HIGHLIGHTS OF THIS NOTICE
- Merchants and Their Users – Most information we collected about merchants is business information, not personal information. We use any personal information collected to support and better understand our merchants and provide and improve our services. Why do we use it? We use personal information received from visitors and users of our online and mobile resources to communicate directly with them. SEE HERE
- Website / Support Service Users – We collect personal information you provide directly, such as your contact information, and information collected through cookies and similar tools. When do we share it? We share personal information when needed to fulfill our legal obligations and when our vendors, business partners, and affiliates need to perform the contracts we have with them. We use this to provide the website, support and better understand our users and provide and improve our services. We provide further detail about our sharing of personal information HERE. We do not sell or rent any personal information from any data subjects to third party data brokers or marketing companies.
- Employees/Contractors/Applicants – If you apply to collaborate with Order Protection, we use your personal information to consider hiring you. If we hire you, we will use your personal information in connection with your employment. A separate privacy notice may apply to employees. How do we protect your privacy? We’ve invested in a Security Program that addresses both technical and operational matters. Our program includes incident response and management and vendor oversight components. READ COMPONENTS HERE
APPLICATION OF THIS NOTICE
Your Privacy Choices and Rights
You do not have to provide personal information to enjoy most of the features of our online and mobile resources. Moreover, you can opt out of certain activities like newsletters and announcements. LEARN MORE HERE
WHAT THIS NOTICE COVERS
This notice applies to all personal information that we collect, use, disclose and store when you apply for a job with Order Protection or access our services. Our services include all aspects of Order Protection --Order Protection "the App” provides a luxury post-purchase experience "the Service" to merchants who use Shopify to power their stores. When you submit a claim, you acknowledge the information you provide to Order Protection will be subject to this notice, including any purchasing information that Order Protection obtains in relation to your purchase or purchase history in connection with your wallet. “Order Protection” includes any related companies anywhere in the world.
WHAT THIS NOTICE DOES NOT COVER
- Merchants: As mentioned above, we process personal information for others, including merchants. Please direct any complaints, questions or requests related to your personal information directly to those merchants. In the event you are not satisfied with how they respond, you may contact us directly, but we cannot guarantee we will be able to address it.
- Non-Personal Information: Information about your business, including your business contact information, is not typically personal information. Anonymized information is also not considered personal information for the purpose of this notice. We may anonymize any personal information in our custody, in which case it will cease to be personal information.
In some situations, we may rely on exemptions or other permitted conduct under applicable laws, including to collect, use or disclose or store personal information for purposes not described in this notice. We provide services to merchants in many jurisdictions and privacy practices may be adopted to address the specific privacy requirements of jurisdictions. If you are unsure if or how this notice applies to you, see the below section.
Contacting Our Privacy Office
If you have any questions about our privacy and data security policies, procedures and practices, including anything we say in this privacy statement, we encourage you to contact our Privacy Office.
LAWYERS ADDRESS HERE
This privacy statement explains how we address some of our legal obligations, and your legal rights, regarding personal information. This section defines some words and phrases that have specific meanings whenever you see them in this statement.
This privacy statement applies only to Order Protection. Whenever we refer to ‘Company,’ ‘we’, ‘us’, or ‘our’, in this privacy statement we mean solely Order Protection.
When we reference ‘this statement,’ ‘this privacy statement’ and ‘our statement’ we mean the Privacy and Data Security Statement you are reading now. The phrase ‘consumer customers’ means individuals who have:
Downloaded and use the Order Protection App; or made a purchase from one of our merchant-customers; and do not use the Order Protection App, but actively chose to obtain Order Protection-provided shipping protection services from a merchant; or automatically received Order Protection-provided shipping protection services as a no-cost benefit from a merchant. The phrase, ‘merchant-customer’ means a business entity that operates an ecommerce platform and to whom we provide the Order Protection merchant technologies and services under a separate contract.
Generally, we use the words ‘you’ and ‘your’ to mean you, the reader, an individual over the age of 18. [This age requirement is discussed in more detail later in this statement here.] Other places in this privacy statement may define the words ‘you’ and ‘your’ differently, and the more specific definitions of those sections apply where appropriate.
An ’affinity action’ is when you ‘follow’ us, ‘like’ us, or take a similar or analogous action on our external social media presence.
When we refer to ‘personal information’, we mean information that can be used to identify or easily be linked to you.
Changes to this Notice
Please note that we may update this notice from time to time to reflect changes in our privacy practices by providing you with notice of the changes. Notice includes but is not restricted to posting a link to the new notice, posting a new notice at orderprotection.com, or sending you a link to the new notice via contact information you have provided to us. Such changes will be effective with respect to your use of Order Protection’s services after Order Protection has given notice of the changes. Please review this notice periodically to see whether it has been updated. Any use of Order Protection’s service by you after we provide notice constitutes your acceptance of those changes.
Personal Information the App Collects
We collect personal information directly from the relevant individual, through your Shopify account, or using the following technologies: “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps. “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Much of the personal information we process is necessary to provide our services and meet our contractual obligations. In most other situations, we rely on our legitimate interest (which, in some countries, would be ‘implied consent’ or a legal exception to the consent requirement, such as where the processing is to prevent fraud). The specific purposes for which we process personal information include to:
- Communicate with you
- Track and process your purchases and report back to you as appropriate
- Administer, manage, test and improve our services
- Better understand the services, such as through reporting and analytics
- Deliver content and information to third parties including other merchants and their customers
- Market and advertise our services
- Fulfill any other purpose that would be reasonably apparent to the average person at the time of collection
How Do We Use Your Personal Information?
We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. While not stated as a purpose below, we may also use any personal information for: security purposes. Which in this case means to include, detect, prevent and investigate potential fraud. Where required or permitted by law. Additionally, we use this personal information to: Communicate with you and your customers only; optimize or improve the App; and provide you with information or advertising relating to our products or services. We may also request express consent to process your personal information in some circumstances, such as when you sign up as a merchant or a user for a merchant or when you visit our website. We may also de-personalize information, such as through anonymization or aggregation. We may use and disclose such information for any purpose, as it will no longer identify you or any other person.
Whom Do We Collect Personal Information From?
We collect personal information from four groups of data subjects:
- general visitors to, and users of, our online and mobile resources
- current members of our workforce and those who apply for posted jobs
- our third-party vendors and business partners and affiliates
- our consumer-customers and merchant-customers
What Personal Information Do We Collect?
The categories of information we collect from each group of data subjects and the ways in which we use it vary, depending on a few factors. The following paragraphs describe those categories and uses. Note that it’s possible for the same person to fall into more than one group. For instance, someone who works for us might also visit the Order Protection App.
Personal Information Collected from Merchant-Customers
Merchant-customers enter a contract with us which is separate from this statement and has its own terms and conditions for notice of collection and governing our overall confidentiality, data privacy, and data security obligations with respect to personal information about our merchant’s personnel we collect from them. As a result, those terms, and not this statement, apply to the personal information of merchants and their personnel.
Personal Information Collected from Consumer-Customers
When our shipping protection services are activated, whether through the Order Protection App, by choosing them on a merchant website or shopping cart, or by having a merchant provide them to you automatically as part of the benefits they offer, you become our consumer-consumer and we may collect from you, or receive from our merchant-customer the following:
- Your name and contact information, which may include your phone number
- Information about the products you purchased, including their value
- The shipping destination you requested, which may be your residential address
- Such other information about you or your order as may be reasonably necessary to provide, inform you about, and improve our tracking, discovery and protection services
- In addition, depending on how you set-up your access permissions within the Order Protection App and with your third-party mail provider and the rules those mail providers set for third party access, we may use certain technologies such as application programming interfaces to parse your email as it relates to your status as a consumer-customer.
Personal Information Collected from Our Workforce and Job Applicants
We collect and retain the types of professional or employment related personal information you would expect an employer to have about its existing and former workforce and new job applicants. We provide legally required notices of collection and describe our use and sharing of the personal information of our workforce and applicants in greater detail in confidential internal human resource manuals and documents accessible to members of our workforce, or by publication on the proprietary workforce/applicant portals and apps we operate. In some cases, such portals and apps may be operated by third parties who transfer the personal information to us. In those situations, the legal responsibility to provide notice usually rests with the third party.
Personal Information Collected from Vendors, Business Partners and Affiliates
Like all large corporate enterprises, we buy goods and services and attend industry events. In doing so, we interact with many existing and potential vendors and business partners and affiliates from whom we necessarily collect certain personal information in connection with our contractual and business relationships. This information is typically limited to minimum business contact information. We use and share personal information in connection with our contractual and business relationships. This information is typically limited to minimum business contact information. We use and share personal information collected from our vendors and business partners and affiliates to manage, administer, and perform under our contracts with them or share information about our products. We describe our use of vendor and business partner information in greater detail in our confidential contracts with those parties or on the internal vendor management portals we operate.
Personal Information Collected from Visitors and Users of our Online and Mobile Resources
If you visit and/or use our online and mobile resources, we collect, retain and share certain personal information about you. The remainder of this privacy statement applies entirely to such visitors and users of our online and mobile resources. Thus in the remainder of this section, the words ‘you’ and ‘your’ mean only that category of data subjects.
Generally we collect your personal information through automated/technical means and when you voluntarily provide it to us. By using our online and mobile resources, you are signifying to us that you agree with this section of our privacy statement and that we may use and disclose your information as described.
Voluntarily Submitted Information
If you choose to participate in or make use of certain activities and features available via our online and mobile applications, you will need to provide us with information about yourself. The types of personal information you will be submitting to us in those situations is almost always limited to basic identifiers such as your name, email address, mailing address and phone number. Here are some of the ways you voluntarily give us your personal information:
Emails–if you choose to send us an email from our ‘contact us’ link or a similar link, you will be giving us your email address and any other personal information that may be in your message or attached to it. The same is true if you send us a text message.
Creating Accounts–if we make an account creation feature available to the general public (that is, to visitors./users who are not customers or workforce members) you will be giving us at least your email address and potentially other identifiers. The same is true if you sign up to receive a newsletter or other informational or marketing material we publish.
Registering for Events–When you register for events, conferences or programs we may host (rather than outsource to a third-party event manager with its own privacy policies), you will be submitting the types of identifiers described above. If the event requires a fee, we may also ask you to submit a credit card or other financial information.
Social Media and Community Features–Some of our online and mobile resources may offer social media-like community features, letting users post messages and comments and/or upload images or other files and materials. If you choose to make use of these features, the information you post, including your name and any other information, will be in the public domain and not covered/protected by this statement.
If you prefer we do not receive the above-described personal information, please don’t submit it. This means you shouldn’t participate in the applicable activities or use the applicable features available from our online and mobile resources. Such participation and use are strictly your choice. By not participating, you may limit your ability to take full advantage of the online and mobile resources, but most of the content in our online and mobile resources will be available to you.
Automatically Collected Information
When you visit or use our online and mobile resources, basic information about your internet/electronic activity is automatically collected through your browser via tracking technologies, such as cookies. Cookies are small text files downloaded onto your computer or mobile device that allow us to collect your IP address and recognize your computer or mobile device and store some information about your preferences. Examples include:
- the type of browser and operating system you use.
- the date and time and length of your visit
- the pages visited, graphics viewed and any documents downloaded
- links to other sites you accessed from our online and mobile resources or used to navigate to our online and mobile resources
If you access our online and mobile resources from a phone or other mobile device, the mobile services provider may transmit to us certain information such as uniquely identifiable mobile device information. That in turn allows us to collect mobile numbers and associate them with the mobile device identification information. Some mobile phone service providers also operate systems that pinpoint that physical location of devices and we may receive this geolocation data as well.
When you use our online and mobile resources, we may allow third-party service providers to place their own cookies or similar technologies to engage in the same types of collection we describe above. For example, we use third-party web analytics services such as those offered by Google.
Sharing Your Personal Information
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
We do not sell your personal information to third parties (as ‘sell’ is defined in California law). A ‘sale’ would not include a situation where someone is buying all or part of our business (as is explained further below).
We share your personal information with our employees, contractors, consultants and other parties such as affiliates and third party companies that assist us in providing our services, including marketers, customer support and hosting services.
Will by Personal information leave the country?
We may disclose personal information to third parties both in and outside of your country, and as result, your personal information may be collected, used, disclosed or stored in another country, including Canada and in the United States of America. Laws relating to privacy vary between countries, and your personal information may be processed in a country with less stringent laws than the laws in your country. Personal information may be accessible to governments, courts or law enforcement, national security authorities or and regulatory agencies of these countries in accordance with applicable laws.
Exercising Your Rights to your Information
Depending on where you are located and subject to applicable laws, you may have the right to request to access, correct or erase your personal information, object to our processing of your personal information, requests restriction of your personal information on our control or withdraw or change your consent to information processed by Order Protection, so you may need to direct your request to the merchant with whom you have a relationship.
As a security measure, our Data Security Officer may request specific information from you in order to verify your identify prior to granting any requests. If we cannot respond to your request promptly or have to refuse the request, we will advise you of the reasons, subject to any legal restrictions. If you disagree with our determination, you may complain to us and we will reconsider. If you are not satisfied with our ultimate determination, you may contact your local data protection authority or privacy commissioner. In addition, the personal information may have been destroyed, erased or made anonymous in accordance with our record retention obligations and practices.
If you want to designate someone to exercise your rights on your behalf, please send your designation request using the email associated with your account. If you have one, or that you have otherwise provided to Order Protection. We are not otherwise able to verify your identity.
Where permitted by law, we may refuse or charge a fee for repeat, abusive or inappropriate requests.
Retaining Your Personal Information
We store personal information so long as necessary to fulfill the purposes for which the personal information was collected, to conduct our business operations and maintain an appropriate historical record of our relationship with you, or in order to comply with applicable laws, whichever is longer, after which time the personal information is destroyed or erased. We may, instead of destroying or erasing your personal information, make it anonymous such that it cannot be associated with or tracked back to you.
Securing Your Personal Information
We take steps to maintain physical, technical and procedural safeguards that are appropriate to the sensitivity of your personal information. These safeguards are intended to prevent your personal information from loss and unauthorized access, copying use modifications or disclosure. However the internet is not a secure environment and no computer system is perfectly secure. As such we cannot guarantee the security of personal information provided to us through electronic means: there is always a risk that your personal information may be accessed or used without authorization.
Behavioral Advertising As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by: Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
Your Rights If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
Data Retention When you place an order through the Site, we will maintain your Order Information for our records Unless and until you ask us to delete this information.
Contact Us For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at firstname.lastname@example.org or by mail using the details provided below:
8185 MANNIX DR.
Los Angeles, CA 90068