The Platform is intended for use by persons who are at least 18 years of age. If we learn that any user of the Platform is under 18 or if we have collected information as to any person who is under 18 years of age we will remove such information from our Platform.
California residents under 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see “Your California Privacy Rights” below for more information. How We Collect Information We collect information from and about users of the Platform: - Directly from you when you provide it to us. - Automatically when you use the Platform. Information You Provide Directly to Us
When you download, register with, access, or use any aspect of the Platform, we may ask you to provide the following types of information: - Information by which you may be personally identified, including but not limited to, your name, postal address, email address, and telephone number (“personal information”). - Payment information, including but not limited to, credit card information.
This information may be provided by you in the following ways: - Filling in forms on the Platform. This includes information that you may provide when downloading, registering with, accessing, or using any aspect of the Platform, when requesting further services, and when reporting problems with the Platform. - Contacting us. This includes information you may provide when you correspond with us, including, but not limited to, email addresses and phone numbers. - Participating in surveys. This includes information you may provide when you respond to surveys that we might ask you to complete for research purposes. - Carrying out transactions. Details of transactions you carry out through the Platform and of the fulfillment of your orders. You may be required to provide financial information before placing an order through the Platform. - Searching within the Platform. This includes information you may provide when you perform search queries on the Platform.
If you provide information for publication or display (“Posted”) on public areas of the Platform or websites you access through the Platform (collectively, “User Contributions”), then your User Contributions are Posted and transmitted to others at your own risk. Additionally, we cannot control the actions of third parties with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons. Automatic Information Collection and Tracking When you download, register with, access, or use any aspect of the Platform, the Platform may use technology to automatically collect: - Usage Details. When you access and use the Platform, we may automatically collect certain details of your access to and use of the Platform, including traffic data, location data, logs, and other communication data and the resources that you access and use on or through the Platform. - Device Information. We may collect information about your mobile device and internet connection, including the device’s unique device identifier, IP address, operating system, browser type, mobile network information, and the device’s telephone number. - Stored Information and Files. The Platform may also access metadata and other information associated with other files stored on your device. This may include, for example, photographs, audio and video clips, personal contacts, and address book information. If you do not want us to collect any of the above information, then you may decide not to use the Platform or not to download the mobile application, or delete the mobile application from your device. For more information, see “Your Choices About Our Collection, Use, and Disclosure of Your Information” below.
Information Collection and Tracking Technologies
The technologies we use for automatic information collection may include: - Cookies (or mobile cookies). A cookie is a small file placed on your smartphone. It may be possible to refuse to accept mobile cookies by activating the appropriate setting on your smartphone. However, if you select this setting you may be unable to access certain parts of our App. - Web Beacons. The Platform and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Cooleaf, for example, to count users who have visited those pages or opened an email and for other related app statistics (for example, recording the popularity of certain app content and verifying system and server integrity).
Third-Party Information Collection When you use the Platform or its content, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include: - Advertisers, ad networks, and ad servers. - Analytics companies. Please see additional information below under “Our Use of Google Analytics”. - Your mobile device manufacturer. - Your mobile service provider. These third parties may use tracking technologies to collect information about you when you use the Platform. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps, and other online services websites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. Our Use of Google Analytics We use a tool called “Google Analytics” to collect information about use of this site. Google Analytics collects information such as how often users visit or use the Platform, what pages users visit when they do so, and what other sites user used prior to coming to the Platform. For more information regarding how Google uses such information, please visit the following website: https://www.google.com/policies/privacy/partners/.
The usage information we collect helps us to improve the Platform and to deliver a better and more personalized experience by enabling us to: - Estimate our audience size and usage patterns. - Store information about your preferences, allowing us to customize the Platform according to your individual interests. - Speed up your searches. - Recognize you when you use the Platform.
We may also use your information to contact you about goods and services that may be of interest to you, including our own good and services or the goods and services of third parties. For more information, see “Your Choices About Our Collection, Use, and Disclosure of Your Information” below.
We may use the information we collect to display advertisements. Even though we do not disclose your personal information for these purposes, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.
Disclosure of Your Information We may disclose aggregated information about our users, and information that does not identify any individual without restriction. In addition, we may disclose personal information that we collect or you provide: - To our subsidiaries and affiliates. - To contractors, service providers, and other third parties we use to support our business. - To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Cooleaf’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Cooleaf about the Platform’s users is among the assets transferred. - For any other purpose disclosed by us when you provide the information. - With your consent. - To comply with any court order, law, or legal process, including to respond to any government or regulatory request. - To enforce our rights arising from any contracts entered into between you and us and for billing and collection. - If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Cooleaf, our customers, or others.
Your Choices About Our Collection, Use, and Disclosure of Your Information
California residents may have additional personal information rights and choices. Please see “Your California Privacy Rights” below for more information. Accessing and Correcting Your Personal Information
You can review and change your personal information by logging into the Platform and visiting your account profile page.
You may also send us an email at email@example.com to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.
If you delete your User Contributions from the Platform, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Platform users.
California residents may have additional personal information rights and choices. Please see “Your California Privacy Rights” below for more information.
Your California Privacy Rights
The following additional privacy notices for California residents (the “California Notice”) supplement the information contained in the other portions of this Policy and apply solely to individuals who reside in the State of California (“California consumer” or “you”). Cooleaf adopts this California Notice to comply with the California Consumer Privacy Act and its related regulations (the “CCPA”) and other applicable California laws. Overview of Consumer Rights Under the CCPA Under the CCPA, California consumers have certain rights regarding their personal information, including: • The right to know the categories of personal information that Cooleaf has collected and the categories of sources from which we obtained such information. • The right to know Cooleaf’s business purposes for sharing personal information. • The right to know the categories of third parties with whom Cooleaf shared personal information. • The right to access the specific pieces of personal information that Cooleaf has collected and the right to delete your personal information. • The right to not be discriminated against if a California consumer exercise their rights under the CCPA.
The provisions below of this California Notice provide further details about these rights and how you may exercise them.
Information We Collect
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer, household or device (collectively, "personal information"). Personal information does not include: • Publicly available information from government records. • De-identified or aggregated California consumer information. • Information excluded from the CCPA’s scope, including: • Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and • Personal information covered by certain other laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
We have collected the following categories of personal information from California consumers within the last twelve (12) months:
Category: Identifiers Examples: An individual’s name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number or other similar identifiers
Category: Personal information categories described in Cal. Civ. Code § 1798.80(e) Examples: A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information
Category: Commercial information Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
Category: Internet or other similar network activity Examples: Browsing history, search history, information on a California consumer's interaction with our website, application, or advertisement and any social media sites from which user information is linked, connected or obtained
Category: Inferences drawn from other personal information Examples: Examples include a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes
Sources of Personal Information In addition to sources of personal information addressed elsewhere in this Policy, we obtain the categories of personal information listed above from the following categories of sources: • Directly From You. For example, from forms you complete or products and services you purchase or from communications with you such as when you contact Cooleaf (whether in person, by mail, by phone, online, via electronic communication or by other means) including our customer support service. • Indirectly From You. For example, from observing your actions on our Platform or from products or services that you have purchased from Cooleaf, if you have enabled such functionality, such as telemetry services. • From Others. o From third party service providers. For example, if you choose to make an electronic payment directly to Cooleaf, or through a linked website or mobile application, or through an affiliate of ours, Cooleaf may receive personal information about you from third parties such as payment services providers, for the purposes of that payment. o From affiliates. We may collect personal information about you from our affiliates or others acting on their behalf. • From Public Sources. For example, we may collect information from public records.
Uses of Personal Information In addition to uses of personal information addressed elsewhere in this Policy, we may use or disclose the personal information we collect for one or more of the following business purposes: • To fulfill the reason that you provided the information. For example, if you share your name and contact information to request a price quote, request to be contacted by an affiliate, or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we may use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product or service orders or to process returns. • To perform services such as customer service, order fulfillment, payment processing, financing and advertising, marketing or analytic services. • To advance our commercial or economic interests, such as by helping you to buy, rent, lease, join, subscribe to, provide, or exchange products, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction. • To verify or maintain quality or safety standards or improve or upgrade a product or service provided or controlled by or for us. • To provide, support, personalize and develop our Platform, products and services such as to perform warranty related services or other post-sale activities such as product or service monitoring or repairs. • To create, maintain, customize and secure your account with us. • To process your requests, purchases, transactions and payments and prevent transactional fraud. • To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. • To personalize your Platform experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Platform, third-party sites and via mail, email or text message (with your consent, where required by law). • To help maintain the safety, security and integrity of our Platform, products and services, databases and other assets and business. • For testing, research and analysis purposes, including to develop and improve our Platform, products and services. • To respond to law enforcement requests and as required by applicable law, court order or governmental regulations. • As described to you when collecting your personal information or as otherwise set forth in the CCPA or applicable law. • To send you information relevant to your past purchases and interests, subject to compliance with applicable laws regarding direct marketing. • To otherwise use as reasonably necessary and proportionate to achieve our operational or notified purpose for collecting personal information and as compatible with the context in which we collected the information. • To perform services on behalf of a CCPA-covered business or its service provider, such as customer service, order fulfillment, payment processing, financing and advertising, marketing, or analytic services. • To review and audit our business interactions with you. • To detect or prevent security incidents or other illegal activity. • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Platform users, including California consumers, is among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated or incompatible purposes without providing you notice.
Sharing Personal Information
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. In the preceding twelve (12) months, Cooleaf has disclosed the following categories of personal information for a business purpose: - Identifiers - Personal information categories described in Cal. Civ. Code § 1798.80(e) - Commercial information - Internet or other similar network activity - Inferences drawn from other personal information The categories of third parties to which we may disclose personal information collected by us include the following: - Service providers - Affiliates - Recipients of data from cookies
Sales of Personal Information
Cooleaf does not sell personal information to third parties.
Exercising Your CCPA Rights and Choices
The sections below describe how you may exercise your rights under the CCPA. Access to Specific Information and Data Portability Rights. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability and Deletion Rights” below), we will disclose to you: • The categories of personal information we collected about you. • The categories of sources for the personal information we collected about you. • Our business or commercial purpose for collecting that personal information. • The categories of third parties with whom we share that personal information. • The specific pieces of personal information we collected about you (also called a data portability request). • If we disclosed your personal information for a business purpose, a list disclosing: • The personal information categories that each category of recipient obtained. As allowed by the CCPA, we do not provide these access and data portability rights (i) for business-to-business personal information or (ii) as to personal information collected from Cooleaf’s California-based employees, job applicants or contractors when provided or collected in such employee, job applicant or contractor capacities. Deletion Request Rights. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see “Exercising Access, Data Portability and Deletion Rights” below), we will delete (and direct our service providers to delete) your personal information from our (and service provider) records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to: • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you. • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities. • Debug products or services to identify and repair errors that impair existing intended functionality. • Exercise free speech, ensure the right of another California consumer to exercise their free speech rights, or exercise another right provided for by law. • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.). • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent. • Enable solely internal uses that are reasonably aligned with California consumer expectations based on your relationship with us, such as future field campaigns or product safety issues. • Comply with a legal obligation. • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
As allowed by the CCPA, we do not provide these deletion rights (i) for business-to-business personal information or (ii) as to personal information collected from any personnel of Cooleaf that may be based in California when provided by such personnel. Exercising Access, Data Portability and Deletion Rights. To exercise the access, data portability and deletion rights described above, you should submit a verifiable consumer request to us by one of the following methods: • Emailing us at: firstname.lastname@example.org • By postal mail at: Cooleaf, 3423 Piedmont Rd NE, Suite #573, Atlanta, GA 30305 • Accessing your online account that you maintain with us.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of a minor child for whom you are a parent or legal guardian. You may only make a verifiable consumer request for access or data portability twice within a twelve (12) month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative, which may include: • Your name • Your address • Additional information depending upon the type of request and the sensitivity of the information involved with such request • Describe your request with sufficient detail to enable us to properly understand, evaluate and respond to such request.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or your authority to make the request and confirm that the personal information involved with the request relates to you.
Making a verifiable consumer request does not require you to create an account with us. However, we will consider requests made through a password-protected online account that you maintain with us to be sufficiently verified when the request relates to personal information associated with that online account, provided such online account functionality is then made available by us on the Platform.
We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.
If you have an online account with us, we may deliver our written response to that online account, provided that such online account functionality is then made available by us on the Platform. If you do not have an online account with us, or such functionality is not available for your online account we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the twelve (12) month period immediately preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA or other applicable law, we will not as a result of you exercising any of your rights under the CCPA: • Deny you goods or services; • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; • Provide you a different level or quality of goods or services; or • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels.
Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
Other California Privacy-Related Disclosures Sharing Personal Information for Direct Marketing Purposes. Before sharing personal information of California consumers with third parties for direct marketing purposes we will obtain opt-in consent from the applicable California consumers or provide such California consumers with a cost-free method to opt out.
California Do-Not-Track Disclosure. At this time, the Platform is not set up to honor web browser do-not-track settings. Do-not-track is a privacy preference that users can set in their web browsers. When a user activates the do-not-track settings in browsers that offer this setting, the browser sends a message to websites or applications requesting them not to track the user. For more information about do-not-track matters, please visit www.allaboutdnt.org.
Information on Marketing Disclosures. California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us once a year, free of charge, information about the personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us at: email@example.com or Cooleaf, 3423 Piedmont Rd NE, Suite 573, Atlanta, GA 30305.
If you have any complaint about use of the Platform, you may contact us by email at firstname.lastname@example.org, or by postal mail at Cooleaf, 3423 Piedmont Rd NE, Suite 573, Atlanta, GA 30305. In accordance with California Civil Code Section 1789.3, California residents may also file complaints with the Complaint Assistance Unit, Division of Consumer Services, California Department of Consumer Affairs by postal mail at 1625 North Market Road, Suite N112, Sacramento, CA 95834 or by telephone at 800-952-5210.
Changes to Our California Notice We reserve the right to amend this California Notice at our discretion and at any time. When we make changes to this California Notice, we will post the updated California Notice on the Platform and update the California Notice’s effective date. Your continued use of our Platform following the posting of changes constitutes your acceptance of such changes.
Your EU Privacy Rights Persons who are residents of the member countries of the European Union (“EU”) or other data subjects covered by the EU’s General Data Protection Regulation, (EU) 2016/679 (the “GDPR”), have certain additional privacy rights under applicable law. The following provisions of this Section 12 provide an overview of these additional rights. Legal Bases for Processing Personal Information of European Union Citizens When processing your personal information, Cooleaf may rely on one or more of the following legal bases (or other available legal grounds), depending on the circumstances: • Legitimate Interests. We may process your personal information where Cooleaf has a legitimate interest in such processing for managing, operating or promoting our business, and that legitimate interest is not overridden by your interests, fundamental rights or freedoms. • Consent. We may process your personal information where Cooleaf has obtained your consent to the processing. • Contractual Necessity. We may process your personal information where such processing is necessary in connection with any contract that Cooleaf has with you. • Legal Requirements. We may process your personal information where such processing is required by applicable law.
Disclosures to Third Parties Your personal information will not be disclosed to third parties except for where it is necessary for fulfillment of Cooleaf’s obligations to you or where Cooleaf is obliged or permitted to do so by law (including, without limitation, through the terms of any agreement Cooleaf may have with you), or where Cooleaf makes disclosures that are otherwise consistent with the uses described in this Policy.
Cooleaf may also disclose any information (including personal information) relating to you to law enforcement authorities or any regulatory or government authority in response to any request including requests in connection with the investigation of any suspected illegal activities.
Cooleaf reserves the right to transfer any personal information Cooleaf has about you in the event Cooleaf sells or transfers all or a portion of our business or assets, or merges with another organization. Should such a sale, transfer or merger occur, Cooleaf will use reasonable efforts seeking to require that the transferee uses personal information you have provided to Cooleaf in a manner that is consistent with this Policy.
We will not sell, resell or lease your personal information to any third parties but Cooleaf may, if required for the purpose(s) for which your personal information was collected and processed, share it with Cooleaf partners and/or service providers to enable them to provide their services to Cooleaf or to you, as applicable. The foregoing are in addition to the other uses described elsewhere in this Policy.
Security of Personal Information of European Citizens Cooleaf has policies and technical and organizational measures in place which are intended to safeguard and protect your personal information against unauthorized access, accidental loss, improper use and disclosure. However, you should be aware that information transmitted over the internet is not completely secure because of the nature of the internet and that systems and measures used to secure information are not flawless. For these reasons, although Cooleaf will use reasonable efforts to protect your personal information, Cooleaf does not warrant the security of personal information transmitted to Cooleaf or stored by Cooleaf, and personal information that is transmitted to Cooleaf by you electronically is done at your own risk.
Retention of Personal Information of European Citizens Our policy is to retain your personal information only for as long as is necessary to fulfill the purposes for which Cooleaf collected such personal information, including for the purposes of satisfying any professional, legal, accounting or reporting requirements to which Cooleaf is subject. To determine the appropriate retention period for personal information, Cooleaf considers the scope, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which Cooleaf collected and processed your personal information and whether Cooleaf can achieve those purposes through other means, and any applicable legal and professional requirements.
Contact Information To ask questions or comment about this Policy and our privacy practices, contact us via email at email@example.com, or via regular mail at Cooleaf, 3423 Piedmont Rd NE, Suite 573, Atlanta, GA 30305.