Privacy policy
Privacy policy
1. Introduction
Last updated: October 1, 2024
This Privacy Policy describes how Amity Alexandra (“we”, “us”, or “our”) collects, uses, discloses, and safeguards your personal information when you visit, use our services, or make a purchase from amityalexandra.com (the “Site”) or otherwise interact with us (collectively, the “Services”). This Privacy Policy applies to all users of our Services, including customers, website visitors, and any other individuals whose information we collect.
This Privacy Policy is designed to comply with data protection laws and regulations applicable to our operations, including but not limited to the General Data Protection Regulation (GDPR) of the European Union, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other relevant data protection laws worldwide. We also recognize Global Privacy Control (GPC) signals, which allow you to opt out of the sale or sharing of your personal information via browser settings.
By accessing or using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of the Services immediately.
Definitions of “Sell” and “Share”
Under applicable data protection laws, including CCPA and CPRA, the terms “sell” and “share” are defined as follows:
● “Sell”: The exchange of personal information for monetary or other valuable consideration, including but not limited to providing your information to third-party advertisers or marketing partners.
● “Share”: Disclosing or making personal information available to a third party for cross-context behavioral advertising, even if no monetary exchange occurs. This includes using data collected from you to personalize advertisements on third-party websites.
We do not sell personal information in the traditional sense but may engage in activities that could be classified as “selling” or “sharing” under these definitions. This policy outlines how your data may be shared and provides information on your rights regarding such activities, including your right to opt out.
We encourage you to review this Privacy Policy regularly to stay informed about our practices. If you have any questions about how we handle your data, please contact us using the information provided in the “Contact” section of this Privacy Policy.
2. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, regulatory requirements, or for other operational, legal, or compliance reasons. When we make updates, the “Last Updated” date at the top of this Privacy Policy will be revised accordingly.
If we make significant changes to the way we collect, use, or disclose your personal information, we will take reasonable steps to notify you in advance of these changes. This may include prominently posting a notice on our Site, sending you an email, or providing notice through other appropriate means.
We encourage you to review this Privacy Policy periodically to stay informed about how your personal information is being protected. Your continued use of our Services after any modifications to this Privacy Policy indicates your acknowledgment of the changes and your consent to the updated terms.
If you do not agree with any modifications to this Privacy Policy, you should discontinue your use of our Services and contact us to close any account you may have created.
3. How We Collect and Use Your Personal Information
In order to provide our Services, we collect personal information from a variety of sources. The information we collect and how we use it depends on how you interact with Amity Alexandra and our Services. All personal information is collected and processed in compliance with applicable laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other relevant data protection laws.
Lawful Basis for Processing Personal Information
We collect and use your personal information based on the following lawful bases:
● Consent: Where you have provided explicit consent for activities like subscribing to our newsletter or agreeing to the use of cookies for personalized experiences.
● Performance of a Contract: When processing is necessary to fulfill our obligations to you, such as completing transactions, processing orders, or offering customer support.
● Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our Services, fraud prevention, or enhancing user experience, provided
that your rights and interests are not overridden.
● Compliance with Legal Obligations: When processing is required for us to comply with legal or regulatory requirements, such as maintaining transaction records for tax purposes.
Sensitive Personal Information
We collect sensitive personal information, such as payment details and geolocation data, only when necessary for providing the Services you have requested. Per the CPRA, you have the right to opt out. To opt out, please visit our Do Not Sell or Share My Personal Information page. Where required by applicable law, we will obtain your explicit consent before processing sensitive personal information, which you can withdraw at any time by contacting us using the information in the Contact section. Please note that withdrawing consent may affect your ability to use certain Services.
How We Collect Personal Information
We collect personal information about you from the following sources:
● Directly from You: When you provide information directly to us, such as when you make a purchase, create an account, subscribe to our newsletter, or contact our customer support team.
● Automatically When You Use Our Services: We collect information about your interactions with our Site and Services using cookies, pixels, and similar technologies. This information may include your IP address, browsing history, device type, and preference.
● From Third Parties: We may receive additional data about you from trusted third parties, such as service providers, marketing partners, and payment processors, to help enhance and improve our Services.
In addition to these uses, we may use your information to communicate with you, enforce our terms of service, and comply with legal obligations. Your data may also be used for targeted marketing, in compliance with data protection laws.
4. What Personal Information We Collect
The personal information we collect depends on how you interact with Amity Alexandra and our Site. “Personal information” refers to data that identifies, relates to, describes, or can be associated with you. Below, we outline the categories of personal information we collect, including specific examples and purposes.
Basic Contact Information
This includes your name, email address, postal address, and phone number. We use this information to process your orders, provide customer support, send service-related updates, and deliver marketing communications, provided you have opted in.
Account Information
Account information includes your username, password, and security questions and answers. We collect this to create and manage your account, enable access to specific features, and maintain the security of our Services.
Order Information
Order information includes details such as items purchased, order history, billing and shipping addresses, and tracking information. We use this data to process transactions, fulfill orders, arrange shipping, manage returns, and provide updates on your orders in accordance with our Store Policy.
Shopping Information
Shopping information includes items you have viewed, added to your cart or wishlist, and your shopping preferences. This helps us enhance your shopping experience, provide personalized product recommendations, and optimize our Services.
Customer Support Information
This includes your inquiries, feedback, and any other communication when you contact us. We use this to respond to your requests, resolve issues, and improve customer support services.
Usage Data
Usage data includes your IP address, device information, browser type, operating system, browsing behavior on our Site, and referral URLs. This information helps us understand how you use our Site, analyze trends, improve our Services, and ensure the security of our platform.
Marketing and Communication Preferences
This category includes your preferences for receiving marketing communications, such as emails and 5 SMS notifications. We use this data to manage your preferences, send you relevant offers, and keep you informed about products or services that may be of interest to you.
Sensitive Personal Information
Sensitive personal information is collected only when necessary to provide the Services you have requested or when required by law. This may include payment details, precise geolocation, and health-related data where applicable. Sensitive personal information is handled with enhanced security measures and used solely for the stated purposes.
Payment Information
This includes credit or debit card numbers, bank account details, and your billing address. We use this information to securely process payments, prevent fraud, and comply with legal obligations. Payment information is collected securely through our payment processors and is not stored on our servers, in line with our Store Policy. We employ industry-standard security measures to protect your financial data.
Authentication Information
Authentication information includes passwords, security questions, and other credentials used for account access. We use this information to verify your identity and maintain the security of your account. Please ensure you keep this information confidential, and contact us immediately if you suspect any unauthorized access.
Sensitive Personal Information Security and Consent
We handle all sensitive personal information with enhanced security measures and only use it for the purposes stated, in compliance with applicable laws such as GDPR and CPRA. Where required, we obtain your explicit consent to process this data, and you can withdraw your consent at any time by contacting us via the Contact section or by opting out here. Please note that withdrawing consent may affect your ability to use certain Services.
5. Information We Collect through Cookies
At Amity Alexandra, we use cookies and similar tracking technologies (collectively referred to as "Cookies") to collect information about how you interact with our Site and Services. Cookies are small text files stored on your device that help us enhance your browsing experience, understand user behavior, and provide personalized content. Below, we explain the types of Cookies we use, their purposes, and how you can manage your preferences.
Essential Cookies
These Cookies are necessary for the basic functioning of our Site. They enable you to use key features such as secure account access, shopping carts, and order processing. Without these Cookies, certain services cannot be provided. Examples include session identifiers, security tokens, and shopping cart data, all critical for seamless navigation and transactions on our platform.
Functional Cookies
Functional Cookies allow our Site to remember your preferences and choices, such as your language, region, or login information. These Cookies enhance your experience by providing improved functionality and personalized features. Examples include language settings, user interface customization, and saved login details.
Analytical/Performance Cookies
These Cookies collect information about how visitors use our Site, such as which pages are most frequently visited, error messages encountered, and overall site performance. We use this data to improve the functionality of our Site and gain insights into user behavior. Examples include Google Analytics and Shopify Analytics.
Advertising/Targeting Cookies
Advertising Cookies are used to deliver relevant ads based on your interests. They also help limit the number of times you see an ad and measure the effectiveness of advertising campaigns. These Cookies track your browsing activity across websites to build a profile of your interests. Examples include Facebook Pixel, Google Ads, and other third-party advertising networks.
Social Media Cookies
Social Media Cookies enable you to share content from our Site on social networks such as Facebook and Instagram. These Cookies may also track your activity across other websites and help build a profile of your interests. Examples include social media sharing buttons and embedded social media content.
Managing Your Cookie Preferences
You have the right to manage your Cookie preferences at any time. When you first visit our Site, you will see a Cookie consent banner that allows you to accept, reject, or customize your Cookie settings. You can change your preferences or withdraw consent at any time by accessing our Cookie settings tool.
Additionally, you can manage Cookies directly through your browser settings. Most browsers accept Cookies by default, but you can adjust these settings to remove or reject Cookies. However, please note that disabling certain Cookies may affect the functionality of our Site.
To learn more about how to manage Cookies on popular browsers, please visit:
● Google Chrome
● Mozilla Firefox
● Microsoft Edge
● Safari
For more detailed information about the Cookies we use and how we handle your personal information, please refer to our Cookie Policy.
6. Information We Obtain from Third Parties
In addition to the information you provide directly or that we collect through your use of our Site, we may also receive personal information about you from third parties. These partnerships help us operate our business, deliver our Services, and enhance your experience. Below, we detail the third parties from whom we collect information, the types of data we receive, and the safeguards these third parties implement to ensure compliance with data protection standards.
Payment Processors
We work with secure payment processors, such as Shopify Payments, PayPal, Affirm, ShopPay and Klarna, to facilitate transactions. These processors provide us with payment details including your credit or debit card information, billing addresses, transaction amounts, and payment statuses. We use this information to process payments, prevent fraud, and fulfill orders, in compliance with PCI DSS standards. Please note, Amity Alexandra does not store your full payment details on our servers; they are securely handled by our payment processors.
Analytics Providers
Analytics providers, such as Google Analytics and Shopify Analytics, collect anonymous usage data such as site visits, page views, time spent on our Site, and user interactions. We use this information to better understand how our visitors engage with our Site, improve our Services, and provide a more seamless experience. These providers adhere to GDPR and other relevant data protection laws, using anonymized or pseudonymized data wherever possible. You can opt out of Google Analytics by visiting their opt-out page.
Advertising and Marketing Partners
We collaborate with advertising and marketing platforms like Facebook, Google Ads, and Klaviyo to deliver targeted ads and promotions. These partners provide us with data such as advertising identifiers, engagement metrics (e.g., ad clicks and conversions), and customer preferences. This information allows us to measure campaign performance and deliver personalized promotions. Our partners comply with GDPR and CCPA, and offer opt-out mechanisms for targeted advertising, which you can manage through their respective platforms.
Social Media Platforms
Social media platforms, such as Facebook, Instagram, and Pinterest, share data such as social media identifiers, user interactions (e.g., likes, shares), and public profile information. This helps us enable social sharing features on our Site and personalize your experience. These platforms operate under their own privacy policies and comply with applicable data protection standards. We encourage you to review the privacy policies of these platforms directly for more information on how they handle your
data.
Customer Support and Service Providers
Our customer support providers, including Shopify Support, collect data such as customer inquiries, support tickets, and communication logs. This information helps us assist with customer inquiries, troubleshoot issues, and enhance our overall support services. These providers act according to our instructions and comply with applicable data protection laws, ensuring your information is handled securely.
Shipping and Fulfillment Partners
Shipping and fulfillment partners, such as USPS, FedEx, UPS, and DHL, collect information including your name, shipping address, contact details, and order information. This information is necessary to deliver products, provide shipping updates, and manage returns or exchanges. These partners are contractually bound to protect your data and comply with relevant data protection laws.
How Third Parties Comply with Data Protection Standards
We ensure that all third parties we collaborate with adhere to applicable data protection standards andhave agreements in place to safeguard your personal information. These partners may only use your data as instructed by us, and they are required to implement appropriate security measures to protect your data.
We carefully select our partners and regularly review their data protection practices to ensure compliance with GDPR, CCPA, and other relevant data protection laws. While working with these third parties, Amity Alexandra remains responsible for the security of your personal information.
If you have any questions regarding the third parties we work with or how your data is handled, please feel free to contact us using the information provided in the “Contact” section of this Privacy Policy.
7. How We Use Your Personal Information
At Amity Alexandra, we use your personal information to provide a personalized and seamless shopping experience. The way we process your information varies based on your interactions with our Site and Services, and we comply with applicable data protection laws such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and California Privacy Rights Act (CPRA). Below is an outline of how we use your information, the purpose of this processing, and the legal bases we rely on.
Providing Products and Services
We use your personal information to process payments, fulfill your orders, arrange shipping, and manage returns and exchanges. This processing is based on the performance of a contract with you, as well as our legitimate interest in ensuring the efficient delivery of our products and services, aligned with our Store Policy.
Managing Your Account
Your account information, such as your username, password, and preferences, is used to create, maintain, and manage your account, granting you access to personalized features. This processing is necessary for the performance of a contract with you and for our legitimate interest in securing your account and personalizing your experience.
Communicating with You We use your contact details to send service-related communications, respond to inquiries, and provide customer support. This includes sending notifications about your account or any policy changes. This processing is based on the performance of a contract and our legitimate interest in keeping you informed.
Marketing and Advertising
We use your information to send you marketing communications, display personalized ads on our Site, and tailor advertisements across other websites. We also measure the effectiveness of our marketing campaigns. This processing is based on your consent where required, and on our legitimate interest in promoting Amity Alexandra and aligning our marketing efforts with your preferences. You can opt out of marketing communications at any time by contacting us or adjusting your preferences.
Personalizing Your Experience.We use your preferences, browsing behavior, and purchase history to recommend products and improve your experience on our Site. This processing is based on your consent and our legitimate interest in providing relevant content and enhancing your overall shopping experience.
Security and Fraud Prevention
We use personal information to detect, investigate, and prevent fraud, illegal activities, or malicious behavior. This helps us ensure the safety of our Site and Services. The legal basis for this processing is our legitimate interest in protecting our business, customers, and compliance with legal obligations.
Compliance with Legal Obligations
Your personal information may be used to comply with tax, accounting, and other regulatory obligations, such as maintaining transaction records for reporting purposes. This processing is based on our legal obligation to comply with applicable laws.
Improving Our Services.We analyze your information to better understand user behavior, improve the performance of our Site, and develop new products and features. This processing is based on our legitimate interest in improving our business and ensuring customer satisfaction.
Automated Decision-Making and Profiling
We may use automated tools and profiling techniques to analyze your browsing behavior, purchase history, and engagement with marketing content. These processes help us personalize your experience, deliver targeted advertisements, and optimize our business operations. The legal basis for this processing is our legitimate interest in providing relevant products and services, and where necessary, your consent.
You have the right to object to any automated decision-making or profiling that significantly impacts you. If you wish to opt out or have questions about how we use these technologies, please contact us using the details provided in the “Contact” section of this Privacy Policy.
8. Cookies
Like many websites, Amity Alexandra uses cookies and similar technologies to enhance your browsing experience, provide personalized content, and analyze how you interact with our Site. Cookies are small text files placed on your device when you visit our Site, and they help us remember your actions and preferences, run analytics, and customize advertisements. Below, we outline your rights regarding cookies, how you can manage them, and provide links to our cookie management tools.
Your Rights Regarding Cookies
You have the right to manage your cookie preferences and withdraw consent for non-essential cookies at any time. Essential cookies, necessary for the basic operation of our Site, cannot be disabled through our cookie banner but can be controlled via your browser settings. These cookies ensure key functions like secure account access and shopping cart management.
How to Manage and Withdraw Consent for Cookies
1. Cookie Consent Banner: When you first visit our Site, you will see a banner that allows you to accept, reject, or customize your cookie preferences. You can adjust these settings anytime by revisiting your cookie settings.
2. Adjust Cookie Preferences: If you wish to change your settings at a later time, you can access the same tool here: Manage Cookie Settings. This tool allows you to modify your preferences or withdraw consent for specific types of cookies.
3. Browser Settings: You can manage cookies directly through your browser settings. Most browsers allow you to delete or block cookies, or alert you before a cookie is stored. Specific instructions depend on the browser you’re using:
○ Google Chrome
○ Mozilla Firefox
○ Microsoft Edge
○ Safari
4. Third-Party Opt-Out Tools: For advertising-related cookies, you can opt out through industry tools through the Digital Advertising Alliance or the Network Advertising Initiative.
Impact of Blocking Cookies
Please note that disabling or blocking certain cookies may affect your ability to use some features of our Site, such as saving items to your cart or accessing account details. Essential cookies cannot be disabled as they are necessary for providing the services you request.
For more information on how we use cookies and how they operate, please refer to our Cookie Policy.
If you have any questions about how we manage cookies or your preferences, feel free to contact us via the “Contact” section of this Privacy Policy.
9. How We Disclose Personal Information
We may disclose your personal information to third parties to support our operations, enhance your experience, and provide our Services. Below, we explain how and why we share your information and the steps we take to ensure compliance with applicable data protection laws, such as GDPR and CCPA.
Payment Processors
We work with secure payment processors, such as Shopify Payments, PayPal, Affirm, ShopPay and Klarna, to handle payment information, process transactions, verify payments, and prevent fraud. These providers comply with PCI DSS (Payment Card Industry Data Security Standard) to ensure your payment information is handled securely.
Cloud Storage Providers
We partner with cloud storage providers, including Amazon Web Services and Google Cloud, to securely store customer data, order information, and account settings. This ensures reliable data backup and availability, safeguarding your personal information with robust security protocols.
Shipping and Fulfillment Partners
Shipping providers such as USPS, FedEx, UPS, and DHL use your shipping information to deliver orders, provide tracking updates, and manage returns. These partners are contractually obligated to protect your personal information in compliance with relevant data protection laws.
Customer Support and Service Providers
We use service providers like Shopify Support to manage customer inquiries and improve our support services. They handle customer data, including support tickets and communication logs, under strict data protection measures.
Analytics and Performance Tools
We work with analytics providers like Google Analytics and Shopify Analytics to track website performance, user interactions, and gather insights to improve the user experience. These tools may collect data such as IP addresses and device information in compliance with GDPR and CCPA.
Advertising and Marketing Partners
Advertising platforms like Facebook, Google Ads, and Klaviyo help us deliver personalized advertisements and marketing campaigns. They use data like engagement metrics and browsing behavior to target ads more effectively. If you’ve opted in, these partners also help us send you marketing communications. Opt-out mechanisms are available as required by law.
Business and Marketing Partners
We collaborate with social media platforms and email marketing services to promote our products and engage with customers across various platforms. These partners are bound by confidentiality obligations and data protection laws.
Legal and Compliance
We may share your information with law enforcement, regulatory authorities, or legal advisors to comply with legal obligations or respond to subpoenas, court orders, or other legal processes. This ensures the protection of our rights and those of others.
Corporate Transactions In the event of a merger, acquisition, or sale of assets, your information may be shared as part of the transaction. All such sharing is subject to confidentiality agreements and applicable data protection laws.
Sharing of Personal Information for Targeted Advertising
We may share your personal information with advertising and marketing partners to deliver personalized advertisements and marketing content relevant to your interests. This may involve using data such as browsing history, purchase behavior, and engagement with our content to create targeted advertising campaigns. The legal basis for this sharing is our legitimate interests in marketing our products and services, and where required by law (e.g., GDPR), your consent.
You have the right to opt out of targeted advertising and data sharing for these purposes. To exercise this right, you can adjust your cookie settings on our Site, use opt-out tools provided by advertising platforms, or contact us directly.
Our Responsibility in Data Sharing
We share personal information only with trusted third parties who have committed to protecting your data in accordance with applicable laws. All third parties are required to maintain the confidentiality of your information and to use it only for the purposes we specify. We regularly review our data-sharing practices to ensure compliance and data security.
If you have any questions about how your information is shared, please contact us using the information provided in the “Contact” section of this Privacy Policy.
10. User Generated Content
Our Services may enable you to post, submit, or share content, such as product reviews, comments, images, or other user-generated content (“User Content”). By contributing User Content on our Site, you agree to the following terms regarding your responsibilities, our content policies, and the public nature of your submissions.
Your Responsibilities
● Accuracy and Legality: You are fully responsible for ensuring that any User Content you submit is accurate, lawful, and does not infringe on the rights of others. You must avoid submitting content that is defamatory, obscene, offensive, or otherwise violates any applicable laws or our Terms of Service.
● Personal Information: We strongly advise against including any personal information (e.g., names, addresses, or contact details) in User Content that you do not wish to be publicly visible. Any personal data included in such content will be accessible to anyone viewing the content.
● Compliance with Our Policies: All User Content must adhere to our content guidelines, including our Content Moderation Policy, which prohibits abusive, harmful, or discriminatory content. We reserve the right to review, moderate, edit, or remove User Content that does not meet our standards or is deemed inappropriate.
Public Nature of User Content
● Visibility: Any content you post on our Site will be publicly visible. This means that anyone browsing our Site or affiliated platforms may view, share, or engage with your content. Before posting, consider the public nature of your contribution and avoid sharing any sensitive or confidential information.
● Disclaimer: We do not control who will have access to the User Content you make available. While we strive to protect your privacy, we cannot ensure that third parties who access your content will respect your privacy or keep your information secure. By posting User Content, you assume the risks associated with its public display.
Rights Over User Content.
● License to Use: By submitting User Content, you grant us a non-exclusive, royalty-free, perpetual, worldwide license to use, reproduce, display, modify, distribute, and otherwise exploit the content in connection with our business, including marketing and promotional purposes. This license allows us to feature your content on our Site, social media platforms, and other marketing channels.
● Removal of Content: We reserve the right to remove or disable any User Content at our discretion, particularly if it violates our policies or the rights of others. If you wish to request the removal of your content, please contact us, but note that we may not be able to remove content already shared across other platforms.
If you believe your User Content has been misused or shared without your consent, or if you wish to report content that violates our policies, please contact us using the information provided in the “Contact” section of this Privacy Policy.
11. Third Party Websites and Links
Our Site may contain links to third-party websites or platforms, including social media platforms, payment processors, and other service providers. These third-party websites are not operated by us, and we are not responsible for their content, privacy practices, or data handling procedures.
Impact on Your Data Privacy
● Independent Privacy Policies: When you click on a link to a third-party website, you will be directed to a site that operates independently from ours. These third-party sites may collect, use, and share your personal information differently from us. We encourage you to review the privacy policies, terms of service, and data handling practices of any third-party website you visit.
● Data Collection by Third Parties: Third-party websites may collect data about your
interactions, such as browsing behavior, purchase history, and contact details. The data
collection practices of these sites are governed by their respective privacy policies, not ours. We have no control over how these third parties collect, store, or use your data.
Disclaimer of Liability
● No Control Over Third-Party Practices: We do not control and are not responsible for the privacy, security, or content practices of any third-party websites linked from our Site. Any interactions you have with these third-party websites, including providing them with personal data, are solely between you and the third party.
● No Endorsement: The inclusion of a link to a third-party website does not imply that we endorse or sponsor that website or its content. We do not make any representations about the accuracy, relevance, or quality of information on third-party websites.
● Liability Waiver: We are not liable for any losses, damages, or privacy concerns that arise from your use of third-party websites. By accessing these third-party links, you acknowledge that you do so at your own risk.
If you have questions about how a third party handles your data or believe a third-party website linked from our Site has violated your privacy rights, please contact the third party directly. For further assistance, feel free to contact us using the information provided in the “Contact” section of this Privacy Policy.
12. Children’s Data
Our Services are not intended for use by children under the age of 13, and we do not knowingly collect or solicit personal information from children under this age. We are fully committed to complying with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws that safeguard children's privacy.
Age Threshold and Data Collection
● Age Restriction: Our Site and Services are designed for individuals who are at least 13 years old. If you are under the age of 13, please refrain from using our Site, providing any personal information, or interacting with our Services.
● No Intentional Collection: We do not knowingly collect, use, or disclose personal information from children under 13. If we become aware that personal information from a child under this age has been inadvertently collected, we will take immediate action to delete the data from our records.
Handling Accidental Collection of Children’s Data
● Accidental Collection: If we discover that a child under 13 has provided us with personal information, we will promptly delete such data and ensure that it is not used for any purpose.
● Parental Rights: If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately using the details provided in the “Contact” section of this Privacy Policy. We will work with you to review, delete, or prevent further collection of your child’s information, and ensure that your child's privacy is fully protected.
● Verification of Parental Consent: If it is ever necessary to collect personal information from a child under 13, we will first seek verifiable parental consent, as required by COPPA. This process may involve direct contact with the parent or guardian to ensure compliance.
Additional Measures for Children Aged 13 to 16
Our Services are primarily intended for individuals aged 16 and older. We encourage parents and guardians to monitor the online activities of children aged 13 to 16. If you have concerns regarding your child's use of our Services, or if you would like to learn more about how we handle personal information in compliance with applicable laws, please reach out to us.
We are committed to protecting the privacy of all our users, especially children, and ensuring that any data collected is handled with care and in accordance with applicable legal requirements.
13. Security and Retention of Your Information
At Amity Alexandra, we take the security of your personal information very seriously. We have implemented a variety of technical, administrative, and physical safeguards to protect your data from unauthorized access, loss, misuse, or alteration. These measures ensure that your data is managed with the highest standards of privacy and security.
Security Measures in Place
● Data Encryption: We employ industry-standard encryption protocols, such as SSL/TLS, to protect your personal data when it is transmitted between your device and our servers. This encryption ensures that sensitive information, such as payment details, remains secure during online transactions.
● Secure Access Controls: Access to personal information is restricted to authorized personnel who require it for their work. We utilize robust access controls, including password protection, two-factor authentication, and role-based permissions, to safeguard sensitive data.
● Regular Security Audits: Our systems undergo regular security audits, vulnerability assessments, and are continually updated with the latest security patches to protect against emerging threats.
● Data Anonymization and Pseudonymization: Where feasible, we anonymize or
pseudonymize personal data to mitigate risks associated with data processing activities.
● Data Breach Response: In the event of a data breach that poses a risk to your rights or freedoms, we have procedures in place to notify both you and relevant regulatory authorities, as required by law.
Retention of Your Information
We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Retention Periods by Data Category:
● Account Information: We retain account-related information, such as your name, contact details, and account credentials, for as long as your account is active. After account closure, we retain this information for a reasonable period in case you choose to reactivate your account.
● Order Information: Information related to orders, including billing and shipping details, is retained for up to seven years to comply with legal, accounting, and tax regulations.
● Customer Support Communications: Communications with our customer support team are retained for up to three years after your last interaction unless a longer retention period is required to resolve any ongoing issues.
● Marketing and Advertising Data: We retain marketing data, including email subscriptions and advertising preferences, until you opt-out or withdraw your consent.
● Usage Data: Usage data collected through cookies and other technologies is retained for up to two years unless you delete the cookies from your device or adjust your preferences.
● Legal and Compliance Data: Information retained for legal or regulatory purposes, such as records of consent or data processing agreements, is kept as long as necessary to fulfill our legal obligations.
Criteria for Data Retention
We determine retention periods based on several factors, including the nature of the data, legal requirements, and the purposes for which it was collected. When personal information is no longer needed, we ensure that it is securely deleted, anonymized, or otherwise disposed of in accordance with our data retention policies.
For questions regarding our security practices or data retention policies, please contact us using the information provided in the “Contact” section of this Privacy Policy.
14. Your Rights and Choices
Depending on where you reside, you may be entitled to certain rights concerning your personal information. These rights, while not absolute, are designed to give you more control over how your data is collected, used, and shared. The scope of these rights may vary depending on laws such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), or other relevant privacy regulations. Below, we outline your rights and how to exercise them.
Right to Access / Know
You have the right to request access to the personal information we hold about you, including details on how your data is being processed, shared, and stored. To make this request, please contact us via the details in the “Contact” section of this Privacy Policy. We will verify your identity and respond within the timeframe required by applicable law.
Right to Deletion
You have the right to request that we delete the personal information we hold about you, with certain exceptions (such as compliance with legal obligations). If you wish to have your data deleted, contact us directly, and we will assess your request. We will confirm when your data has been removed or provide an explanation if it cannot be deleted due to specific exceptions.
Right to Correction
If the personal information we have on file is incorrect or incomplete, you may request corrections or updates. Simply contact us with the details that need to be updated, and we will amend our records accordingly to ensure accuracy.
Right of Portability
You are entitled to receive a copy of the personal information you provided to us in a structured, commonly used, and machine-readable format. You may also request that we transfer your data to another organization, where technically feasible. Contact us if you wish to exercise this right, and we will provide the information as requested.
Right to Opt-Out of Sale or Sharing of Personal Information (CCPA-specific)
Under the CCPA, you have the right to opt out of the sale or sharing of your personal information with third parties for targeted advertising or other purposes. You can do this by using the “Do Not Sell or Share My Personal Information” link on our Site or by adjusting your settings in our cookie management tool. You may also contact us directly for assistance in processing your request.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal information under certain circumstances, such as when you contest the accuracy of the data. To exercise this right, contact us with your request, specifying which data processing activities you wish to restrict.
Right to Withdraw Consent
If we process your data based on your consent (e.g., for marketing communications), you can withdraw your consent at any time. This can be done by updating your preferences in your account settings, using the “unsubscribe” link in our emails, or contacting us directly. Please note that withdrawing consent may impact the services we provide to you.
Right to Appeal
If we deny your request to exercise any of your rights, you have the right to appeal our decision. You can do so by replying to our original response or contacting us again, clearly stating that you wish to appeal. We will review your case and respond within the legally required timeframe.
Verifying Your Identity
To ensure your privacy and protect against unauthorized access, we may ask for specific information to verify your identity before processing your request. This could include confirming your email address, order number, or other relevant details. We will use this information solely for the purpose of verifying your identity and processing your request.
Non-Discrimination
We respect your privacy rights and will not discriminate against you for exercising them. This means that your access to our services, pricing, or overall experience will not be impacted if you choose to exercise any of your privacy rights.
If you have any questions or wish to exercise any of these rights, please contact us using the details provided in the “Contact” section of this Privacy Policy..
15. Complaints
At Amity Alexandra, we are committed to addressing any concerns you may have regarding how your personal information is handled. We strive to resolve complaints promptly and fairly in compliance with applicable privacy regulations. If you have any concerns or complaints about our data practices, please contact us directly using the information provided in the “Contact” section of this Privacy Policy.
How to File a Complaint with Us
● Initial Complaint: If you believe that your privacy rights have been violated or that we have mishandled your personal data, you can file a complaint directly with us. Please reach out with specific details of your concern, and we will investigate the issue thoroughly and respond within the timeframe required by law.
● Appeals Process: If you are not satisfied with our response to your complaint, you have the right to appeal the decision. To initiate an appeal, reply to our initial response or contact us again with a clear statement of your intent to appeal. We will review the appeal and provide a final response.
Filing a Complaint with a Regulatory Body
If you feel that we are not handling your complaint appropriately or believe that we are processing your data unlawfully, you may file a formal complaint with a regulatory body. Here are some key contacts for various regions:
● United States:
○ Federal Trade Commission (FTC): If you are in the United States, you can file a complaint with the FTC regarding privacy or data protection issues.
○ Contact: www.ftc.gov | Phone: 1-877-FTC-HELP (1-877-382-4357)
● United Kingdom:
○Information Commissioner’s Office (ICO): If you are in the UK, you can file a complaint with the ICO about how your personal data is being handled.
○ Contact: www.ico.org.uk | Phone: +44 303 123 1113
● European Union:
○ Local Data Protection Authority (DPA): If you are located in the EU, you have the right to file a complaint with your local Data Protection Authority. You can find your local DPA’s contact information on the European Data Protection Board (EDPB) website.
○ Contact: https://edpb.europa.eu
● Canada:
○ Office of the Privacy Commissioner of Canada (OPC): If you are in Canada, you can lodge a complaint with the OPC regarding data protection concerns.
○ Contact: www.priv.gc.ca | Phone: 1-800-282-1376
Further Assistance
If you need further help filing a complaint or would like additional information about your rights, feel free to reach out to us using the contact details provided in the “Contact” section of this Privacy Policy. We are dedicated to ensuring that your privacy concerns are addressed promptly and professionally.
16. International Users
At Amity Alexandra, we operate on a global scale, which may require the transfer, storage, and processing of your personal information outside your home country, including in the United States and other regions where our trusted service providers operate. Please note that the data protection laws in these countries may differ from those in your country of residence. Rest assured, we are committed to ensuring that your personal data is safeguarded no matter where it is processed.
Data Transfer Mechanisms
To ensure your data remains protected when transferred internationally, we adhere to several legal mechanisms, compliant with applicable data protection regulations, such as the General Data Protection Regulation (GDPR). Below are the safeguards we rely on:
● Standard Contractual Clauses (SCCs):
For transfers outside the European Economic Area (EEA), we use Standard Contractual Clauses (SCCs) approved by the European Commission. These contractual agreements ensure that any personal data transferred is treated with the same level of protection as it would be within the EU. You can request a copy of our SCCs by contacting us through the details in the “Contact” section.
● Adequacy Decisions:
In some cases, we may transfer your personal information to countries that the European Commission has deemed to offer adequate protection. This means those countries provide a level of protection for personal data similar to that of the EEA.
● Binding Corporate Rules (BCRs):
Where appropriate, we may work with service providers who implement Binding Corporate Rules (BCRs)—a set of internal rules approved by European data protection authorities to ensure strong data protection throughout their global operations.
● Other Appropriate Safeguards:
Where necessary, we may rely on other recognized data transfer mechanisms, such as codes of conduct or certification mechanisms approved under relevant data protection laws.
How We Protect Your Data During International Transfers
To secure your personal information during international transfers, we implement various measures, including:
● Encryption: Data is encrypted while being transferred to prevent unauthorized access.
● Access Controls: We limit access to personal information to only those authorized personnel and service providers who need it to perform their roles.
● Data Minimization: We ensure that only the minimum amount of personal data necessary is transferred across borders.
● Regular Audits: We routinely audit our international data transfer practices to ensure compliance with applicable laws and best practices.
Your Rights Regarding International Data Transfers
If you have any questions about how your data is transferred or wish to learn more about the safeguards in place, you have the right to request access to the specific mechanisms used to protect your data. For more details, please reach out to us using the contact information in the “Contact” section of this Privacy Policy.
We are committed to protecting your privacy and ensuring that your data is handled with the utmost care, no matter where it is processed. If you have concerns or questions regarding our international data transfers, please don't hesitate to get in touch with us.
17. Contact
If you have any questions or concerns about how we handle your personal information or would like to exercise your rights as outlined in this Privacy Policy, we encourage you to reach out to us. We are here to provide clarity on how your data is collected, used, and protected, and to address any inquiries you may have regarding your privacy rights.
Contact Information
● Email: For privacy-related inquiries, please email us at support@amityalexandrajewelry.com.
We aim to respond within 30 days or sooner where legally required.
● Postal Address: You can also reach us by mail at:
Amity Alexandra
3158 Hourglass Place, Broomfield, CO 80023
United States
● Phone Number: If you prefer to speak with us directly, please call us at 720.515.7643 during our business hours to discuss any concerns you may have.
Additional Support
If you need further assistance in understanding your data privacy rights or have any unresolved concerns, feel free to reach out. We value your privacy and are dedicated to addressing your concerns promptly and respectfully.