Privacy policy

PRIVACY POLICY

This Privacy Policy describes how Chilo Plunges collects, uses, and discloses your personal information when you visit, use our services, make a purchase from chiloplunges.com or otherwise communicate with us. For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

SECTION 1 - CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

SECTION 2 - HOW WE COLLECT YOUR PERSONAL INFORMATION

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use the information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations,

enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What personal information do we collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

Information we collect directly from you

Information that you directly submit to us through our Services may include:

1. Basic contact details including your name, address, phone number, and email.

2. Order information including your name, billing address, shipping address, payment

   confirmation, email address, and phone number.

3. Account information including your username, password, and security questions.

4. Shopping information including the items you view, put in your cart or add to your

   wishlist.

5. Customer support information including the information you choose to include in

   communications with us, for example, when sending a message through the Services.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

SECTION 3 - INFORMATION WE COLLECT THROUGH COOKIES

We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

SECTION 4 - INFORMATION WE OBTAIN FROM THIRD PARTIES

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

1. Companies who support our Site and Services, such as Shopify.

2. Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.

3. When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third Party Websites and Links.

SECTION 5 - HOW WE USE YOUR PERSONAL INFORMATION

We use personal information collected via our website for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.

We use the information we collect or receive for:

1. Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to you account,

purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and to enable you to post reviews;

2. Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites;

3. Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately;

4. Communicating with you. We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you; and

5. For any other legitimate purposes, with the consent of the user(s).

SECTION 6 - COOKIES

Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

SECTION 7 - HOW WE DISCLOSE PERSONAL INFORMATION

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

1. With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).

2. With business and marketing partners, including Shopify, to provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.

3. When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.

4. With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.

5. In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We have, in the past 12 months disclosed the following categories of personal information and sensitive personal information (denoted by *) about users for the purposes set out above in "How we Collect and Use your Personal Information" and "How we Disclose Personal Information":

We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

SECTION 8 - USER-GENERATED CONTENT

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user-generated content to any public area of the Services, this content will be public and accessible to anyone.

We do not control who will have access to the information that you choose to make available to others and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

SECTION 9 - THIRD-PARTY WEBSITES AND LINKS

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for

the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

WE HEREBY DISCLAIM LIABILITY FOR, ANY INFORMATION, MATERIALS, PRODUCTS, OR SERVICES POSTED OR OFFERED AT ANY OF THE THIRD-PARTY SITES LINKED TO THIS WEBSITE. BY CREATING A LINK TO A THIRD-PARTY WEBSITE, WE DO NOT ENDORSE OR RECOMMEND ANY PRODUCTS OR SERVICES OFFERED OR INFORMATION CONTAINED ON THAT WEBSITE, NOR ARE WE LIABLE FOR ANY FAILURE OF PRODUCTS OR SERVICES OFFERED OR ADVERTISED AT THOSE SITES. SUCH A THIRD PARTY MAY HAVE A PRIVACY POLICY DIFFERENT FROM THAT OF OURS AND THE THIRD-PARTY WEBSITE MAY PROVIDE LESS SECURITY THAN THIS SITE.

SECTION 10 - SECURITY AND RETENTION OF YOUR INFORMATION

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security”. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

SECTION 11 - YOUR DATA PROTECTION RIGHTS UNDER THE CALIFORNIA PRIVACY PROTECTION ACT (CalOPPA)

According to CalOPPA, we agree to the following:

1. Our Privacy Policy link includes the word “Privacy”, and can easily be found on the home page of our website;

2. users will be notified of any privacy policy changes on our Privacy Policy Page;

3. users are able to change their personal information by emailing us at the contact details

   mentioned in the “Contact Us” clause.

Our Policy on “Do Not Track” Signals:

We honor Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.

SECTION 12 - YOUR DATA PROTECTION RIGHTS UNDER CALIFORNIA PRIVACY RIGHTS ACT (CPRA).

“Shine the Light” and “Eraser” Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties' direct marketing purposes.

California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA): The CCPA, as amended by the CPRA, provides California residents and/or their authorized agents with specific rights regarding the collection and storage of their personal information.

Your Right to Know: California residents have the right to request that we disclose the following information to you about our collection and use of your personal information over the past twelve (12) months. We may ask you to provide certain information to identify yourself so that we may compare it with our records in order to verify your request. Upon verification, we will disclose to you:

• ●  The categories of personal information we have collected about you.

• ●  The categories of sources for the personal information we have collected about you.

• ●  The specific pieces of personal information we have collected about you.

• ●  Our business or commercial purpose is to collect.

• ●  The categories of third parties to whom we have sold or shared your personal information if any, and the categories of personal information that we have shared with each third-party recipient.

  Your Right to Opt-Out of Sale or Sharing of Personal Information: California residents have the right to opt-out of the sale of their personal information by submitting a request as directed on the homepage of our website or by contacting us using the information in the “Contact Us” section below. Please note that we do not knowingly sell the personal information of any individuals under the age of 18.

  Where we are sharing your personal information with third parties for the purposes of cross-context behavioural advertising or profiling, you may opt-out of such sharing at any time by submitting a request as directed on the homepage of our Website or by contacting us using the information in the “Contact Us” section below.

  Your Right to Limit Use of Sensitive Personal Information: California residents have the right to request that we limit our use of any sensitive personal information to those uses which are necessary to perform the Services or for other specifically-enumerated business purposes under the CCPA, as amended by the CPRA.

  Your Right to Delete: California residents have the right to request that we delete any of the personal information collected from you and retained by us, subject to certain exceptions. We may ask you to provide certain information to identify yourself so that we may compare it with our records in order to verify your request. Once your request is verified and we have determined that we are required to delete the requested personal information in accordance with the CCPA, we will delete, and direct our third-party service providers to delete, your personal information from their records. Your request to delete personal information that we have collected may be denied if we conclude it is necessary for us to retain such personal information under one or more of the exceptions listed in the CCPA.

Your Right to Correct: Under the CCPA, as amended by the CPRA, California residents have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes for which we are processing such personal information. We will use commercially reasonable efforts to correct such inaccurate personal information about you.

Non-Discrimination: You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

Verifying Your Request: Only you, or a person that you authorize to act on your behalf, may make a request related to your personal information. In the case of access and deletion, your request must be verifiable before we can fulfil such a request. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected personal information or a person authorized to act on your behalf. We will only use the personal information that you have provided in a verifiable request in order to verify your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive or manifestly unfounded. To exercise these rights, please contact us.

SECTION 13 - YOUR DATA PROTECTION RIGHTS UNDER THE LAWS OF OTHER STATES IN THE USA.

1. Nevada

a. If you are a resident of Nevada, you have some additional rights:

i. We do not sell your covered information, as defined under Chapter 603A of the Nevada Revised Statutes.

2. Virginia

a. If you are a resident of Virginia, you have some additional rights:

1. If we deny your rights request, you have the right to appeal that decision. We will provide you with the necessary information to submit an appeal at that time.

2. You have the right to opt out of targeted advertising.

3. You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

3. Colorado

a. If you are a resident of Colorado, you have some additional rights:

1. If we deny your rights request, you have the right to appeal that decision. We will provide you with the necessary information to submit an appeal at that time.

2. You have the right to opt out of targeted advertising.

3. You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

4. Connecticut

a. If you are a resident of Connecticut, you have some additional rights:

1. If we deny your rights request, you have the right to appeal that decision. We will provide you with the necessary information to submit an appeal at that time.

2. You have the right to opt out of targeted advertising.

3. You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

If you live in a state other than that mentioned above you will be entitled to all the rights outlined in the data protection laws specific to your state. If you need any assistance for the same you can contact us, and we will be very happy to guide you.

SECTION 14 - CHILDREN’S PRIVACY

In compliance with the Children Online Privacy Protection Act ("COPPA"), We do not knowingly collect personally identifiable information from children under thirteen (13) years of age without their parent’s and legal guardian's consent. If you become aware that a child has provided us with Personal Data without the parent’s and legal guardian's consent, please contact us. If we become aware that we have collected Personal Data from children, we take steps to remove that information from our servers.

SECTION 15 - PAYMENTS

We provide paid products and/or services within the Service. We don’t store or collect your payment details. We may use third-party services for payment processing (e.g. payment processors). In that case, the information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

SECTION 16 - COMPLAINTS

If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.

SECTION 17 - CONTACT

After reviewing the policy, if have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at chiloplunges@gmail.com.

Last Updated: March 5, 2024