PRIVACY POLICY
This Privacy Policy describes the privacy practices of Otter Spirit INC, and how we handle the personal information we collect in connection with our websites and services.
Personal Information We Collect
Personal information you provide:
- Contact details and account information, such as your first and last name, email and mailing addresses, and phone number.
- Payment and transactional dataneeded to complete your orders on or through the services (including name, payment card information, bank account number, billing information), as well as your purchase history. Payment card information is processed by our third-party payment processors, such as Shopify. We do not have access to payment card numbers.
- Communications that we exchange with you, including when you contact us with questions, feedback or otherwise.
- Marketing data such as your preferences for receiving our marketing communications and details about your engagement with them.
Automatic data collection. We, our service providers and our advertising partners may automatically log and combine information about you, your computer or mobile device, and your interaction over time with the services, online resources and our communications, such as:
- Device data such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings and general location information such as city, state or geographic area.
- Online activity data such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the services, navigation paths between pages or screens, information about your activity on a page or screen, access times, duration of access and whether you have opened or otherwise engage with our communications, such as our marketing emails or clicked links or files within them.
Information we obtain from other sources:
How We Use Personal Information
We use personal information for the following purposes or as otherwise described at the time of collection:
- Providing our services. We use personal information to operate, maintain, and provide you with our services, including to facilitate payments and complete your orders. In particular, we use personal information to perform our contractual obligations under our Terms of Use.
- Communicating with you about our services. It is in our legitimate business interests to use personal information to respond to your requests, provide customer support, and communicate with you about our services, including by sending announcements, updates, security alerts and support and administrative messages.
- Improving, monitoring, personalizing, and protecting our services. It is in our legitimate business interests to improve and keep our services safe for our users, which includes:
- understanding your needs and interests, and personalize your experience with the services and our communications;
- troubleshooting, testing and research and to keep the services secure;
- investigating and protecting against fraudulent, harmful, unauthorized or illegal activity.
Research and development. We may use personal information for research and development purposes in our legitimate business interests, including to analyze and improve the services and our business. As part of these activities, we may create or use aggregated, de-identified or other anonymized data from personal information we collect. We make personal information into anonymized data by removing information that makes the data personally identifiable to you. We may use this anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the services and promote our business.
Marketing and advertising. We, our service providers, and our third-party advertising partners may collect and use personal information for the following marketing and advertising purposes:
- Email. We or our advertising partners may from time-to-time send you direct marketing emails as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email.
- Interest-based advertising. We may engage third-party advertising companies, such as Google, to display our ads on their online services. We may also share information about our users with these companies to facilitate advertising for our services to them or similar users on other online platforms.
Except where consent is required, we undertake such marketing and advertising on the basis of our legitimate business interests. Where we seek your consent, you may withdraw your consent at any time.
Compliance and protection. We may use personal information to comply with legal obligations, and to defend us against legal claims or disputes, including to:
- protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
- audit our internal processes for compliance with legal and contractual requirements and internal policies;
- enforce the terms and conditions that govern the services;
- prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft; and
- comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.
How We Share Personal Information
Service providers. Companies and individuals that provide services on our behalf or help us operate the services or our business (such as hosting, information technology, customer support, email delivery, text message delivery, and website analytics services).
Payment processors. Any payment card information you use to make a purchase on the services is collected and processed directly by our payment processors, such as Shopify and PayPal. Shopify may use your payment data in accordance with its privacy policy, and PayPal can similarly use your payment data in accordance with its privacy policy.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Ana Luisa (including, in connection with a bankruptcy or similar proceedings).
Advertising partners. Third party advertising companies that may collect information on the website through cookies and other automated technologies. The disclosure of this information may constitute a data “sale” under certain privacy laws.
Privacy Rights and Choices
Personal information requests. We offer you choices that affect how we handle the personal information that we control. Depending on your location and the nature of your interactions with our services, you may request the following in relation to personal information:
- Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
- Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
- Correction of personal information that is inaccurate or out of date.
- Deletion of personal information that we no longer need to provide the services or for other lawful purposes.
- Opt out of the sale or processing of personal information for targeted advertising.
Limits on your privacy rights and choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights.
Security
We use reasonable organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.
Children’s Privacy
Our services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through the services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.
Retention of Personal Information
Where required under applicable laws, we retain personal information only for as long as is necessary to fulfil the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations or until you withdraw your consent (where applicable).
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.
Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the website.