COLLECTION OF INFORMATION
Information You Provide to Us
We collect information you provide directly to us, such as the information you input into the app when you create an account, add photographs to your account, sign up to receive our emails or newsletter, request customer support, or otherwise communicate with us.
The types of information we may collect include your name, email address, zip code, billing address, shipping address, phone number, payment card information, product preferences, your baby's name and birthdate, and any other information you choose to provide.
In addition, Baby Notebook staff may access your photographs or other information you provide when you use the app in order to provide account maintenance, customer service, technological enhancements, and other related activities. Such access will be limited to the extent necessary to perform these activities. All information will be held strictly confidential.
We do not collect any other personally identifiable information unless you voluntarily share that information with us.
Information We Collect Automatically
We automatically collect certain information about you when you use our Services or transact business with us, including:
- Usage Information: We collect information about your use of our Services, such as the type of browser you use, access times, pages viewed, your IP address, and the page through which you accessed our websites.
- Location Information: We may collect information about the location of your device each time you use our Services or when you otherwise consent to the collection of this information.
- Transaction Information: When you purchase a product or service, we collect information about the transaction, such as product details, and the date and location of the purchase.
Please note that we may use third party service providers to help operate and provide the Services and these service providers may collect non-personally identifiable information. To be clear, some types of non-personally identifiable information may be specific to a particular computer or device, and may be considered “personal data” or “personal information” as specifically defined in some jurisdictions.
Information We Collect from Other Sources
We may also obtain information about you from other sources such as the U.S. Postal Service and information you make public on social media sites.
USE OF INFORMATION
We may use information about you for various purposes, including to:
- Facilitate and improve your online experience;
- Provide the products and services you request, process transactions, and send you related information, including confirmations and receipts;
- Share or permit our vendors and subcontractors to access your information to help us provide our services to you including payment processors, email providers, host providers, your credit card issuer, a third-party credit verification company, the product handler and the delivery service, data storage facilities, and other companies that help us provide our services;
- Respond to your comments, questions, and requests and provide customer service;
- Use your comments and reviews of our products and services to promote our business. You grant Baby Notebook LLC a worldwide, non-exclusive, irrevocable, perpetual, royalty-free right and license to incorporate and use your comments and reviews specific to our Services.
- Communicate with you about products, services, offers, promotions, and events and provide news and information we think will be of interest to you.
- Send you technical notices, updates, security alerts, and support and administrative messages;
- Personalize your online experience and provide advertisements, content, or features that match your profile and interests;
- Monitor and analyze trends, usage, and activities;
- Link or combine with information we get from others to help understand your needs and provide you with better service; and
- Carry out any other purpose for which the information was collected.
We will not sell, share, or trade your personal information to any third party for their marketing purposes without your consent. Your Personal Information will not be visible to other users of the Service unless you provide them with access to it.
We are based in the United States and the information we collect is governed by U.S. law. By accessing or using our Services, you consent to the processing and transfer of information in and to the U.S. and other countries as necessary to provide the Services.
If you are a resident of California, please see the section titled “Information, Notices, and Rights Applicable To California Residents Only” for specific disclosures with respect to our collection, use, and disclosure of your information and additional rights you have under applicable California law. If you are located in the European Union (EU) or European Economic Area (EEA), please see the section entitled “EU Residents Rights and Disclosures” for specific disclosures with respect to our collection, use, and disclosure of your information and additional rights that you have under applicable law.
SHARING OF INFORMATION
We may share information about you as follows:
- With vendors, consultants, and other service providers who need access to such information to carry out the services or produce the products you purchase;
- In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process, or as otherwise required by any applicable law, rule, or regulation;
- If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property, and safety of us or any third party;
- In connection with, or during negotiations of, any merger, sale of company assets, financing, or transfer of all or a portion of our business to another company; and
- With your consent or at your direction.
ADVERTISING and ANALYTICS
We use industry-standard encryption to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. However, due to the inherent open nature of the Internet, we cannot ensure or warrant the security of any information provided online, and you assume this risk by using the our services.
Although you may choose to input information about your child, we do not knowingly collect any personal information directly from anyone under the age of 18. We do not sell products or services for purchase by children and any children's products or services we sell are for purchase by adults only. If we become aware that an individual is under the age of 18 and has submitted any information to us for any purpose without prior verifiable parental consent, we will delete his or her information from our files.
Online Account Information
You may update, correct, or delete your online account information at any time. If you wish to delete your online account, we may retain certain information as required by law or for legitimate business purposes.
You can opt out of receiving promotional communications from us at any time by unsubscribing from newsletters and emails, or contacting us.
INFORMATION, NOTICES, AND RIGHTS APPLICABLE TO CALIFORNIA RESIDENTS ONLY
California law provides California residents (as defined in Section 17014 of title 18 of the California Code of Regulations) (“Consumer”) with specific rights regarding information that identifies, relates to, describes, references, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (some of which may also constitute Personally Identifiable Information). The California Consumer Privacy Act of 2018 (“CCPA”) refers to such information as “personal information.” This section describes the rights that California Consumers have and explains how to exercise those rights, subject in all cases to any limitations set forth in the CCPA.
- Information We Collect; How We Collect It; How We Use It
Categories of Information We Collect. We collect the categories of information specified above under Collection of Information.
Categories of Sources From Which Personal Information Has Been Collected. Identifiers that constitute Personally Identifiable Information are collected directly from you. For example, we may collect your name, email address, from forms you complete through the Services. Identifiers that do not constitute Personally Identifiable Information (e.g., IP addresses, online identifiers) are collected indirectly from you through website technology, including web servers, cookies and similar tracking technology that interacts with your browser/device when you use the Services. Personal information covered by the California Customer Records statute is collected directly from you. For example, we may collect your name, and payment card information from forms you complete on the Service. Commercial information is collected in connection with purchases you make from us (e.g., subscriptions). Internet or other similar network activity is collected indirectly from you through website technology, including web servers, cookies and similar tracking technology that interacts with your browser/device when you use the Services.
Categories of Third Parties With Whom We Share Personal Information. See the sections above entitled “Collection of Information,” “Usage of Information,” “Sharing of Information,” and “Advertising and Analytics” for more detail about the categories of third parties with whom we share personal information.
- Right to Know About Personal Information Collected, Disclosed, or Sold
As a California Consumer, you have the right to request that we disclose certain information to you about our collection, use, disclosure, or sale of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Access and Deletion Rights), and subject to certain limitations that we describe below, we will disclose such information. You have the right to request any or all of the following:
The categories of personal information we collected about you.
The categories of sources from which the personal information is collected.
Our business or commercial purpose for collecting or selling that personal information.
The categories of third parties with whom we share that personal information
The specific pieces of personal information we collected about you (also called a data portability request).
The categories of personal information about you that we have sold or disclosed for a business purpose.
- Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Access and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records within a reasonable timeframe, unless an exception applies. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.
- Exercising Access and Deletion Rights
To exercise the access and deletion rights described above, please delete your account within the Baby Notebook application's “Account” screen. Only you, or a person or business entity registered with the California Secretary of State that you authorize to act on your behalf (an “authorized agent”), may make the requests set forth above. The request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide sufficient information that allows us to reasonably verify that you are the person about whom we collected the personal information or an authorized representative of that person. For more information about verification, see Response Timing and Format immediately below.
- Response Timing and Format
We will respond to consumer requests in a reasonably timely manner. If we require extra time to respond, we will inform you of the reason and extension period in writing. In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The method used to verify your identity will depend on the type, sensitivity, and value of the information, including the risk of harm to you posed by any authorized access or deletion. Generally speaking, verification will be performed by matching the identifying information provided by you to the personal information that we already have. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request (and will not be made more than twice in a 12-month period). If we cannot comply with a request, or cannot fully comply with a request, the response we provide will also explain the reasons we cannot comply.
- Personal Information Sales and Opt-Out
We do not sell your Personally Identifiable Information. However, under the CCPA, “sale” is broadly defined such that it may include allowing third party advertising partners to receive certain limited categories of “personal information” (as such term is defined under the CCPA) such as cookies, IP address, device identifiers, internet or other similar network activity, to deliver targeted advertising on the Service or other services. When we permit such third parties to use such personal information for their own business and commercial purposes, this sharing may be considered a “sale” of personal information under the CCPA.
You have the right to direct us to not sell your personal information at any time (the “right to opt-out”). To exercise the right to opt-out, you may do so through the Digital Advertising Alliance's (DAA) CCPA Opt Out Tools. You can opt out via both website and mobile app as described in the DAA CCPA Opt Out Tools. The opt-out operates by placing a cookie on your device that is unique to the browser and device you use to opt-out. If you change browsers or computers, or delete the cookies on your computer, you will need to opt-out again. You also can set your browser to notify you when a cookie is being set and block most cookies. Please note that the CCPA opt outs provided through the DAA apply to the sale of personal information by participating companies. You may still receive advertisements that do not involve the sale of personal information subject to the CCPA.
We do not sell the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization.
EU RESIDENTS RIGHTS AND DISCLOSURES
Data Subject Rights: Subject to local law, you may also have certain rights regarding information that we have collected and that is related to you. If you are located in the European Union with rights under the General Data Protection Regulation (“GDPR”), you have the right to withdraw previously provided consent for our processing of your “personal data” as such term is defined under the GDPR, by contacting us at firstname.lastname@example.org. Such individuals also have the following rights:
Right to access – This right allows individuals to obtain confirmation as to whether or not personal data concerning him or her is being processed and provides access to such personal data. It also allows individuals to request details of the processing of his or her personal data, including, without limitation, categories of recipients to whom the personal data has been or will be disclosed and the purposes of the processing.
Right to rectify – This right allows individuals to rectify any inaccurate personal data about him or her.
Right to restrict processing – This right allows individuals to block or suppress processing of personal data under certain circumstances.
Right to be forgotten – This right is also known as the “right to erasure.” It is an individual's right to have personal data erased or to prevent processing in specific circumstances.
Right of data portability – This right allows individuals to move, copy or transfer personal data from one place to another in a secure manner without interrupting the integrity and usability of the information.
Right to object to processing – This right allows individuals to object to certain types of processing, including direct marketing, profiling and providing for purposes of scientific or historical research and statistics.
To exercise any of the above rights, please contact us at email@example.com.
Legal Bases for Processing: We rely on the following legal basis to process your personal data: (i) it may be necessary for us to use and disclose your personal data for the performance and fulfillment of the contract between us and to provide you with our services; (ii) if you specifically consent to certain uses of your personal data, we may use your personal data in a manner consistent with that consent; and (iii) we will also process, transfer, disclose and preserve personal data when we have a good faith belief that doing so is necessary.