Privacy Policy

GDPR NOTICE FOR CONSUMERS BASED IN THE EUROPEAN UNION

PERSONAL INFORMATION

With respect to EU data subjects, “personal information,” as used in this Privacy Policy, is equivalent to “personal data” as defined in the European Union General Data Protection Regulation (GDPR).

HOW INFORMATION IS COLLECTED, USED AND DISCLOSED

We may collect certain personal information for various purposes, and we may disclose such information to various third parties.  For more information on what types of personal information is collected, from what sources, for which purposes, and how that information is disclosed, please see our Data Collection and Use Chart below.

We work with a third party, International Checkout, to fulfill orders placed by customers who require shipment outside of the United States. Information provided to International Checkout is subject to that service provider’s privacy policy at https://www.internationalcheckout.com/privacy-policy.php, as well as the terms of this Policy. All international online sales made through our Sites are processed by Shopify, including secure credit card payments. Shopify’s privacy policy is at https://www.shopify.com/legal/privacy. 

If you are a resident of the European Economic Area (EEA), please review Shopify’s and International Checkout’s privacy policies relating to EEA residents and their rights under EEA law, specifically the EU General Data Protection Regulation (GDPR). We use our reasonable commercial efforts to insure that all our service providers for our Sites have in place GDPR-compliant privacy policies, which may include the use of European Commission-approved Standard Contractual Clauses. 

LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)

If you are a resident of the European Economic Area (EEA), MILLY’s legal basis for collecting and using the Personal Information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect it.  In addition, we process Personal Information with the principle of data minimization in mind.  This means that we limit ourselves to the minimum amount of Personal Information which is needed to achieve the particular purpose for which we process the Personal Information.  Below are some examples of the purposes for which Personal Information may be processed.

MILLY may process your Personal Information because:

·       The processing is necessary to provide the services and features you have requested.

·       The processing is necessary to perform a contract with you.

·       The processing is necessary for the legitimate interests of our business, such as fraud prevention, information security, direct marketing, or to comply with the law.

·       To fulfill a legal obligation.

·       You have provided consent for us to do so.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.  For more details on data retention periods, please see our Data Collection and Use Chart below.

SECURITY

We have adopted reasonable and appropriate security procedures to help protect against loss, misuse, and unauthorized access to the information you provide to us.  Please note, however, that no data transmission or storage can be guaranteed to be 100% secure.  As a result, while we strive to protect your information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to the Site and cannot be responsible for the theft, destruction, or inadvertent disclosure of your information.

COOKIE POLICY

An IP address is the unique number that is automatically assigned to your computer when you log onto the Internet.  As you enter the website, our server records and monitors your IP address and uses it to develop statistical analysis.  These analyses assist us in refining and adapting the content and design of the Site.  The use of IP addresses also enables us to prevent malicious Internet users from masquerading as other users.

Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology.  A cookie is a small piece of information sent by a website that is saved on your hard drive by your computer’s browser.  A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity.  They are also sometimes referred to as pixels and tags.

As you access or use the Site, we and/or third parties may collect information using cookies, web beacons, pixels, and navigational and location data collection (clickstream, log files, server logs) for the purposes described in this Policy.  Such automated technologies further help us to keep track of your interactions with our website and provide you with a more customized experience.

We use the following cookies:

·       Strictly necessary cookies.  These are cookies that are required for the operation of our website. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website.

·       Analytical/performance cookies.  They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works.

·       Functionality cookies.  These are used to recognize you when you return to our website so that we can personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

·       Targeting cookies.  These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

At any time, you can modify your cookie settings.  You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

To find more information about cookies please visit www.allaboutcookies.org.  Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use.  By disabling cookies, you won’t be able to enjoy the convenience provided by our customization.   

CROSS-BORDER DATA TRANSFERS

Your information, including Personal Information, may be transferred to—and maintained on—computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside of the United States and choose to provide information to us, please be aware that your personal data will be transferred to, processed, and stored in the United States. Data protection laws in the U.S. may be different from those in your country of residence. We transfer your personal information out of the EEA only upon your consent. You consent to the transfer of your information, including personal information, to the U.S. as set forth in this Privacy Policy by visiting our Site.

Whenever we transfer your personal information out of the EEA to the U.S. or countries not deemed by the European Commission to provide an adequate level of personal information protection, the transfer will be based on a data transfer mechanism recognized by the European Commission as providing adequate protection for personal information.

Transfers to Third Parties

Courts, tribunals, government authorities and related parties or counterparties with whom we share personal data, third-party vendors and business partners are in some cases located outside the EU. Unless the recipients are located in countries that have been deemed adequate by the European Commission, we put in place data transfer agreements based on the applicable European Commission-approved Standard Contractual Clauses to protect the personal data so transferred.  In certain cases, we may rely on statutory derogations for international data transfers.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA. MILLY will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy.

YOUR DATA PROTECTION RIGHTS UNDER THE GDPR DATA PRIVACY LAWS

The Data Controller

The Data Controller who collects and processes your Personal Information is: MMJ Apparel LLC, 1407 Broadway FL 10 New York, NY, 10018-3271 United States.

Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights.  Barring certain situations, you have the following data protection rights:

·       The right to access, update or erasure of the information we have on you.  You have the right to access, update and erase your Personal Information.

·       The right of rectification.  You have the right to have your Personal Information corrected if that information is inaccurate or incomplete.

·       The right to object.  You have the right to object to our processing of your Personal Information.

·       The right of restriction.  You have the right to request that we restrict the processing of your Personal Information.

·       The right to data portability.  You have the right to be provided with a copy of the information that we have on you in a structured, machine-readable and commonly used format.

·       The right to withdraw consent.  You have the right to withdraw your consent at any time where MILLY relied on your consent to process your Personal Information.

The right to know about automated decisionmaking.  As a data subject you also have the right to not be subject to decisions based on automated decision making alone, including profiling, and which may lead to legal consequences for you. This right does not apply if such processing is necessary in order for MILLY to enter into or fulfill an agreement with you, if such processing is allowed according to applicable legislation, or if the legal basis for such processing is your consent.

MILLY’s has implemented reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information via the online submission form at: LINK .  If you wish to be informed of the type of Personal Information we hold about you and/or if you wish to remove such Personal Information from our systems, please contact us at:  1407 Broadway FL 10 New York, NY, 10018-3271 United States or 1-800-223-2664 .  Please note that for your safety and security, we may ask you to verify your identity before responding to such requests.

If you choose not to exercise your GDPR rights as summarized above or described elsewhere in the Policy and you continue to provide us with Personal Data through the Sites, you consent to our use of the Personal Data that you provide and you accept the terms of this Policy.  

External Links 

We may make available third party applications through our Site and social media applications for your use.  Links to such applications, any other websites included in this Site or links on our social media accounts operate with privacy policies beyond our control.  Unless otherwise indicated, once you have left our Site or our social media account, all use of information you provide is governed by the privacy policy of the other website’s or social media account’s operators.  We are not responsible for any transactions that occur between you and a third-party website or social media account.

Changes to this Policy 

We reserve the right to change this Policy at any time and will alert you in accordance with applicable laws when material changes have been made by indicating at the top of this e Policy the date it was last updated. We encourage you to review our Policy to make sure you understand how your information and data will be used. Your continued use of the Sites following the posting of changes to this Policy will be considered your consent to those changes. 

Contact Us: Questions, Concerns About or Reviewing or Correcting Personal Information

If, for any reason, you have questions or concerns regarding any provisions of this Policy or the information that we have collected about you, please contact us by sending an e-mail to [email protected]. 

CALIFORNIA CONSUMERS ONLY:

YOUR CALIFORNIA PRIVACY RIGHTS

This Privacy Rights Act Notice (“Notice”) provides additional information to California residents whose Personal Information is collected by us pursuant to California law, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). This Policy applies to our offline and online data collection practices, including when you visit our website at yuipmunk.top (the “Site”), inquire about our services, or when you engage or communicate with us via email or other methods both offline and online.  If you are not a California resident, this California Notice does not apply to you. Please visit our Privacy Policy (“Policy”) at https://yuipmunk.top/privacy for more information. Any capitalized terms undefined in this California Notice have the same definition as the Policy. 

PERSONAL INFORMATION COLLECTED, DISCLOSED OR SOLD

Information Collected

Within the past 12 months, we have collected the categories of personal information about California consumers as described in the Data Collection and Use Chart below.

Business-to-Business ("B2B") Information

If you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship, you have the same rights as other consumers set forth in this Notice with respect to the information we collect from you in that role. We collect the contact information you provide to us, including name, phone number, address, email address and other contact and relationship information and communications consistent with your role in facilitating that business relationship. We use that information for internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship. We do not disclose that information outside our business relationship without your consent. For more information, please see our Data Collection and Use Chart below.

Information Sold or Shared

We do not sell your data in exchange for money.  We may, however, share your data with third-party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below.

We have sold or shared the following categories of personal information for a business or commercial purpose in the preceding 12 months.

• Personal Identifiers
• Commercial Information
• Internet Activity

We have disclosed the following categories of personal information for a business or commercial purpose in the preceding 12 months:

• Personal Identifiers
• Commercial Information
• Internet Activity

We do not knowingly sell the personal information of individuals under 16 years of age without affirmative authorization.

For more information on what types of personal information is collected, from what sources, for which purposes, and how that information is disclosed, please see our Data Collection and Use Chart below.

HOW WE COLLECT INFORMATION 

MILLY collects personal information that you voluntarily provide to us, both online and in-stores, such as when you: 

• Make a purchase
• Register with our Sites
• Sign up for special offers or promotions
• Use a third-party connection or log-in to create a membership or profile on any of our Sites, access any content on our Sites or forward content from our Sites to another person (such as email, Facebook, Twitter, Pinterest, Instagram, Google Plus and YouTube)
• Contact us for any reason, reply to one of our inquiries by email, postal mail, online, or by telephone through customer service. 

In addition, we may collect Personal information using automated technology, including when you visit our Website or interact with our electronic advertisements or communications, and through our third-party sources, including but not limited to service providers, entities providing data analysis and analytics, social media and social networking websites and other entities.  Our third-party providers automatically collect certain information when you visit the Sites, such as your computer’s IP address, operating system, the site from which you linked to us, and the time and date of your visit and purchases. 

From time to time, we work with third parties (such as e-commerce sales and payment providers, marketing firms, networks, analytics providers, search information providers, credit reference agencies) that provide us information about you, excluding your credit card information (which we do not receive or store). For example, we use Shopify, PayPal and Afterpay to administer payment processing. These and other third parties identified in this Policy may collect and store certain personal information about you, and you should carefully review those companies’ privacy policies to understand what information they obtain from you and how they use and secure it. We also use one or more fraud protection service providers that set cookies to protect both you as a consumer and us. 

USE OF PERSONAL INFORMATION

As you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. 

We may use your information according to this Policy and our Terms of Use  available at https://yuipmunk.top/pages/terms-of-usein effect at the time of use. The provisions contained herein supersede all previous notices or statements regarding our privacy practices with respect to the Sites. We may use aggregated data (independent of any personal identifiers) for research and commercial purposes. This information includes what areas our users visit most frequently and what services they access most often. This information helps us develop better Site that are more useful and accessible to you. We may use your personally identifiable information:  

• For the specific purpose for which it was voluntarily provided
• To provide you with a personalized browsing experience when using the Sites
• To fulfill any contractual agreements between you and us (for example when you place an order for products through the Sites)
• To send you details (including by mail, phone, e-mail or text) of other products that we think may interest you, where you have consented to this and share your information with third parties for this purpose, unless you inform us that you do not want to receive these details
• To manage any account that you hold with us
• To ensure that content from the Sites is presented in the most effective manner
• To notify you about changes to the Sites or our services
• To develop, market, sell or provide products and services of interest
• To deliver communications or obtain feedback relevant to your use of the Sites
• To evaluate the quality of the information, provide more relevant content, analyze Site usage, and improve the Sites and the services provided through them
• For market research, project planning, troubleshooting problems, detecting and protecting against error, fraud or other criminal activity
• To create anonymous data for market profiling purposes that may be used by us and shared with our group of companies or third-party service providers and as permitted by, and to comply with, any legal or regulatory requirements, process or provisions.
• To process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
• To create and secure your account with us.
• To process your requests, purchases, transactions, and payments, and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To send you newsletters, or to provide information on products or services to you. You can elect not to receive promotional emails from us either by “unsubscribing” to an email you receive or by contacting us as indicated below.
• If you prefer not to receive promotional information from us, we make it easy for you to let us know. You can contact us at any time to decline promotional information (see the Choice/Opt-Out paragraph below).

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

DISCLOSURE OF YOUR PERSONAL INFORMATION

Service Providers and Contractors

We may disclose your personal information with our vendors, subsidiaries, partners, and third-party independent contractors for purposes of: (1) performing functions on behalf of us, such as processing credit card transactions; (2) providing you with product offers, marketing or promotional materials through phone, text, or electronic and/or postal mail; and (3) tracking information generated through our Website or social media sites. Our vendors, partners and third-party independent contractors are obligated contractually not to use or share your personal information for unauthorized purposes.

Outside Parties

We disclose Personal Information to third parties we work with who help us gather information from you and communicate with you including entities that provide sweepstakes/contests sponsorship, social media companies, companies providing data analytics, targeted advertising, or online behavioral marketing services. We may share product reviews that you submit with our authorized dealers solely for informational and promotional purposes. If our information practices change at some time in the future we will post the policy changes to our Website. If you are concerned about how your information is used, you should check back at our Website periodically.

Legal Obligations

We may disclose personal information to outside parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; to enforce the Terms of Use of our Website; to prevent imminent physical harm; in the event that we find that your actions on our Website violate any laws, our Terms of Use, or any of our usage guidelines for specific products or services; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring

We may disclose Personal Information to third parties in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization or other transfer of our brand or company, provided that the third party agrees to adhere to the terms of this Policy.

Finally, we never use or share the personal information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

CPRA RIGHTS AND REQUESTS

Under the CPRA, you are entitled to certain rights, and you can make requests with regard to those rights as follows:

Right to Know about the Categories of Personal Information Collected (“Right to Know”)

Right to Request Deletion of Personal Information (“Right to Delete”)

Right to Correct or Rectify Inaccurate Information about you (“Right to Correct”)

HOW TO MAKE YOUR REQUESTS TO KNOW, DELETE, OR CORRECT

You have the right make requests for the aforementioned rights (Request to Know; Request to Delete; or a Request to Correct (a “Request”)).

To make a Request for any of the information set forth above, please submit a verifiable consumer request pursuant to the instructions below. The Request must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold, shared, or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will not be able to respond to your request.  We will acknowledge your Request within 10 business days and will attempt to respond substantively within 45-90 days.

You may make a Request the following ways:

• You may make a request here: [email protected]
• Enter your request here  
• You may also make a request by phone by contacting us at 1-800-223-2664 

Once we receive your Request, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with two or three pieces of information that will help us to verify your identification.

We will review all information provided by you to us, to determine whether we can respond to your Request  We will inform you of our decision to deny or grant your Request.

For any Requests to Know, you may make such Requests twice within a 12-month period. 

For Requests to Correct, you will need to provide evidence supporting the inaccuracy of the current information, and we reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.

We will retain correspondence, documents and information related to any Request for 24 months as required by law.

ADDITIONAL CPRA RIGHTS

The following are additional rights afforded to you under the CPRA. 

Right to Know Sensitive Personal Information Collected

We do not collect or process sensitive personal information for the purpose of inferring characteristics or for any purposes other than those set forth in Regulations section 7027(m).

Right to Opt out of Sharing and Selling

You have the right to opt-out of the sale or sharing of your Personal Information by Milly. As explained in our Data Collection and Use Chart below, we and our third-party partners, including e-commerce partners, social networking sites, and advertising companies, share your data in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out (“Request to Opt-Out”). To make a Request to Opt-Out, please submit a verifiable consumer request pursuant to the instructions here . We will process your Request to Opt-Out of sale within 15 days.   

Right to Non-Discrimination for Exercising Consumer Privacy Rights

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act, including by exercising the rights specified herein.

Right to Access Information About Automated Decision Making and the Right to Opt-Out of Automated Decision Making

MILLY does not engage in automated decision-making or profiling in furtherance of decisions that produce legal or similarly significant effects. If you have questions, please contact us at [email protected].

OPT-OUT PREFERENCE SIGNALS

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. In order to process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information without first seeking your explicit consent.

NOTICE OF FINANCIAL INCENTIVE

From time to time, Milly may provide financial incentives to consumers who elect to participate in discount programs, sweepstakes, contests and other promotions, in exchange for allowing us to collect and retain certain personal information, such as Identifiers (e.g., your name, email address, or phone number), and Commercial Information (e.g., your purchase history). These incentives may result in differences in the prices of our products offered to consumers (e.g., discounts and other promotions). For example, the financial incentives we may provide include discounts based upon purchase activity, discounts in exchange for collection of your personal information, or other periodic discounts for promotional purposes. The material aspects of any financial incentive will be explained and described in its program terms or in the details of the incentive offer.

Participation in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, please fill out a Request to Opt-Out of Incentive request here or contact us at [email protected]. 

Please note that once you opt-out, you will not be permitted to use the same email to opt-in again for an additional discount.

The value of your personal information that allows us to make these offers and financial incentives is the value of the offer itself. Each financial incentive or price or service difference related to the collection and use of personal information is calculated based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself, the expense associated with the offer, and the anticipated revenue generation that may be realized by rewarding brand loyalty and repeat purchases.

COOKIES

As explained in our  “Cookies” section above, you can opt out of cookies using your browser.

Please Note:

• Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
• Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
• We may still share your information with our service providers that help us perform functions that are necessary for our business such as vendors that host our website, credit card processors, analytics processors. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
• You may still receive ads from us that are not tailored to your interests.
  
  

ADDITIONAL OPTIONS TO OPT OUT OF SALE OR SHARING

In addition to the above options to opt out of the sale or sharing of your information under the CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties. These are summarized for you below. We do not control or maintain opt-out mechanisms for third-party companies and are not responsible for their operation.

ADVERTISING OPT OUT

You can opt out of sharing your information with third-party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools:

• For Websites - https://optout.aboutads.info/?c=2&lang=EN
• For Mobile Apps - https://youradchoices.com/appchoices

Google. You can opt out of Google Analytics by installing Google's Opt Out browser add on:  https://tools.google.com/dlpage/gaoptout and opt out of interest-based Google ads using https://adssettings.google.com/u/0/authenticated. 

Facebook. To understand more about Facebook advertising and manage your preferences, please visit https://www.facebook.com/about/ads. Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information. 

X formerly known as Twitter. To understand more about X's Personalized Ads and marketing and exercise your privacy options, please visit: https://help.twitter.com/en/safety-and-security/privacy-controls-for-tailored-ads. You can learn more about Twitter's privacy practices and policies by visiting their Privacy Policy page at https://twitter.com/privacy. 

Pinterest. To understand more about Pinterest’s Personalized Ads, and marketing visit https://policy.pinterest.com/en/privacy-policy#section-choices-you-have-about-your-info. You can opt-out from Pinterest's interest-based ads by enabling the "Do Not Track" functionality of your web browser or by following Pinterest instructions:  https://www.pinterest.com/settings/ and updating your "Personalization" preferences. Additional information is available at:  https://help.pinterest.com/en/article/edit-personalization-settings. 

Microsoft. To learn more about how Microsoft uses your personal information across its products and manage your privacy preferences, please visit:  https://account.microsoft.com/account/privacy?refd=account.microsoft.com&ru=https%3A%2F%2Faccount.microsoft.com%2Fprivacy%2F%3Frefd%3Daccount.microsoft.com&destrt=privacy-dashboard. Information on Microsoft Advertising and opt-out choices is available here:  https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads. 

Instagram. To learn more about Instagram Ads and to exercise your choices please visit:  https://help.instagram.com/478880589321969/?helpref=hc_fnav&bc[0]=Instagram%20Help&bc[1]=Managing%20Your%20Account. > 

EMAIL/TEXT MARKETING

We would like to keep in touch with you in ways that you find to be beneficial.  If you do not want us to use your contact information to communicate with you, please tell us so when you provide your contact information. We may send promotion emails regarding our products and events.  You may opt in to receive emails from us by providing your email address to us. If you no longer wish to receive email marketing communications from us, you may opt-out of receiving marketing-related emails by using the unsubscribe method provided in our communications (e.g., by clicking on the “unsubscribe” link in the email to unsubscribe) or by contacting us at [email protected].

Alternatively, to the extent that applicable law requires your prior opt-in consent to receive marketing and promotional emails, we will ask for your consent and you can choose not to opt-in.

You may also choose to participate in certain text or SMS/MMS marketing. If you opt in to such marketing, we may collect and use certain personal information, including phone number, email, product browsing behavior, purchase behavior, device type, cellular carrier, and location to contact you and provide you marketing communications or promotions. If you no longer wish to receive text notifications from us, you may opt-out of receiving marketing-related texts by using the unsubscribe method provided in our communications or by contacting us at [email protected].  Please view additional SMS/Text terms at: https://www.attentive.com/legal/terms.  

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

AUTHORIZED AGENT INFORMATION

You may designate an authorized agent to make a request on your behalf under the California Consumer Privacy Act.

Authorized agents can make requests under the California Consumer Privacy Act by emailing us at email address: [email protected]. We will require authorized agents to provide proof of the consumer’s identity and proof of designation as an the authorized agent. We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request.

We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

CALIFORNIA DO NOT TRACK NOTICE

Because there are not yet common, industry accepted “do not track” standards and systems, our website does not respond to Do Not Track signals. In addition, we may allow non- parties to collect personal information from your activity on our website, as described in this Notice and the Privacy Policy.

CALIFORNIA SHINE THE LIGHT DISCLOSURE INFORMATION

Although we do not disclose to any non- parties for their marketing purposes any personal information,  under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, email address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties. We will respond to such written requests within 30 days following receipt at the email or mailing address specified above.  If we receive your request at a different email or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received. Please note that we are required to respond to each customer only once per calendar year.

CHANGES TO THIS PRIVACY POLICY

This Policy may be revised from time to time for any reason. If this Policy changes, the revised policy will include a new effective date, and we will notify you of such changes by posting the revised policy on this page. Be sure to check the Policy whenever you submit personal information to us.

CONTACT FOR MORE INFORMATION

For information and questions about the use of your personal information or this California Consumer Privacy Section or your rights under California law, please do not hesitate to contact us at:

Phone: 1-800-223-2664 

Email: [email protected]

Postal Address: 1407 Broadway FL 10 New York, NY, 10018-3271 United States

MARYLAND, NEBRASKA, NEW JERSEY, OREGON, TEXAS, AND VIRGINIA:

MULTI-STATE CONSUMER DATA PROTECTION ACT NOTICE 

This Notice provides additional information to Maryland, Nebraska,  New Jersey, Oregon, Texas, and Virginia residents whose Personal Information is collected pursuant to the Maryland (“MODPA”), New Jersey (“NJDPA”), Nebraska (“NDPA”), Oregon (“OCPA”), Texas, (“TDPSA”), and Virginia (“VCDPA”) privacy laws.

The Notice below applies only to residents of Maryland, Nebraska, New Jersey, Oregon, Texas, and Virginia.  Please visit our Privacy PolicyPrivacy Policy (“Policy”) for more information.  Any capitalized terms undefined in this Notice have the same definition as the Policy. This Multi-State Notice is applicable to all the identified states unless there is a state-specific provision identified.

RIGHT TO CONFIRM, ACCESS, AND DATA PORTABILITY

You have the right to confirm whether or not we are processing your personal data and to access such personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means. 

Within the past 12 months, we have collected the categories of personal information about Maryland, Nebraska, New Jersey, Oregon Texas, and Virginia consumers as described in the Data Collection and Use Chart below.

Information Sold or Used for Targeted Advertising

As explained in the Privacy Policy above, we and our third-party partners such as social networking sites and marketing companies, share your data in order to tailor to your preferences across various platforms.  This type of sharing may be considered a sale or sharing of information for targeted advertising purposes under certain state laws.  You can control the information shared about you and request an opt-out. 

We disclose the following categories of Personal Information for Targeted Advertising:

·       Personal Identifiers

·       Commercial Information

·       Internet/Network Activity

How We Share Your Personal Information

We share personal information with third party marketing partners and certain co-op database service providers for commercial purposes in connection with our business.  In order to complete a transaction it is necessary for us to provide your personal information to service providers performing services on our behalf pertaining to the Sites or your product orders.  We do not generally authorize these service providers to use or disclose your personal information except as necessary to perform services on our behalf or comply with legal requirements.  In some cases, however, we may be required by our marketing service providers to disclose to them some of your personal information that they are then permitted to also use for their own direct marketing purposes.  Currently, we disclose to Oracle our users’ names and postal mailing addresses along with transaction data for Oracle to use to provide us with catalogue marketing services and for Oracle’s own direct marketing purposes.    

We may share your personal information with selected third parties performing such services, including:  

• business and marketing partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you; and 

• analytics and search engine providers that assist us in the improvement and optimization of the Sites.  

We currently use Shopify for our online sales platform to receive and process all orders and credit card payments. We do not receive or store your credit card information. Shopify’s privacy policy is located at https://www.shopify.com/legal/privacy. 

We use Klaviyo for email marketing services. Klaviyo’s privacy policy is located at https://www.klaviyo.com/privacy/policy.

We also use Wunderkind (formerly BounceX) for marketing services, including behavioral emails and website personalization.   Wunderkind’s privacy policy is at located at https://www.wunderkind.co/privacy.  

In addition, we use the services of third-party co-op database providers, including, for example, Oracle and Epsilon, for consumer marketing purposes and our catalogue mailings.

We use Cross Country Computer for address and zip code verification services for our catalogue mailings using US Postal Service data. 

We may also disclose or transfer your personal information in the event that MILLY were to sell or buy any business or assets, including a sale of our own company and its assets to another company. In those cases, we may disclose and transfer your personal information to the seller or buyer of such business or assets, and if MILLY or substantially all of its assets were to be acquired by a third party, the personal information of our customers would likely be one of the transferred assets. Additionally, MILLY may disclose personal information as may be permitted or required by law, regulation, rule or court order; pursuant to requests from governmental, regulatory or administrative agencies or law enforcement authorities; or to prevent, investigate, identify persons or organizations potentially involved in, or take any action regarding suspected fraud, violations of our Terms of Service, or activity that appears to us to be illegal or may expose MILLY to legal liability; and in situations that we believe to be emergencies involving potential threats to the physical safety of MILLY or to protect the rights, property, or safety of MILLY, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. 

RIGHT TO REQUEST DELETION OF PERSONAL DATA

You have the right to request the deletion of your personal data provided by or obtained about you (“Request to Delete”), subject to certain exceptions permitted by law.

RIGHT TO CORRECT

You have the right to request that we rectify inaccurate information about you.

RIGHT TO OPT OUT OF DATA PROCESSING FOR TARGETED ADVERTISING

You have the right to opt-out of the sale or sharing of your Personal Information by Milly. As explained in our Data Collection and Use Chart below, we and our third-party partners, including e-commerce partners, social networking sites, and advertising companies, share your data in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out (“Request to Opt-Out”). To make a Request to Opt-Out, please submit a verifiable consumer request pursuant to the instructions here . We will process your Request to Opt-Out of sale within 15 days.

RIGHT TO ACCESS INFORMATION ABOUT and RIGHt to opt out of AUTOMATED DECISION MAKING

MILLY does not engage in automated decision-making or profiling in furtherance of decisions that produce legal or similarly significant effects. If you have questions, please contact us at [email protected]

RIGHT TO CONFIRM, ACCESS,  DELETE, OPT-OUT,  AND DATA PORTABILITY

Submitting Requests/Verification   

To exercise your privacy rights, please submit a request using one of the methods described below, and provide the required information. Once we receive your request, we will validate the information that you provide and send a message to the email address you provide in the request, asking you to verify that it is your email address. Please follow the instructions in that email to verify your email address. We will begin processing your request once you verify your email address.  

• Request Access to specific pieces of Personal Information about you that we have collected in the preceding 12 months. 

• Request Deletion of Personal Information that we have collected from you. We may retain Personal Information as required or permitted by law, and will maintain a copy of your deletion request. We may use a two-step process for online requests to delete where you must, first, submit the request to delete and then, second, separately confirm that you want your personal information deleted. 
  
  
• Request Disclosure of the categories or types of Personal Information we collect, the purposes for which we collect, sell or disclose that Personal Information, and the categories of third parties to whom we disclose Personal Information. 
  
  
• Request to Opt-Out (“Do Not Sell My Personal Information”) of “selling” your Personal Information.   

We provide you with one or more free means to make the above requests or to opt-out of such Personal Information sharing.

You may make a Request the following ways:

• You may make a request here: [email protected]
• Enter your request here 
• You may also make a request by phone by contacting us at 1-800-223-2664 

We provide both email contact information and a toll-free telephone number. Consumers will be required to submit their name, email address, and telephone number, and may also be asked to provide their address, and a recent order number so that we can verify the request. Please provide as much of the requested information as possible to help us verify the request. We will only use the information received in a request for the purposes of responding to the request. A request to opt-out need not be a verifiable consumer request; however, if we have a good faith, reasonable, and documented belief that a request to opt-out is fraudulent, we may deny the request, in which case we shall inform the requestor that we will not comply with the request and shall provide an explanation why we believe the request is fraudulent.  

If you make a request to exercise your rights listed above, we may require that you provide information and follow procedures so that we can verify the request and your jurisdiction before responding to it. The verification steps we take may differ depending on the request you make. We will match the information that you provide in your request to information we already have on file to verify your identity. If we are able to verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us verify your request. 

You may also make a request by contacting us at [email protected].

OPT-OUT PREFERENCE SIGNALS

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information for targeted advertising purposes without first seeking your explicit consent.

COOKIES

As explained in the “Cookies” section of our Privacy Policy, you can opt out of cookies using your browser.  You may also exercise your right to opt-out of cookies using our Cookie Preference Center .

Please Note:

• Opt-outs are device and browser based.  You must opt out on each device and each browser where you want your choice to apply.
• Opt-outs maybe stored via cookies.  If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
• We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc.  These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
• You may still receive ads from us that are not tailored to your interests.

ADDITIONAL OPTIONS TO OPT OUT OF SALE OR TARGETED ADVERTISING

In addition to the above options to opt out of the “sale” or processing of your personal data for targeted advertising as described above, you have controls and choices with respect to collection and use of your data by third parties.  These are summarized for you below.  We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your data with third-party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools:

• For Websites - https://optout.aboutads.info/?c=2&lang=EN
• For Mobile Apps - https://youradchoices.com/appchoices

Google Opt-Out

If you would like to opt out of Google Analytics and Ads, you can.  If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on at https://tools.google.com/dlpage/gaoptout and you can opt out of interest-based Google ads using this link: https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit Facebook Ads at https://www.facebook.com/about/ads.  Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.]

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred under Maryland, Nebraska, New Jersey, Oregon, Texas, and Virginia law, including by exercising the rights specified herein.  As the Right to Non-Discrimination is effective across the board, there is no specific “request” that you need to make in order to exercise this right.

AUTHORIZED AGENT

You may designate an authorized agent to make a request on your behalf to opt out of the sale of personal information.

Authorized agents may make requests on behalf of consumers by emailing [email protected].  We will require authorized agents to provide proof of the consumer’s consent to and designation of the authorized agent for purpose of making the request, and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request.  We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request. 

RIGHT TO APPEAL

If you are a Maryland, Nebraska, New Jersey, Oregon, Texas, or Virginia resident, you have the right to appeal our decision to deny any of your privacy rights requests above.  Within 45 days of receipt of your appeal , we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. 

Making an Appeal

You can make an appeal in the following ways:

·       Enter your appeal here 

·       You may also make an appeal by contacting us at [email protected]. 

·       You may also make a request by phone by contacting us at 1-800-223-2664 

We reserve the right to deny appeals in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

Maryland residents, if your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://portal.oag.state.md.us/cpdportal/.

Nebraska residents, if your appeal is denied, you may submit a complaint to the Nebraska Attorney General at https://ago.nebraska.gov/contact-us.  

New Jersey residents, if your appeal is denied, you may submit a complaint to the New Jersey Attorney General at https://www.njoag.gov/contact/file-a-complaint/.

Oregon residents, if your appeal is denied, you may submit a complaint to the Oregon Attorney General at https://www.doj.state.or.us/consumer-protection/contact-us/.

Texas residents, if your appeal is denied, you may submit a complaint to the Colorado Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint  

Virginia residents, if your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

NOTICE OF FINANCIAL INCENTIVE

For information about our financial incentives, including disclosures required by state law, please see our Notice of Financial Incentive disclosures above.