Privacy Policy

Last Updated: June 06, 2022

This Privacy Policy describes how Cushy Inc., and our subsidiaries and affiliates from time to time (“Cushy” or “we” or us”) process, maintain, use, and share information about individuals (each a “User” or “you” or “your”) who use or access our website (https://stayhomebody.com/) and related features (collectively, our “Site”) or who otherwise communicate and interact with us. This Privacy Policy describes our use and sharing of identifiable information about you, including your name, email address, mailing address, telephone number, financial information, or other personally identifying information (“PII” or “Personal Information”) that you may voluntarily provide to us or that we may collect from you when you use or interact with our Site or register for certain services provided by us in connection with our Site (the “Services”) or in connection with the purchase of our products (the “Products”). Cushy complies with privacy laws which may apply to some Users, including but not limited to, the European Union General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”) and California Privacy Rights Act (“CPRA”).

This Privacy Policy sets out:

Information We Collect About You and How We Collect It
Cookies and Other Technologies
How We Use Your Information
Our Promotional Updates and Communications
Sharing of Your Information
How We Protect Your Information
How Long We Keep Your Information
Links to Third Party Websites
Child Privacy and Safety
Your Rights
Changes to This Privacy Policy
Contact Information
California Privacy Notice and Rights

Please read the following carefully to understand our policies and practices regarding your Personal Information.

By engaging with, accessing, and browsing our Site, using or obtaining our Services, or otherwise providing any PII to us via any means, you acknowledge that you have read and understood this Privacy Policy and agree to and accept this Privacy Policy and consent to our collection, use and disclosure of your PII as described in this Privacy Policy. Please do not provide us any PII or access or use our Site for any purpose if you do not agree to this Privacy Policy. We reserve the right to terminate or limit your access to our Site. If you are a California resident, please see the California Privacy Notice and Rights section below.

If you have any questions about this Privacy Policy, please contact us by email at ask@stayhomebody.com

Collecting Personal Information

When you visit our Site, we collect certain information about your device, your interactions with our Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

We collect information about you that you give us directly by interacting with us on our Site, including filling in forms on our Site or corresponding with us by phone, email, or otherwise. We collect information about you that you provide to us after opting-in to join our email database and SMS database. You may provide to us and we may collect from you PII, which includes demographic information, such as your name, email address, physical address, and phone number. If you contact us regarding employment opportunities with us, you may submit employment details about yourself, including a resume or other details of your educational or employment history.

We automatically collect technical information from you each time you visit our Site, including the Internet Protocol (“IP”) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform. You are responsible for maintaining the confidentiality of any passwords used to access our Site and you are fully responsible for all activities that occur under your passwords. Information that you voluntarily provide to us that is not required by us is provided by you in your sole discretion.

We may receive information about you from third parties, such as business partners, sub-contractors, technical, payment and delivery services, advertising networks, analytics providers, and search information providers. For example, we may collect Personal Information via Shopify. We also may collect information via cookies and other technologies, as set forth in the next section.

See the list below for more information about what Personal Information we collect and why.

Device Information

Purpose of collection: To load our Site accurately for you and to perform analytics on our Site usage to optimize our Site.
Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, pixels, or other tracking technologies.
Disclosure for a business purpose:Shared with our processors Shopify and Klaviyo
Personal Information collected: Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with our Site

Order Information

Purpose of collection: To provide Products or Services to you to fulfill our contract, to process your payment information, arrange for shipping, create your account, and provide you with invoices or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our Products or Services.
Source of collection: Provided by you to us.
Disclosure for a business purpose:Shared with our processors Shopify and Klaviyo
Personal Information collected: Name, billing address, shipping address, email address, phone number, and payment information (including credit card and debit card numbers and external PayPal, ShopPay, Facebook Pay, and Google Pay payment information).

Customer Support Information

Purpose of collection: To provide you with customer service support, answer any queries, assist in completing orders, and other general support services.
Source of collection: Provided by you to us.
Disclosure for a business purpose: Shared with our processors Shopify and Klaviyo
Personal Information collected: Name, billing address, shipping address, email address, phone number, payment information (including credit card and debit card numbers), and any other Personal Information which you may provide to our customer support team.

Cookies and Other Technologies

Our Site uses cookies or other similar technologies to collect and store certain information. Cookies and similar technologies typically involve a small amount of information or code that a website transfers to, or accesses from, your computer or device to store and sometimes track information about you. We use several different cookies, including functional, performance, advertising, and social media or content cookies. These technologies enable you and your actions and preferences to be remembered when using that same computer or device to interact with our Site. Our Site uses cookies or other technologies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and also allows us to improve our Site. By clicking the “Accept” button when you access our Site and receive the cookies notification or by your continued use of our Site after receiving the cookies notification, you give us permission to use cookies.

As is true of most websites, we gather certain information automatically and store it in log files. This information, which does not identify individual users, is a type of non-personally identifiable information (“Non-PII”). Log files include IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information to analyze trends, to administer our Site, to see how users move around our Site, and to gather demographic information about our user base as a whole. We do not link this automatically collected data to PII. We collect certain anonymous information from your visit to our Site via industry standard and commercially available web analytics solutions.

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device.

Most web browsers automatically accept cookies and similar technologies, but if you prefer, you can change your settings through your browser controls, often found in your browser’s “Tools” or “Preferences'' menu. Your help screen or manual will tell you how to do this. However, if you disable cookies to our Site, you may not be able to take full advantage of our Site. Please keep in mind that removing or blocking cookies can negatively impact your User experience and parts of our Site may no longer be fully accessible. For more detailed information about cookies, including how to disable cookies, see www.allaboutcookies.org.

Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Sharing of Your Information” section below.

How We Use Your Information

We use your Personal Information to provide our Services to you, including offering Products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new Products, Services, and offers.

We will use information that you give to us, including PII, to:

Take steps in order to enter into any contract or carry out our obligations arising from any existing contract entered into between you and us;
Respond to your requests for information;
Create, maintain, customize, and secure your User account with us;
Process transactions with you for our Products or Services;
Provide you with information about our Products or Services we feel may interest you, if you have given your consent to receiving marketing material from us at the point we collected your information, where required by law or otherwise for our legitimate business interests (provided these interests do not override your right to object to such communications); or
Ensure that content from our Site is presented in the most effective manner for you and for your computer, and that we provide you with the information, Products, or Services that you request from us.

We will use information that we collect about you from your use of our Site for our legitimate business interests (provided these interests do not override your rights), including to:

Administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
Keep our Site safe and secure, including maintaining the safety and security of our facilities, infrastructure, databases, and technology assets;
Undertake quality and safety assurance measures, and to conduct risk and security control and monitoring;
Operate, manage, and maintain our business, and to accomplish our business purposes and objectives;
Measure or understand the effectiveness of advertising we serve to you and to delivery relevant advertising to you; and
Improve our Site to ensure that content is presented in the most effective manner for you and your computer.

We may also use PII in connection with matters incidental to the uses set forth herein and other legitimate and lawful purposes, where permitted by applicable law. We store any voluntarily provided email we receive for archival purposes and for our own marketing purposes if we feel that it is consistent with the nature of the inquiry. The information is collected and stored in a manner that is appropriate for the nature of the data that we collect and the need to fulfill your request. We do not sell or rent PII or Non-PII.

We may combine information we receive about you from other sources with information you give to us and information we collect about you in our legitimate interests (provided these interests do not override your rights). We will use this information and the combined information for the purposes set out above, depending on the types of information we receive.

Aggregate/Anonymous Data

We may aggregate, de-identify, or anonymize any information collected through our Site so that such information is no longer linked to your PII. We may use and share aggregated and anonymized Personal Information for any purpose, including but not limited to, research and marketing purposes, and we may also share such data with any third parties, including advertisers, promotional partners, and others.

International Transfers of Data

Our Site and Services are managed on servers located in the United States. PII provided to or collected to us on our Site is transmitted to and received by us in the United States and will be protected pursuant to this Privacy Policy and applicable laws which may differ from (and not provide the same level of protection as) laws or regulations in other parts of the world, such as the European Union. If you choose to use our Site from the European Union or other regions of the world, you consent the transmission to and use in the United States of any information collected or provided from you consistent with his Privacy Policy.

GDPR Lawful Bases

Pursuant to the GDPR, if you are a resident of or located in the European Union, we process your Personal Information under the following lawful bases:

Your consent;
The performance of the contract between you and our Site;
Compliance with our legal obligations;
To protect your vital interests;
To perform a task carried out in the public interest; and
For our legitimate interests, which do not override your fundamental rights and freedoms.

Our Promotional Updates and Communications

Where permitted in our legitimate interests or with your prior consent where required by law, we will use your Personal Information for marketing analysis, including personalizing, advertising, marketing, selling, and distributing our Products and Services. We may use PII to conduct research, analytics and data analysis in order to improve our Site and the Services we provide. We may use PII to provide you with promotional update communications by email and social media platforms or postal mail about our Products and Services. If you have consented to receive promotional materials or notifications from us, we may periodically use your email address to send you such materials related to Products and Services. You can object to further marketing at any time by selecting the “unsubscribe” link at the end of all of our marketing and promotional update communications to you, or by sending us an email at ask@stayhomebody.com

Sharing of Your Information

We may give your information to any of our subsidiaries and our parent company and its subsidiaries who support our processing of Personal Information under this Privacy Policy. We may share your Personal Information with selected third parties and service providers, such as Shopify and Klaviyo, to help us provide our Services and fulfill our contracts with you, as described above. We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We will disclose your Personal Information to third parties:

In the event that we sell or buy any business or assets, in which case we will disclose your Personal Information to the prospective seller or buyer of such business or assets subject to the terms of this Privacy Policy;
If Cushy or substantially all of our assets are acquired by a third party, in which case Personal Information held by us about you will be one of the transferred assets; and
If we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation, in order to enforce or apply our supply terms and other agreements with you, or to protect the rights, property, or safety of Cushy, our users, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction and to prevent cybercrime.

Behavioral Advertising

We may use your Personal Information to provide you with targeted advertisements or marketing communications that we believe may be of interest to you. For example:

We use Google Analytics to help us understand how our customers use our Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. We share information about your use of our Site, your purchases, and your interaction with our ads on other websites with our advertising partners, including our marketing vendor Klaviyo. We collect and share some of this information directly with our advertising partners, and in some cases, through the use of cookies or other similar technologies (which you may consent to, depending on your location).
We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of our Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

If in the future we intend to share PII with unaffiliated or non-agent third parties for promotional purposes or share PII with a third party that is engaged in cross-context behavioral advertising, we will provide you with the opportunity to opt-out prior to the sharing.

Choice and Opt-Out

We provide you the opportunity to "opt-out" of having your PII used for certain purposes, when we ask for this information. If you no longer wish to receive our promotional, marketing, or similar communications, you may opt-out of receiving them by following the “unsubscribe” instructions included in each communication, by updating your promotional communications' preferences, or by contacting us at ask@stayhomebody.com

You will be notified when your PII is proposed to be collected by any third party that is not our agent, service provider, or otherwise described herein, so you can make an informed choice as to whether to share your information with that party.

Some web browsers may transmit “do-not-track” (“DNT”) signals to websites with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they are even aware of them. Please note that because there is no consistent industry understanding of how to respond to DNT signals, we do not alter our data collection and usage practices when we detect a DNT signal from your web browser. We currently do not change our tracking practices in response to DNT settings in your web browser. We do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

You can opt-out of targeted advertising by contacting us at ask@stayhomebody.com

Common opt-out links include:

FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/

Right to Access and Other Rights

If you would like to request access, modification, correction, or deletion of PII that you have provided to us or that you believe we may have collected about you, please contact us at shop@stayhomebody.com

We reserve the right to keep certain information necessary for record-keeping to the extent permitted or required by law, or in connection with certain legal uses.

How We Protect Your Information

The security of your PII is important to us. We follow generally accepted industry standards to protect the PII submitted to us, both during transmission and once we receive it. We maintain reasonable physical, electronic and procedural safeguards to guard your PII. We restrict access to PII to our personnel who need to have the information to provide Services to you or administer our Site.

While we make reasonable efforts to protect PII, information communicated to us via the non-secure portion of our Site may not be secure. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your PII, we cannot guarantee its absolute security. You are responsible for maintaining the secrecy and confidentiality of any passwords or other account information.

How Long We Keep Your Information

We will retain Personal Information for a reasonable period, taking into account legitimate business needs to capture and retain such information. For registered Users of our Site, we may retain User Personal Information for as long as the User maintains a registered login. Information will also be retained for a period necessary to comply with applicable local, state, federal, or country specific regulations and requirements.

We do not undertake to store or retain your PII for any longer than is reasonably necessary or required by applicable laws. Files or records with PII may be destroyed at any time after the expiry of the applicable retention period, except those files or records you ask to be delivered to you. For more information on your right of erasure, please see the ‘Your rights’ section below.

Links to Third Party Websites

Our Site may, from time to time, contain links to third party external websites, including Instagram, Twitter, Pinterest, or other similar social media sites. Once you click on any of those links you will be leaving our Site and will be directed to another website and this Privacy Policy will no longer apply. These third-party external websites are not under our controls and we are not responsible for the privacy notices, policies, the content, or security practices of such websites. Links to external websites are provided only as a convenience. Cushy does not endorse any link made available through our Site that is not a Cushy website. We encourage all Users of our Site to read the privacy policies of each and every website visited when linking directly from our Site or providing PII to such third-party sites. This Privacy Policy applies only to information collected by our Site.

Child Privacy and Safety

Protecting the privacy and safety of children when they use the Internet is important to us. Our Services and our Site are intended for use by adults. Our Services and our Site are not directed to children. We do not target or knowingly collect information from children under the age of thirteen (13) years old. If a child under 13 submits Personal Information to us and we learn that such Personal Information is of a child under 13, then we will delete that information. Children under the age of 13 should not provide any information to us via our Site or otherwise. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us to request deletion at ask@stayhomebody.com

Your Rights

We will honor your rights under applicable data protection laws.

GDPR

Subject to applicable law, you may have one of more of the following rights (for example, if you are located in the European Union with rights under the GDPR, or if you have similar rights under the laws of other countries):

Right of subject access: You have the right to make a written request for details of your Personal Information and to be provided with a copy of your Personal Information held by us;
Right to erasure: You have the right to have certain Personal Information about you erased. We will comply with your request unless there is an overriding legitimate ground for retaining the information;
Right to restriction of processing: You have the right to request that we restrict the processing of your Personal Information (for example, while we verify or investigate your concerns with this information);
Right to object: You have the right to object to the further processing of your Personal Information, including the right to object to marketing (as mentioned in “Our Promotional Updates and Communications” section above);
Right to data portability: You have the right to request that your provided Personal Information be transferred to you or to a third party in a machine-readable format;
Right to withdraw consent: Where the processing of your Personal Information by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us. If you withdraw your consent, this will not affect the lawfulness of our use of your Personal Information prior to the withdrawal of your consent; and
Right to Non-Discrimination: You have the right to the same level of Products and Services regardless of your choice to exercise other rights under this Privacy Policy. This does not extend to transactions where such information is required to complete the transaction.

Automatic decision-making

If you are a resident of the European Union, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you. Services that include elements of automated decision-making include:

Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

To exercise any rights under the GDPR listed above or for further information about your rights, please contact us at ask@stayhomebody.com

If you are a California resident, California law may provide you with additional rights regarding our use of your Personal Information. To learn more about your California privacy rights, see the “California Privacy Notice and Rights” section below.

Changes to This Privacy Policy

We keep this Privacy Policy under regular review and we may update this Privacy Policy from time to time at our sole discretion in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. When we make changes to this Privacy Policy, we will post the updated Privacy Policy on this page on our Site with a new “Last Updated” date. Your continued use of our Site after we post a revised Privacy Policy constitutes your acceptance of any updated Privacy Policy and its terms. Any changes we make will be posted on the first page of this Policy.

Contact Us

After reviewing this Privacy Policy, if you have additional questions or comments, want more information about our privacy practices and our handling or protection of your Personal Information or this Privacy Policy, or you would like to make a complaint, please contact us by email at ask@stayhomebody.com or (213) 446-8086 or by mail using the details provided below:

Cushy Inc, 1019 E 4th Place, Los Angeles CA 90013, United States

Complaints

As noted above, if you would like to make a complaint, please contact us by email, phone, or by mail using the details provided above. If you are not satisfied with our response to your complaint, you may have the right to lodge your complaint with the relevant data protection authority.

For Users in the European Union, if we are not able to satisfactorily resolve your questions, concerns, or complaints, or if you believe that the processing of your Personal Information infringes on your rights under applicable data protection laws, you may have the right, without prejudice to any other administrative or judicial remedies, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. Contact information of the supervisory authorities may be found here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

California Privacy Notice and Rights

If you are a California resident, California law may provide you with additional rights regarding our use of your Personal Information. This Notice and information is provided as required by the CCPA and CPRA, and includes the rights and obligations of California residents under the CCPA and CPRA, and the categories of Personal Information as defined thereunder (“CA Personal Information”) about California resident consumers and households that we collect or disclose. CA Personal Information is information that identifies, relates to, describes, or is capable of being associated with or could reasonably be linked to, directly or indirectly, California consumers or households. Unless otherwise indicated, any terms defined in the CCPA or CPRA have the same meaning when used in this Notice.

Collection of CA Personal Information

We may collect (and have collected within the last 12 months) the following categories of CA Personal Information:

Personal identifiers, such as name, alias, address, contact information, online identifiers, email address, or other similar identifiers;
Personal information, as defined in the California Customer Records Law (Cal. Civ. Code § 1798.80);
Commercial information, such as transaction information, Products or Services purchased, purchasing history;
Internet or network activity information, such as browsing history and interactions with our Site;
Geolocation data, such as physical location or the location of a device;
Audio, electronic, visual and similar information, such as call and video recordings;
Professional or employment-related information, such as work history and prior employer; and
Inferences drawn from any of the CA Personal Information listed above to create a profile about a User’s preferences or characteristics.

We do not collect (and have not collected within the last 12 months) the following categories of CA Personal Information:

Characteristics of protected classifications under California or federal law, such as age, sex, race, ancestry or national origin, marital status, gender identity or expression, medical conditions, mental or physical disabilities, military or veteran status, religion, sex and gender, sexual orientation;
Education information that is not publicly available, such as student information maintained by an educational institution, including grades, transcripts, class lists disciplinary records; and
Biometric information, including an individual’s physiological, biological, or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.

As described above in our general Privacy Policy, we collect CA Personal Information from a variety of sources, including:

Directly from you, through information you provide on our Site or otherwise, in transactions with us, or in inquiries from you;
From third parties we work closely with (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, and search information providers); and
From your interactions with our Site, such as through the use of cookies or similar technologies.

We do not collect (and have not collected within the last 12 months) non-public sensitive personal information, such as communications between you and a third party, biometric data processed to identify an individual, data about sexual orientation or sex life, financial account details in a combination that gives access to a particular account (for example, a credit card number with a password), genetic data, government-issued numbers (for example, a social security number), health data, philosophical or religious beliefs, precise geolocation, racial or ethnic origin, and union membership (“SPI”). If in the future we collect SPI, you will have the right to tell us and restrict our use of your SPI such that we are only allowed to use your SPI to provide requested Products or Services and for no additional purposes, and we will provide a “Limit the Use of My Sensitive Personal Information” link on our Site or similar opt-out procedure.

Use of CA Personal Information

We may use CA Personal Information for the following purposes:

to operate, manage, and maintain our business, and to accomplish our business purposes and objectives;
to develop, improve, repair, and maintain our Site, Products, and Services;
to personalize, advertise, market, sell and distribute our Products and Services;
to provide you with support, and to communicate with you, respond to inquiries, address concerns, and improve our support to you;
to conduct research, analytics, and data analysis;
to maintain the safety and security of our facilities, infrastructure, Site, databases, and technology assets;
to undertake quality and safety assurance measures, and to conduct risk and security control and monitoring;
to detect and prevent fraud, perform identity verification, perform accounting, audit, and other internal functions, such as internal investigations;
to create, maintain, customize and secure your User account with us;
to comply with laws, judicial or administrative orders, legal process, to enforce our Terms of Use, and to exercise and defend legal rights and claims;
to give you access to information you request and to perform our Services, including to improve and personalize your use of our Site;
to communicate with you about our Products and Services, and send information regarding Cushy or our partners (such as announcements of marketing promotions and events); and
to process transactions with you for our Products and Services.

We do not use your CA Personal Information and SPI for automated decision making, or data profiling. If we do so in the future, you will have the right to opt out of the use of automated decision-making technology.

Disclosure of CA Personal Information

We may disclose (and have disclosed within the last 12 months) the following categories of CA Personal Information to third parties:

Identifiers, such as name, alias, contact information, online identifiers, email address, or other similar identifiers;
Personal information, as defined in the California Customer Records Law (Cal. Civ. Code § 1798.80);
Internet or network activity information, such as browsing history and interactions with our Site; and
Geolocation data, such as physical location or the location of a device.

Data Retention

We will retain your CA Personal Information and SPI only for as long as is necessary for the purposes set out in this general Privacy Policy and under this California Privacy Notice and Rights section. For registered Users of our Site, we may retain User Personal Information for as long as the User maintains a registered login. We will retain and use CA Personal Information and SPI to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. We will also retain data for internal analysis purposes, which is generally retained for a shorter period of time, except when used to strengthen our security or improve the functionality of our Site, or when we are legally obligated to retain this data for longer time periods.

We may retain CA Personal Information and SPI from you only for as long as is necessary, as explained above, for the following categories:

Identifiers, such as name, alias, address, contact information, online identifiers, email address, or other similar identifiers;
Personal information, as defined in the California Customer Records Law (Cal. Civ. Code § 1798.80);
Commercial information, such as transaction information, Products or Services purchased, purchasing history;
Internet or network activity information, such as browsing history and interactions with our Site
Geolocation data, such as physical location or the location of a device; and
Professional or employment-related information, such as current employer.

Your California Privacy Rights and Choices

The CCPA and CPRA provide California residents with specific rights regarding their Personal Information. This section describes your rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your CA Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

The categories of CA Personal Information we collected about you.
The categories of sources for CA Personal Information we collected about you.
The categories of third parties with whom we share that CA Personal Information.
The specific pieces of CA Personal Information we collected about you.
If we sold or disclosed your Personal Information for a business purpose, the categories of CA Personal Information about you that we sold, and the categories of third parties to whom we sold such CA Personal Information (if applicable).
Our business or commercial purpose for collecting or using that CA Personal Information.

You also have the right to request that we transmit to you any CA Personal Information we have relating to you from the previous 12 months in portable form (i.e., in a readily useable form).

Deletion Request Rights

You have the right to request that we delete any of your CA Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from the records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion is likely to render impossible or seriously impair the achievement of such research, if you previously provided informed consent.
Enable solely internal Cushy uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Other internal and lawful uses of CA Personal information that are compatible with the context in which the information was provided.

Data Sharing or Selling

We do not share, disclose, or sell your CA personal information to third parties, other than as indicated in the general Privacy Policy.

If in the future we sell or share CA personal information, we will update this Notice and provide an opportunity for California residents to opt-out of any sale or sharing of Personal Information with a “Do Not Share or Sell” link on our Site.

Data Correction

You have the right to request that we correct any inaccuracies or mistakes in your CA Personal Information and SPI. To exercise this right, you can email us at shop@stayhomebody.com or write to us at our mailing address provided under Section 12 above.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:

Emailing us at ask@stayhomebody.com or

Writing to us at our mailing address provided under Section 12 above.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information, which may include your name, phone number, email address and home address; and
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Making a verifiable consumer request does not require you to be a registered User or create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. We will address your request within 45 days of receiving a verifiable consumer request.

Children’s CA Personal Information

As indicated in the general Privacy Policy, our Site is not directed at children under the age of 13 and we do not knowingly collect CA Personal Information from children under the age of 13.

If in the future we sell CA Personal Information, we: (a) will not sell information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the “right to opt-in”) from either the consumer who is at least 13 but not yet 16 years of age, or the parent or guardian of a consumer less than 13 years of age, and (b) will allow consumers who opt-in to the sale of CA Personal Information to opt-out of future sales at any time.

Non-Discrimination

We will not discriminate against you for exercising any of your California privacy rights. Unless otherwise permitted, we will not:

Deny you Products or Services;
Charge you different prices or rates for Products or Services, including through granting discounts or other benefits, or imposing penalties;
Provide you a different level or quality of Products or Services; or
Suggest that you may receive a different price or rate for Products or Services or a different level or quality of Products or Services.

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits Users of our Site that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to us at ask@stayhomebody.com or (213) 446-8086 or write to us at: