As stated above, Boppy collects and processes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household (“personal information”) in connection with use of the Site and our services, and in connection with purchases of products and from third-party information providers and social media pages. We collect and process the categories of personal information specified above, and below. We also may use, share, or disclose these categories of personal information for one or more of the indicated business or commercial purposes.
Categories | Purpose(s) |
Identifiers (A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers) | · To fulfill or meet the reason you provided the information, such as fulfilling your orders and verifying your information. · To process your purchases, transactions, and payments. · To send administrative information to you, such as about your account or purchases or respond to your inquiries and requests for information. · To communicate with you about billing, orders, purchases, returns, services, promotions, campaigns, contests, sweepstakes, and accounts. · To inform you about our brand, products, promotions, events, or other promotional purposes, or to deliver desired content. · To improve your experience with our products and services, such as by personalizing your experience with us. · To allow you to participate in polls, sweepstakes, contests, and other promotions and to administer these activities. · To permit you to participate in social sharing. · To perform analytics, quality control, market research, and determine the effectiveness of our website and promotional campaigns. · To provide you with support, respond to your inquiries, investigate and address your concerns and monitoring and improve our responses. · To help maintain the safety, security, and integrity of our website, products and services, and properties. · To manage and operate our business, fulfill our legal obligations, and develop our website, products, and services. · To comply with applicable law and legal process. · To respond to requests from public and government authorities. · To detect, prevent, or investigate potential security incidents or fraud. · To facilitate the functionality of our website. · To enforce our terms and conditions. · As described to you when collecting your personal information. |
Categories listed in the California Customer Records statute (Your age, name, gender, address, telephone number, education, credit card number, debit card number, or any other financial information.) |
Commercial information (Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.) |
Internet or similar network activity (Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement) |
Inferences drawn from other personal information (Profile reflecting a person’s preferences) |
Household information (including due date, number of children, and age of children) |
- Right to Know About Personal Information Collected or Disclosed
You have the right to request that Boppy disclose to you: (1) the categories of your personal information collected; (2) the categories of sources from which your personal information was collected; (3) the categories of your personal information that were sold or disclosed for a business purpose, if any; (4) the categories of third parties to whom your personal information was sold, if any; (5) the business or commercial purpose for collecting and/or selling your personal information; and (6) the categories of third parties with whom we share your personal information. You also have the right to request to receive the specific pieces of your personal information collected by Boppy to the extent such information is maintained by, and available to, Boppy.
To submit a request, please go to https://www.boppy.com/pages/request-personal-data or call +1(888) 772-6779.
In order to verify you are the person about whom we collected personal information you must verify your identity by matching at least two pieces of Personal Information provided by you during your transactions or interactions with us with Personal Information maintained by us, that we have determined to be reliable.
However, if your request involves receiving specific pieces of Personal Information (rather than categories of Personal Information), we must first verify your identity by matching at least three pieces of Personal Information provided by you with Personal Information maintained by either the website operator/retailer or us. Then, you must provide a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.
We cannot respond to your request to provide any personal information if we cannot verify your identity using the information provided.
In the preceding 12 months, Boppy has not sold consumer personal information to third parties and will not sell such information. Boppy has disclosed the above categories of consumer personal information, which have been obtained directly from you, to Service Providers such as email, cloud, and e-commerce software providers, merchant processors, e-commerce web-hosting and operators, freight and shipping companies, website developers, and other third-party service providers, for a business purpose.
- Right to Request Deletion of Personal Information
You have the right to request that Boppy delete personal information that we collected from you and retained, subject to certain exceptions, including the ability to process and fulfill your orders, deliver desired content and services, and enter you into sweepstakes or other promotional programs, and to comply with our obligations under contract with third parties and/or our contract with you. For example, Boppy and/or our service providers may need to retain account and transactional information for up to six months after you make an order.
To submit a request, please go to https://www.boppy.com/pages/request-personal-data or call +1(888) 772-6779.
In order to process your request, you must first verify you are the person about whom we collected personal information. If your request relates to non-sensitive information, we can verify your identity by matching at least two data points provided by you with two data points already maintained by us or the third-party retailer with whom we contract with to provide services to you.
However, if your request involves sensitive personal information, we must first verify your identity by matching at least three pieces of Personal Information provided by you with Personal Information maintained by us that we have determined to be reliable. Then, you must provide a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.
III. Request Processing and Timing
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request or must delay fulfilling your request, if applicable, such as if an exception to the CCPA applies to your request.
Any disclosures we provide in response to data access and/or data portability requests will only cover the 12-month period preceding the receipt of your request. We will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, which in most cases will involve Adobe PDF and comma delineated data files. We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
- Right to Non-Discrimination for the Exercise of Privacy Rights
We will not discriminate against you for exercising any of your CCPA rights. This means that, unless permitted by the CCPA, your exercise of these rights will not result in Boppy: (1) denying you goods or services; (2) charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (3) providing you a different level or quality of goods or services; or (4) suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services. However, please note that we cannot process orders and deliver services if we have to delete certain of your information.
- Designating an Authorized Agent
You may use an authorized agent to submit a request to opt-out of the sale of personal information on your behalf if you provide the authorized agent written permission to do so.
If you use an authorized agent to submit a request for additional disclosures described in Section I or a request for deletion described in Section II, he or she must provide their name, email address, phone number, and written permission from you that includes your contact information. We will contact you using the information provided and verify your identity directly with us. We cannot respond to your request to provide additional disclosures or delete any personal information if we cannot verify your identity and the authorized agent’s authority to make the request on your behalf. Written permission is not required if the agent provides proof of power of attorney pursuant to Probate Code sections 4000 to 4465, or you are submitting the request on behalf of your minor child.