Privacy Policy - Clare V. LLC

A NOTE TO OUR GUESTS

Clare V. is dedicated to protecting your data privacy and safety. We want to be completely transparent about how we use it—this policy explains what data we collect about you, why and how we use it, as well as how we share and manage your information. It also provides your choices and rights regarding this data, so please read it carefully to be fully informed.

GENERAL: WHAT INFORMATION WE COLLECT AND WHY

When you shop online with Clare V., we collect your data in a variety of ways, including when you choose to share it with us.

When you purchase at a Clare V. store, we may ask you for the following information to contact you about your purchase or send you a receipt via email. You have the option to agree with or deny sharing this information with us.

Email address

Name

Shipping Address

Phone number

When you purchase on ClareV.com, we will ask for the following information. This information is necessary to collect payment, process & ship your order, and to communicate order status.

Email address

Name

Shipping & Billing Address

Phone number

Payment details

You have the option during checkout to create an account with ClareV.com. If you choose to create an account, we will create a profile containing your order history & stored addresses for easy access. All of your order history is stored within our system, so creating an account simply provides you with access to that information. Your account login credentials are considered sensitive personal information. Clare V. uses this information only to maintain your account and does not otherwise disclose this information.

When you sign up for our email newsletter, we will ask for your email address. Additionally, you have the option to share the following information with us, which we use to personalize the marketing messages you receive from us.

Name

Birthday (MM/DD) to receive an annual birthday offer from us (please see the section below on Notice of Financial Incentive)

Local Store Preference for localized store updates

Preferred Topics

You can choose to stop receiving Clare V. emails at any time, by clicking “unsubscribe” at the bottom of any Clare V. marketing email.

When you contact our Customer Care team via email or phone, we will ask for information to identify you in our system. This is needed to provide timely assistance. We may also ask for your feedback in shopping or communicating with us to improve our services.

When you visit ClareV.com, the following technical information will be collected, in order to protect your data and our website. We also use this information to improve our shopping experience, products and services provided.

IP address

Your browser type

Your operation system

Your browse behavior on our website, such as product pages visited

Shopping behavior on our website, utilized for delivery of re-marketing and promotional offers

We also use ‘cookies’ to collect data on pages you view on our site, as well as to power the delivery of re-marketing and promotional offers. You can view our ‘cookie’ policy for more details on this topic.

USING INFORMATION ABOUT YOU

We use your contact information for analytical and marketing purposes, such as:

Confirming and tracking your order, subscription, or registration;

Analyzing preferences, trends, and statistics;

Informing you of our new products, services, and offers; and

Providing you with other information from and about Clare V.

We contact you only in ways compatible with your communication choices. To the extent necessary for such purposes, we take reasonable steps to make sure that your contact information is accurate, complete, current, and otherwise reliable.

From time to time we might establish a business relationship with other persons or entities whom we believe trustworthy and whom we have asked to confirm that their privacy policies are consistent with ours. These are known as our Select Partners. In such cases we might rent, exchange, share and/or cross-reference information, including contact information about you that will enable such persons or entities to contact you regarding products and services that may be of interest to you.

ADS ON OTHER SITES

If you choose to give other sites your data (such as Google or Facebook) their rules apply to that data, not ours. We do purchase ads on these sites, so if you have provided them with your data, then you will likely see our ads on these sites. If you do not wish to see these ads, you will have to contact the other sites directly.

WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

We may share your data within the Clare V. company. We may also share it with others who help us serve you. Because we work with Shopify, we will share your data with Shopify and some supporting companies to help us process data, host our digital channels, process payments, send communications, fulfill orders, or provide us or you with services while shopping with us. These companies are required by law to protect your data and cannot use your data with the exception of helping us provide you with products and services or as allowed by the privacy law and our contracts.

Shopify Inc. uses a combination of data centers and cloud service providers to store your personal data in the United States and Canada. When personal data is transferred to the United States, it is either done so through the EU-U.S. and Swiss-U.S. Privacy Shield, for Shopify’s own storage, or through contractual data protection addenda (DPAs) with third-party service providers. The EU-U.S. and Swiss-U.S. Privacy Shields are also considered adequate under the GDPR. Shopify’s Privacy Shield certification statement can be found on PrivacyShield.gov.

HOW WE GET YOUR CONSENT

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. For our Find In-Store module, we use your IP address based on your browser permissions to do so.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent via a checkbox to opt into our marketing list, which you can uncheck if you wish to opt out.

AGE OF CONSENT

By using this site and/or by accepting our policies, you represent that you are above the age of 16. If you are below the age of 16, then a parent or legal guardian must consent on your behalf. If we learn that we have collection any data for someone aged under 16, then we will delete it.

WITHDRAW CONSENT

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you at any time by unsubscribing to communications at the footer of our website, and you may withdraw consent for the continued collection, use or disclosure of your information, by visiting the Opt Out page.

You can also request that we correct your data or delete all or some of it by making a privacy request here or by emailing us at moc.veralc@ycavirp or mailing us at:

ATTN: Privacy Compliance

3012 Worthen Ave., Los Angeles California US 90039

CALIFORNIA RESIDENTS

If you are a California resident and have provided us with your Personal Information, you may ask us to refrain from sharing your Personal Information with third parties, including our affiliates if they are separate legal entities, for direct marketing purposes. Please tell us your preference by emailing moc.veralc@ycavirp.

You have the right to opt out, which is the right to, at any time, direct Clare V. not to sell your information to third parties. Visit our Opt Out page to Opt Out;

Your information may be sold to third parties or affiliates for marketing purposes;

If you direct Clare V. not to sell your information, then we are prohibited from selling that information unless you later expressly authorize the sale of your personal information;

Clare V. may not sell the personal information of minors without (1) the minor’s prior consent if the child is aged 13-16, or (b) the minor child’s parent’s consent if the child is less than 13.

DISCLOSURE

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

SHOPIFY

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

PAYMENT

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/...) or Privacy Statement (https://www.shopify.com/legal/...).

SHOP PAY INSTALLMENTS PRIVACY AND DATA SECURITY

Affirm will service the installments loans for customers who pay using Shop Pay Installments.

Affirm will send notifications to these customers related to their post-purchase payments.

Shop Pay Installments is offered in partnership with Affirm and together, they are responsible for ensuring the security of your personal information. To learn more about privacy and data security for Shop Pay Installments, visit this page.

SHOP PAY PRIVACY AND DATA SECURITY

Shop Pay is offered by Shopify and they are responsible for ensuring the security of your personal information. To learn more about privacy and data security for Shop Pay, visit this page to view Shopify’s privacy policy.

CHAT WIDGET

If you use our chat widget, Gorgias is the third party service that enables this feature. These chats are saved within Gorgias, but never shared or sold.

THIRD-PARTY SERVICES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

If you use our Find In-Store module, IPStack is the third party service that sorts our retail locations by distance from your IP address.

We do share customer information with third party marketing partners for commercial purposes, but only for customers who have opted into receiving communication from us. We also receive data from third parties, such as Oracle, in order to share information out to our customers, such as our seasonal catalog.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

SHOPIFY DISCLOSURES TO THIRD PARTIES

Shopify will never independently sell personal data for commercial purposes. However, Shopify does disclose personal data to third parties or allow third parties to access personal data to help provide services—for example, to:

Store platform data

Operate the forums and other portions of Shopify's website

Respond to and manage support inquiries

Additionally, Shopify may provide personal data, where permitted to prevent, investigate, or respond to:

Potential fraud

Illegal conduct

Physical threats

Violations of any agreements with Shopify

Shopify also provides information to third parties when legally required to do so. Where Shopify believes it is legally required to provide information, and not legally prohibited from disclosing the existence of the legal order, it will notify the data subject and give the data subject a chance to seek a protective order.

LINKS ON OUR SITE

When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

PROTECTING YOUR DATA

Shopify is our data processing partner. To protect your personal information, Shopify takes reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. For more information, you can view the Shopify Privacy Policy.

To keep your data safe, we ask you to pick a password when you create an account. You should avoid using the same password across sites or sharing your password information with anyone. Doing so makes your data vulnerable, and it’s very hard for us to protect you from another person’s breach.

Also, please note that Clare V. will never ask for your password, so if you receive anything suspicious from someone pretending to be us, don’t give them your information.

COOKIES

‘Cookies’ are small text files stored on your computer when you visit certain web pages. We use these important pieces of information to remember who you are when you come back and visit, keep track of what you have in your basket and tailor our website exactly to your needs.

Cookies do not store personally identifiable information such as name, address or payment details, but they do provide us with encrypted information to help improve your experience of the site. For example, they help us identify errors, suggest related products you may like when browsing and allow you to connect with social media sites such as Facebook, Twitter and Pinterest. We do use other "third party" cookies who may also set cookies during your visit to be used for retargeting purposes. You always have the option of disabling cookies from within your browser settings, but your browsing experience will be compromised. Cookies also do not cause harm to your computer. To see more detail, view our Cookie Policy page at https://www.clarev.com/pages/customer-service-faq-cookie-policy.

We use third parties to improve our ability to identify visitors to our website. As part of this service, we may make available identifiers to these third parties including our visitors’ IP addresses, cookies, and hashed versions of email addresses captured from your visit. We, and third parties, use this data to obtain more information about our visitors and reach out to them through other channels, such as email and/or direct mail. You have the right to opt-out of this activity. To opt-out, please follow the instructions on our opt-out page.

YOUR RIGHTS

You have the right to control your data and we know you want the ability to do so. We serve customers all over the world which means data privacy laws can differ in certain countries.

You can request that we correct your data or delete all or some of it

You can request a copy of your data or info about what we collect, why & who we share it with

You can request to transfer data you gave us to other companies

You can request that we stop using some data

You can request that we stop sending you marketing

You can make a complaint to a local data protection authority

Clare V. will defend your rights and work with you to make sure you feel that your data is protected. If you have any questions regarding your rights, please contact us at moc.veralc@ycavirp.

You can Opt Out of communication from Clare V. at any time using the links at the footer of our website and you can opt out of selling or sharing of information by visiting the Opt Out page.

You can also request that we correct your data or delete all or some of it by contacting us at moc.veralc@ycavirp or mailing us at:

Clare V.

Privacy Compliance Officer

3012 Worthen Ave., Los Angeles California US 90039

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this privacy policy at any time, so please review it frequently. We will post any change to this page. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. The last update to this policy was February 2, 2023.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at moc.veralc@ycavirp or by mail at:

Clare V.

Privacy Compliance Officer

3012 Worthen Ave., Los Angeles California US 90039

Information we collect

Information you provide to us

We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:

Personal Identifiers, including name, email address, postal address, and telephone number
Commercial and Financial Information, including purchases, credit card or debit card number, and bank or other financial account number
Other Sensitive Data, including precise geolocation
Inferences, including inferences created from other personal information collected

To the extent we process deidentified personal information, we will make no attempt to reidentify such data.

Information collected automatically

We automatically collect internet or other electronic information about you when you visit our website, such as IP address, browsing history and interactions with our website. We also collect geolocation data. This data may be collected using browser cookies and other tracking technologies.

Browser Cookies. We use cookies to create a better experience for you on our site. For example, cookies prevent you from having to login repeatedly, and they help us remember items you've added to your cart. We also use third-party cookies, which are cookies placed by third parties for advertising and analytics purposes. You can control these cookies through your browser settings.

Opt-Out Preference Signals. Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such signal, we place a U.S. Privacy String setting in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC..

Information from other sources

We may collect personal information about you from third-party sources, including Ad Networks, Data Analytics Providers, Sales & Marketing Tools, Social Networks, and Marketplace.

Ad Networks

Personal Identifiers, including Name, Email address, and Postal address
Commercial and Financial Information, including Purchases

Data Analytics Providers

Online Identifiers
Internet Activity
Commercial and Financial Information, including Purchases

Sales & Marketing Tools

Personal Identifiers, including Name and Postal address

Social Networks

Personal Identifiers, including Name, Email address, and Postal address
Commercial and Financial Information, including Purchases

Marketplace

Personal Identifiers, including Name, Email address, and Postal address
Commercial and Financial Information, including Purchases

How long we keep your data

We do not retain data for any longer than is necessary for the purposes described in this Policy. For example, when you purchase a product from us, we will keep the information related to your purchase so we can fulfill the order and after that we will keep it for a period that provides a business purpose, or that allows us to handle or respond to any complaints or concerns relating to your purchase.

Purposes of Processing

We process personal information for the following purposes:

Conducting Surveys
Creating Customer Profiles

How we disclose information

Information Disclosed for Business or Commercial Purposes in the Last 12 Months, and Categories of Parties Disclosed To

We may disclose the following personal information about you when you purchase our products or visit our website:

Personal Information Category	Categories of Service Providers	Categories of Third Parties
Personal Identifiers	Business Operations Tool, Clienteling, Cloud Computing & Storage Providers, Collaboration & Productivity Tools, Commerce Software Tools, Customer Support Tools, Data Analytics Providers, Discount Code Creator, Fraud Prevention Tools, Governance, Risk & Compliance Software, POS Integration, Payment Processors, Point-of-Sale Platform, Sales & Marketing Tools, Shipping Services, Shopify tool, Web Hosting Services, and Website Operations Tool	Ad Networks, Co-Marketing Partner, Commerce Software Tools, Payment Processors, Shipping Services, and Website Operations Tool
Online Identifiers	Business Operations Tool, Clienteling, Cloud Computing & Storage Providers, Collaboration & Productivity Tools, Commerce Software Tools, Customer Support Tools, Fraud Prevention Tools, POS Integration, Point-of-Sale Platform, Sales & Marketing Tools, Shopify tool, and Website Operations Tool	Ad Networks, Business Operations Tool, Commerce Software Tools, Data Analytics Providers, Payment Processors, and Website Operations Tool
Internet Activity	Clienteling, Collaboration & Productivity Tools, Commerce Software Tools, Governance, Risk & Compliance Software, Payment Processors, Sales & Marketing Tools, Web Hosting Services, and Website Operations Tool	Ad Networks and Data Analytics Providers
Commercial and Financial Information	Business Operations Tool, Clienteling, Cloud Computing & Storage Providers, Collaboration & Productivity Tools, Commerce Software Tools, Customer Support Tools, Data Analytics Providers, Fraud Prevention Tools, POS Integration, Payment Processors, Point-of-Sale Platform, Sales & Marketing Tools, Shopify tool, and Website Operations Tool	Ad Networks, Commerce Software Tools, Data Analytics Providers, Payment Processors, and Website Operations Tool
Other Sensitive Data	None	Ad Networks
Inferences	Payment Processors	None

California Privacy Notice (CCPA)

This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.

Collection and Disclosure of Personal Information

The personal information we collect is described above in Information we collect. The personal information we disclose for business or commercial purposes is described above in How we disclose information. The length of time for which we retain personal information is described above in How long we keep your data. Our purposes for processing data are described above in Purposes of processing.

Information “Sharing” and “Selling”

We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including: Commercial and Financial Information, Internet Activity, Online Identifiers, Other Sensitive Data, and Personal Identifiers. This allows us to show you ads that are more relevant to you.

We "sell" personal data to third parties, as that term is defined in the CCPA.

You may opt-out of these data practices here.

We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.

CCPA Rights

Your CCPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page or by emailing us at moc.veralc@ycavirp.

Right to Know and Access

You have the right to request to know and access the following about the personal information we have collected about you in the past 12 months:

the categories and specific pieces of personal information we have collected about you
the categories of sources from which we collect personal information about you
the business or commercial purposes for which we collect, sell, or share personal information
the categories of third parties with whom we disclose the information
the categories of personal information about you that we have sold, shared, or disclosed for a business purpose, and the categories of third parties to whom we have sold, shared, or disclosed that information for a business purpose

The information we would provide to you in response to a Request to Know Categories is contained in this Privacy Notice. To receive a copy of the specific personal information we have about you, submit a Request to Know or Access via the link above. If you make a Request to Know more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete from our records your requested personal information and direct our service providers to do the same.

Right to Non-Discrimination

If you exercise your CCPA consumer rights:

We will not deny goods or services to you
We will not charge you different prices or rates for goods or services, including through the use of discounts or other benefits or penalties
We will not provide a different level or quality of goods or services to you
We will not suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services
We will not retaliate against you, as an employee, applicant for employment, or independent contractor

We may still offer you certain financial incentives permitted by the CCPA such as discounts, rewards, premium features, or loyalty accounts that can result in different prices, rates, or quality levels.

Right to Opt-Out

You have the right to opt-out of any selling and sharing of your personal information.

You may exercise your right to opt-out here.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Request Verification

Before we can respond to a Request to Know or Request to Delete, we will need to verify that you are the consumer who is the subject of the CCPA request. Verification is important for preventing fraudulent requests and identity theft. Requests to Opt-Out do not require verification.

Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request. If you submit a request not through our webform, we will ask you to provide the same information requested in the webform.

For a request that seeks specific personal information, we ask that you sign a declaration stating that you are the consumer whose personal information is the subject of the request, as required by the CCPA.

In some cases, we may have no reasonable method by which we can verify a consumer's identity. For example:

If a consumer submits a request but we have not collected any personal information about that consumer, we cannot verify the request.
If the only data we have collected about a consumer is gathered through website cookies (i.e. the consumer visited our website but had no other interaction with us), we are unable to reasonably associate a requester with any data collected; therefore, we cannot verify the request.

Authorized Agent

A California resident's authorized agent may submit a rights request under the CCPA by emailing us at moc.veralc@ycavirp. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.

If you have trouble accessing this notice, please contact us at moc.veralc@ycavirp.

Contact Us

If you have any privacy-related questions or have trouble accessing this notice, please email moc.veralc@ycavirp.

Virginia Privacy Notice (VCDPA)

This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.

Collection and Disclosure of Personal Information

The personal data we collect is described above in Information we collect. The personal data we disclose to third parties and the categories of third parties to whom we disclose personal data is described above in How we disclose information. The length of time for which we retain personal information is described above in How long we keep your data. Our purposes for processing data are described above in Purposes of processing.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the VCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in VCDPA.

Profiling

The VCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

VCDPA Rights

Your VCDPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.

Right to Non-Discrimination

If you exercise your VCDPA consumer rights:

We will not deny goods or services to you
We will not charge you different prices or rates for goods or services
We will not provide a different level or quality of goods or services to you

However, we may offer a different price, rate, level, quality, or selection of products or services if your personal data is required in order to provide those products or services and you have exercised your right to opt out, or the offer is related to a voluntary loyalty or rewards program.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Virginia Attorney General’s Office.

Colorado Privacy Notice (CPA)

This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.

Collection and Disclosure of Personal Information

Data “Selling” and Targeted Advertising

We "sell" personal data to third parties, as that term is defined in the CPA.

We process personal data for purposes of targeted advertising (as defined in the CPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

The CPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

CPA Rights

Your CPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make a Request to Know more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, including the following:

To comply with legal obligations
To comply with an official investigation or cooperate with law-enforcement agencies
To establish or defend legal claims
To complete an obligation to you that you have requested
To respond to security incidents, fraud, harassment, and other similar activity
To identify and repair technical errors
To conduct internal research to develop, improve, and repair our products and services
For internal operations that are reasonably aligned with your expectations

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your CPA consumer rights:

We will not deny goods or services to you
We will not charge you different prices or rates for goods or services
We will not provide a different level or quality of goods or services to you

However, we may offer a different price, rate, level, quality, or selection of products or services if the exercise of your CPA rights affects the feasibility or the value of those products or services, or the offer is related to a voluntary loyalty or rewards program.

Right to Opt-Out

You have the right to opt-out of any selling of your personal data, processing of your personal data for purposes of targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects for you.

You may exercise your right to opt-out.

Authorized Agents. You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General’s Office.

Connecticut Privacy Notice (CTDPA)

This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to moc.veralc@ycavirp.

Collection and Disclosure of Personal Information

Data “Selling” and Targeted Advertising

We "sell" personal data to third parties, as that term is defined in the CTDPA.

We process personal data for purposes of targeted advertising (as defined in the CTDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

The CTDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

CTDPA Rights

Your CTDPA rights are described below. Make a Privacy Request by clicking here or the link at the top of this page.

Right to Access

If you make a Request to Know more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, including the following:

To comply with legal obligations
To comply with an official investigation or cooperate with law-enforcement agencies
To establish or defend legal claims
To complete an obligation to you that you have requested
To respond to security incidents, fraud, harassment, and other similar activity
To identify and repair technical errors
To conduct internal research to develop, improve, and repair our products and services
For internal operations that are reasonably aligned with your expectations

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your CTDPA consumer rights:

We will not deny goods or services to you
We will not charge you different prices or rates for goods or services
We will not provide a different level or quality of goods or services to you

Right to Opt-Out

You may exercise your right to opt-out.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.

Notice of Financial Incentive

Users who sign up for our marketing emails receive a 15% discount on their first purchase. Users who sign up for our marketing text messages receive a 15% discount on their first purchase. Users who sign up for our birthday email receive a 15% discount on one transaction during their birthday month. A user provides their email address, birthday, and/or text number and consents to receive emails and/or text messages in exchange for a discount(s) provided via coupon code(s). To opt-in to marketing messages a user must enter and submit their email address and/or text number into the forms located at the footer of our website. To opt-in to birthday emails a user must fill in their birthday on an email form sent to them after entering and submitting their email address for email marketing. A user may unsubscribe from our marketing emails and birthday emails by using the unsubscribe link in the email footer at any time. A user may unsubscribe from our marketing text messages by replying STOP to the text message at any time. We calculate the value of the offer and financial incentive by using the expense related to the offer.