We respect user privacy and are committed to protecting user personal data, strictly adhering to data privacy laws and regulations in the use of this data. This Privacy Policy explains how we collect, use, and process any personal data you provide to us or collect from you when you use our website, mobile applications, and print-on-demand services (collectively, the “Services”). By accessing or using our Services, you acknowledge and agree to the terms of this Privacy Policy.

We do not knowingly collect, retain, disclose, or sell personal information of users under the age of eighteen (18). If you are under the age of 18, please do not use our Services. If you are under the age of 18 but have used our Services, please contact us at the email address below so that we can delete your personal information.

  1. Background We provide services to both corporate clients and end users.

If you use our Services solely for personal purposes, you are considered a “User” and, under data protection laws, we are a data “Controller” or a regulated “Enterprise” (as defined in applicable data protection laws). If you use our Services to fulfill orders and deliver products to third parties, you are considered a “Merchant.” When processing contact information, payment information, and other information directly related to merchants as listed in Section 1 below, we are a data controller or a regulated entity. When we fulfill orders for merchants’ customers on their behalf, we are a “data processor” or “service provider” (as defined in applicable data protection laws). When we act as a data processor, we process information on behalf of our customers in accordance with our data processing terms.

The term “data protection law” should include any applicable data privacy or security laws, including but not limited to the General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (as defined by the UK Data Protection Act 2018 and amended by the Data Protection, Privacy and Electronic Communications (Amendments, etc.) (EU Withdrawal) Regulation 2019), the California Consumer Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Montana Consumer Data Privacy Act, the Oregon Consumer Privacy Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act, as well as applicable amendments and regulations relating to all of the foregoing laws.

  1. Information We Collect About Users and Merchants and How We Use It

The types of personal information we collect and process depend on how you interact with us and our services. This section lists the categories of information we may collect about you, and how these categories are used will follow the disclosures described in the “How We Use Your Data” section below.

Identifiable Information This type of information includes your name, postal address, shipping address, email address, and phone number.

Payment Information. This type of information includes information related to billing and payment details (including the first and last digits of your payment card).

Business Information. This type of information includes information about services you have purchased or are considering purchasing, as well as your preferences.

Device and Unique Identifier. This type of information includes information about internet or other electronic network activity, such as IP address, the device and browser you use, referral pages, timestamps, and cookies.

Geographic Data. This type of information includes non-precise location information that allows us to determine your location based on information provided in your IP address.

Audio Information. This type of information includes recorded telephone conversations in which we or our representatives participate to the extent permitted by applicable law.

Government-Identified Documents. This type of information includes images and data that may appear on government-issued identity documents or identification materials.

Content. Such as your communications with us and any other content you provide, such as social media profiles, pictures, videos, survey responses, comments, ratings, and testimonies.

  1. How We Collect Your Data

We may collect data in the various ways described in this section.

Directly from you. We collect personal information you provide, such as when you make a purchase; register an account or create a profile; contact us; respond to surveys; participate in sweepstakes, contests, or other similar events or promotions; apply for a job; sign up to receive emails or newsletters; or otherwise communicate directly with us.

Using online tracking technologies and other automated data collection technologies. When you visit our website, use our services, open or click on emails we send you, or interact with our advertisements, we or third parties we work with may use online tracking technologies (such as cookies) to automatically collect certain information. For more information, please click here to view our Cookie Policy.

From merchants. We obtain information directly from merchants on whose behalf we may provide services.

From social media platforms and networks. If you interact with us through social media, or access our website using plugins, widgets, or other tools provided by social media platforms or networks (including Instagram, Facebook, Twitter, Google, LinkedIn, and Pinterest), we collect information you disclose to us. For more information about the privacy practices of these social media platforms, please review the privacy policies and settings of the social media platforms and networks you use.

From Other Sources. We may obtain your information from other sources, such as data analytics providers, marketing or advertising service providers, anti-fraud service providers, suppliers providing services on our behalf, or public sources. We may also create information based on the results of our analysis of the information we have collected from you.

  1. How We Use Your Data

This section explains how we use your data and outlines the categories of information we collect and process.

Providing Services. If you are a user of our services, we will use the data we collect to fulfill our contract with you in order to provide, maintain, or improve our products and services (including, to the extent permitted by applicable law, any legitimate interests related to the services), to verify your identity, to contact you, to provide customer support (including through chat, the comment section of our blog, or other platforms where you may contact us), to operate your account, and to issue you invoices.

For the purposes described above, we collect and process identifiers, payment information, and business information.

Legal Obligations. To comply with applicable laws and fulfill our legal obligations and legitimate interests, ensuring that users and end customers are not targeted by trade, financial, and economic sanctions and do not appear on any sanctions-related lists (including lists maintained by the U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”), the U.S. State Department, the U.S. Department of Commerce, the EU, or the UK Treasury), we may request certain personal data from you as described above. Furthermore, we may use such information to establish and exercise our rights and to respond to legal proceedings.

Consent. In certain circumstances, we may collect specific information for specific purposes based on your consent. This includes your consent when registering an account, subscribing to our newsletter or blog, or sharing your email address or other personal data with us to receive any other information (such as a list of our subprocessors).

In such cases, we will process identifiers such as your email address as needed to send you the information and/or promotional materials you have subscribed to, such as newsletters, advertisements for our services, and other information you request about our services.

For merchants, we will not use your customers’ contact information to directly market or advertise our services to them.

For information on how to unsubscribe from any emails, newsletters, or other communications, please see “Your Choices When Using Our Services” below.

Analysis and Personalization. We use your information for research and analysis, including to improve our services. We also use your information to understand your interactions with our advertising, services, and communications with you. Furthermore, we use your information to personalize your experience, saving you time when you visit our website and use our services, better understanding your needs, and providing personalized service recommendations.

We obtain the location information you provide in your profile or your IP address. We use and store your location information to provide features and improve and customize services, for example, for internal analytics and performance monitoring; service localization, regional requirements, and policies; for local content, search results, and recommendations; for delivery and mapping services; and (using non-precise location information) marketing.

By using cookies and similar technologies on our website, we may collect data such as your device information, the preferences and information you fill in when you visit our website, your interactions with the website, and other information for analytics, marketing, and targeting campaigns (including unique visitors, returning visits, session duration, and actions performed on web pages). Click here to learn more about how we use cookies in our services.

For the purposes described above, we collect and process device identifiers and unique identifiers.

Communication with you. We use your information to communicate with you, such as responding to your requests, inquiries, questions, and feedback, conducting meetings with merchants, and providing customer service.

When you call our customer support hotline, we may monitor or record the calls to ensure the quality of customer support. If you have an account, we will retain the recordings until your account is closed. If you do not have an account, we will delete the recordings within 12 months; or, if necessary, we will retain the recordings to resolve disputes between you and us.

When you interact with our customer support via email or chat (which may be provided by third-party software), we may monitor or record the conversations to ensure the quality of customer support. If you have a store account, we will retain the recordings until your account is closed. If you do not have an account, we will delete the recordings within 12 months, or retain them if necessary to protect our legal rights or resolve disputes between you and us.

For the above purposes, we collect and process identifiers, device and unique identifiers, and content.

Security and Fraud Prevention. To ensure network security, we will use your information for our legitimate interests to detect, investigate, prevent, or handle any potential malicious, deceptive, fraudulent, or illegal activities, including fraudulent transactions. We will also use your information to enforce our terms and procedures, prevent security incidents, and prevent harm to other users of our services.

Improving Services, Website, or Developing Other Products. We will process certain information about your use of our services and website to better understand how you access them, improve our services, and develop new products and services. Such processing requires the collection of technical information, including how and when you access your account, the device and browser you use, and IP address and device data.

For the above purposes, we collect and process device identifiers and unique identifiers.

Marketing and Advertising. We will use your information for marketing and advertising purposes, including sending you marketing, advertising, and promotional messages via email or text message. We will not share your SMS marketing campaign information with any third party for any purpose unrelated to providing you with the services for that campaign. We may share your personal data (including your SMS participation or consent status) with third parties who assist us in providing SMS services, including but not limited to platform providers, telephone companies, and any other suppliers who assist us in sending SMS messages.

We will also use your information to show you service advertisements and manage our sweepstakes and other contests.

For the above purposes, we collect and process identifiers, device and unique identifiers, business information, and geolocation data.

  1. Information We Collect About Merchant Customers

In providing products and services on behalf of merchants, we collect and process certain information about individuals (“Customer Data”) at the merchants’ instructions. Customer Data has historically included personal data relating to end users of our services, any personal data in print content (where applicable), personal data disclosed during use of any service (including name, email address, telephone number, shipping address), and other information about merchant customers.

If you are a customer of a merchant (i.e., an end user of our services), the merchant is the controller of the personal data contained in the Customer Data and is responsible for providing you with information about how your personal data is collected and processed when you use our services. Please read the merchant’s privacy policy for more information. If you have any questions about how the merchant processes your personal data, please contact the merchant.

  1. Sharing Personal Data with Third Parties

The following details the types of third parties with whom we share information during your use of our services:

Service Providers. To provide you with services, we work with and share personal data with third parties who provide services on our behalf to support our services (“Service Providers”). Service providers include:

Hosting and Online Services. Information you provide to us during your use of our services (including technology usage data) will be shared with third parties providing hosting and server hosting services, as well as data and network security services, for commercial purposes, in our legitimate interests.

Manufacturing Services. Information you provide to us during your use of our services may be shared with third-party manufacturing service providers we engage so that they can provide our services to you.

Email Service Providers. Your email address and other contact information that you provide to us, as well as messages you send to our customer service, will be shared with communications, email distribution and content distribution service providers, and customer support system providers, for commercial purposes, in our legitimate interests.

Payment Processors. We will share your purchase and payment information with billing and payment processing services, fraud detection and prevention services, accounting and financial advisors, and other advisors so that we can provide services to you.

Analysis and Digital Marketing Service Providers. Information about your use of our services, as well as other information received through cookies and similar technologies, will be shared with web analytics, session recording, and online marketing service providers.

If we provide you with marketing services, your account information, purchase history, and preferences may be shared with marketing service providers.

Legal Counsel, Legal Process, and Protection. To the extent reasonably necessary, we may need to share information with third parties to (1) comply with legal requirements or requests, including any subpoenas, claims, disputes, or proceedings; (2) protect our or third parties’ legitimate interests; (3) enforce or apply our agreements; and (4) protect our or others’ property or safety.

We will only share personal data with service providers who have committed to complying with applicable data protection laws.

Affiliates. We may share your personal data with our affiliates (companies within our group) for business purposes to protect our legitimate interests.

Corporate Customers (i.e., Merchants). When we provide services on behalf of merchants, we will provide certain information related to your orders and purchases.

In Business Transfers. We may disclose or share your information in business transactions, such as mergers or acquisitions, joint ventures, corporate restructuring, financing or sale of company assets, or, in the unlikely event of bankruptcy, liquidation, or receivership, such information may be transferred to a third party as a business asset in the transaction.

Requests for Assistance. We will share information upon your request or instruction, such as when you choose to share information about your use of the services with a social network.

Notwithstanding the foregoing, we may still share information that cannot identify you (including aggregated or anonymized information) unless prohibited by applicable law. For information regarding your rights and choices regarding information sharing, please see “Your Choices Regarding Using Our Services” below.

If your jurisdiction of residence grants you additional legal rights, please see the relevant disclosure documents, including the following:

Supplementary Disclosures for European Residents

Additional Information for California Residents

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia should also note the following:

  1. Retention Period
    We may retain your personal data as long as you have an account or the legal basis for any of the above-mentioned personal data processing remains in effect. For example, if you unsubscribe from our marketing emails, newsletters, or blog posts, we will cease processing your personal data for those purposes.

If you use our services without creating an account, we will retain your personal data until the time required to fulfill our legal obligations to retain information related to providing the services, such as for tax purposes.

After you terminate your relationship with us by deleting your account or otherwise ceasing use of our services, we may continue to store copies of your personal data (and, for merchants, your customers’ personal data) to fulfill our contractual and legal obligations to merchants, resolve disputes between you and us (or merchants and applicable customers), prevent fraud and abuse, enforce our agreements, and/or protect our legitimate interests (to the extent permitted by applicable law for us to continue storing copies to protect our legitimate interests).

To the extent permitted by applicable law, we reserve the right to retain usage data related to our products and services, as well as anonymized and/or aggregated data.

  1. Information Security
    We are committed to taking reasonable organizational, technical, and administrative measures to protect the confidentiality, integrity, and availability of personal data. We encourage you to safeguard the personal data you process online, set strong passwords for your accounts, log out after each session to restrict access to your computer and browser, and avoid providing us with any sensitive information.
  2. Your Choices Regarding Using Our Services

A. Account

You can access, update, or delete certain information you provide to us through your account (log in here) or by sending an email to the email address listed in the “Contact Information” section below. We may require additional information from you to verify your identity.

Please note that we will retain and use your information as needed to fulfill our legal obligations, resolve disputes, and enforce our agreements.

B. Communication.

Email. You can opt out of receiving our promotional emails at any time. Simply follow the instructions in the email and click the “Unsubscribe” link, or send an email to the email address listed in the “Contact Information” section below and enter “Unsubscribe” in the subject line. Please note that you cannot opt ​​out of receiving non-promotional emails, such as those about your account, transactions, services, or ongoing business dealings.

C. Cookies and Tracking Technology.

Cookies. Please click here to view our Cookie Policy to learn how to control cookies.

D. Analytics.

We use Google Analytics to analyze our services. We give you control and choices so you can control how we collect, use, share, and store your information.

Please note that your opt-out is only applicable to the specific browser or device you opted out of.

E. Legal Privacy Rights.

Under certain applicable laws, you may have additional privacy rights, including but not limited to the California Consumer Privacy Act and other similar laws that may be in effect. For more information about your rights under these laws, please see the relevant sections below:

Supplementary Disclosures for European Residents

Additional Information for California Residents

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia should also note the following:

For more information on how to exercise your legal rights under applicable laws, please see the section below titled “How to Exercise Your Legal Rights Under GDPR, CCPA, or More Stringent U.S. Privacy Laws.”

  1. Supplementary Information for European Residents

If you are a user or data subject of a business located in the European Economic Area or the United Kingdom, you have certain rights to your personal data under EU and UK data protection laws (collectively, the “GDPR”).

A. Roles

The GDPR distinguishes between organizations that process personal data for their own purposes (called “controllers”) and organizations that process personal data on behalf of other organizations (called “processors”). As described in the “Background” section above, we may be either a controller or a processor, depending on the specific circumstances.

As a data controller: We are a data “controller” when we process information directly from users to provide services to users who have purchased the corresponding services.

As a data processor: We, as data processors, process orders from their customers on behalf of businesses. As data processors, we process information on behalf of customers in accordance with our data processing terms.

B. Legal Basis

The General Data Protection Regulation (GDPR) requires that the processing of personal data must have a “lawful basis.” Our legal basis includes: (i) your consent for us, our service providers, partners, or customers to process your personal data for one or more specific purposes; (ii) the processing of your personal data is necessary to fulfill the contracts entered into with you; (iii) the processing of your personal data is necessary to comply with legal obligations; or (iv) the processing of your personal data is necessary for the legitimate interests pursued by us or third parties, provided that your interests and fundamental rights and freedoms do not supersede our interests.

C. Data Transfer

All information you provide may be transferred or accessed by our U.S. parent company, affiliated companies and subsidiaries in other countries (such as Latvia, Poland, Spain, and the United Kingdom), and our service providers (as stated above) to provide our services in accordance with this Privacy Policy. When we transfer your information globally, we will take necessary measures to ensure that your information is properly protected, including, where applicable, signing the European Commission’s Standard Contractual Clauses on the Transfer of Personal Data to Third Countries (i.e., Standard Contractual Clauses) and any equivalent clauses issued by the relevant UK authorities.

D. Your Data Subject Rights

If you are a data subject under the General Data Protection Regulation (GDPR), you have the following rights, subject to certain conditions:

Access, correction, or deletion of any personal data about you that we process;

Data portability, meaning the ability to receive your personal data in a structured, commonly used, machine-readable format and to transfer such data to other third parties of your choice;

Restriction or objection to our processing of your personal data; and

Where applicable, you may withdraw your consent to any data processing at any time.

For more information on how to exercise your applicable legal rights, please see the section below entitled “How to Exercise Your Legal Rights Under GDPR, CCPA, or More Stricter U.S. Privacy Laws.”

  1. Other Disclosures for California Residents

All terms and phrases used in this section have the same meanings as those defined in the revised California Consumer Privacy Act and its enforcement regulations (collectively, the “CCPA”).

Under the CCPA, California residents have certain rights regarding the personal information we collect about them (as defined in the CCPA), which we will describe in more detail below.

Depending on how you interact with us, we are both a “business” and a “service provider” under the California Consumer Privacy Act (CCPA). This section applies only to personal information we collect as a business. If we fulfill orders for a merchant’s customers on behalf of the merchant, we are a service provider under the CCPA. Please read the merchant’s privacy policy for more information on how to exercise your rights under the CCPA. If you have any questions about how the merchant handles your personal information, please contact the merchant.

A. Payment Notifications

To learn more about the categories of personal information we collect from California residents, please see “Information Collected from Users and Merchants” above.

For more information about how we use these categories of personal information, please see “How We Use Your Data” above.

For more information about how we collect various types of personal information, please see “How We Collect Your Data” above and the Cookie Policy provided here.

To learn more about how we disclose categories of personal information and to which categories of third parties we disclose such information, please see “Categories of Personal Information Disclosed” and “Recipient Categories” below.

To learn how long we retain your information, please see the “Information Retention Period” section above.

B. Categories of Personal Information Disclosed and Recipient Categories

The following disclosures describe the categories of information we disclose to various information recipients. To learn more about which third parties we disclose information to, please see the “Sharing Personal Data with Third Parties” section above.

Service Providers. The types of data we share depend on the type of service provider. The following summary details the types of service providers and the relevant information shared:

Hosting and Online Services. We may disclose identifiers, devices and unique identifiers, and geolocation data.

Manufacturing Services. We may disclose identifiers, devices and unique identifiers, and geolocation data.

Email Service Providers. We may disclose identifiers, devices and unique identifiers, and geolocation data.

Payment Processors. We may disclose identifiers, devices and unique identifiers, and payment information.

Analysis and Digital Marketing Service Providers. We may disclose device unique identifiers and geolocation data.

Legal Counsel, Legal Process, and Protection. Upon such requests and/or demands, we may disclose any information identified in the “User and Merchant Information Collection,” provided that there is a reasonable justification for such disclosure and it does not violate any legal or contractual obligations.

Affiliates. We may disclose any information collected from user and merchant information to our affiliates as necessary to comply with data protection laws and for the legitimate interests of us and our affiliates, including appropriate business purposes.

Business Clients (i.e., Merchants). We may disclose personally identifiable information and business information.

In the event of a business transfer, we may disclose any information identified in the “Collected User and Merchant Information” for purposes related to the business transfer, provided that it is in the legitimate interests of us and our affiliates, including appropriate business purposes.

Assistance in Processing Requests. We may disclose or provide appropriate information identified in the “Collected User and Merchant Information” in accordance with the California Consumer Privacy Act (CCPA) to reasonably assist you in processing your request. For social network requests, categories of information shared include: identifiers, device and unique identifiers, geolocation data, and any applicable content related to the request. C. Your Legal Rights Under the California Consumer Privacy Act (CCPA)

If you are a California resident, our processing of certain personal information may be subject to the California Consumer Privacy Act (CCPA). Where the CCPPA applies, this section provides additional privacy disclosures and informs you of your important additional rights as a California resident. We will never discriminate against you for exercising your rights under the CCPPA, including by providing different levels or quality of services or refusing to provide you with goods or services when you exercise your rights under the CCPPA.

Right to Know. Under the California Consumer Privacy Act (CCPA), California residents have the right to request information from us regarding the collection, use, and disclosure of their personal information over the past twelve (12) months and to request the following information from us free of charge:

  1. The categories of personal information we collect about you;
  2. The categories of sources from which personal information was collected;
  3. The purpose for which your personal information was collected;
  4. To which categories of third parties we disclosed your personal information, and the categories of personal information disclosed (where applicable) and the purpose of disclosing your personal information;
  5. The specific personal information we collect about you.

You may submit two verifiable consumer requests every twelve (12) months to access your personal information.

Right of Access. You have the right to access the personal information we collect about you, pursuant to applicable law.

Right of Erasure Request. You also have the right to request that we erase your personal information, with certain exceptions, pursuant to the California Consumer Privacy Act (CCPA).

Right of Correction. You have the right to request that we correct or provide a means of correction, pursuant to the California Consumer Privacy Act (CCPA), with certain exceptions.

You have the right to opt out of selling or sharing your personal information. You can request that we not sell your personal information. However, please note that the definition of “sale” in the California Consumer Privacy Act (CCPA) is very broad and includes “the sale, rental, publication, disclosure, dissemination, provision, transfer, or otherwise (including orally, in writing, electronically, or otherwise) of California consumer personal information to other businesses or third parties for monetary or other consideration.” We use some services to help you serve interest-based advertising and may transfer personal information to business partners for their use. We may also provide personal information related to your business to merchants. Under the CCPA, these actions are considered a “sale.”

You can also opt out of browser-based sales by using opt-out preference signals, such as Global Privacy Controls (GPC) on your browser.

These rights may be limited in some cases. For more information on how to exercise your legal rights and what limitations may apply, see “How to Exercise Your Legal Rights Under GDPR, CCPA, or More Stricter U.S. Privacy Laws” below.

D. Notice of Disclosure for Business Purposes

For information on the categories of personal information we disclose for business purposes and the categories of third parties to whom we disclose such information, see the “How We Disclose Your Information?” section above. E.

Notice of Sale

We sell your personal information through certain third-party advertising partners and when we provide your personal information to merchants. We do not share your personal information. We do not knowingly sell or share the personal information of any California resident who is 16 years of age or younger.

F. Notice Regarding the Use of Sensitive Personal Information

We will not use the sensitive personal information of California residents for any purpose other than those permitted under the California Consumer Privacy Act (CCPA). Specifically, we will not use the sensitive personal information of California residents to infer the characteristics of California residents.

G. Notice Regarding Financial Incentives

We offer certain discount opportunities to users and merchants that may be considered “financial incentives” or “legitimate loyalty programs” (hereinafter referred to as “Programs”) under applicable data protection laws. Such Programs may include discounts or coupons that you receive upon registration, which typically requires you to provide your name and contact information (such as an email address), or to participate in surveys. We believe the value of your personal information relates to the value of the discounted products or services or other benefits you receive through the Program, less the costs we incur in providing such opportunities.

You can opt out of the Program at any time by contacting us through the designated methods specified in the applicable Program Rules. Please carefully read any applicable terms and conditions related to the Program.

  1. Supplemental Disclosures for Residents of Colorado, Connecticut, Delaware, Nevada, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents of the states to which these laws apply have specific rights regarding the data we collect about them, pursuant to state laws including the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Montana Consumer Data Privacy Act, the Oregon Consumer Privacy Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, and other similar laws that may be enacted in the future (collectively, the “Enhanced Privacy Acts”). This notice describes how we, as a “data controller,” collect, use, and share your personal data under the aforementioned Enhanced Privacy Acts, and your rights regarding your personal data, including sensitive personal data. For the purposes of this section, the meanings of “personal data” and “sensitive data” are the same as those defined in the various U.S. Enhanced Privacy Acts, but do not include information excluded in the general provisions of the respective U.S. Enhanced Privacy Acts. Generally, personal data refers to information that can be reasonably associated with an identifiable individual.

A. Payment Notifications

For information on the categories of personal information we collect about you and how we use that information, please see the “Collection of User and Merchant Information and How We Use Your Data” section above. For information on the categories of third parties with whom we may share your personal information, please see the “How We Share Personal Data with Third Parties” section above.

In addition, we may collect and/or use other types of information if U.S. privacy laws require that we give you notice and obtain your consent.

B. Your Rights Under More Stricter U.S. Privacy Laws

If you reside in a state that has an Enhanced U.S. Data Privacy Act, our processing of certain personal information may be subject to that state’s Enhanced U.S. Data Privacy Act. Where an Enhanced U.S. Data Privacy Act applies, this section provides additional privacy disclosures and informs you of important additional rights as a resident of that state. We will never discriminate against you because you exercise your rights under the Enhanced U.S. Data Privacy Act, including by providing different levels or quality of service or refusing to provide you with goods or services.

  1. How to Exercise Your Legal Rights Under GDPR, CCPA, or More Strict U.S. Privacy Laws

If you are a resident of a country subject to data protection laws, you can contact us to exercise your rights following these procedures:

A. Verification Requests

For some requests, we may require you to provide specific information to help us verify your identity and process your request. Depending on your request, we may ask you to provide your name, address, phone number, and account number (if any) related to your account or related purchase records, and may ask you to provide government-issued identification or date of birth. If we are unable to verify your identity, we may refuse your inquiry or deletion request.

B. Right to Know, Right to Access, and Right to Deletion Requests

C. Correction Requests

You can correct information related to your account through the following methods:

Account Settings: As described in “Your Choices When Using Our Services” above, you can access most of your personal information within the service by logging into your account.

D. Right to Opt Out of Sales, Profiling, and Context-Based Behavioral Advertising

The use of certain third-party vendors and their cookies or other tracking technologies for commercial purposes, profiling, or cross-platform behavioral advertising must allow users to opt out. However, as stated in this Privacy Policy, we will not sell or share your information with third parties for these purposes, and therefore we do not offer any opt-out option.

E. Portability Right

If you wish to receive your personal data in a machine-readable format, please contact us. We may provide instructions on how to access and download your personal data, or cooperate with you in accordance with applicable data protection laws to provide you with your personal data.

If applicable data protection laws do not grant you a data portability right, we may refuse your request.

F. Authorized Agent

Residents of California, Colorado, and Connecticut may designate an authorized agent to submit requests for access to or deletion of personal information on your behalf. Using an authorized agent must comply with the California Consumer Privacy Act (CCPA) and applicable U.S. privacy laws, including providing the authorized agent with a written, signed authorization allowing them to submit such requests. Please note that if the authorized agent fails to provide proof that they have been authorized by you, we may refuse their request. We are still required to verify your identity directly in accordance with applicable laws.

G. Responding to Requests as a CFO or Regulated Business

Upon receiving your request, we will review it, verify your identity, and process it within the timeframes required by applicable law. We strive to process all verified requests within 45 days, in accordance with the California Consumer Privacy Act (CCPA) and most stricter U.S. privacy laws, unless law requires us to respond more quickly. For example, if you reside in Europe, we will respond within 30 days as required by law. If necessary, we may request an extension (usually an additional 45 days) in accordance with applicable law, and will explain the reasons for the extension.

Please note that we may charge a reasonable fee for multiple requests made within the same 12-month period, as required by applicable law.

H. Responding to Requests as a Processor or Service Provider

If your personal data was processed by us on behalf of a merchant, and you wish to exercise any rights relating to that personal data, please contact that merchant directly. If you wish to make a request directly to us, please provide the name of the merchant on whose behalf your personal data we process. We will forward your request to the merchant and assist them in responding to your request to the extent permitted by applicable data protection laws.

  1. Third-Party Website Links

Our services may contain links to other websites or services. Please note that these links are provided solely for your convenience and that these websites and services may operate independently of us and have their own privacy policies, which we strongly encourage you to read carefully.

  1. Privacy Policy Changes

Any future changes we make to this Privacy Policy will be posted on this page. Therefore, we encourage you to check this page from time to time.

  1. Complaints

If you are a user who purchased services directly from us and believe that we have illegally processed your personal data, you have the right to file a complaint through the contact information below or with the data protection regulator in your region. However, we hope to have the opportunity to resolve your issue before you contact the data protection regulator, so we encourage you to contact us first.

If you are a customer of a merchant (an end user of our services), please raise your issue with the relevant merchant first.