Privacy Policy
Last Updated: May 20, 2022
This Privacy Policy is designed to help you better understand how we collect, use, store, and disclose your personal information. By using the website or online platform provided by the Company and its affiliates (hereinafter referred to as "the Company," "we," or "our") to purchase products from third-party retailers (hereinafter referred to as "Products") or to obtain information from our website or online platform (hereinafter referred to as "the Platform"), you agree to be bound by this Privacy Policy and its related terms and conditions (i.e., our Terms). We may update this Privacy Policy from time to time to reflect changes in our privacy practices or other operational, legal, or regulatory reasons. By continuing to use our Platform to obtain products or information, you indicate that you have read, understood, and agreed to the terms of this Privacy Policy, including any updates therefrom. If you do not agree to be bound by this Privacy Policy, please do not use our Platform.
We are committed to protecting your privacy, and this Privacy Policy outlines our privacy protection measures applicable to users who obtain products or information through our Platform. We and/or our third-party product retail suppliers or third-party service providers (collectively, "Third-Party Providers") own, operate, and maintain our Platform and the products or information on it. We are a non-profit company headquartered in Minnesota. By accessing and using our platform to obtain products or information, you agree to the terms regarding the use and collection of information in this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. If we change this Privacy Policy, we may not notify users separately. Any changes will take effect upon publication, with the effective date being the "Updated" date above. We recommend that you review this Privacy Policy periodically for any changes.
Information We Collect
For the purposes of this Privacy Policy, "Personal Information" includes all information relating to you that can directly or indirectly identify you, such as your name, address, telephone number, and email address. Except as expressly provided below, we will not provide any personal information that you provide to us or that we collect through this platform to any unaffiliated third party without your explicit consent or legal requirement.
We may also collect information generated from your interactions with this platform. The types of personal information we may collect include your name, email address, device ID, telephone number, billing address, payment-related information (such as credit card or PayPal account information), and other similar contact details. This means that we may collect your information through multiple channels, not just the website where you initially purchased products or registered a user account.
Our platform may use GPS or other positioning technologies (such as sensor data from your mobile device that provides information about nearby Wi-Fi access points and cellular network base stations, hereinafter referred to as "Location Information") to collect and process the location information of your device. We may use Location Information to personalize specific products or information for your region. You can control access to Location Information through your device's control settings.
We may also use software application tools and data files (such as cookies, web log files, transparent GIFs, pixels, and/or similar devices) to collect information about your use of our platform to identify our users and their devices, including collecting your IP address, browser type, source page, device status information, unique device identifier, device hardware and operating system information, and access time (collectively, "Operation Information"). Cookies we use are unique identifiers sent from our platform to your browser and stored on your device. We use cookies to identify your device and provide you with a personalized platform experience. We may also allow contracted third-party service providers to use cookies to monitor your use of our platform and your use of any third-party website links.
We use this Operation Information to evaluate the health of the platform. You can manage this Operation Information through your device's control settings. You can delete or refuse persistent cookies according to the instructions in your browser's "Help" file. If you refuse persistent cookies, all or part of the functionality of our platform may be affected or unavailable.
Please note that your decision to withdraw our access to your personal, location, or operational information may affect the functionality of our platform. If you have any questions about our use of your personal, location, or operational information, please contact us.
How We Use Your Information
Generally, your personal information is used only to process payments for products you purchase through our platform. We will not sell, rent, or lend your personal information to any third party without your explicit consent. We will provide your personal information to third-party service providers (such as Square) who process payments on our behalf.
We may also use the information we collect from you for the following purposes:
To identify and verify your identity when processing payments.
To personalize and enhance your experience using our platform.
To process your orders and/or deliver products you purchase through our platform through our third-party suppliers (i.e., applicable third-party retailers).
To monitor usage and interaction statistics on our platform, and/or through responses to our communications.
To improve and provide new products, services, and overall customer support. We conduct data analysis.
This allows us to respond to your questions and information requests quickly and efficiently.
We may contact you directly or indirectly through one of our third-party suppliers (via email, SMS, phone, or mail) to send you special offers, discounts, or marketing information related to products you purchase through our platform.
This allows us to disclose your information to the extent permitted or required by law.
We may use location information to provide you with location-specific features. We may also use location information to provide you with a "Find Nearby Locations" service.
We use operational information for data analysis to analyze and evaluate the functionality and features of our platform. We may also use operational information to process automated crash reports, which collect information on crashes, other technical issues, and the operational status of our platform.
To provide products and information through our platform, we may also provide this information to certain third-party service providers. Our third-party service providers may include software developers, application and data hosting providers, wireless network service providers, payment processors, and any third-party retail partners with whom we have contracts. We are responsible for ensuring that these third-party service providers comply with the terms of this Privacy Policy.
Except for our third-party suppliers, we will not share personal or location information with unaffiliated third parties without your prior authorization unless it is necessary to do so: (1) enforce this Privacy Policy, comply with laws, regulations or other legal processes, or protect our or others' rights, property, or safety; (2) comply with valid orders or procedures of public authorities; (3) prevent misuse or unauthorized use of our platform; (4) detect or prevent criminal activity or fraud; or (5) if we or most of our assets are acquired by one or more third parties as a result of acquisition, merger, sale, reorganization, integration, or liquidation, such information may be transferred as one of the assets.
Personal Information Protection?
While we cannot guarantee the absolute security of personal information transmitted over the Internet or processed through our platform, we follow security procedures to protect your personal information. We safeguard your personal information by implementing appropriate physical, administrative, and technical safeguards and following operating procedures. We use Secure Sockets Layer (SSL) technology to protect transactions involving personal information that you conduct over the Internet. We only allow authorized employees, agents, and certain authorized third-party service providers to access your personal information processed through our platform, and only as necessary to provide our platform or process your product orders. Please note that we are not responsible for any personal information you share through any website outside of our platform (including any third-party websites accessed or linked through our platform). All such sharing of information and content is at your own risk. If you have any questions about sharing information on or through a specific website that is not owned by us, please contact that website directly.
Children's Privacy
In accordance with the Children's Online Privacy Protection Act (15 USC § 6501.06 and 16 CFR §§ 312.1–312.12), we do not knowingly collect personal information from any user under the age of 13, whether online or through our platform. Using our platform (including purchasing any products) indicates that you are 13 years of age or older. If you believe we have collected personal information from a visitor under the age of 13, please contact us.
Will we disclose the information we collect to external parties?
Except as otherwise provided in this Privacy Policy, we will not sell, exchange, or otherwise transfer your personal information to any third party. We may use your information without prior notice in the following circumstances, including situations where we have the right to disclose your information to our third-party service providers:
Subsidiaries and Affiliates. We may transfer personal information to our subsidiaries and affiliated entities under our ownership or contractual control (collectively, “Affiliates”).
Third-Party Suppliers. We may disclose personal information to our third-party suppliers (e.g., hosting/support/maintenance providers and payment processors) and third-party retailers of the products you order (i.e., applicable third-party suppliers) where they require access to such information to provide services to us.
Third-Party Advertising. We do not typically provide personal information to any third party for marketing/advertising purposes, but may disclose personal information where necessary to obtain data analytics services.
Rights Exercise/Security Safeguards. We reserve the right to disclose personal information in the following circumstances: (1) when we are required by law (e.g., we receive a subpoena), or when we believe that the law requires us to do so; (2) when we believe it is necessary to protect and/or exercise the rights, property interests, or security of ourselves, our platform, our third-party suppliers, customers, or others; or (3) when we believe it is necessary to resolve disputes, troubleshoot, prevent fraud, and otherwise enforce this Privacy Policy and other terms. Company restructuring or sale. If we merge with or become part of another organization, or if we are sold, or if we sell all or nearly all of our assets, or if we undergo other restructuring, all of our information (including your information) may be transferred as assets to the acquiring party or the restructured entity.
To the extent permitted by law, we may transfer personal information to third parties, provided that applicable law expressly authorizes or requires us to do so.
In addition to the personal information you provide to us, you may also provide us or we may otherwise obtain non-personal information (i.e., information that cannot personally identify you). We reserve the right to use and/or disclose such non-personal information for any reason (e.g., marketing and advertising), including disclosure to third parties. This includes anonymized information.
We may aggregate information you provide or otherwise collect about you with information provided by others, but the aggregated information cannot personally identify you. Once such information becomes non-personal information, we reserve the right to use and/or disclose such non-personal information for any reason (e.g., marketing and advertising), including disclosure to third parties.
Your Rights
Your Right to Access – This means you can request a copy of any personal information we hold about you. You can also contact us to request a copy of your personal information; see the “Contact Us” section below.
Your Right to Correction – If you believe any personal information we hold about you is incorrect or outdated, you have the right to correct such personal information by providing us with the correct, up-to-date information.
Your Right to Erasure – You can request that we erase incorrect or outdated personal information, which we will gladly do for you unless prohibited by law or regulation. In some cases, you also have the right to request that we erase your personal information; see the “Contact Us” section below.
Your Right to Data Portability – You have the right to request a copy of your personal information in a commonly used and machine-readable format and to have it provided to you or other third parties you designate.
Your Right to Opt Out – When you communicate with us and provide us with contact information (such as your email address), you consent to us contacting you by email. You can opt out of receiving emails as described in this Privacy Policy, or use the “unsubscribe” option at the bottom of each email provided by us or a verified third party that sends you emails on our behalf. This will remove you from email lists, website registration lists, and/or email sponsors. Additionally, you can contact us to request to be removed from all marketing materials; please see the "Contact Us" section below.
Locations Where We Store and Process Personal Data
The personal data we collect may be stored and processed in your region, the United States, or any other country where we or our service providers have facilities. Typically, the primary storage location is in the United States. Backups created from locations within the European Economic Area (EEA) will remain within the EEA unless otherwise requested by the customer. These storage locations are chosen for efficient operation, improved performance, and to create redundancy to protect data in the event of server outages or security incidents. Regardless of where the data is located, personal data is processed in accordance with this Privacy Policy and applicable laws.
We may transfer personal data from the EEA and Switzerland to other countries, some of which have not yet been deemed adequately protected by the European Commission. In such cases, we will employ various legal mechanisms, including contracts, to ensure that your rights and protections are transferred with the data; such contracts will comply with the standard terms of the GDPR, and we will continue to be responsible for protecting such personal data.
We commit to and comply with the EU-US Privacy Shield framework and the Switzerland-US Privacy Shield framework established by the U.S. Department of Commerce, which govern the collection, use, and retention of personal information transferred from the EU and Switzerland to the United States. We have submitted a self-certification to the U.S. Department of Commerce, demonstrating our compliance with the Privacy Shield principles. We will be held liable if any third-party agent processes personal data on our behalf in a manner inconsistent with any of the Privacy Shield framework principles, unless we can prove that we are not responsible for any incidents that cause harm.