Privacy Policy
Last updated February 25, 2021
Thank you for visiting the Boutique by the Box website (including affiliates under common ownership) (referred to herein as “we” or “us”).
This privacy policy describes the types of information we collect from and about our customers and/or users of this website (the "Site") or persons with whom we interact, including those visiting or making a purchase at our online store (the "Store"), or contacting or interacting with us offline (all such persons are referred herein as “you”). The Site, the Store, and any offline interactions are collectively referred to as the "Services."
This privacy policy also explains how we may use and share your personal information, as well as your ability to control certain uses of it.
By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy, and agree to the Terms of Use which are incorporated by reference. If you do not agree, please do not further access or use the Services.
CALIFORNIA PRIVACY INFORMATION
For California Residents, please see privacy-related information below under “Supplemental Information California Residents” in addition to reviewing this Privacy Policy.
We may collect information from or about you in a number of ways. Please note that if you decline to provide any of the requested information (whether or not required), you may not be able to take full advantage of the Services.
(i) Information that you voluntarily provide to us
We collect information from and about you and your transactions and other interactions with us that you voluntarily provide to us. This may include, but is not limited to, when you create an online account with us, make a purchase, sign up to receive information from us, participate in promotions or other events including offline programs, post a comment at the Site, participate in a product review, survey, or other similar actions (online or offline), send a gift to a person, or otherwise contact us. The personal information we collect may include your name, address, email address, telephone number, or other contact information, gender, birthday, age, other demographic information, your interests, and preferences.
If you make a purchase from us, we may also collect a credit or debit card number or other financial information, CVV, and billing address. In addition, if you make a purchase offline at a location where we may be promoting our products (i.e., at a brick and mortar location; industry event, etc.), we may collect information such as your name, billing address, shipping address, telephone number, email address and payment information. Any such information is subject to this Privacy Policy if we collect or have it.
(ii) Information collected automatically
We, or third parties working on our behalf may use cookies, web beacons/pixel tags, log files, and other technologies to collect certain non-personally identifying information about visitors to our Site, users of our online Services, and interactions with our emails and online advertisements, and to allow us to keep track of analytics and certain statistical information. For example, we may collect information such as your browser type, operating system type or mobile device model, viewed webpages and URLs, links that are clicked, IP address, mobile device identifier or other unique identifier, advertising identifiers, sites or mobile applications visited before coming to our Site, the amount of time you spend viewing or using the Site, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our Site or other usage information. Collecting this information, and linking it with your personal information, helps us to tailor our Site and enhance your experience, including shopping at our Store, by saving your preferences while you are visiting a particular Site, and to help identify Site features, promotions, advertisements, and offers that may be of particular interest to you.
(iii) Information collected from third party sources
We may acquire information from other sources, including without limitation third party privately owned websites (including social media websites), to update or supplement the information that you provide or that we collect automatically (such as information to validate or update your address or other demographic information), or when you connect with us through a third party (including through social networks) based on your registration and privacy settings on those third party sites. Marketing, data analytic and social media-owned databases give us access to a range of information, such as public data, survey data and beyond. This data sometimes includes personal data (i.e., address, gender, age, income, etc.) and demographic data.
(iv) Combination of information
We may combine the information we receive from or about you, including information you provide to us and information we automatically collect through the Site, as well as information across other computers or devices that you use, with information we collect or receive about you from other online and offline sources, or from other third party sources.
(v) Third party analytics and advertisements
We also may use third party advertisements, analytics, and tracking tools to better understand who is using the Site, how people are using the Site, how to improve the effectiveness of the Services and related content, and to help us or those third parties serve more targeted advertising to you across our media channels. These third parties may use technology such as cookies, web beacons, pixel tags, log files, flash cookies, or other technologies to collect and store information. They may also combine information they collect from your interaction with the Site with information they collect from other sources, which combination may be subject to the third party’s control and privacy policy.
Certain parts of the Site require cookies. You can set your browser or operating system settings to limit certain tracking or to decline cookies, but by doing so, you may not be able to use certain features on the Site or take full advantage of all of our offerings. Please refer to your web browser's or operating system’s website for more information on how to delete and/or disable your browser or operating system from receiving cookies or controlling your tracking preferences.
Our system will respond to Do Not Track requests or headers where it is technically feasible. We may use cookies or other technologies to deliver more relevant advertising and to link data collected across other computers or devices that you may use. To understand your choices for receiving more relevant advertising or to manage your settings, you should review and adjust your account settings.
If your browser does not accept our cookies, you will not be able to access certain parts of our Site.
We use the information in one or more of the following ways:
(i) To provide Services to you.
(ii) To provide you with customized Site content, targeted offers, promotions and advertising on the Site, through other third party sites, or via email, text messages or push notifications offered by us or other marketing partners.
(iii) To recognize you at the Site or if you call our customer service so we can provide a more personal experience.
(iv) To validate, confirm, verify, deliver, and track any orders (including to process payment card transactions, arrange for shipping, handle returns and refunds, maintain a record of the purchases you make, and contact you about your orders, including by telephone).
(v) To improve our Services, including the Site.
(vi) To use your data for analytical and demographic purposes. Google Analytics is one of the analytics providers we use. You can find out how Google Analytics uses data and how to opt out of Google Analytics.
(vii) To aggregate or de-identify information so that we can analyze our users use of the Site, such as when we measure advertising performance or compile results from various programs such as surveys or promotions. We can use and disclose this aggregated or de-identified information for any purpose, unless an applicable law says otherwise.
(viii) To perform administrative tasks, including protecting the security or integrity of the Site and our business, conducting audits and protecting against and preventing fraud, unauthorized transactions, claims and other liabilities, and managing risk exposure, including by identifying potential hackers and other unauthorized users.
(ix) To contact you when necessary or requested, including responding to your questions and comments and providing customer support.
(x) As otherwise described to you when collecting data.
(xi) As allowed by law for our own internal purposes.
(xii) For external purposes where we believe those external purposes are consistent with our business and Services.
We will never sell or rent your personally identifying information to third parties. We share personal information with others to be able to improve our Service and offerings to you. In addition, we may share personal information we collect from and about you in one or more of the following ways:
(i) We may share collected information now or in the future with the companies owned or operated by Boutique by the Box (and including under common ownership)
(ii) We may share collection information with co-marketing partners where certain areas of the Services are provided to you in association with third parties. Those co-marketing partners may provide products and services, rewards programs, joint sales or promotional programs, and other jointly sponsored events. Such Services will identify the third party. If you elect to register for any products and/or services provided during the Services, you either will be providing your information to both of us, or we might share your information directly with such third party for that third party to fulfill their products and our products and services directly with you. That third parties use of the information will be subject to its own policies.
(iii) We may share your information with select partners, affiliates, and other third parties that we believe may have offers or be of interest to you in support of your customer experience with us or others.
(iv) We may transfer and/or disclose the information we receive from and about you to comply with a legal obligation; to provide information to law enforcement and other governmental authorities in accordance with applicable law, and when we believe in good faith that the law requires it. We also reserve the right to share information with legal authorities and other companies for fraud protection and credit risk reduction, to detect any technical or security vulnerabilities, to enforce our Terms of Use or other applicable policies, or to otherwise protect the rights, property, safety, or security of third parties, users of the Services or the public.
(v) During the normal course of our business, we may sell or purchase assets. If another entity acquires all or a part of a business owned or operated by us or under common ownership, information we have collected about you may be part of the assets transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against a business owned or operated by us or under common ownership, such information may be considered an asset of the company and may be sold or transferred to third parties. Should a sale or transfer occur, we will use reasonable efforts to try to require that the transferee use personally identifiable information provided through the Services in a manner that is consistent with this Privacy Policy.
(vi) We use third-party service providers to perform certain services on our behalf when the information is necessary for them to perform their duties. These third-party service providers are prohibited from using personal information for any other purpose and are contractually required to comply with applicable laws and requirements, which may include Payment Card Industry Data Security Standards if they are processing or transmitting payments for us.
(vii) We may also share or sell aggregate or anonymous information with or to our companies we own or operate (or under common ownership), agents, service providers, business partners, or other third parties for their marketing or analytics uses or for other lawful purposes. This type of non-identifiable and aggregate information cannot be used to identify you personally.
If you have registered for an account, you may view and update your account information by logging into the "Your Account" section of the Site with your username and password, and update your information. You can also contact us at support@boutiquebythebox.com.
Residents of California and certain countries, including European Union member states (and the United Kingdom), may have additional rights listed under "Your California Rights" and "What if I live outside of the United States?"
To receive promotional offers from us you can sign up at the Site. If you register for an account or make a purchase, you will automatically receive promotional emails and direct mail from us. We provide our customers with the opportunity to "opt out" of receiving emails or direct mailings other than those for purposes directly related to ordering, processing, or shipping a product order or your transactions with us. The ability to opt out and choices are available by contacting us at support@boutiquebythebox.com.
Protecting children’s privacy is important to us. Our Services and products are not intended for anyone under the age of 18. We do not direct our Services, nor do we knowingly collect any personal information from, anyone under the age of 18. If we learn that we have such information we will use reasonable efforts to remove such information from our files.
We have taken certain physical, administrative, operational, and technical steps to safeguard the Site and the information we collect from and about our customers and visitors. We make reasonable efforts to protect the confidentially, integrity and availability of our network and systems, but we cannot guarantee our security measures. When you enter sensitive information (such as credit card information) on our forms, we encrypt the transmission of that information.
Our Site include links to third-party websites or mobile applications not affiliated with us. These websites or mobile applications have their own privacy policies and may send their own cookies to visitors, user or customers, collect data or solicit your information. The privacy policies may be very different from our policy. We are not responsible for the privacy practices of these other websites or mobile applications and cannot guarantee the security of any personal information you provide to or that is collected by such third parties.
Your personal information may be stored for as long as is reasonably necessary to perform the purposes for which we use the information as described above. Your personal information is subject to the laws of the United States. The servers and databases in which information may be stored may be located outside the country from which you accessed the Services and in a country where the data protection and other laws may differ from your country of residence. Your personal information may be disclosed in response to inquiries or requests from government authorities or to respond to judicial process in the countries in which we operate.
For residents of the European Union (and United Kingdom), Boutique by the Box is the data controller responsible for your personal information collected pursuant to this Privacy Policy. Our digital operations are conducted, in whole or in part, in the United States. Regardless of where you live, you consent to have your personal data transferred to, processed and stored in the United States, and allow us to use and collect your personal information in accordance with this Privacy Policy.
In addition, residents of certain countries, including European Union member states (and the United Kingdom), have some or all of the following rights with respect to personal information collected from and about them on the Services: the right to request access to, and the correction, erasure, and/or restriction of processing of, such personal information; in some instances, the right to object to the processing of such personal information; in some instances, the right to request that we export, in a structured, commonly used, and machine readable format, and transmit to another controller, such personal information; and the right to withdraw, at any time, any consent to the processing of such personal information. To exercise these rights, please contact us at support@boutiquebythebox.com.
How do we communicate changes to this Policy?
Any changes to our Privacy Policy will be noted at the top of this Privacy Policy indicating the latest date applicable to it [and we post a notice at our home page]. Your continued use of the Site following posting of changes to these terms will mean you accept these changes. If we change our practices in a way that requires revising the Privacy Policy in a material way, we will provide appropriate notice to you.
Whom do you contact with questions about this policy?
Please feel free to contact us at support@boutiquebythebox.com You also have the right to submit feedback about this Privacy Policy, or our practices, to the applicable supervisory authority in your jurisdiction of residence.
SUPPLEMENTAL PRIVACY NOTICE FOR CALIFORNIA RESIDENTS
This Supplemental Privacy Notice supplements the information in our Privacy Policy above and applies solely to California residents. It applies to personal information we collect on or through the Services and through other means (such as information collected offline, in person, and over the telephone). It does not apply to personal information we collect from our employees or job applicants.
California law, including the California Consumer Privacy Act of 2018 and related regulations (the “CCPA”), requires us to disclose information regarding the categories of personal information that we have collected about California consumers, the categories of sources from which the information was collected, the business or commercial purposes (as those terms are defined by applicable law) for which the information was collected, and the categories of parties with whom we share personal information.
We or our service providers may collect the below categories of information for the following business or commercial purposes (as those terms are defined in applicable law):
- providing the Services (e.g., account servicing and maintenance, customer service, analytics, and communication about the Services);
- our or our service provider’s operational purposes;
- auditing consumer interactions on our site;
- detecting, protecting against, and prosecuting security incidents and fraudulent or illegal activity;
- bug detection and error reporting;
- customizing content that we or our service providers display on the Services;
- improving our existing Services and developing new services (e.g., by conducting research to develop new products or features);
- other uses that advance our commercial or economic interests, such as communicating with you about relevant products and services available to you from third party partners; or
- other uses about which we notify you.
Examples of these types of uses are identified below and discussed more generally in our Privacy Policy above. We may also use the below categories of personal information for compliance with applicable laws and regulations, and we may combine the information we collect (“aggregate”) or remove pieces of information (“de-identify”) to limit or prevent identification of any particular user or device.
- Rights for California consumers
If you are a California resident, you may have certain rights. Effective as of January 1, 2020, California law may permit you to request that we:
- Provide you the categories of personal information we have collected or disclosed about you in the last twelve months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we shared personal information.
- Provide access to and/or a copy of certain information we hold about you.
- Delete certain information we have about you.
We will take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name, email address, and physical address.
You are also permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request.
If you would like further information regarding your legal rights under California law or would like to exercise any of them, please contact us at support@boutiquebythebox.com.
You also have the right to not be discriminated against (as provided for in applicable law) for exercising certain of your rights. Certain information may be exempt from such requests under applicable law. We need certain types of information so that we can provide the Services to you. If you ask us to delete it, you may no longer be able to access or use the Services.
Do not sell my info
Effective January 1, 2020, California residents may opt out of the “sale” of their personal information.
We do not sell or rent your personally identifying information to third parties. Instead, there are instances where we have shared personal information in order to provide our customers or visitors with personalized services or customized offers to improve your experience through our Services or elsewhere. Depending on the circumstances and the contractual obligations in place, this sharing may be considered a "sale" under California law and you may have the right to request that we stop such sharing as more fully set forth below. This sharing may include:
- identifiers such as a device or browser identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, Internet Protocol address, online identifier, and other forms of persistent identifiers;
- commercial information, including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories;
- Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or marketing; and
- inferences drawn from any of the information identified above to create a profile about you reflecting your preferences and behavior.
If you would like to opt out of our use of your information for such purposes that are considered a “sale” under California law, you may do so and please contact us at support@boutiquebythebox.com.
Metrics
California law may require us to compile metrics for the previous calendar year regarding consumer requests and responses. If required by applicable law, we will update this section after the CCPA has been in effect for a calendar year.
California Shine the Light
California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their ‘personal information’ (if any, and as defined under applicable California law) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email at support@boutiquebythebox.com.