SECTION 1 – PERSONAL DATA WE COLLECT
We collect information that alone or in combination with other information in our possession could be used to identify you (“Personal Data”) as follows:
Personal Data You Provide: We collect the following categories of Personal Data from you when (i) you create a user account, (ii) place or request an order, (iii) you enter and submit data within the “Contact Us” page on the Services, (iv) you email or mail us directly with requests, concerns, or questions, (v) you interact with our social media accounts, or (vi) you use or access the Services provided:
- Identification Data: We may collect your name, email address, phone number, mailing/billing addresses. We may also collect government identification documents (i.e., your driver’s license, passport, or state identification card), if we need to verify your identity.
- General Terms of Service
- Privacy Notice for Users Who Do Not Apply or Sign Up for a Square Account or Other Services
- Square profile – Privacy Notice for Buyer Features and Square Pay
- Privacy Notice for Users Who Apply or Sign Up for a Square Account or Other Services
- Communication Data: We may collect information when you contact us with questions or concerns and when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback. Providing communication data is optional to you.
- Commercial Data: We may retain a history of the products you browse, search, and/or purchase using the Service and the features you use on the Services.
- Demographic Data: We may collect your age, gender, and income level.
- Social Media Data: We may have pages on social media sites like Instagram, Facebook, Medium, Twitter, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we may collect Personal Data that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.
Internet Activity Data: When you visit, use, and interact with the Service, we may receive certain information about your visit, use, or interactions. For example, we may monitor the number of people that visit the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Service (e.g., Chrome, Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:
- Log Data: Information that your browser automatically sends whenever you visit the Website. Log Data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Website.
- Device Data: Includes name of the device, device’s unique device identifier, mobile network information, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.
- Usage Data: We collect information about how you use our Services, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
- Location Data: We derive a rough estimate of your location from your IP address. We collect your location information through the App using your device IP address, WiFi, Bluetooth, and GPS coordinates (e.g., latitude/longitude) of your mobile device. If you have given the App permission to access your location, we may collect your device’s location even if you are not using the Service and store your location history. If you want to opt-out of the collection of your location data, please adjust your settings in your mobile device to limit the App’s access to your location data.
- Stored Data: We may access metadata and other information associated with other files stored on your device, including, but not limited to, photographs, audio and video clips, and personal contacts.
- Email Open/Click Data: We may use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.
Personal Data Collected from Publicly Available Sources: We may collect information directly from publicly available sources, including, but not limited to, e-commerce, social media, and governmental websites.
Derived Data: We may infer your preferences for certain products and services based on the Personal Data we collect about you.
On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below for guidance on how to modify your web browser’s settings on the most popular browsers:
Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Website and you may not be able to benefit from the full functionality of the Website.
If you access the Website on your mobile device, you may not be able to control tracking technologies through the settings.
SECTION 2 – BEHAVIORAL ADVERTISING
As described above, we may use your Personal Data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
- Facebook – https://www.facebook.com/settings/?tab=ads
- Google – https://www.google.com/settings/ads/anonymous
- Bing – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
For more information on cookies, see the “Cookies” section provided above.
SECTION 3 – MINORS
The Website is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or on or through any of its features. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at [email protected]
SECTION 4 – THIRD-PARTY INFORMATION COLLECTION
When you use the Service, or its content, third parties may use technology to automatically collect information about you or your device. These third parties may include:
- analytics companies;
- your telecommunications service provider;
- your device manufacturer; and
- advertisers, ad networks, and ad servers.
These third parties may use technology to track and collect information about you when you use our Services. The information these third parties collect may be associated with your personal information. They may also collect information, including personal information, about your online activities over time and across different websites, apps, and other online services. If and when collected, these third parties may use this information to provide you with interest-based advertising or other targeted content.
We have no control over these third parties, their tracking technology or their use of such technology. If you have questions about advertisements or other types of targeted content, you should directly contact the responsible third party.
SECTION 5 – HOW WE USE PERSONAL DATA
We may use Personal Data for the following purposes:
- to provide, maintain, and improve the Service;
- to provide you with information, products, or services that you request from us;
- to respond to your inquiries, comments, feedback, or questions; to send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies;
- to analyze how you interact with our Service;
- to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
- to develop new products and services;
- to prevent fraud, criminal activity, or misuses of our Service, and to ensure the security of our IT systems, architecture, and networks;
- to allow you to participate in interactive features on our Website;
- to comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties;
- in any other way we may describe when you provide the information; and
- for any other purpose with your consent.
Marketing. We may use your Personal Data to contact you to tell you about our own and third parties’ products or services we believe may be of interest to you. For instance, if you elect to provide your email or telephone number, we may use that information to send you special offers. You may opt out of receiving emails by following the instructions contained in each promotional email we send you. In addition, if at any time you do not wish to receive future marketing communications, you may contact us. If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding management of your account, other administrative matters, and to respond to your requests.
Advertising. We may also use your Personal Data to display advertisements from our advertisers. Even though we will not disclose your personal information for these purposes without your consent, if you click or otherwise interact with an advertisement, the advertiser may assume you are part of its targeted audience.
SECTION 6 – SHARING AND DISCLOSURE OF PERSONAL DATA
Pink Door Cookies does not sell your Personal Data. In certain circumstances, we may share the categories of Personal Data described above without further notice to you, unless required by the law, with the following categories of third parties:
- Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with vendors, contractors, and other service providers, including providers of hosting services, cloud services, and other information technology services providers, event management services, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and web analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Data in the course of performing their duties to us. We take commercially reasonable steps to ensure our service providers adhere to the security standards, as more fully described in Section 11, we apply to your Personal Data.
- Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively, a “Transaction”), your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
- Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) enforce our rights arising from any contracts entered into between you and us, including the Terms of Terms, and for billing and collection purposes, (iii) protect and defend our rights or property, (iv) prevent fraud, (v) act in urgent circumstances to protect the rights, property, and personal safety of users of the Service, or the public, or (vi) protect against legal liability.
- Other Users: Certain actions you take may be visible to other users of the Service. For example, when you upload content to the Services for other users to analyze and review.
SECTION 7 – DATA RETENTION
SECTION 8 – UPDATE YOUR INFORMATION
You can review and update your personal information by logging into the Website and visiting your account details. Please log in to your account or contact us if you need to change or correct your Personal Data.
If you delete content, such as information you publish or display on public areas of the Website, or transmitted to other users of the Website or third parties (collectively, “User Content”), copies of your User Content may remain viewable and accessible in cached and archived pages or copied or stored by other users or service providers. As such, you should be careful about your User Content. Our Terms of Service govern how to properly access and use information, including User Content, on or from the Service.
SECTION 9 – CALIFORNIA PRIVACY RIGHTS DISCLOSURES
Where provided for by law and subject to any applicable exceptions, California residents may have the right under the California Consumer Privacy Act (the “CCPA”):
- To know the categories of Personal Data that Pink Door Cookies has collected about you, the business purpose for collecting your Personal Data, and the categories of sources from which the Personal Data was collected;
- To access the specific pieces of Personal Data that Pink Door Cookies has collected about you; To know whether Pink Door Cookies has disclosed your Personal Data for business purposes, the categories of Personal Data so disclosed, and the categories of third parties to whom we have disclosed your Personal Data;
- To have Pink Door Cookies, under certain circumstances, delete your Personal Data;
- To opt out of sharing information (for example, we may share Identification Data and Internet Activity Data with social media platforms and other advertising partners that will use that information to serve you targeted advertisements on social media platforms and other third-party websites – under certain regulations such sharing may be considered a “sale” of Personal Data); and
- To be free from discrimination related to the exercise of these rights.
If you would like to exercise any or all of these rights under the applicable law, you may do so by contacting us and clearing stating your request, including your name, mailing address, email address, and phone number. Your authorized agent may submit requests in the same manner. Once we receive your request, we will verify your identity by sending an email to the email address you provide to us.
SECTION 10 – LINKS TO OTHER WEBSITES
SECTION 11 – SECURITY
You use the Website at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or transmission of information is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Services or e-mail. Please keep this in mind when disclosing any Personal Data to Pink Door Cookies via the Internet.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website like comment and review sections. The information you share in public areas may be viewed by any user of the Website.
Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through our Website. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Website, or third party websites.
SECTION 12 – INTERNATIONAL USERS
Although our products and services are intended solely for U.S. residents located in the U.S., we understand residents outside the U.S. may come across our Website while browsing the Internet. For such residents outside the U.S., by using our Service, you understand and acknowledge that your Personal Data will be transferred from your location to facilities and servers in the United States to be processed. Furthermore, you agree and consent to the transferring and processing of your Personal Data outside of where you reside and understand data protection requirements for Personal Data in the U.S. may vary from your local jurisdiction.
Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”), we process your personal information under the following lawful bases:
- Your consent; The performance of the contract between you and the Website;
- Compliance with our legal obligations to you or a governing authority;
- To protect your vital interests;
- For our legitimate interests, which do not override your fundamental rights and freedoms.
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you. We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data. Our processor Square uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.
Services that include elements of automated decision-making include:
- Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
- Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.
If you are a resident of the EEA, you have the right to access the Personal Data we hold about you, to port it to a new service, and to ask that your Personal Data be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below in Section 15.
SECTION 13 – YOUR CHOICES
SECTION 15 – CONTACT
For more information about our privacy practices or if you would like to make a complaint, please contact us by e-mail at [email protected] or by mail using the details provided below:
Pink Door Cookies
Attn: Legal Department
321 Hart Street, Suite 309
Nashville, Tennessee 37210
Last Updated: January 31, 2022