Privacy and Security

IMPORTANT NOTE

By accessing or using the Services, you expressly consent to our collection, use, and disclosure of your personal information in accordance with the terms and conditions of this Privacy Policy.

What is Personal Information?

Personal information is any information that identifies or relates to an identifiable natural person. This includes information such as name, mailing address, email address, and telephone number. Personal information does not include aggregated or anonymized data.

We collect several types of information from and about users of our Services:

• Contact information (such as name, email address, mailing address, phone number)
• Account credentials
• Payment information when you make purchases (which is processed by a third-party payment processor)
• Product reviews and feedback
• Communications with us
• Job application information (if you apply for a job with us)

When you access and use the Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Shopping cart contents
• Cookies and similar tracking technologies

• Essential cookies for website functionality
• Analytics cookies (including Google Analytics)
• Advertising cookies (including from Google Adwords and Meta)

• Google Analytics: https://www.google.com/intl/en/analytics/learn/privacy.html
• Facebook: https://www.facebook.com/policies/cookies/

We use your personal information for the following business purposes:

• Processing and fulfilling your orders
• Managing your account
• Providing customer service
• Sending promotional communications (if you've opted in)
• Improving our Services
• Analyzing website usage and trends
• Personalizing your shopping experience
• Protecting against fraud and unauthorized transactions
• Complying with legal obligations

In each case, we will only use your personal information to the extent: (i) we have your consent to use such information for a given purpose; (ii) it is necessary to perform a contract between you and us; (iii) it is necessary to comply with a legal obligation; and/or (iv) it is necessary for the purpose of our or a third party’s legitimate business interests (provided that such interests are not in conflict with your rights under applicable law).

We do not sell or rent your personal information to third parties for monetary or other valuable consideration and have not done so in the prior twelve (12) months. We disclose personal information in the following situations:

We disclose personal information to our third parties that enable us to provide our Services to you, including:

• Payment processors
• Shipping and fulfillment partners
• Marketing and advertising partners
• Analytics providers
• Website hosting and maintenance providers
• Customer service providers

We may disclose your personal information if we have a legal obligation to do so, including if needed to:

• Comply with applicable law.
• Respond to or cooperate with requests from governmental entities or law enforcement.
• Enforce this Privacy Policy or any other contract between you and us.
• Protect the rights, property, or safety of us, our users (including customers), or the public.

We work with advertising partners who may use cookies and similar technologies to deliver relevant advertisements. These partners include Google, Criteo, Oracle, and Facebook. While we do not sell your personal information, these partners may collect certain information about your browsing behavior to deliver personalized advertising.

If we merge with or are sold to another entity, or if we undergo a bankruptcy proceeding (each a “Transaction”), then we may disclose your personal information to the acquiring entity and its advisors. While we will use commercially reasonable efforts to ensure that such acquiring entity treats such personal information in accordance with this Privacy Policy at the time of the Transaction, we make no guarantees as to whether such entity will treat your information in accordance with this Privacy Policy, and we therefore disclaim any liability arising out of such entity’s failure to do so.

We implement appropriate technical and organizational security measures to protect your personal information, including SSL encryption for all transactions. However, no method of transmission over the Internet is 100% secure. Also, please note that the Services may contain links to other websites that are not maintained or controlled by us. We are not responsible for the privacy practices (if any) of such other websites, and you are encouraged to review their privacy policies (if any). The fact that a link to a third-party website exists on the Services does not mean that the third-party site operates under the same or similar privacy practices as set forth in this Privacy Policy. The policies and procedures we describe here do not apply to third-party websites. If you access a third party website using a link, then you do so at your own risk. You acknowledge that your access of any links to social media features on the Services is governed by the terms of use and privacy policies of the companies providing such social media features.

We retain personal information for as long as necessary for the purposes that such information was obtained. We consider the following criteria when determining retention periods:

• Duration of our relationship with you
• Legal requirements
• Potential legal claims or positions

California Residents

If you are a California resident, you have specific rights under California privacy laws, including the California Consumers Privacy Act, as amended by the California Privacy Rights Act (collectively, the “California Privacy Laws”):

• Right to Know: You can request information about the personal information we've collected about you in the past 12 months, including categories of information, sources, purposes, and disclosures.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions. Under these exceptions, the right to delete does not apply when the personal information at issue is necessary for us or an applicable third party to do any of the following:
• provide Services to you
• perform a contract between you and us
• protect your security and enforce your rights regarding the same
• protect your or others’ free speech rights
• comply with the California Electronic Communications Privacy Act
• engage in public or peer-reviewed scientific, historical, or statistical research in the public interests that adheres to all other applicable ethics and privacy laws
• comply with a legal obligation, or
• make other lawful uses of the personal information, to the extent such uses are compatible with the purposes or context to which such information was provided.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out: While we do not sell or share personal information, you have the right to opt-out if we begin doing so.
• Right to Data Portability: You can request your personal information in a portable format.
• Right to Request a Record of Third-Party Direct Marketing Disclosures: Also known as the “Shine the Light” law, this permits you to request and obtain from us a list of what personal information we disclosed to third parties for direct marketing purposes in the preceding 12 months and the names and addresses of those third parties. This request may be made no more than one time per calendar year.

To exercise these rights, please contact us at privacy@luckyscent.com or call our toll-free number at 866 931-8297. We will verify your identity before processing your request. Please see our California Privacy Addendum below for more information.

We do not knowingly collect personal information from individuals under 16 years of age. If you are under 18, please do not provide any personal information through our Services.

We may update this Privacy Policy from time to time. We will endeavor to notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" above. However, regularly reviewing this page is the best method to ensure you are always aware of the information we collect, how it is used and under what circumstances.

For questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: privacy@luckyscent.com
• Address: 1212 Chestnut St. Burbank CA 91506

California Privacy Addendum

This California Privacy Addendum is provided solely to California residents and households that use the Services:

In the last 12 months, we have collected:

• Identifiers: name, email address, postal address, IP address, account name
• Customer Records Information: payment information, phone number
• Commercial Information: purchase history, product interests
• Internet Activity: browsing history, search history, website interaction
• Geolocation Data: IP-based location data
• Inferences: preferences, characteristics, behavior, attitudes

• Professional or employment-related information: employment history
• Education information subject to the Federal Educational Rights and Privacy Act: education history and other information included in a resume or cover letter
• Other information collected in the case of California job applicants: job interview notes, responses to screening questions, assessment results, and any other information you provide in connection with a job application

We collect certain sensitive personal information (such as account credentials and payment card data) but do not use it for purposes of inferring characteristics about consumers. We only use such information for completing transactions and providing our services. If you are a California job applicant, we may also collect sensitive personal information (such as social security number or other state identification number) to verify your identity. Please also note that we do not directly collect payment card data, as it is processed through a third-party payment processor, such as Authorize.net (for online sales) and Clover or Stripe (for in-store sales).

We use and disclose personal information as described in Sections 2 and 3 of this Privacy Policy. We do not sell personal information or share it for cross-context behavioral advertising. We also do not use personal information for automated decision-making purposes.

• Type of information
• Business need
• Legal requirements
• Industry standards

California residents can exercise their privacy rights as described in Section 6 above. We will not discriminate against you for exercising these rights. To exercise any such rights, please submit a verifiable consumer request to privacy@luckyscent.com or by calling the following toll-free number: 866 931-8297. We will verify and respond to your request, taking into account the type and sensitivity of the personal information subject to your request. To protect you (and to protect against fraudulent requests), we may request additional information to verify your identity, including your name, mailing address, and email. You may use an agent to submit a request. However, we may need to request that such agent provide evidence that such agent is indeed authorized by you. Moreover, even if an agent submits a request on your behalf, you may still be required to provide us with information that verifies your identity, as described above.

We strive to respond to each verifiable consumer request within 45 days of receiving such request. If we are unable to meet this timeline, we will inform you in writing.

If you are a California job applicant, please see the below notice:

NOTICE TO CALIFORNIA JOB APPLICANTS AND EMPLOYEES

Under California Privacy Laws, we are required to provide the following notice, which applies to California residents who apply for employment with us. For purposes of this notice, “employees” also includes contractors and interns.

Note: This notice is supplemental to our Privacy Policy, including our California Privacy Addendum. If you provide us with HR Data (as defined below), the California rights outlined in the Privacy Policy, as well as the disclaimers regrading sensitive personal information, minors, sale and sharing of data, and automated decision-making outlined in the Privacy Policy and California Privacy Addendum, also apply to such HR Data.

What personal information do we collect from job applicants and employees? From job applicants and employees that are California residents, we plan to collect, and have collected, used and disclosed in the 12 months preceding the effective date of this Privacy Policy, the categories of data outlined in Section A of our California Privacy Addendum (and, in particular, the categories described in items 7, 8, and 9 therein). This data is collectively called “HR Data.”

From what sources do we collect HR Data?

• To process and manage your job application. We use HR Data to evaluate you and your qualifications. We may collect photographs of you for identification purposes during the application process, and, with your consent, we may record video of your interview.
• To conduct screening and background checks. To the extent permitted under applicable law, we may conduct a background check and/or other employee screening check on you. These checks require HR Data, including some sensitive personal information such as social security number.
• To apply for a visa or work permit. In some cases, where you need to obtain a visa or work permit, we use HR Data to assist you in doing so.
• To manage and terminate your employment. If you become an employee, we use HR Data (including HR Data provided in the pre-employment stage) to manage and terminate your employment, including managing any of your associated compensation, benefits, insurance, and taxes. We also may use HR Data to evaluate your ongoing performance at our organization.
• To comply with legal or regulatory requirements. We keep records of HR Data as required by applicable law. In other cases, we may be required by law or legal order to retain or use HR Data, such as to detect, prevent, or investigate security incidents, fraud, or other illegal activities, or to protect the rights, property, and safety of us or others.
• Improve our recruiting process and employment practices. We use HR Data to understand and improve our recruiting process, as well as the practices we have with respect to current employees.

How do we use HR Data?

We use HR Data for the following business purposes:
• To process and manage your job application. We use HR Data to evaluate you and your qualifications. We may collect photographs of you for identification purposes during the application process, and, with your consent, we may record video of your interview.
• To conduct screening and background checks. To the extent permitted under applicable law, we may conduct a background check and/or other employee screening check on you. These checks require HR Data, including some sensitive personal information such as social security number.
• To apply for a visa or work permit. In some cases, where you need to obtain a visa or work permit, we use HR Data to assist you in doing so.
• To manage and terminate your employment. If you become an employee, we use HR Data (including HR Data provided in the pre-employment stage) to manage and terminate your employment, including managing any of your associated compensation, benefits, insurance, and taxes. We also may use HR Data to evaluate your ongoing performance at our organization.
• To comply with legal or regulatory requirements. We keep records of HR Data as required by applicable law. In other cases, we may be required by law or legal order to retain or use HR Data, such as to detect, prevent, or investigate security incidents, fraud, or other illegal activities, or to protect the rights, property, and safety of us or others.
• Improve our recruiting process and employment practices. We use HR Data to understand and improve our recruiting process,

How do we disclose HR Data?

We disclose HR Data for the business purposes described above in this notice, both internally within our organization, as well as externally as follows:

• To service providers. We disclose HR Data to service providers that operate and assist in our recruiting process, including recruiting firms, technology providers, security and fraud consultants, analytics providers, screening and background check providers, and other providers of hiring management tools used by us. For current employees, we disclose HR Data to service providers that assist us in the management and administration of standard human resources functions such as payroll, benefits, insurance, and taxes. We also disclose HR Data to IT service providers as part of administering and maintaining our organization’s IT infrastructure, networks, and security (including servicing IT support requests generated by us or by you).
• To governmental authorities and law enforcement. We disclose HR Data as required under applicable law, including to any required state or federal tax authorities. We also may disclose HR Data if we receive a request to do so by a governmental authorities or law enforcement. We also may disclose HR Data if required to do so to detect, prevent, or investigate security incidents, fraud, or other illegal activities, or to protect the rights, property, and safety of us or others. This may include enforcing a contract or resolving a dispute.
• Transaction. If we undergo a Transaction, we may disclose HR Data pursuant to the section of our Privacy Policy governing Transactions.
• Professional Advisors. We disclose HR Data to our professional advisors, including our accountants, consultants, and insurance providers.