Last updated February 25, 2021
Thank you for visiting the Boutique by the Box website (including affiliates under common ownership) (referred to herein as “we” or “us”).
CALIFORNIA PRIVACY INFORMATION
We may collect information from or about you in a number of ways. Please note that if you decline to provide any of the requested information (whether or not required), you may not be able to take full advantage of the Services.
(i) Information that you voluntarily provide to us
We collect information from and about you and your transactions and other interactions with us that you voluntarily provide to us. This may include, but is not limited to, when you create an online account with us, make a purchase, sign up to receive information from us, participate in promotions or other events including offline programs, post a comment at the Site, participate in a product review, survey, or other similar actions (online or offline), send a gift to a person, or otherwise contact us. The personal information we collect may include your name, address, email address, telephone number, or other contact information, gender, birthday, age, other demographic information, your interests, and preferences.
(ii) Information collected automatically
(iii) Information collected from third party sources
We may acquire information from other sources, including without limitation third party privately owned websites (including social media websites), to update or supplement the information that you provide or that we collect automatically (such as information to validate or update your address or other demographic information), or when you connect with us through a third party (including through social networks) based on your registration and privacy settings on those third party sites. Marketing, data analytic and social media-owned databases give us access to a range of information, such as public data, survey data and beyond. This data sometimes includes personal data (i.e., address, gender, age, income, etc.) and demographic data.
(iv) Combination of information
We may combine the information we receive from or about you, including information you provide to us and information we automatically collect through the Site, as well as information across other computers or devices that you use, with information we collect or receive about you from other online and offline sources, or from other third party sources.
(v) Third party analytics and advertisements
Certain parts of the Site require cookies. You can set your browser or operating system settings to limit certain tracking or to decline cookies, but by doing so, you may not be able to use certain features on the Site or take full advantage of all of our offerings. Please refer to your web browser's or operating system’s website for more information on how to delete and/or disable your browser or operating system from receiving cookies or controlling your tracking preferences.
If your browser does not accept our cookies, you will not be able to access certain parts of our Site.
We use the information in one or more of the following ways:
(i) To provide Services to you.
(ii) To provide you with customized Site content, targeted offers, promotions and advertising on the Site, through other third party sites, or via email, text messages or push notifications offered by us or other marketing partners.
(iii) To recognize you at the Site or if you call our customer service so we can provide a more personal experience.
(iv) To validate, confirm, verify, deliver, and track any orders (including to process payment card transactions, arrange for shipping, handle returns and refunds, maintain a record of the purchases you make, and contact you about your orders, including by telephone).
(v) To improve our Services, including the Site.
(vi) To use your data for analytical and demographic purposes. Google Analytics is one of the analytics providers we use. You can find out how Google Analytics uses data and how to opt out of Google Analytics.
(vii) To aggregate or de-identify information so that we can analyze our users use of the Site, such as when we measure advertising performance or compile results from various programs such as surveys or promotions. We can use and disclose this aggregated or de-identified information for any purpose, unless an applicable law says otherwise.
(viii) To perform administrative tasks, including protecting the security or integrity of the Site and our business, conducting audits and protecting against and preventing fraud, unauthorized transactions, claims and other liabilities, and managing risk exposure, including by identifying potential hackers and other unauthorized users.
(ix) To contact you when necessary or requested, including responding to your questions and comments and providing customer support.
(x) As otherwise described to you when collecting data.
(xi) As allowed by law for our own internal purposes.
(xii) For external purposes where we believe those external purposes are consistent with our business and Services.
We will never sell or rent your personally identifying information to third parties. We share personal information with others to be able to improve our Service and offerings to you. In addition, we may share personal information we collect from and about you in one or more of the following ways:
(i) We may share collected information now or in the future with the companies owned or operated by Boutique by the Box (and including under common ownership)
(ii) We may share collection information with co-marketing partners where certain areas of the Services are provided to you in association with third parties. Those co-marketing partners may provide products and services, rewards programs, joint sales or promotional programs, and other jointly sponsored events. Such Services will identify the third party. If you elect to register for any products and/or services provided during the Services, you either will be providing your information to both of us, or we might share your information directly with such third party for that third party to fulfill their products and our products and services directly with you. That third parties use of the information will be subject to its own policies.
(iii) We may share your information with select partners, affiliates, and other third parties that we believe may have offers or be of interest to you in support of your customer experience with us or others.
(vi) We use third-party service providers to perform certain services on our behalf when the information is necessary for them to perform their duties. These third-party service providers are prohibited from using personal information for any other purpose and are contractually required to comply with applicable laws and requirements, which may include Payment Card Industry Data Security Standards if they are processing or transmitting payments for us.
(vii) We may also share or sell aggregate or anonymous information with or to our companies we own or operate (or under common ownership), agents, service providers, business partners, or other third parties for their marketing or analytics uses or for other lawful purposes. This type of non-identifiable and aggregate information cannot be used to identify you personally.
If you have registered for an account, you may view and update your account information by logging into the "Your Account" section of the Site with your username and password, and update your information. You can also contact us at firstname.lastname@example.org.
Residents of California and certain countries, including European Union member states (and the United Kingdom), may have additional rights listed under "Your California Rights" and "What if I live outside of the United States?"
To receive promotional offers from us you can sign up at the Site. If you register for an account or make a purchase, you will automatically receive promotional emails and direct mail from us. We provide our customers with the opportunity to "opt out" of receiving emails or direct mailings other than those for purposes directly related to ordering, processing, or shipping a product order or your transactions with us. The ability to opt out and choices are available by contacting us at email@example.com.
Protecting children’s privacy is important to us. Our Services and products are not intended for anyone under the age of 18. We do not direct our Services, nor do we knowingly collect any personal information from, anyone under the age of 18. If we learn that we have such information we will use reasonable efforts to remove such information from our files.
We have taken certain physical, administrative, operational, and technical steps to safeguard the Site and the information we collect from and about our customers and visitors. We make reasonable efforts to protect the confidentially, integrity and availability of our network and systems, but we cannot guarantee our security measures. When you enter sensitive information (such as credit card information) on our forms, we encrypt the transmission of that information.
Our Site include links to third-party websites or mobile applications not affiliated with us. These websites or mobile applications have their own privacy policies and may send their own cookies to visitors, user or customers, collect data or solicit your information. The privacy policies may be very different from our policy. We are not responsible for the privacy practices of these other websites or mobile applications and cannot guarantee the security of any personal information you provide to or that is collected by such third parties.
Your personal information may be stored for as long as is reasonably necessary to perform the purposes for which we use the information as described above. Your personal information is subject to the laws of the United States. The servers and databases in which information may be stored may be located outside the country from which you accessed the Services and in a country where the data protection and other laws may differ from your country of residence. Your personal information may be disclosed in response to inquiries or requests from government authorities or to respond to judicial process in the countries in which we operate.
In addition, residents of certain countries, including European Union member states (and the United Kingdom), have some or all of the following rights with respect to personal information collected from and about them on the Services: the right to request access to, and the correction, erasure, and/or restriction of processing of, such personal information; in some instances, the right to object to the processing of such personal information; in some instances, the right to request that we export, in a structured, commonly used, and machine readable format, and transmit to another controller, such personal information; and the right to withdraw, at any time, any consent to the processing of such personal information. To exercise these rights, please contact us at firstname.lastname@example.org.
How do we communicate changes to this Policy?
Whom do you contact with questions about this policy?
SUPPLEMENTAL PRIVACY NOTICE FOR CALIFORNIA RESIDENTS
California law, including the California Consumer Privacy Act of 2018 and related regulations (the “CCPA”), requires us to disclose information regarding the categories of personal information that we have collected about California consumers, the categories of sources from which the information was collected, the business or commercial purposes (as those terms are defined by applicable law) for which the information was collected, and the categories of parties with whom we share personal information.
We or our service providers may collect the below categories of information for the following business or commercial purposes (as those terms are defined in applicable law):
- providing the Services (e.g., account servicing and maintenance, customer service, analytics, and communication about the Services);
- our or our service provider’s operational purposes;
- auditing consumer interactions on our site;
- detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- bug detection and error reporting;
- customizing content that we or our service providers display on the Services;
- improving our existing Services and developing new services (e.g., by conducting research to develop new products or features);
- other uses that advance our commercial or economic interests, such as communicating with you about relevant products and services available to you from third party partners; or
- other uses about which we notify you.
- Rights for California consumers
If you are a California resident, you may have certain rights. Effective as of January 1, 2020, California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you in the last twelve months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we shared personal information.
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
We will take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name, email address, and physical address.
You are also permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request.
If you would like further information regarding your legal rights under California law or would like to exercise any of them, please contact us at email@example.com.
You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide the Services to you. If you ask us to delete it, you may no longer be able to access or use the Services.
Do not sell my info
Effective January 1, 2020, California residents may opt out of the “sale” of their personal information.
We do not sell or rent your personally identifying information to third parties. Instead, there are instances where we have shared personal information in order to provide our customers or visitors with personalized services or customized offers to improve your experience through our Services or elsewhere. Depending on the circumstances and the contractual obligations in place, this sharing may be considered a "sale" under California law and you may have the right to request that we stop such sharing as more fully set forth below. This sharing may include:
- identifiers such as a device or browser identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, Internet Protocol address, online identifier, and other forms of persistent identifiers;
- commercial information, including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories;
- Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or marketing; and
- inferences drawn from any of the information identified above to create a profile about you reflecting your preferences and behavior.
If you would like to opt out of our use of your information for such purposes that are considered a “sale” under California law, you may do so and please contact us at firstname.lastname@example.org.
California law may require us to compile metrics for the previous calendar year regarding consumer requests and responses. If required by applicable law, we will update this section after the CCPA has been in effect for a calendar year.
California Shine the Light
California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their ‘personal information’ (if any, and as defined under applicable California law) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email at email@example.com.