COLLECTION OF PERSONAL INFORMATION
We may process your Personal Information when you register with us through the Site, when you join our mailing list, or when you make a purchase with Monica + Andy. Personal Information includes any information about you that can be used to contact or identify you ("Personal Information"). We may process your Personal Information, including, but not limited to, your name, phone number, email address, due date, IP address, payment details, postal address, information about orders you initiate, information about Monica + Andy store you visit, and information about the device and browser you use. We process your Personal Information to provide and improve our Site, services, features, and content for your enjoyment and use of the Site (collectively, our "Services"). We also may use this Personal Information to help customize and improve your experience when visiting the Site or one of our stores by presenting to you goods and services that are more likely to be of interest to you.
If you choose to make a purchase via the Site, our third party payment processor service providers may also process billing information, such as your credit card number or billing address. We use the Personal Information you provide mainly to provide our Services, process your transactions, and administer your inquiries.
To access additional functionality of the Site, you may be required to create an account for your use of our Services ("Account"). You may create an Account directly via the Site or by logging into your account with certain third party social networking sites ("SNS") (including, but not limited to, Facebook and Twitter) via our Services. If you decide to create an Account by logging into an SNS via our Services, we will obtain the Personal Information you have provided to the SNS (such as your "real" name, profile picture, email address, and other information you make publicly available via the applicable SNS) from the account you have with such SNS and use that information to create your Account. The information we process may also include any information you provide as part of your account registration and use of our Services that alone is not considered Personal Information (your “Non-Identifying Information”). The information we obtain may depend on the privacy settings you have with the SNS. When you create an Account, you will become a "Member" of our Services.
We may use your Personal Information in conjunction with your Non-Identifying Information to provide Services, complete your transactions, and administer your inquiries. We may share Non-Identifying Information with third parties for industry analysis, demographic profiling, and delivery of targeted advertising about other products and services. Any aggregated information shared in these contexts will not contain your Personal Information.
Certain Non-Identifying Information would be considered a part of your Personal Information if it were combined with other identifiers (for example, combining your postal code with your street address) in a way that enables you to be identified. But the same pieces of information may be considered Non-Identifying Information when they are taken alone or combined only with other Non-Identifying Information. We may combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other Monica + Andy users to attempt to provide you with a better experience, to improve the quality and value of our Services, and to analyze and understand how our Site and our Services are used. We may also use the combined information without aggregating it to serve you specifically, for instance to deliver a product to you according to your preferences or restrictions.
Your Personal Information may be used to contact you with marketing or promotional materials and other information that may be of interest to you. If you decide at any time that you no longer wish to receive such communications from us, please follow the unsubscribe instructions provided in any of the communications or contact us at email@example.com with "Privacy" as the subject line of the email.
Like most websites and online services, we and our third-party partners automatically process certain information when you visit the Site, use our Services, read our emails, or otherwise engage with us. We typically collect this information through a variety of tracking technologies, including cookies, web beacons, Flash cookies (locally stored objects), embedded scripts, location-identifying technologies, and similar technology (collectively, “tracking technologies”). These tracking technologies collect information about how you use our Services (e.g., the pages you view, the links you click, and other actions you take on the Site), information about your browser and online usage patterns (e.g., IP address, browser type, browser language, referring / exit pages and URLs, pages viewed, whether you opened an email, links clicked), and information about the device(s) you use to access the Site and use our Services (e.g., mobile device identifier, mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, and, depending on your mobile device settings, your geographical location data, which could include GPS coordinates or similar information regarding the location of your mobile device). We may collect analytics data or use third-party analytics tools, such as Google Analytics to help us measure traffic and usage trends for our Services and to understand more about the demographics of our users. You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners and view its currently available opt-out options at https://tools.google.com/dlpage/gaoptout. We may also work with third-party partners to employ technologies, including the application of statistical modeling tools, which permit us to recognize and contact you across multiple devices. Although we do our best to honor the privacy preferences of our users, we are unable to respond to Do Not Track signals set by your browser at this time.
We may use the data collected through tracking technologies to: (a) retain information so that you will not have to re-enter it when visiting the Site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) recognize and contact you across multiple devices; (d) provide and monitor the effectiveness of our Services; (e) monitor aggregate metrics, such as number of visitors, traffic, usage, and demographic patterns on our Services; (f) upgrade or amend technology; and (g) otherwise plan for and enhance our Services.
If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) disable existing cookies; or (iii) set your browser to automatically reject cookies. Please note that doing so may impact your experience using our Services, as some features may not fully or properly work. Depending on your mobile device and operating system, you may not be able to delete or block all cookies. You may also set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and performed certain functions with it.
Interest-Based Advertising. We participate in interest-based advertising and use third-party advertising companies to serve you targeted advertisements based on your browsing history. We may share or we may permit third-party online advertising networks, social media companies, and other third-party services to process information about your use of the Site so that they may play or display ads on our Services, on other devices you may use, and on other websites, applications, or services, including on Facebook. Typically, though not always, the information we share is provided through cookies or similar tracking technologies, which recognize the device you are using and collect information, including click stream information, browser type, time and date you visited the Site, and other information. We and our third-party partners use this information to make the advertisements you see online more relevant to your interests, as well as to provide advertising-related services, such as reporting, attribution, analytics, and market research.
To learn about interest-based advertising and how you may be able to opt-out of some of this advertising, you may wish to visit the Network Advertising Initiative’s online resources at http://www.networkadvertising.org/choices and/or the DAA’s resources at www.aboutads.info/choices. You may also manage certain advertising cookies by visiting the EU-based Your Online Choices at www.youronlinechoices.eu.
- Cross-device linking. Please note that opting-out of receiving interest-based advertising through the NAI’s and DAA’s online resources will only opt-out a user from receiving interest-based ads on that specific browser or device, but the user may still receive interest-based ads on his or her other devices. You must perform the opt-out on each browser or device you use.
- Mobile advertising. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest based ads” (Android). You may also be able to opt-out of some—but not all—interest-based ads served by mobile ad networks by visiting http://youradchoices.com/appchoices and downloading the mobile AppChoices app.
- Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.
Social Media Widgets and Advertising. When engaging with our Services or through a third-party social networking website, plug-in, or application, we may process the Personal Information associated with your social media account. Our Services may include social media features, such as the Facebook Like button, Google Plus, LinkedIn, Snapchat, Instagram, Twitter, or other widgets. These social media companies may recognize you and process information about your visit to our Services, and they may set a cookie or employ other tracking technologies. Your interactions with those features are governed by the privacy policies of those companies.
We display targeted advertising to you through social media platforms, such as Facebook, Twitter, Google+, and others. These companies have interest-based advertising programs that allow us to direct advertisements to users who have shown interest in our Services while those users are on the social media platform or to groups of other users who share similar traits, such as likely commercial interests and demographics. These advertisements are governed by the privacy policies of those social media companies that provide them.
Cross-Device Linking. We, or our third-party partners, may link your various devices so that content you see on one device can result in relevant advertising on another device. We do this by collecting information about each device you use when you are logged in to our Services. We may also work with third-party partners who employ tracking technologies or the application of statistical modeling tools to determine if two or more devices are linked to a single user or household. We may share a common account identifier (such as an email address or user ID) with third-party advertising partners to help recognize you across devices. We, and our partners, can use this cross-device linkage to serve interest-based advertising and other personalized content to you across your devices, to perform analytics, and to measure the performance of our advertising campaigns.
Google Analytics and Advertising. We use Google Analytics to recognize you and link the devices you use when you visit the Site or our Services on your browser or mobile device, log in to your account on our Services, or otherwise engage with us. We share a unique identifier, like a user ID or hashed email address, with Google to facilitate the service. Google Analytics allows us to better understand how our users interact with our Services and to tailor our advertisements and content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, review Google's site “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Ad-On here https://tools.google.com/dlpage/gaoptout/.
We may also utilize certain forms of display advertising and other advanced features through Google Analytics, such as Remarketing with Google Analytics, Google Display Network Impression Reporting, the DoubleClick Campaign Manager Integration, and Google Analytics Demographics and Interest Reporting. These features enable us to use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie) or other third-party cookies together to inform, optimize, and display ads based on your past visits to our Site. You may control your advertising preferences or opt-out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://google.com/ads/preferences, or by visiting NAI’s online resources at http://www.networkadvertising.org/choices.
SENDING EMAILS VIA THE SERVICE
As part of our Services, Members may communicate with third parties through use of their Accounts. When a Member selects the option of adding one or more email address to an online form, the message they create in the corresponding template will be sent from Monica + Andy to those email addresses on their behalf. These email addresses will be used only for the purpose of sending the email communication to the addressee.
Identity theft and the practice currently known as "phishing" are of great concern to Monica + Andy. Safeguarding information to help protect you from identity theft is a top priority. We do not and will not, at any time, request your credit card information, your login information, or national identification numbers in a non-secure or unsolicited e-mail or telephone communication. For more information about phishing, visit the Federal Trade Commission’s website.
INFORMATION SHARING AND DISCLOSURE
Monica + Andy Blog. Monica + Andy offers a publicly accessible blog at http://www.monicaandandy.com/blog/ (the "Blog"). Please note that any information you provide on the Blog, including, but not limited to, comments, may be processed by others who access the Blog. Also, if you choose to comment on any Blog post, the content of such comment, along with your name, email address, and website URL will be publicly viewable via the Blog.
SNS. Our Services give you the option to share information contained in your Account with certain social networking services (i.e., Twitter and Facebook). Monica + Andy will not share your Account information with such social networking services unless you expressly authorize such disclosure.
Service Providers. We may employ third party companies and individuals to facilitate our Services, to provide our Services on our behalf, to perform Site-related services (e.g., without limitation, maintenance services, database management, payment processors, web analytics and improvement of the Site’s features) or to assist us in analyzing how the Site and our Services are used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Compliance with Laws and Law Enforcement. Monica + Andy cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to legal or regulatory claims (including but not limited to subpoenas), to protect the property and rights of Monica + Andy or a third party, to protect the safety of the public or any person, or to prevent or stop activity that is or may be at risk of being illegal, unethical, or legally actionable activity.
Business Transfers. Monica + Andy may sell, transfer, or otherwise share some or all of its assets, including your Personal Information, in connection with a merger, acquisition, reorganization, or sale of assets or in the event of bankruptcy.
YOUR RIGHTS REGARDING PERSONAL INFORMATION
When applicable, Monica + Andy shall honor certain rights. In accordance with data protection laws and in certain circumstances, you may possess the right to:
- request access to your Personal Information that we hold about you (the right of access);
- request that we delete your Personal Information where there is no legitimate business purpose for the processing of such information (the right of erasure or to be forgotten). We may not always be able to comply with this request of erasure for specific legal reasons or other legitimate grounds, which will be notified to you, if applicable, at the time of the request;
- review, update, correct, or delete Personal Information in your registration profile by making edits via the “My Account” section of the Site, or by asking us to update and correct any out-of-date or incorrect information that we hold about you (the right of rectification) We may retain an archived copy of your records as required by law or for legitimate business purposes;
- opt out of any marketing communications that we may send you and to object to us using / holding your Personal Information if we have no legitimate reasons to do so (the right to object);
- ask us to ‘restrict processing of data,’ which means that we would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing). You can ask to suspend the processing of your Personal Information in the following scenarios: (a) establishing the accuracy of Personal Information; (b) where Monica + Andy’s use of Personal Information is unlawful, but there is no request of erasure; (c) where you need us to hold Personal Information even if retention is no longer required and it is needed to establish, exercise, or defend a legal claim; or (d) you object to our use of Personal Information, but we need to verify whether there are overriding legitimate grounds to use it;
- ask us to supply you or a third-party with your Personal Information in a structured, commonly-used, machine-readable format (the right to data portability); and
- withdraw consent at any time where we are relying on consent to process Personal Information.
Monica + Andy will accept, when applicable, any written request through the appropriate channels from a data subject to exercise his or her rights and freedoms pursuant to data protection laws. We will use reasonable means to verify the identity of the requester. All requests will be addresses within a reasonable amount of time. If you wish to exercise any of the above rights, please contact us at [need appropriate email address].
Monica + Andy has implemented appropriate elements of privacy by design in conjunction with technical and physical safeguards to protect the security of your Personal Information from unauthorized or unlawful processing. We follow industry standards on information security management to safeguard Personal Information. Our information security systems apply to people, processes, and information technology systems on a risk management basis.
While we aim to safeguard your Personal Information, no method of transmission over the Internet, or method of electronic storage, is 100% secure. When you enter sensitive information (such as a credit card number) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). In some cases, we also encrypt such information stored on our systems.
When applicable, we will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored Personal Information to you via email or conspicuous posting on the Site without unreasonable delay, insofar as consistent with (i) the legitimate needs of law enforcement and (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
INTERNATIONAL TRANSFER [AS4]
LINKS TO OTHER SITES
The Site may contain content and links to other websites that are not owned, operated, or controlled by Monica + Andy. We are not responsible for the privacy practices of or the content displayed on such third-party websites. If you choose to visit an advertiser by "clicking on" a banner ad or other type of advertisement, or click on another third party link, you will be directed to that third party’s website. The fact that we link to a website or present a banner ad or other type of advertisement is not an endorsement, authorization, or representation of an affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data, or solicit Personal Information from you. Other websites may follow different rules regarding the use or disclosure of the Personal Information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit.
OUR POLICY TOWARD CHILDREN
The Site is not directed to persons under 18. We do not knowingly process Personally Information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at firstname.lastname@example.org with "Privacy" as the subject line of the email. If we become aware that a child under 13 has provided us with Personal Information, we will delete such information from our files, notwithstanding any legal or regulatory requirements.