SECTION 1 - WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.
SECTION 2 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at cleo@dearcleo.com or mailing us at:
Dear Cleo
13221 SE 26th Street
Suite B
Bellevue, WA 98005
Attention: Privacy Officer
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 - SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
Payment:
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Statement or our website’s Terms of Service.
Links
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 - COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
SECTION 8 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
SECTION 9 - CALIFORNIA PRIVACY RIGHTS
This California Consumer Privacy Statement supplements this Privacy Statement and applies solely to California consumers. This section provides information about our online and offline privacy practices. This California Consumer Privacy Statement does not apply to Dear Cleo’s personnel.
This California Consumer Privacy Statement uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 and its implementing regulations (the “CCPA”).
Notice of Collection and Use of Personal Information
We may collect the following categories of personal information about you:
We may use the categories of personal information listed above for the purposes described in this Privacy Statement. In addition, we may use these categories of personal information for certain business purposes specified in the CCPA, as described in this table:
|
Purposes |
Categories of Personal Information |
|
Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, or providing similar services |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Debugging to identify and repair errors that impair existing intended functionality |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Undertaking internal research for technological development and demonstration |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
In addition, we may also use the following categories of personal information for purposes of managing our career opportunities: Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences
Our Prior Collection, Use and Disclosure of Personal Information
We may have collected and used your personal information, as described in section 1 above, during the 12-month period prior to the effective date of this California Consumer Privacy Statement. For the personal information collected during that timeframe, we describe below: (a) the categories of sources from which we may have obtained the personal information, (b) the categories of third parties with whom we may have shared the information, and (c) the categories of personal information we may have disclosed for a business purpose.
Sources of Personal Information
We may have obtained personal information about you from various sources, as described below.
|
Categories of Sources of Data Collection |
Categories of Personal Information |
|
Directly from you, such as when you contact us with a question or comment
|
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
From your devices, such as when you visit our Site |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Your family or friends, such as when they provide us with your contact information so we can send information that may interest you |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Our affiliates and subsidiaries |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Vendors who provide services on our behalf |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Social networks |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Online advertising companies |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Government entities |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Consumer data resellers |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
Sharing of Personal Information
We may have shared your personal information with certain categories of third parties, as described below.
|
Categories of Third Parties |
Categories of Personal Information |
|
Our affiliates and subsidiaries |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Vendors who provide services on our behalf |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Professional services organizations, such as auditors and law firms |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Our joint marketing partners |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Our business partners |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Advertising networks |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Internet service providers |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Data analytics providers |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Government entities |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Operating systems and platforms |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Social networks |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
|
Consumer data resellers |
Identifiers; Additional Data Subject to Cal. Civ. Code § 1798.80; Protected Classifications; Commercial Information; Online Activity; Geolocation Data; Sensory Information; Employment Information; Education Information and Inferences |
Sale of Personal Information
We do not sell your personal information in exchange for monetary compensation. We may allow certain third parties to collect your personal information via automated technologies on our Site in exchange for non-monetary consideration (such as an enhanced ability to serve you content and advertisements that may be of interest to you). You have the right to opt out of this disclosure of your information, as detailed below.
We do not sell the personal information of minors under 16 years of age without affirmative authorization if we have actual knowledge of the individual’s age.
Disclosure of Personal Information for a Business Purpose
We may have disclosed to third parties the following categories of personal information for a business purpose:
You have certain choices regarding our use and disclosure of your personal information, as described below.
Access: You may have the right to request, twice in a 12-month period, that we disclose to you the personal information we have collected, used, disclosed and sold about you during the past 12 months.
Deletion: You have the right to request that we delete certain personal information we have collected from you.
How to Submit a Request: To submit an access or deletion request, please email us at: cleo@dearcleo.com
Verifying Requests: To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request If you request access to or deletion of your personal information, we may require you to provide reasonable identification information. In addition, if you ask us to provide you with specific pieces of personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. If you designate an authorized agent to make an access or deletion request on your behalf (1) we may require you to provide the authorized agent written permission to do so, and (2) for access and deletion requests, we may require you to verify your own identity directly with us (as described above).
Additional Information: If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request. This California Consumer Privacy Statement is available in alternative formats upon request. Please contact cleo@dearcleo.com to request this California Consumer Privacy Statement in an alternative format or mail us at:
Dear Cleo
13221 SE 26th St
Suite B
Bellevue, WA 98005
Attention: Privacy Officer
SECTION 10 - CHANGES TO THIS PRIVACY STATEMENT
We reserve the right to modify this Privacy Statement at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this Privacy Statement, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Privacy Compliance Officer at cleo@dearcleo.com or by mail at
Dear Cleo
13221 SE 26th St, Suite B
Bellevue, WA 98005
Attention: Privacy Officer
Privacy Statement Effective Date: December 31, 2019