Crafty, LLC Privacy Policy

LAST MODIFIED: December 14, 2021

Crafty, LLC (”Company” or “we”) respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you visit the website craftydelivers.com (our “Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

On this Website.
In email, text, and other electronic messages between you and this Website.
Through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website.
When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries).
Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from, or on, the Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Information We Collect About You and How We Collect It

To ensure that we provide you with the best possible experience, we will store, use, and share personal information about you in accordance with this policy. Personal information is information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular user, household or device (“Personal Information”). In particular, the Website has collected the following categories of Personal Information from users of the Website within the last 12 months:

Category	Examples	Collected
Identifiers.	A real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or account name.	YES
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, address, telephone number, employment history, driver’s license number, credit card number, debit card number, or any other financial information.	YES
Commercial information.	Records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies.	YES
Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES
Professional or employment-related information.	Current or past job history or performance evaluations.	YES

Please note that any credit card information collected by our Website is processed and stored by a PCI-DSS compliant third-party processor, such as authorize.net. The Company does not process, retain, or store any credit card information.

We obtain the categories of Personal Information listed above from the following categories of sources:

Directly from you. For example, when you:
- register yourself with the Website;
- place an online order;
- subscribe to one of our e-newsletters;
- review or comment on one of our products;
- receive a shipment and furnish your driver’s license;
- submit a job application; or
- communicate with us, such as request information.
Indirectly from you. For example, through information we collect from you in the course of providing our services to you.
Directly and indirectly from activity on our Website. For example, from website usage details that are collected automatically.

You also may provide information to be published or displayed (hereinafter, “posted”) on public areas of the Website, or transmitted to other users of the Website or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we limit access to certain pages you may set certain privacy settings for such information by logging into your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Website with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to our Website, including traffic data, location data, logs, purchase history, purchase email history, delivery location history, click tracking, and other communication data and the resources that you access and use on the Website.
Information about your computer and internet connection, including your IP address, operating system, and browser type.

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). This information is then used to select which advertisement should be displayed to a particular individual via the Website (behavioral or targeted advertising). If you would like to opt out of targeted advertising that occurs when using the Website, please contact us at privacy@craftydelivers.com.

The information we collect automatically is statistical data and does not include Personal Information, but we may maintain it or associate it with Personal Information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Website per your individual interests.
Speed up your searches.
Recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
Flash Cookies. Certain features of our Website may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies.
Web Beacons. Pages of our the Website (and our emails) may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

We do not collect Personal Information automatically, but we may tie this information to Personal Information about you that we collect from other sources or you provide to us.

Third-party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any Personal Information:

To present our Website and its contents to you.
To diagnose Website problems.
To provide you with information, products, or services that you request from us.
To provide you with a personalized profile of your shopping history.
To notify you about new services or special promotional programs, or send you offers or information.
To serve you the correct application version depending on your device type and for troubleshooting.
To improve the Website for business and administrative purposes.
To fulfill any other purpose for which you provide it.
To provide you with notices about your account/subscription.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about changes to our Website or any products or services we offer or provide though it.
To send service-related announcements.
To provide customer service including sending a welcoming email to the address you provide at registration to verify your username and password, communication in response to your inquiries, and to manage your account.
To allow you to participate in interactive features on our Website.
To allow you to view any promotion we may currently be running.
If Crafty’s service is not available in your geographic location, you will have the option to provide us with your email address and zip code so that we may notify you when the Service becomes available in your geographic location. If you choose to provide us with this information, we will use it solely for this notification purpose.
In any other way we may describe when you provide the information.
For any other purpose with your consent.

We may also use your information to contact you about (our own and third-parties’) goods and services that may be of interest to you. If you do not want us to use your information in this way, please contact us at privacy@craftydelivers.com.

We may use the information we have collected from you to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your Personal Information for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

Disclosure of Your Information

We do not sell or lease your Personal Information to any third party. We may share your Personal Information by disclosing it to a third party for a business purpose. When we disclose your Personal Information, we enter into a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except for the purposes set forth in the contract.

In the preceding 12 months, we have disclosed the following categories of Personal Information for one or more business purposes:

Identifiers;
Personal Information categories listed in Cal. Civ. Code § 1798.80(e));
Commercial information;
Internet or other network activity information; and
Professional or employment-related information.

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction to third parties for industry analysis, and to deliver targeted advertising about other products and services. This information does not identify individual users by name, email, or other contact information.

We may disclose Personal Information that we collect or you provide as described in this privacy policy:

To our subsidiaries and affiliates.
To contractors, service providers, and other third parties we use to support our business, provide service on our behalf, provide customer support, tap technician services, delivery services, perform Website-related services (e.g. without limitation maintenance services, database management, web analytics and improvement of the Website’s features), or to assist us in analyzing how our Website and service are used. These third parties, such as Shopify and HubSpot are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Crafty, LLC’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by Crafty, LLC about our Website users is among the assets transferred.
To third parties to market their products or services to you if you have not opted out of these disclosures. We contractually require these third parties to keep Personal Information confidential and use it only for the purposes for which we disclose it to them.
To fulfill the purpose for which you provide it. For example, if you give us an email address to use the invitation referral feature of our Website, we will transmit the contents of that email and your email address to the recipients.
For any other purpose disclosed by us when you provide the information.
With your consent.
To process payments and credit card transactions. All payments and credit card transactions are processed through the authorize.net gateway. Any information that you provide a third-party payment processor is governed by such payment processor’s separate privacy policy.

We may also disclose your Personal Information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our terms of use and other agreements, including for billing and collection purposes.

If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Crafty, LLC, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.Persons Under the Age of 21

Our Website is not intended for use by anyone under 21 years of age. No one under age 21 may provide any Personal Information to, or on, the Website. We do not knowingly collect Personal Information from individuals under 21. If you are under 21, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Information from a person under 21, we will delete that information. If you believe we might have any information from or about a person under 21, please contact us at privacy@craftydelivers.com.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the Personal Information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
Disclosure of Your Information for Third-Party Advertising. If you do not want us to share your Personal Information with unaffiliated or non-agent third parties for promotional purposes, you can opt out by contacting us at privacy@craftydelivers.com.
Promotional Offers from the Company. If you do not wish to have your email address/contact information used by the Company to promote our own or third-parties’ products or services, you can opt out by contacting us at privacy@craftydelivers.com. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions. This opt out does not apply to information provided to the Company as a result of a product purchase, warranty registration, product service experience or other transactions.
Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt out by contacting us at privacy@craftydelivers.com.
We do not control third-parties’ collection or use of your information to serve interest-based advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (”NAI”) on the NAI’s website.

Accessing and Correcting Your Information

You can review and change your Personal Information and/or preferences by logging into the Website and visiting the user information page.

You may also send us an email at privacy@craftydellivers.com to request access to, correct or delete any Personal Information that you have provided to us. We cannot delete your Personal Information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Your California Rights

Shine the Light law. Pursuant to California Civil Code Section 1798.83, we will not disclose or share your Personal Information with third parties for the purposes of third-party marketing to you without your prior consent.

Do Not Track Signals. Other than as disclosed in this policy, the Website does not track users over time and across third-party websites to provide targeted advertising. Therefore, the Website does not operate any differently when it receives Do Not Track (“DNT”) signals from your internet web browser.

WE DO NOT SELL YOUR PERSONAL INFORMATION. If we ever decide to sell Personal Information, we will update you via this policy and include a link entitled “Do Not Sell My Personal Information,” to provide you with an opportunity to opt out of sales of your Personal Information.

California Consumer Rights. If you are a California consumer, as defined by the California Consumer Privacy Act of 2018, you may be afforded additional rights with respect to your “Personal Information” as that term is explicitly defined under California law. Any Personal Information we collect is collected for the commercial purpose of effectively providing our services to you, as well as enabling you to learn more about, and benefit from, our services. You may exercise each of your rights as identified below, subject to our verification of your identity.

Access. You have the right to request that we disclose certain information to you about our collection, use and disclosure of your Personal Information over the past 12 months. Any disclosures we provide will only cover the 12 month period preceding the receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Prohibit Data Sharing. When applicable, you may prohibit the sharing of your Personal Information. In your request, please explain how you wish us to prohibit the sharing of your Personal Information, and which categories of third parties you want to prohibit from receiving your Personal Information. When such prohibitions are not possible to provide our services to you, we will advise you accordingly. You can then choose to exercise any other rights under this policy.
Portability. Upon request and when possible, we can provide you with copies of your Personal Information. When such a request cannot be honored, we will advise you accordingly. You can then choose to exercise any other rights under this policy
Deletion. You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. Where applicable, we will ensure such changes are shared with trusted third parties.
Non-Discrimination. If a California data subject exercises his or her rights under California law, including the CCPA, we shall not discriminate against that California resident by denying our goods or services, charging different prices or rates to similarly situated consumers, providing a different level or quality of our goods or services, or taking any other adverse action.
Exercising your rights. If you are a California resident who chooses to exercise the rights listed above, you can:

Submit a request via email at privacy@craftydelivers.com.

Only you, or someone legally authorized to act on your behalf, may make a request related to your Personal Information. If an authorized agent makes a request on your behalf, we may require proof that you gave the agent permission to submit the request.

Responding to Your Request. Upon receiving your request, we will confirm receipt of your request by sending you an email confirming receipt. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the Personal Information. In some instances, such as a request to delete Personal Information, we may first separately confirm that you would like for us to in fact delete your Personal Information before acting on your request.

We will respond to your request within 45 days. If we require more time, we will inform you of the reason and extension period in writing.

In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, listed below, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request. We may deny your deletion request if retaining the information is necessary for us or our service providers to:

Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.

Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

For Website Users or Visitors Outside of the United States

We do not warrant or represent this policy or the Website’s use of your Personal Information complies with the laws of any particular jurisdiction. Furthermore, to provide you with our services, we may store, process, and transmit information in the United States and other locations around the world, including countries that may not have the same privacy and security laws as yours. Regardless of the country in which such information is stored, we will process your Personal Information in accordance with this policy.

For Website Visitors in the European Union (“EU”)

Under the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, or “GDPR”), individuals in the EU are afforded specific rights with respect to their Personal Information, or “personal data” as defined under the GDPR. For the purposes of this Policy, the Company operates as a data controller. Any personal data we collect from you is processed in the United States and under the terms of this Policy.

Any personal data we collect from you is processed in the legitimate interest of our business and providing our services to you as the lawful means of such processing. You may always withdraw your consent to our use of your personal data as described below. We will only retain your personal data for the time necessary to provide you the information and services to which you have consented, to comply with the law and in accordance with your rights below.

The Data Controller is:

NAME: Crafty LLC

ADDRESS: 917 W. Washington Blvd., Suite 229, Chicago, Illinois, 60607

EMAIL ADDRESS: privacy@craftydelivers.com

You can exercise any of the following rights, subject to verification of your identity, by notifying us as described below:

Access. You may email us at privacy@craftydelivers.com to request a copy of the personal data our Website databases currently contain.

Automated Processing and Decision-Making. You may email us at privacy@craftydelivers.com to request that we stop using your personal data for automated processing, such as profiling. In your email, please explain how you wish us to restrict automated processing of your personal data. When such restrictions are not possible, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent to the processing of your personal data.
Correction or Rectification. You can correct what personal data our Website database currently contains by accessing your account directly, or by emailing us at privacy@craftydelivers.com to request that we correct or rectify any personal data that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause information to be incorrect. Where applicable, we will ensure such changes are shared with trusted third parties.
Restrict Processing. When applicable, you may restrict the processing of your personal data by submitting a request via email to privacy@craftydelivers.com. In your email, please explain how you wish us to restrict processing of your personal data. When such restrictions are not possible, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent to the processing of your personal data. Where applicable, we will ensure such changes are shared with trusted third parties.
Object to Processing. When applicable, you have the right to object to the processing of your personal data by submitting a request via email to privacy@craftydelivers.com. When such objections are not possible, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent to the processing of your personal data. Where applicable, we will ensure such changes are shared with trusted third parties.
Portability. Upon request and when possible, we can provide you with copies of your personal data. You may submit a request via email to privacy@craftydelivers.com. When such a request cannot be honored, we will advise you accordingly. You can then choose to exercise any other rights under this Policy, to include withdrawing your consent. Where applicable, we will ensure such changes are shared with any trusted third parties.
Withdraw Consent. At any time, you may withdraw your consent to our processing of your personal data through this Website by notifying us via email at privacy@craftydelivers.com. Using the same email address associated with your Website account, simply type the words “WITHDRAW CONSENT” in the subject line of your email. Upon receipt of such a withdrawal of consent, we will confirm receipt and proceed to stop processing your personal data. Where applicable, we will ensure such changes are shared with trusted third parties.
Erasure. If you should wish to cease use of our Website and have your personal data deleted from our Website, then you may submit a request by emailing us at privacy@craftydelivers.com. Upon receipt of such a request for erasure, we will confirm receipt and will confirm once your personal data has been deleted. Where applicable, we will ensure such changes are shared with trusted third parties.
Submit Complaints or Questions. If you wish to raise a complaint on how we have handled your personal data, you can contact us as described below. If you reside in a European Union member state, you may also lodge a complaint with the supervisory authority in your country.

Third-party Websites

This policy does not apply to websites or other domains that are maintained or operated by third parties or our affiliates. Our Website may link to third-party websites and services such as Workstream, Authorize.net, and social media sites like LinkedIn, Instagram, Facebook, Twitter, and YouTube, but these links are not endorsements of these sites, and this policy does not extend to them. Because this policy is not enforced on these third-party websites, we encourage you to read any posted privacy policy of the third-party website before using the service or site and providing any information.

Data Security

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. Any payment transactions are processed through the authorize.net gateway, which may be changed at any time without notice. Any information that you provide a third-party payment processor is governed by such payment processor’s separate privacy policy.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ Personal Information, we will notify you through email (sent to the email address specified on your account) or a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

privacy@craftydelivers.com