California Privacy Notice
CALIFORNIA PRIVACY NOTICE AT COLLECTION
This section supplements our Policy with additional information for California residents about our information collection and use practices as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”). In this section, the terms “personal information” and “sensitive personal information” have the meaning set forth in the CCPA.
Collection, Use, and Disclosure of California Personal Information
The following chart provides information about our practices in the 12 months leading up to the effective date of this Privacy Policy in relation to the categories of personal information that we generally collected from California residents, including categories sensitive personal information; the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes:
Categories of Information Collected (see “Collection and Use of Information” section above for more information) |
Purpose of Use |
Categories of Third Parties to Whom We Disclose the Information for Business and Operational Purposes (See “How We Use Information” section above for more information) |
Identifiers and contact Information such as your name, email address, mailing address, phone number, user name, account number and password. |
|
|
Billing information such as your credit card number and billing address |
|
|
Communications, such as responses to polls or surveys, questions, comments, or requests you send us. |
|
|
Information such as product wish lists/shopping carts, order history, searches on the Site, product and marketing preferences, browsing habits, and other available data points and statistics. |
|
|
Information provided to us through social media networks when you access our Services via said networks (this could include your name, profile picture, and other information). |
|
|
Information about your computer or device, including IP address, time and date of visit, browser type and version, operating system, device make and model. |
|
|
The pages of our Site you visit, the time spent on our Site, referring and exit pages. |
|
|
Contact information of friends or other people you would like us to contact or connect with. |
|
|
Other information you choose to directly provide to us in connection with your use of the Services. |
|
|
Sale and Sharing of Personal Information
During the 12 months leading up to the effective date of this Privacy Policy, we provided personal information to third-party advertising providers for targeted advertising purposes, so that we can provide you with more relevant and tailored ads regarding our Services, or use analytics partners to assist us in analyzing use of our services and our user/customer base. The disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” of personal information under the CCPA, or the “sharing” of your personal information for purposes of “cross-context behavioral advertising.”
The following chart lists the categories of personal information we have sold or shared over the last 12 months and the categories of third parties to which we have sold or shared:
Categories of Information |
Categories of Third Parties to Whom We Have “Sold” This Information |
Categories of Third Parties to Whom We Have “Shared” This Information |
---|---|---|
Information about your computer or device, including IP address, time and date of visit, browser type and version, operating system, device make and model. |
|
|
We do not “sell” or “share” personal information (as those terms are defined under the CCPA) if we have actual knowledge that the consumer is less than 16 years of age.
Retention
We retain your information only for as long as is necessary to provide the Services and to fulfill the transactions you have requested, or for other necessary purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. In determining how long to retain information, we consider the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, applicable legal requirements, and our legitimate interests. The purposes for which we process information (as well as the other factors listed above) may dictate different retention periods for the same types of information. For example, we retain your email address as an authentication credential (where applicable) as long as you have an account with us and an additional period of time after that for our legitimate interests and for our fraud and legal compliance purposes. If you opt out of email marketing, we maintain your email on our suppression list for an extended time to comply with your request. We may delete or de-identify your information sooner if we receive a verifiable deletion request, subject to exemptions under applicable law. We may retain cached or archived copies of your information.
Your CCPA Information, Correction, Deletion, and Other Rights
The CCPA allows you to request us to:
- Inform you about the categories of personal information we have collected about you in the preceding 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we have disclosed certain personal information, and more specific detail about what categories of information were “sold,” “shared” or disclosed to particular categories of third parties, similar to the detail above this section of the Privacy Policy;
- Provide access to and/or a copy of certain personal information we hold about you;
- Correct certain personal information we have about you; and
- Delete certain personal information we have about you.
If you would like to exercise any of these rights, you may submit your request by completing this Privacy Request Form or contacting us as described at the end of this Privacy Policy. Although not legally required, we review these types of requests from all US customers, and we will consider each request on a case-by-case basis.
Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide our services to you, so we may reject a deletion request for that information while providing services to you.
Your CCPA Right to Opt Out of “Sale” or “Sharing” of Personal Information
Californians have a right to direct us not to “sell” or “share” certain personal information as those terms are defined in the CCPA. You can exercise that right by following the steps on our Your Privacy Choices page.
Opting out of “sales” and “sharing” limits only some types of disclosures of personal information, and there are exceptions to all of the rights described in this section.
Verification of Requests to Exercise CCPA Rights
We may take reasonable steps to verify your identity before responding to your request, which may include, depending on the sensitivity of the information involved, the nature of our relationship with you, and the type of request you are making, verifying your name, email address, and other information regarding your use of our services.
Requests Made by Agents
You can designate an authorized agent to make a CCPA request on your behalf. To do so, we must receive a legally sufficient power of attorney signed by you pursuant to California Probate Code sections 4121 to 4130, or other written authorization acceptable to us, for the agent to act on your behalf. You may still need to verify your identity and confirm the agent’s authority directly with us if we are not convinced of the validity of the agent’s request. For security and legal reasons, we may refuse to accept requests that require us to visit an agent’s website. Because opt-out requests for sales made through cookies and related technology must be performed from each browser that is used to access our services, it is easiest for the consumer to perform such opt-outs themselves. However, if you wish for an agent to perform browser-based requests on your behalf, you may arrange for the agent to your consumer’s browser to make such requests, but you may not share your login credentials or logged-in access to our websites with an agent or any other third party. We are not responsible for the security risks of giving an agent browser access or any other arrangements that you may have with an agent.
Nondiscrimination
You also have a right not to receive “discriminatory treatment” (within the meaning of the CCPA) for the exercise of the privacy rights conferred by the CCPA.
DETAILS FOR VIRGINIA RESIDENTS
Virginia residents have certain rights to request to access their personal information, correct it, or delete it, which they can exercise by using the Data Subject Rights Form. They also have a right to opt out of the “sale” of their personal information and use/disclosure of their personal information for “targeted advertising,” as those terms are defined under the Virginia Consumer Data Protection Act (“VCDPA”), and they can exercise these rights by following the instructions on our Your Privacy Choices page.
All of the Virginia rights described above have exceptions (such as that they do not apply to personal information about Virginians acting in a professional/commercial capacity). If we refuse to act on a Virginian’s request to exercise any of these VCDPA rights, they can appeal that decision by writing to us as described at the end of this Privacy Policy. The appeal should include (i) a detailed explanation of why our decision was mistaken or incorrect, and (ii) any additional information that may help us properly resolve the request. We will respond to the appeal within 60 days.
TRANSFER OF PERSONAL INFORMATION TO OTHER JURISDICTIONS
BOBBIE BABY is located in the United States, and if you are located outside of the United States, your information may be transferred and proceed within the United States as part of our normal business operations. Data protection laws vary from country to country, and may be different from the country from where you access the Site or Services. By using our Site or Services, you consent to the transfer and processing of your information by BOBBIE BABY and our service providers and partners who perform services on our behalf as described in this Privacy Policy.
CHILDREN’S PRIVACY
This Site is not directed at anyone under the age of eighteen and we do not knowingly collect personal information from users under the age of eighteen. If we become aware that we have inadvertently received personal information from a visitor under the age of thirteen on the site, we will delete the information from our records.
You may request to review, change or delete your personal information or that of your minor child.
To make such a request, please contact us at the following address:
BOBBIE BABY, Inc.
1500 Castro Street
San Francisco, CA 94114
hello@hibobbie.com
DATA SECURITY
The security of your personal information is important to us. We implement security procedures and practices to protect our systems and the information we hold. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, so we cannot guarantee its absolute security.
Our store is hosted on Shopify, Inc. Shopify provides us with the online platform that allows us to sell our products to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application.
When you complete a purchase on our Site, Shopify stores your credit card data and processes such data in accordance with its data security policies and practices. For more information about Shopify’s platform and data collection and use practices, you may want to read Shopify’s Terms of Service and Privacy Statement found on its website.
We use Stripe to gather End User’s data from financial institutions. By using our service, you grant us and Stripe the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Stripe in accordance with the Stripe Privacy Policy.
If you have any questions about security on our Site, you can contact us at hello@hibobbie.com.
LINKS TO OTHER WEBSITES
Our Site may provide links to other websites for your convenience and information. These websites may operate independently from us. Linked sites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or controlled by us, we are not responsible for the sites’ content, any use of the sites, or the privacy practices of the sites.
CHANGES TO OUR PRIVACY POLICY
We reserve the right to make changes to this policy at any time, so please review it frequently. It is our policy to post any changes we make to our privacy policy on this page. Changes to this policy will take effect immediately unless otherwise noted. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our Site and this privacy policy to check for any changes. Your continued use of the Site after being notified of, or becoming aware of, a change in this policy, is your affirmation that you have read and understood this policy and agree to it.
CONTACT INFORMATION
To ask questions or comment about this privacy policy and our privacy practices, contact us:
By email: hello@hibobbie.com
By mail: BOBBIE BABY, Inc
1500 Castro Street
San Francisco, CA 94114