertising providers, analytics providers, and other third-party sources, we may access information about you from that third-party source, including your user ID for the third-party source and certain information from your profile for that third-party source, such as your location data, profile information, and your activities on social media accounts. The Site may combine information that we collect with information from third-party websites, platforms, storefronts, service providers, and other sources.

When you provide personal information to us on a third-party website or platform, the personal information you provide may also be separately collected by the third-party website, platform, payment provider, social media platform, or other third party. Please review the privacy policies of the applicable third-party website, platform, or service for their privacy practices.

2. How Company Uses the Information it Collects and Why

Under data protection law, we can only use your personal information if we have a proper reason for doing so, e.g.:

  • To comply with our legal and regulatory obligations;
  • For the performance of our contract with you or to take steps at your request before entering into a contract;
  • For our legitimate interests or those of a third party; or
  • Where you have given consent.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

The table below explains what we use or process your personal information for and our reasons for doing so:

What we use your personal information for Our reasons
To provide you with the Site and products, and related promotions, newsletters, programs, education, and information you request For the performance of our contract with you or to take steps at your request before entering into a contract
To respond to your inquiries and provide you with requested information and other communications, including by email or chat, and including alerts, notification of promotions, contests, and events For the performance of our contract with you or to take steps at your request before entering into a contract
For billing and payment processing For the performance of our contract with you or to take steps at your request before entering into a contract
To facilitate the services you request, to create accounts and allow use of services and ordering of products on the Site For the performance of our contract with you or to take steps at your request before entering into a contract
To maintain, improve, customize, or administer the Site, perform business analyses, or other internal purposes to improve the quality of our business and the Site For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price
To comply with any applicable laws and regulations and respond to lawful requests To comply with our legal and regulatory obligations
To prevent and detect fraud against you or Company and for detecting security breaches For our legitimate interests or those of a third party, i.e. to minimize fraud that could be damaging for us and for you and to ensure the network and information security of our Site
To maintain the safety, security, and integrity of our Site, products and services, databases and other technology assets and our business For our legitimate interests or those of a third party, i.e. to minimize fraud that could be damaging for us and for you and to ensure the network and information security of our Site
Gathering and providing information required by or relating to audits, inquiries or investigations by regulatory bodies To comply with our legal and regulatory obligations
Ensuring business policies are adhered to, e.g. policies covering security and internet use, and to enforce our Terms of Service For our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can deliver the best service to you
To resolve disputes To comply with our legal obligations and for our legitimate interests or those of a third party, i.e. to protect the Company from legal claims
To troubleshoot problems and identify and repair errors in our Site’s functionality For our legitimate interests or those of a third party, i.e. to ensure the network and information security of our Site and to be as efficient as we can so we can deliver the best service for you at the best price
Operational reasons, such as improving efficiency, training and quality control For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price
Ensuring the confidentiality of commercially sensitive information For our legitimate interests or those of a third party, i.e. to protect trade secrets and other commercially valuable information; and to comply with our legal and regulatory obligations
Statistical analysis to help us manage our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measures For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price
To improve our marketing and promotional efforts, improve our content and product offerings, and customize the Site’s content, layout and services For our legitimate interests or those of a third party, i.e. to promote our business, improve our services, and deliver relevant content
To perform analytics for business purposes and business intelligence, such as monitoring traffic to our Site, counting ad impressions, and measuring order activity For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best service for you at the best price
Preventing unauthorized access and modifications to systems For our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for us and for you; and to comply with our legal and regulatory obligations
Updating and enhancing customer records For the performance of our contract with you or to take steps at your request before entering into a contract; to comply with our legal and regulatory obligations; and for our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our customers about existing orders and new products
Ensuring safe working practices, staff administration and assessments To comply with our legal and regulatory obligations and for our legitimate interests or those of a third party, e.g. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you
Marketing our services and those of selected third parties to existing and former customers; third parties who have previously expressed an interest in our services; and third parties with whom we have had no previous dealings, including sending promotional material or special offers on our behalf or on behalf of our marketing partners and/or their respective affiliates and other third parties, provided that you have not already opted out of receiving such communications For our legitimate interests or those of a third party, i.e. to promote our business to existing and former customers, subject to applicable law
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, financing, or other sale or transfer of some or all of our assets, in which personal information we hold is among the assets transferred For our legitimate interests or those of a third party, i.e. where it is necessary for the sale or transfer of the business, assets, or shares to disclose the data to a potential buyer, investor, lender, or successor
External audits and quality checks, e.g. for the audit of our accounts For our legitimate interests or those of a third party, i.e. to maintain our accreditations so we can demonstrate we operate at appropriate standards and to comply with our legal and regulatory obligations

We may also anonymize, aggregate or de-identify personal information so the end-product does not identify you or any other individual. For example, we may use this information to generate norms by industry, geography, level, etc., enable us to understand where our services are being utilized, conduct ongoing validation studies, compile reports, and improve the services. Such aggregated, anonymized or de-identified information is not considered personal information for purposes of this Privacy Policy and we may use it for any purpose.

3. Cookies

We and our third-party providers and advertisers use cookies and other technologies to optimize the functionality of the Site, to help us understand how the Site is used and to provide users with interest-based content or advertising based upon their browsing activities and interests.

Cookies

Cookies are small text files of information stored by the Internet browser on your computer’s hard drive. We may use these cookies to collect browsing data to keep track of your preferences and profile information and to collect general usage and volume statistical information. Our cookies do not collect personal or confidential information and are not spyware.

There are a number of different types of cookies. The Site may use:

  • Essential or Strictly Necessary – These cookies are necessary to the core functionality of our Site and some of its features, such as access to secure areas, shopping carts, checkout, order processing, account access, security, and fraud prevention.
  • Performance and Functionality – These cookies are used to enhance the performance and functionality of our Site. For example, we may use these cookies so that we recognize you on our Site and remember your previously selected preferences. These could include what language you prefer and your geographic location. These cookies are nonessential to the use of our Site; however, without these cookies, certain functionality may become unavailable. Third-party cookies may be used.
  • Targeting – These cookies are used to make advertising messages more relevant to you. They prevent the same ad from continuously reappearing, ensure that ads are properly displayed for advertisers, and in some cases select advertisements that are based on your interests. The Company sometimes shares online data collected through these cookies with advertising partners. This means that when you visit another site, you may be shown advertising based on your browsing patterns on our Site. In some cases it is possible to opt out from personally targeted advertising. We may use Google AdSense, Google AdMob and other third-party advertising companies to serve advertising when you visit the Site.
  • Analytics and Customization – The Company uses these cookies and technologies to analyze how the Site is accessed, used, or performing in order to improve your user experience and to maintain, operate and continually improve the Site. For example, we may use Google Analytics on the Site to collect page URL/page title and user browser/system information, which may include browser type, referrer, language, Java/Flash support, IP address, and ad-serving data. For information on how Google Analytics collects and processes data, visit Google’s privacy and data practices resources. To opt out of Google Analytics, visit Google’s available opt-out resources.
  • Unclassified – These are cookies that have not yet been categorized. We may classify these cookies with the help of their providers.

Web Beacons

Our Site may contain electronic images known as web beacons (sometimes called single-pixel gifs) and they may be used along with cookies to compile aggregated statistics to analyze how our Site is used and may be used in some of our emails to let us know which emails and links have been opened by recipients. This allows us to gauge the effectiveness of our customer communications and marketing campaigns. We may use a third party to gather information about how you and others use our Site. For example, we may know how many users access a specific page and which links they clicked on. We use this aggregated information to understand and optimize how our Site is used.

Targeted Advertising

Targeted advertising, also known as online behavioral advertising, uses information collected on an individual’s web browsing behavior such as the pages they have visited or the searches they have made. Third parties collect this information by placing or accessing cookies in your browser when you visit this Site, or other websites. If you would like to learn more about third-party advertisers that may be aware of the fact that you visit the Site, and to understand your choices about having such advertisers’ cookies turned off, please visit available industry opt-out resources such as aboutads.info, youronlinechoices.com, or networkadvertising.org.

How to Manage Cookies

You have the right to decide whether to accept or reject certain cookies. You can set your browser not to accept cookies, and the above websites provide information about how to remove cookies from your browser. However, in a few cases, some of our Site features may not function as a result. Essential cookies cannot be rejected, as they are strictly necessary to provide you with our Site.

4. Do Not Track

Some browsers offer a “Do Not Track” signal. Because no common industry or legal standard for responding to Do Not Track signals has been adopted, we do not currently respond to web browser “Do Not Track” signals.

We do not authorize third parties to collect personal information from your visit to the Site for third-party use except as described in this Privacy Policy or with your consent.

5. Promotional Communications

We may use your personal information to send you updates by email, text message, telephone or post about our Site, our products, or our services, including exclusive offers, promotions or new products or services.

We have a legitimate interest in processing your personal information for promotional purposes as described above in “How Company Uses the Information it Collects and Why.” This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.

We will treat your personal information with respect. We do not sell your personal information for money. We may disclose personal information to service providers, storefront partners, advertising partners, marketing partners, and other third parties as described in this Privacy Policy.

You have the right to opt out of receiving promotional communications at any time by:

  • Contacting us by using one of the methods listed in the “Contact Information” Section below;
  • Using the “unsubscribe” link in emails;
  • Replying “STOP” or following other opt-out instructions in text messages, where applicable; or
  • Following any other opt-out method provided in the applicable communication.

We may ask you to confirm or update your marketing preferences if you instruct us to provide further products or services in the future, or if there are changes in the law, regulation, or the structure of our business.

Even if you opt out of promotional communications, we may still send transactional or service-related communications, including order confirmations, shipping notices, account notices, customer service responses, security alerts, legal notices, and policy updates.

6. Who We Share Your Personal Information With

We routinely share personal information with:

  • Our affiliates, subsidiaries, and related entities;
  • Service providers we use to help deliver our products or services to you, such as third-party payment providers, warehouses, fulfillment providers, decorators, production partners, shipping carriers and delivery companies;
  • Other third parties we use to help us run our business, such as marketing agencies, software-as-a-service platforms, database management companies, website hosts, analytics providers, fraud prevention providers, customer service providers, and technology vendors;
  • Storefront partners, licensors, business customers, organizations, schools, teams, groups, or other third parties associated with a storefront, product, promotion, program, order, or report, where appropriate to operate the storefront, process the order, administer the program, or provide related reporting;
  • Advertising partners, analytics providers, and technology providers that help us understand Site usage, measure campaigns, provide relevant content, or deliver and measure advertising;
  • Third parties approved by you, including sites you choose to link your account to, such as social media sites you choose to link your account to or third-party payment providers; and
  • Professional advisors, insurers, auditors, attorneys, accountants, consultants, lenders, investors, successors, and other parties involved in business, legal, compliance, financing, or transaction matters.

We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We may also impose contractual obligations on service providers to ensure they use personal information only to provide services to us and to you, subject to applicable law.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

We may also need to share some personal information with other parties, such as potential buyers of some or all of our business or during a restructuring, financing, merger, acquisition, sale of assets, transfer of business, bankruptcy, or similar transaction. We will typically anonymize information where reasonably practical, but this may not always be possible. The recipient of the information may be bound by confidentiality obligations.

The Company may disclose any information about you if required by law or under the compulsion of legal process. We may also disclose information about you if, in our sole discretion, we believe such disclosure is necessary or appropriate in connection with an investigation of fraud, intellectual property infringement, security incident, violation of our Terms of Service, or other activity that is illegal or may expose us, you, or others to legal consequences.

7. Data Retention

We will keep your personal information while you have an account with us or while we are providing products or services to you. Thereafter, we will keep your personal information for as long as is necessary:

  • To respond to any questions, complaints or claims made by you or on your behalf;
  • To show that we treated you fairly;
  • To keep records required by law;
  • To complete, support, and document transactions and orders;
  • To prevent fraud, maintain security, and enforce our Terms of Service; or
  • To protect our legal rights and business interests.

We will not retain your personal information for longer than necessary for the purposes set out in this Privacy Policy, except as permitted or required by law. Different retention periods apply for different types of personal information. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which we process your personal information, whether we can achieve those purposes through other means, and applicable legal requirements.

Our Site may contain links to other websites that are not owned or controlled by us, including links to social media platforms, or may redirect you off our Site or away from our products and services to other websites for information or other services. This Privacy Policy only applies to information collected by our Site. We are not responsible for the privacy and security practices of those other websites or social media platforms, the information they may collect, which may include IP address, or for how that party may use or disclose any information you may provide to them. We urge you to exercise caution before providing them with your personal information and you should refer to such third parties’ privacy policies on their sites to determine their respective privacy practices. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, social media platform, content, or of any products or services provided by such third party. We do not control, nor are we responsible for, such third-party websites, product or service offerings. Nor do we review the third party’s privacy policy for information on its data processing practice.

You should contact the site administrator for such third-party website if you have any complaints, claims, concerns or questions regarding such third-party website or its privacy practices.

9. Security

No computer system or information can ever be fully protected against every possible hazard. In order to help protect your information and the information and data contained on our Site, the Company employs reasonable and appropriate technical, physical and administrative security measures to protect your information from unauthorized use, access, loss, misuse, alteration, or destruction.

THE COMPANY CANNOT GUARANTEE SECURITY. THE COMPANY ASSUMES NO RESPONSIBILITY OR LIABILITY FOR DISCLOSURE OF YOUR PERSONAL INFORMATION EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW. WE DO NOT GUARANTEE THAT YOUR PERSONAL INFORMATION WILL NOT BE MISUSED BY THIRD PARTIES. WE ARE NOT RESPONSIBLE FOR CIRCUMVENTION OF ANY PRIVACY SETTINGS OR SECURITY FEATURES.

If you believe that your personal information has been accessed or acquired by an unauthorized person, please promptly contact us using the method listed in the “Contact Information” Section below so that necessary measures can quickly be taken.

10. Where Your Personal Information is Held

Information may be held at our offices and those of our third-party agencies, service providers, representatives and agents as described above under “Who We Share Your Personal Information with.”

Some of these third parties may be based outside the country where we originally collected your personal information. For more information, including on how we safeguard your personal information when this occurs, see below: “International Transfers of Personal Information.”

11. International Transfers of Personal Information

To bring you our Site, we may operate globally. Therefore, it is sometimes necessary for us to share your personal information outside the country where we originally collected your personal information, e.g.:

  • With our offices in the United States;
  • With your and our service providers located throughout the world;
  • If you are based outside the European Economic Area; or
  • Where there is an international dimension to the services we are providing to you.

These outside countries may not have the same data protection laws as the country where we originally collected the personal information. In particular, you are advised that the United States uses a sectoral model of privacy protection that relies on a mix of legislation, governmental regulation, and self-regulation. We will, however, seek to ensure the transfer complies with applicable data protection law. If you are located outside the United States, we will transfer your personal information only as permitted by applicable law, which may include where:

  • you provide your explicit consent;
  • the country to which the personal information will be transferred has been granted an appropriate adequacy decision by your local supervisory authority;
  • we have put in place appropriate safeguards in respect of the transfer, for example by entering into appropriate standard contractual clauses and requiring additional safeguards with the recipient;
  • the recipient is a party to binding corporate rules approved by a supervisory authority; or
  • another legally recognized transfer mechanism applies.

The Company may be headquartered in or operate from the United States and may utilize service providers both in the United States and throughout the world. As such, the Company and our service providers may transfer your personal information to, or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction.

Where the laws of your country allow you to do so, by using the Site or our services, you consent and authorize the Company to transfer, store, and use all such information in the United States and any other country where we or our service providers operate, which may not offer an equivalent level of protection to that required in the country where you reside, and to the processing of that information by us on servers located in the United States or elsewhere as described in this Privacy Policy. If you do not want your personal information transferred to the United States or any other country where we or our service providers operate, please do not submit any information to us or use our Site or services.

If you would like further information, please contact us using the method listed in the “Contact Information” Section below.

12. Children Under Thirteen

Our Site is not directed to children, and you may not use our Site if you are under the age required to form a binding contract or otherwise use the Site under applicable law. If you are under age 18, do not use our services, access the Site, or provide any information about yourself including, without limitation, your name, address, email address or any screen name or user name you may use, unless your parent or legal guardian has authorized your use of the Site and submission of information.

The Company does not knowingly accept personal information from anyone under the age of 13. By using the Site and/or providing personal information, you represent and warrant that you are over the age of 13. If we learn that we have collected or received personal information from a child under age 13 without verification of parental consent, in compliance with the Children’s Online Privacy Protection Act, we will take reasonable steps to delete such information from our records and cancel the corresponding accounts where appropriate. If you believe we may have any information from or about a child under age 13, please see our “Contact Information” Section below. Please visit the FTC’s website for tips on protecting children’s privacy online.

13. Changes to Our Privacy Policy

This Privacy Policy was published on the date “Last Updated” above. The Company may amend this Privacy Policy from time to time by posting the amended terms on this Site. You are responsible for regularly reviewing this Privacy Policy and all such amended terms. By viewing, using or accessing the Site after any amended terms have been posted, you consent to the Privacy Policy of the Site then in effect.

14. Contact Information

If you have any questions, comments, complaints or concerns about this Privacy Policy or your privacy, contact us at:

Legal Department c/o Adam Behrendt
abehrendt@bodmanlaw.com

Order-related questions should be directed to the customer service contact identified on the Site, in your account, or in your order confirmation.

15. Your Rights and Choices

If you are located in the European Economic Area or if you are a resident of Canada, California, Colorado, Connecticut, Iowa, Virginia, Utah, or another jurisdiction with applicable privacy or data protection laws, please review the Privacy Notice Addendum below to learn about additional rights you may have under applicable data protection laws.

Privacy Notice Addendum

This Privacy Notice Addendum (“Notice”) supplements the information contained in the above Privacy Policy and applies solely to all visitors, users, and others who reside in jurisdictions where applicable privacy or data protection laws provide additional rights, including Canada, the European Economic Area, the United Kingdom, and the States of California, Colorado, Connecticut, Iowa, Virginia, and Utah (“consumers” or “you”). We adopt this Notice to comply with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), United Kingdom data protection laws, California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), the Colorado Privacy Act of 2021, the Connecticut Data Privacy Act of 2022, the Iowa Consumer Data Protection Act of 2023, the Utah Consumer Privacy Act of 2022, the Virginia Consumer Data Protection Act of 2023, and certain other privacy and data protection laws, as applicable (collectively, the “Statutes”). Any terms defined in the Statutes will have the same meaning when used in this Notice. Any terms used in this Notice but undefined herein shall have the meaning provided in the Privacy Policy.

As further set forth in our Privacy Policy, we may collect certain information that is (i) linked or reasonably linkable to an identified or identifiable individual or natural person, or (ii) that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a consumer or household, or (iii) as further defined in the Statutes as “Personal Data” or “Personal Information,” as further set forth below:

Categories of Personal Information Examples (not intended to be exhaustive) Collected
Identifiers A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, customer number, or other similar identifiers Yes
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual Name, signature, address, telephone number, payment information, transaction information, account information, or other financial information Yes
Characteristics of protected classifications under California or federal law Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex, gender identity, gender expression, pregnancy or childbirth and related medical conditions, sexual orientation, veteran or military status, genetic information No, except as may be voluntarily submitted by you, incidentally included in user-submitted content, or collected if an individual applies for a job with us
Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies Yes
Biometric information A retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry No
Internet or other electronic network activity information Browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, advertisement, or email Yes
Geolocation data Physical location or movements No precise geolocation; approximate location may be derived from IP address or browser/device settings
Sensory data Audio, electronic, visual, thermal, olfactory, or similar information Yes, if submitted by you, including photos, artwork, images, logos, designs, videos, or similar content
Professional or employment-related information Business contact information, type and nature of business, employment information, paystubs or documentation for employment verification Yes, if provided by you or if an individual applies for a job with us
Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (FERPA) Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records No, except as may be incidentally submitted through a storefront, order, program, or user-submitted content
Sensitive personal information Certain government identifiers, account log-in credentials, financial account information in combination with access credentials, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, contents of mail, email, and text messages unless the business is the intended recipient, genetic data, biometric information used for identification, health information, sex life or sexual orientation Only if provided by you, required for a transaction, required for account access or security, submitted in user content, or if an individual applies for a job with us
Inferences drawn from any of the information identified above Profile about a consumer reflecting the consumer’s preferences, characteristics, trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes Yes

2. Canada’s Personal Information Protection and Electronic Documents Act

The Personal Information Protection and Electronic Documents Act (PIPEDA) provides consumers who are Canadian residents with specific rights regarding their Personal Information. This section describes your rights under PIPEDA and explains how to exercise those rights.

  • You have a right to know how your Personal Information will be used. We will explain why we need your Personal Information before or when we collect it, if the purpose is not already clear.

  • We will collect Personal Data only for the purposes we have identified or for the primary uses described in our Privacy Policy. We shall collect information by fair and lawful means only.

  • We will not use or disclose your Personal Data other than for the purposes for which it was collected unless we receive your consent or unless we are required or permitted to by law.

  • We will keep your Personal Information only for as long as is needed for the purposes identified in our Privacy Policy, as required by law, or as necessary to resolve any disputes you may have concerning our Site or services. We will follow internally set guidelines and use care in the disposal, destruction, or de-identification of Personal Information to prevent unauthorized parties from gaining access to such Personal Information.

  • We will maintain accurate, complete and up-to-date Personal Information as required for the identified purposes associated with its collection. Please let us know if your contact or other Personal Information changes.

  • Upon your written request, and subject to exceptions as permitted or mandated by law, we will inform you of the existence, use and disclosure of your Personal Information and will give you access to that Personal Information. You may challenge the accuracy and completeness of your Personal Information and have it amended as appropriate.

Complaint Compliance

We maintain procedures for addressing and responding to inquiries or complaints from you about our handling of Personal Information. We will inform individuals who make inquiries or lodge complaints of the existence of relevant complaint procedures. We may seek external advice where appropriate before providing a final response to individual complaints. We shall investigate complaints. If a complaint is found to be justified, we will take appropriate measures, including, if necessary, amending our policies and procedures.

3. Your Rights Under the GDPR

In some regions, such as the European Economic Area and the United Kingdom, you have certain rights under applicable data protection laws.

Right to Access the right to be provided with a copy of your Personal Data.
Right to Rectification the right to require us to correct mistakes in your Personal Data.
Right to be Forgotten the right to require us to delete your Personal Data in certain situations.
Right to Restriction of Processing the right to require us to restrict processing of your Personal Data in certain circumstances, for example if you contest the accuracy of the data.
Right to Data Portability the right to receive the Personal Data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party in certain situations.
Right to Object the right to object at any time to your Personal Data being processed for direct marketing, including profiling, and in certain other situations to our continued processing of your Personal Data, for example processing carried out for the purpose of our legitimate interests.
Right Not to be Subject to Automated Individual Decision-Making the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

4. How to File a GDPR Complaint

We hope that we can resolve any query or concern you raise about our use of your information. The GDPR also gives you the right to lodge a complaint with a supervisory authority in the European Union or European Economic Area state where you work, normally live, or where any alleged infringement of data protection laws occurred.

5. Your Rights Under the CCPA and CPRA

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, provides California residents with specific rights regarding Personal Information.

Right to Know / Disclosure You have the right to know the categories of Personal Information we have collected about you; the categories of sources from which the Personal Information is collected; our business or commercial purpose for collecting, selling, or sharing Personal Information; the categories of third parties with whom we disclose Personal Information; and the specific pieces of Personal Information we have collected about you.
Right to Know About Sale / Sharing / Disclosure In connection with any Personal Information we may sell, share, or disclose to a third party for a business purpose, you have the right to know the categories of Personal Information about you that we sold or shared and the categories of third parties to whom the Personal Information was sold or shared; and the categories of Personal Information that we disclosed about you for a business purpose.
Right to Opt Out of Sale / Sharing You have the right to opt out of the sale or sharing of your Personal Information. If you exercise this right, we will refrain from selling or sharing your Personal Information unless you subsequently provide express authorization or unless otherwise permitted by law. We do not sell your Personal Information for money.
Right to Limit Use of Sensitive Personal Information You have the right to limit use and disclosure of Sensitive Personal Information to purposes permitted by law. We do not use or disclose Sensitive Personal Information for purposes other than supplying requested goods or services, maintaining security, preventing fraud, complying with law, or other purposes permitted by applicable law.
Right to Correction You have the right to request correction of inaccurate Personal Information maintained by us about you. Upon receipt of a verifiable request, we will use commercially reasonable efforts to correct inaccurate Personal Information as required by applicable law.
Right to Deletion Subject to certain exceptions, on receipt of a verifiable request from you, we will delete your Personal Information from our records and direct our service providers to delete your Personal Information from their records where required by applicable law.
Protection Against Discrimination You have the right not to be discriminated against because you exercised any of your rights under applicable privacy laws. This means we will not deny goods or services, charge different prices or rates, provide a different level or quality of goods or services, or suggest that you will receive a different price, rate, level, or quality of goods or services because you exercised your privacy rights, except as permitted by applicable law.

6. Personal Information We Sold or Disclosed for a Business Purpose

In the preceding 12 months, we have not sold Personal Information for money.

In the preceding 12 months, we may have disclosed for a business purpose to one or more third parties the following categories of Personal Information: identifiers; information that identifies, relates to, describes, or is capable of being associated with a particular individual; commercial information; internet or other electronic network activity information; approximate geolocation information derived from IP address or device/browser settings; sensory data submitted by you, such as photos, artwork, designs, logos, images, or videos; professional or employment-related information if provided or if an individual applies for a job with us; sensitive personal information where permitted by law; and inferences drawn from the information identified above.

7. Your Rights Under the Colorado Privacy Act of 2021

The Colorado Privacy Act provides Colorado residents with specific rights regarding Personal Data. This section describes your rights and explains how to exercise those rights.

Right to Opt Out You have the right to opt out of the processing of Personal Data concerning you for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Right of Access You have the right to confirm whether we are processing Personal Data concerning you and to access your Personal Data.
Right to Correction You have the right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing.
Right to Deletion You have the right to delete Personal Data concerning you.
Right to Data Portability When exercising the right to access Personal Data, you have the right to obtain the Personal Data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. You may exercise this right no more than two times per calendar year.
Right to Appeal If we do not take action on your request to exercise any of your rights, we will inform you of the reason for not taking action. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. The Colorado Privacy Act also gives you the right to contact the Colorado Attorney General if you have concerns about the results of your appeal.

8. Your Rights Under the Connecticut Data Privacy Act of 2022

The Connecticut Data Privacy Act of 2022 provides Connecticut residents with specific rights regarding Personal Data. This section describes your rights and explains how to exercise those rights.

Right to Access You have the right to confirm whether or not we are processing your Personal Data and to access such Personal Data.
Right to Correction You have the right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing.
Right to Deletion You have the right to request that we delete Personal Data provided by, or obtained about, you.
Right to Data Portability You have the right to obtain a copy of your Personal Data processed by us, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.
Right to Opt Out You have the right to opt out of the processing of Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.
Right to Appeal If we do not take action on your request to exercise any of your rights, we will inform you of the reason for not taking action. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision.

9. Your Rights Under the Iowa Consumer Data Protection Act of 2023

The Iowa Consumer Data Protection Act of 2023 provides Iowa residents with specific rights regarding Personal Data. This section describes your rights and explains how to exercise those rights.

Right to Access You have the right to confirm whether we are processing your Personal Data and to access such Personal Data. You may exercise this right no more than twice annually.
Right to Delete You have the right to request that we delete Personal Data provided by you.
Right to Data Portability You have the right to obtain a copy of Personal Data that you previously provided to us in a portable and, to the extent technically practicable, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.
Right to Opt Out You have the right to opt out of the sale of Personal Data. We do not sell your Personal Data for money.
Right to Appeal If we do not take action on your request to exercise any of your rights, we will inform you of the reason for not taking action. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. The Iowa Consumer Data Protection Act of 2023 also gives you the right to contact the Iowa Attorney General if you have concerns about the results of your appeal.

10. Your Rights Under the Utah Consumer Privacy Act of 2022

The Utah Consumer Privacy Act of 2022 provides Utah residents with specific rights regarding Personal Data. This section describes your rights and explains how to exercise those rights.

Right to Access You have the right to confirm whether we are processing your Personal Data and to access your Personal Data.
Right to Delete You have the right to delete Personal Data that you provided to us.
Right to Data Portability You have the right to obtain a copy of Personal Data that you previously provided to us in a format that, to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another controller without impediment, where the processing is carried out by automated means.
Right to Opt Out You have the right to opt out of the processing of Personal Data for purposes of targeted advertising or the sale of Personal Data.

11. Your Rights Under the Virginia Consumer Data Protection Act of 2023

The Virginia Consumer Data Protection Act of 2023 provides Virginia residents with specific rights regarding Personal Data. This section describes your rights and explains how to exercise those rights.

Right to Access You have the right to confirm whether or not we are processing your Personal Data and to access such Personal Data. You may exercise this right no more than twice annually.
Right to Correction You have the right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing.
Right to Delete You have the right to request that we delete Personal Data provided by or obtained about you.
Right to Data Portability You have the right to obtain a copy of Personal Data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.
Right to Opt Out You have the right to opt out of the processing of Personal Data for purposes of targeted advertising, the sale of Personal Data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Right to Appeal If we do not take action on your request to exercise any of your rights, we will inform you of the reason for not taking action. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. The Virginia Consumer Data Protection Act of 2023 also gives you the right to contact the Virginia Attorney General if you have concerns about the results of your appeal.

12. How to Exercise Your Rights

If you would like to exercise any of your rights as described in this Privacy Policy, please contact us using one of the available methods in the Contact Information section of this Privacy Policy or any privacy-rights request method made available on the Site.

Please note that you may only make certain data access or data portability disclosure requests a limited number of times within a 12-month period or calendar year, as provided by applicable law.

If you choose to contact us directly, you may need to provide us with:

  • Enough information to identify you, such as your full name, address, email address, customer number, order number, account identifier, or other reference number;
  • Proof of your identity and address, where reasonably required and permitted by law; and
  • A description of what right you want to exercise and the information to which your request relates.

You may use a representative, called an “authorized agent,” to submit a request to us where permitted by applicable law. In order to protect your privacy, we may require you to confirm that you have provided the authorized agent permission to submit the request, and we may require the authorized agent to provide proof that you authorized the request. Requests submitted by an authorized agent may still require verification of the person who is the subject of the request in accordance with the process described above.

We are not obligated to make a data access, correction, deletion, portability, opt-out, or other disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf, except as otherwise required by applicable law.

Any personal information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification, processing the request, maintaining records of the request, and complying with applicable law.

13. Additional Rights and Updates

Privacy laws continue to develop. If you reside in a jurisdiction that provides additional privacy rights applicable to our processing of your Personal Information or Personal Data, we will honor those rights as required by applicable law. We may update this Privacy Notice Addendum from time to time to reflect changes in law, technology, business operations, or our data practices.