Privacy policy
Last updated: [03.02.2026]
This Privacy Policy operates by the Rookline brand and website (“we”, “us”, or “our”). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use our services, or make a purchase from rookline.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy. This Privacy Policy is a part of and is incorporated into our Terms and Conditions.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.
How We Collect and Use Your Personal Information
To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us. However, the personal information that we collect generally falls into three categories: (1) information you voluntarily provide to us; (2) information we collect from you automatically; and (3) information we collect from third parties.
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
What Personal Information We Collect
The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.
Information We Collect Directly from You
Information that you directly submit to us through our Services may include:
Basic contact details including your name, address, phone number, email.
Order information including your name, billing address, shipping address, payment confirmation, truncated credit card information, email address, phone number.
Account information including your username, password, security questions.
Shopping information including the items you view, put in your cart or add to your wishlist.
GPS signals and location-related information
Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services.
Information you've shared with us or our partners through device settings like GPS, location, camera access or photos.
Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.
Information We Collect through Cookies
We also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, using online tracking technologies such as pixels web beacons, software developer kits, third-party libraries, and cookies in addition to device characteristics, device signals, identifiers that tell your device from others, device software, browser information, information about your network connection, your IP address, metadata and other information regarding your interaction with the Services.
Information We Obtain from Third Parties
Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as: Facebook/Instagram
Companies who support our Site and Services, such as Shopify.
Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.
When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information including, but not limited to, device characteristics, device signals, identifiers that tell your device from others, device software, browser information, information about your network connection, your IP address, metadata and other information regarding your interaction with the Services, usage of online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third Party Websites and Links.
How We Use Your Personal Information
Providing Products and Services. We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfill your orders, to send notifications to you related to you account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and to enable you to post reviews.
Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites.
Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately. We are committed to protecting the information we collect, but you acknowledge that no method of safeguarding is one hundred percent (100%) secure.
Communicating with you. We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.
Cookies
Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.
Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
With business and marketing partners, including Shopify, Facebook and Instagram, to provide services and advertise to you. We use Shopify, Facebook and Instagram to support personalized advertising with third-party services. Our business and marketing partners will use your information in accordance with their own privacy notices.
When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations, with your consent.
With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
We have, in the past 12 months disclosed the following categories of personal information and sensitive personal information (denoted by applicable privacy laws) about users for the purposes set out above in "How we Collect and Use your Personal Information" and "How we Disclose Personal Information":
Category
Categories of Recipients
Identifiers such as basic contact details and certain order and account information
Commercial information such as order information, shopping information and customer support information
Internet or other similar network activity, such as Usage Data
Vendors and third parties who perform services on our behalf (such as Internet service providers, payment processors, fulfillment partners, customer support partners and data analytics providers)
Business and marketing partners. including but not limited to Shopify, Facebook and Instagram
Affiliates
We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.
We have “sold” and “shared” (as those terms are defined in applicable law) personal information over the preceding 12 months for the purpose of engaging in advertising and marketing activities, as follows.
Category of Personal Information Categories of Recipients
Identifiers such as basic contact details
and certain order and account information Business and marketing partners
Commercial information such as records of products or services purchased and
shopping information Business and marketing partners
Internet or other similar network activity,
such as Usage Data Business and marketing partners
User Generated Content
The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.
We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.
Third Party Websites and Links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Children’s Data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.
As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 18 years of age. If we become aware that we have inadvertently received personal information from a visitor under the age of 18, we will delete the information from our records.
Security and Retention of Your Information
We maintain administrative, technical, and physical safeguards designed to protect designed to protect the personal information you provide to us against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use and other unlawful forms of processing. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
Right to Access / Know. You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
Right to Delete. You may have a right to request that we delete personal information we maintain about you.
Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
Right to Object to Automatic Decision-Making. You may have the right not to be subject to a decision that is based solely on automated processing (where a decision is taken about you using an electronic system without human involvement) which significantly impacts your rights. No decision will be made by us about you solely on the basis of automated decision making which has a significant impact on you.
Right to Opt Out of Sale. You may have the right to opt-out of sale of your personal information. We generally do not sell your personal information for profit, but like many websites, we use cookies, pixels, and similar technology, and we share personal information, such as your IP address or device identifiers, to certain third-party advertisers in order to improve your user experience and to optimize our marketing activities. Under the broad definition of “sell” contained in certain jurisdictions’ privacy laws, this could be considered a sale.
Right to Opt out of Sale or Sharing or Targeted Advertising. You may have a right to direct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. Please note that if you visit our Site with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out of the "sale" or "sharing" of information for the device and browser that you use to visit the Site.
Right to Limit and/or Opt out of Use and Disclosure of Sensitive Personal Information. You may have a right to direct us to limit our use and/or disclosure of sensitive personal information to only what is necessary to perform the Services or provide the goods reasonably expected by an average individual.
Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.
Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.
You have the right not to be discriminated against for exercising any rights described in this section. We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, You may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
Right to Obtain Third-Party List. You may have the right to request a list of specific third parties to which we have disclosed personal information.
We use Shopify's ad services such as Shopify Audiences and Meta Audiences to help personalize the advertising you see on third party websites. To restrict Shopify merchants and Meta Audiences that use these ad services from using your personal information for such services, visit https://privacy.shopify.com/en and https://facebook.com/privacy/policy.
Complaints
If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority.
California Privacy Rights
If you are a California resident, you have additional rights in connection with our use of your personal information collected through the Site. This notice is Under California law, including the California Consumer Privacy Act (“CCPA”), and Cal. Civ. Code 1798.100, et seq. If you are a California resident, you may request certain data regarding our disclosure, if any, of your personal information to third parties for the third parties’ direct marketing purposes. To make such a request, please send an e-mail message to our e-mail address below with “Request for California Privacy Information” in the subject line. You may make such a request up to two (2) times per 12-month period. If applicable, we will provide you, by e-mail, a list of the categories of personal information disclosed to third parties for their direct marketing purposes during the immediately preceding 12-month period, along with the third parties’ names and addresses. Please note that for purposes of this section, “personal information” has the meaning given to it by the CCPA but does not include certain de-identified or aggregated information, or certain other information excluded from the scope of the CCPA.
Access to Your Personal Information
You have the right to request a copy of the personal information we collect about you, the source of the personal information and to whom it was disclosed, which we will provide back to you in electronic form. For your own privacy and security, and as required by law, we will ask you to sufficiently prove your identity before providing you with the requested information. We will only use personal information provided in such a request to verify the request’s identity or authority to make the request.
Deletion of Your Personal Information
You have the right to request that we delete personal information that we process about you, except when no obligation applies, including, for example, if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
Do Not “Sell”
You have the right to opt out of the “sale” of your personal information.
We may partner with advertising companies that use cookies, web beacons and other similar tools to collect information about you and your usage of and behavior on the Site and use that information to deliver targeted advertisements and tailored promotions to you.
We, or our Authorized Partners, may additionally use this information to help better understand how visitors use websites and/or mobile applications across their various devices. This information is stored and used in an aggregated and anonymous format that does not include personally identifiable information, but the sharing of such information between us and our affiliates or Authorized Partners in this manner may be viewed as a “sale” of such information by certain applicable laws. If you wish to opt out of the disclosure of your information for these purposes please contact us at the address provided in the section headed Contact Us below.
We will not discriminate against you for exercising any of your rights described herein.
Nevada Privacy Rights
Nevada residents have the right to request that we do not sell your Personal Information at any time in the future. If you are a Nevada resident and wish to exercise this right, please email us with your request that we do not sell your Personal Information at the email address provided in section headed Contact Us below.
Colorado Privacy Rights
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, including the following:
To comply with legal obligations
To comply with an official investigation or cooperate with law-enforcement agencies
To establish or defend legal claims
To complete an obligation to you that you have requested
To respond to security incidents, fraud, harassment, and other similar activity
To identify and repair technical errors
To conduct internal research to develop, improve, and repair our products and services
For internal operations that are reasonably aligned with your expectations
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
You have the right to opt-out of any selling of your personal data, processing of your personal data for purposes of targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects for you.
You may exercise your right to opt-out.
Authorized Agents. You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, please e-mail us at the e-mail address listed in the Contact Us section below and put "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General’s Office.
International Users
Connecticut Privacy Rights
This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, including the following:
To comply with legal obligations
To comply with an official investigation or cooperate with law-enforcement agencies
To establish or defend legal claims
To complete an obligation to you that you have requested
To respond to security incidents, fraud, harassment, and other similar activity
To identify and repair technical errors
To conduct internal research to develop, improve, and repair our products and services
For internal operations that are reasonably aligned with your expectations
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
You have the right to opt-out of any selling of your personal data, processing of your personal data for purposes of targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects for you.
You may exercise your right to opt-out.
Authorized Agents. You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, please e-mail us at the e-mail address listed in the Contact Us section below and put "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.
Utah Privacy Rights
This section provides additional information for Utah residents under the Utah Consumer Privacy Act (UTCPA). The terms used in this section have the same meaning as in the UTCPA. This section does not apply to information that is not considered "personal data," such as deidentified, aggregated, or publicly available information as defined in the UTCPA
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or the request is manifestly unfounded or excessive, or it is part of an organized effort to harass, disrupt, or place undue burden on our business, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data you have provided to us. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your UTCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data: We do not sell your personal data, as defined by the UTCPA.
Targeted Advertising: exercise your right to by e-mailing us at the e-mail listed in the Contact Us section below.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Utah Division of Consumer Protection.
Virginia Privacy Rights
This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your VCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data: we do not sell your personal data, as defined by the VCDPA.
Targeted Advertising: exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, please e-mail us at the e-mail address listed in the Contact Us section below and put "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Virginia Attorney General’s Office.
Texas Privacy Rights
Rights of Texas Residents: This section provides additional information for Texas residents under the Texas Data Privacy and Security Act (TDPSA). The terms used in this section have the same meaning as in the TDPSA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TDPSA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TDPSA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the TDPSA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by e-mailing the address listed below.
Profiling
The TDPSA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance. We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TDPSA Rights: Your TDPSA rights are described below. Make a Privacy Request by e-mailing the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded, excessive, or repetitive, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination: If you exercise your TDPSA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
Right to Opt-Out
Sale of Personal Data:
We "sell" certain personal data to third parties, as that term is defined in the TDPSA, including Personal Identifiers and Internet Activity.
Targeted Advertising:
Exercise your right to opt-out by sending an e-mail at the below listed address.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Texas Attorney General’s Office.
Florida Privacy Rights
Rights of Florida Residents: This section provides additional information for Florida residents under the Florida Digital Bill of Rights (FDBR). The terms used in this section have the same meaning as in the FDBR.
Under the FDBR, a business may not sell your sensitive personal data without first providing notice and getting your consent.
NOTICE: This Site may sell your sensitive personal data.
Oregon Privacy Rights
Rights of Oregon Residents: This section provides additional information for Oregon residents under the Oregon Consumer Privacy Act (OCPA). The terms used in this section have the same meaning as in the OCPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the OCPA.
Data “Selling” and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the OCPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the OCPA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by e-mailing us at the below address.
Profiling
The OCPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance. We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
OCPA Rights: Your OCPA rights are described below. Make a Privacy Request by emailing us at the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, including the following:
To comply with legal obligations
To comply with an official investigation or cooperate with law-enforcement agencies
To establish or defend legal claims
To complete an obligation to you that you have requested
To respond to security incidents, fraud, harassment, and other similar activity
To identify and repair technical errors
To conduct internal research to develop, improve, and repair our products and services
For internal operations that are reasonably aligned with your expectations
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your OCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services. We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out: You have the right to opt-out of any selling of your personal data, processing of your personal data for purposes of targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects for you. You may exercise your right to opt-out.
Authorized Agents: You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, send an e-mail to the below address and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Oregon Attorney General’s Office.
Delaware Privacy Rights
Rights of Delaware Residents: This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the DPDPA.
If you have any questions or wish to contact us regarding this privacy notice, please e-mail us at the above address.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the DPDPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the DPDPA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by sending an e-mail to the e-mail address listed below.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
DPDPA Rights: Your DPDPA rights are described below. Make a Privacy Request by sending an e-mail to the e-mail address listed below.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services. We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out by e-mailing us at the below address.
Targeted Advertising:
Exercise your right to opt-out by e-mailing us at the below address.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents: You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to List of Third Parties: You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. Please see the "How We Disclose Your Personal Information" section above for this information.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General's Office.
Montana Privacy Rights
Rights of Montana Residents: The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MCDPA Rights: Your MCDPA rights are described below. Make a Privacy Request by e-mailing us at the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services. We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out by e-mailing us at the below address.
Targeted Advertising:
Exercise your right to opt-out by sending e-mailing us at the below address.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents: You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.
Iowa Privacy Rights
Rights of Iowa Residents: This section provides additional information for Iowa residents under the Iowa Consumer Data Protection Act (ICDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the ICDPA.
Data "Selling" and Targeted Advertising: We process personal data for purposes of targeted advertising (as defined in the ICDPA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by sending an e-mail to the below e-mail address.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in ICDPA.
Sensitive Data
We do not process consumers’ sensitive data.
ICDPA Rights: Your ICDPA rights are described below. Make a Privacy Request by e-mailing us at the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. We will respond to your request within 90 days, with a possible 45-day extension if reasonably necessary.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your ICDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the ICDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Sensitive Data:
We do not process consumers’ sensitive data.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Iowa Attorney General's Office.
Nebraska Privacy Rights
Rights of Nebraska Residents: This section provides additional information for Nebraska residents under the Nebraska Data Privacy Act (NDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NDPA.
If you have any questions or wish to contact us regarding this privacy notice, please e-mail us at the below address.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NDPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the NDPA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by e-mailing us at the below address.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NDPA Rights: Your NDPA rights are described below. Make a Privacy Request by e-mailing us at the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your NDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to by sending e-mailing us at the below address.
Targeted Advertising:
Exercise your right to opt-out by e-mailing us at the below address.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents: You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Nebraska Attorney General's Office.
New Hampshire Privacy Rights
Rights of New Hampshire Residents: This section provides additional information for New Hampshire residents under the New Hampshire Privacy Act (NHPA). The terms used in this section have the same meaning as in the NHPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NHPA.
If you have any questions or wish to contact us regarding this privacy notice, please e-mail us at the below address.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NHPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the NHPA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by e-mailing us at the below address.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NHPA Rights: Your NHPA rights are described below. Make a Privacy Request by by e-mailing us at the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your NHPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out by by e-mailing us at the below address.
Targeted Advertising:
Exercise your right to opt-out by by e-mailing us at the below address.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents: You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Hampshire Attorney General's Office.
New Jersey Privacy Rights
Rights of New Jersey Residents: This section provides additional information for New Jersey residents under the New Jersey Data Privacy Act (NJDPA). The terms used in this section have the same meaning as in the NJDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NJDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to the below address.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the NJDPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the NJDPA), including: Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by e-mailing us at the below address.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NJDPA Rights: Your NJDPA rights are described below. Make a Privacy Request by by e-mailing us at the below address.
Right to Access: You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete: You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination: If you exercise your NJDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services. We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out by e-mailing us at the below address.
Targeted Advertising:
Exercise your right to opt-out by e-mailing us at the below address.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents: You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request: Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal: If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, e-mail the address below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Jersey Attorney General's Office.
Minnesota Privacy Rights
This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MNCDPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by e-mailing the below e-mail address.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MNCDPA Rights
Your MNCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an access request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
Google Analytics
Meta Ads
PayPal - Pay with PayPal, Venmo, Pay Later
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a request to opt-out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, please send an e-mail to the e-mail listed below and place "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.
Maryland Privacy Rights
This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to the e-mail address listed below.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MODPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by send an e-mail to the e-mail address listed below.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MODPA Rights
Your MODPA rights are described below. Make a Privacy Request by sending an e-mail to the email address listed below.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Obtain List of Categories of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed or required by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, send an e-mail to the e-mail address listed below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.
Rhode Island Privacy Rights
This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the RIDTPPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by sending an e-mail to the e-mail address listed below.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
RIDTPPA Rights
Your RIDTPPA rights are described below. Make a Privacy Request by sending an e-mail to the e-mail address listed below.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request by sending an e-mail to the e-mail address listed below.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, send an e-mail to the e-mail address listed below and place “Appeal a Decision” in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.
Indiana Privacy Rights
This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data by sending an e-mail to the e-mail address listed below.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
INCDPA Rights
Your INCDPA rights are described below. Make a Privacy Request by sending an e-mail to the e-mail address listed below.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA, as discussed above.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, please send an e-mail to the e-mail address listed below and place “Appeal a Decision” in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.
Kentucky Privacy Rights
This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by sending an e-mail to the e-mail address listed below.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
KYCDPA Rights
Your KYCDPA rights are described below. Make a Privacy Request by sending an e-mail to the e-mail address listed below.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request to withdraw consent by sending an e-mail to the e-mail address listed below.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, send an e-mail to the e-mail listed below and place “Appeal a Decision” in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.
Tennessee Privacy Rights
This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TIPA, including Personal Identifiers and Internet Activity.
We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers and Internet Activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices by sending an e-mail to the e-mail address listed below.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TIPA Rights
Your TIPA rights are described below. Make a Privacy Request by sending an e-mail to the e-mail address listed below.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, send an e-mail to the e-mail address listed below and place "Appeal a Decision" in the subject line.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.
International Users
Please note that we may transfer, store and process your personal information outside the country you live in, including the United States. Your personal information is also processed by staff and third party service providers and partners in these countries.
If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at support@rookline.com or contact us at 1375 Broadway, 9th Floor, New York NY 10018, United States.
