Rhone Privacy Policy

INTRODUCTION

This Privacy Notice describes the information collection, use, retention, and sharing practices of Rhone Apparel, Inc. and its affiliates (“Rhone”, “we”, “us”, “our”) when you interact with us through our website, www.rhone.com (the “Website”), other digital products on which this Privacy Notice appears, and when you interact with us offline such as when you contact us via telephone or visit one of our locations (collectively, the “Services”).

As used in this Privacy Notice, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person. Personal information includes “personal data”, as such term is defined under applicable data privacy laws.

OUR ROLE IN DATA PROCESSING

To the extent the General Data Protection Regulation (“GDPR”), Regulation (EU) 2016/679, and the UK Data Protection Act 2018 (“DPA”) apply (collectively referred to in this Privacy Notice as “EU or UK data protection laws”), the entity responsible for the collection and use (processing) of your personal information is Rhone Apparel, Inc., the data controller. You can contact Rhone Apparel, Inc. at privacy@rhone.com or by mailing a letter to:

Rhone Apparel, Inc.

One Dock Street, Floor 5

Stamford, Connecticut 06902

PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG

We collect personal information as you engage with our Services, including when you:

Contact us. When you contact us, we collect, from you, your personal identifiers (name, email address), commercial information (order number, if provided) and any additional information you choose to include in your message. We use this information to respond to your questions or inquiries and to troubleshoot where necessary. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you. We retain this information for up to two (2) years.

Submit a wholesale inquiry. When you submit a wholesale inquiry, we collect, from you, your personal identifiers (name, email address, telephone number), professional or employment-related information (company name, physical address, 501c3 or tax-exempt status), and commercial information (order type, items interested in, budget range). We use this information to communicate with you about your wholesale inquiry and to understand more about your request. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you. We retain this information for up to two (2) years.

Create an account. When you create an account, we collect, from you, your personal identifiers (email address). We use this information to create and manage your account and to facilitate your access to the Services. To the extent the EU or UK data protection laws apply, the legal basis for this processing is that it is necessary for the performance of a contract. Please see “Subscribe to our newsletter” below if you indicate you wish to receive marketing emails from us.

Make a purchase. When you make a purchase, we collect from you or from our third-party payment processor, your personal identifiers (name, email address, physical address) and your sensitive financial information (credit/debit card number, security code, expiration date). We use this information to process your payment for the selected product; however, we do this using the services of a third-party vendor and only get access to card type, and the last four digits of the card. To the extent the EU or UK data protection laws apply, the legal basis for this processing activity is the performance of a contract. Please see “Subscribe to our newsletter” below if you indicate you wish to receive marketing emails from us at the time of checkout. In addition, if you elect to submit payment via Shop Pay or PayPal, you will be redirected to Shop Pay or PayPal (as applicable) to complete your purchase, at which point the collection/use of your information will be subject to their respective privacy policy. See Shop Pay’s Privacy Policy and PayPal’s Privacy Policy to learn more.

Post a review. When you post a review, we collect, from you, your personal identifiers (display name, email address) and any information you choose to include in your review. We post your display name and the information in your review to our Website for public viewing. Note that because our Website is publicly accessible, any information that you choose to include in your post can be viewed by others or used by them as they see fit. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is our legitimate interest (and prospective customers’ legitimate interest) in understanding how our customers perceive the quality of our products. We use your email address to communicate with you about your review. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is our legitimate interest in understanding how we can improve our products and/or the customer experience.

Interact with our AI chatbot. When you interact with our AI chatbot, we collect, from you, your internet or other electronic network activity information (location, IP address, device identifiers) and any additional information you choose to provide in the chat. We use this information to respond to your questions or inquiries and troubleshoot where necessary. To the extent the EU or UK data protection laws apply, the legal basis for the processing of this information is that it is necessary for the performance of the service requested by you.

Visit a Rhone location. When you visit a Rhone location, we collect your visual information (video recording) through our CCTV cameras. We use this information for security purposes and to help ensure the safety of our patrons and personnel. To the extent the EU or UK data protection laws apply, the legal basis for this processing is our legitimate interest in protecting our patrons and personnel, as well as detecting, and responding to, illegal activity. If you make a purchase at a Rhone location, we will collect and process your information as described in the “Make a purchase” section set forth above.

Participate in our SMS/RCS messaging programs. If you consent to participate in any of our SMS/RCS messaging programs, you agree to receive automated SMS and RCS messages to the telephone number provided (personal identifier) for the purposes disclosed at the time you provided your consent, which may include both marketing and transactional communications. You may provide consent through website forms or other available consent mechanisms. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. Consent is not a condition of purchase. Message and data rates may apply. Message frequency varies. You can opt out of SMS and RCS messages at any time by replying STOP to any SMS or RCS message and can reply HELP for help. For more information, please see our Mobile Terms of Service. Your personal information, including your mobile telephone number and opt-in data and consent information, will not be sold or shared with third parties or affiliates for marketing or promotional purposes. We will disclose your information to service providers solely to facilitate the delivery of SMS/RCS messages on our behalf; however, those service providers are not permitted to use your information for their own marketing/promotional purposes.

Take 15% off. When you request to take 15% off on your first order, we collect, from you, your personal identifiers (email address). We use this information to add you to our newsletter list and to apply the 15% discount. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you. See the “Subscribe to our newsletter” section below for more information.

Enroll in Rhone Reserve. We collect your commercial information (spend history, purchase recency, customer tenure, location of purchase, categories of products purchased) from our e-commerce provider to assess your eligibility for Rhone Reserve, our invite-only membership program. To the extent the EU or UK data protection laws apply, the legal basis for this processing is our legitimate interest in identifying our most loyal customers and rewarding them with personalized perks and discounts relevant to their purchase history. If invited to join, we will use the email address (identifier) connected to your Rhone customer account to invite you to join, at which point you will be directed to the Rhone Reserve landing page to complete enrollment. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. See the “Subscribe to our newsletter” section below for more information. Following enrollment, you will be issued a Rhone Reserve member tag (identifies you as an active member) and a cohort group tag (e.g., VIP Men’s or Women’s), which we use to (i) support personalization of offers based on purchase behavior or cohort, (ii) surface member benefits in your customer account, and (iii) trigger and gate member-specific communications. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. We also use this information to enable internal performance tracking and reporting. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. We may also invite you to participate in voluntary surveys and/or focus groups, in which case we will collect, from you, your personal identifiers (email, age, date of birth) and responses to the survey / focus group questions for purposes of determining how we can improve our products and services. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may opt out of Rhone Reserve at any time with effect moving forward by emailing us at rhonereserve@rhone.com or service@rhone.com. See the Rhone Reserve Terms and Conditions for more information.

Subscribe to our newsletter. When you subscribe to our newsletter, we collect, from you, your personal identifiers (email address). We, through our service provider, use this information to send you news and updates about our products and services, as well as to send you abandoned cart reminders when you add items to your shopping cart but do not complete your purchase. To the extent the EU or UK data protection laws apply, the legal basis for this processing is your consent. You may revoke your consent at any time with effect moving forward by clicking the “unsubscribe” link included within each email we send to you. However, we will continue to send you service-related messages. We, through our service provider, use tracking pixels to determine whether you open emails, the time of opening, information about the device you use (including IP address), whether you interacted with the email, the topic of the email, whether it was delivered, sender and recipient addresses. We use this information to:

(1) measure the effectiveness of our communications and make them more attractive, particularly by improving email subject lines;

(2) limit the frequency of sending or stop it, ensuring emails continue to reach their recipients;

(3) detect and analyze suspected fraud;

(4) personalize communications based on your interest in received emails and interaction with them. This personalization includes: adapting message content, adjusting sending frequency or communication channel, optimizing campaigns based on reactions (e.g., adjusting email subject lines); and

(5) offer tailored content or advertisements on other websites, applications, or communication channels.

You can avoid downloading the pixel by rejecting the download of images in the email.

Interact with us on social media. When you interact with our social media pages on social networking sites, such as Facebook, X, LinkedIn, Instagram, YouTube, TikTok, and Pinterest (each a “Social Media Page” and collectively, “Social Media Pages”), we collect basic engagement metrics and use it to tailor content and marketing and use it to improve user experience as set forth in this section. Please note that we do not control the use or storage of the information that you have posted to any social networking sites. This information is collected and processed by the social networking sites for their own purposes, including marketing. For more information on how Facebook, X, LinkedIn, Instagram, YouTube, TikTok, and Pinterest use your personal information, please see Facebook’s Privacy Policy, X’s Privacy Policy, LinkedIn’s Privacy Policy, Instagram’s Privacy Policy, YouTube’s Privacy Policy, TikTok’s Privacy Policy, and Pinterest’s Privacy Policy.

Facebook, X, LinkedIn, Instagram, YouTube, TikTok, and Pinterest (the “Social Networks”) process personal information in the USA where the laws may be less protective than in your country of residence. For example, in accordance with U.S. laws, in certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in other countries may be entitled to access your personal information.

Social Media Pages. When interacting with our Social Media Pages, we collect, from you, your personal identifiers (first and last name) and visual information (photograph (i.e., profile picture)), as well as any information that you provide when interacting with our Social Media Pages (e.g., commenting, sharing, and rating). We use this information to advertise our products, for events and invitations, and to communicate with users via the contribution and comment function. To the extent the EU or UK data protection laws apply, the legal basis for the processing is our legitimate interest in advertising our products via our Social Media Pages and communicating with users, customers, and interested parties. Because our Social Media Pages are publicly accessible, when you use them to interact with other users, for example by posting, leaving comments or liking or sharing posts, any personal information that you post in them or provide when registering can be viewed by others or used by them as they see fit. The content posted on our Social Media Pages or other public areas of social networking sites can be deleted in the same way as other content that you have created. If at any time you want content posted to be deleted, please email your request to us at privacy@rhone.com.

Community Management. We collect, from you, your contact, including "likes", shares, messages and other interactions with the content, in order to analyze and evaluate how our content is perceived, to learn from it, and to improve our public relations efforts. To the extent the EU and UK data protection laws apply, the legal basis for analyzing your content is our legitimate interest in organizing, facilitating, and optimizing communication with our users and the general public. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to privacy@rhone.com.

Page Insights. When you visit our Social Media Page, the applicable Social Network records your IP address and other information about your usage behavior on our Social Media Page. The Social Network collects this information through trackers in the browser of your device or via the advertising ID (IDFA from Apple or GAID from Google), when you open the Social Network app through your mobile device (e.g., smartphone or tablet). The Social Network uses this information to provide us with statistical evaluations of the use of our Social Media Page. We receive this information directly from Social Network, in the form of aggregated data and anonymous statistics regarding certain data points, such as: age; gender; city/country; device; inquiries from fans about other Social Media Pages; region and language settings of the users; proportion of men and women; the number of people reached; clicks on posts, "likes” and reactions; comments and shared content; and total video views. We use this information to analyze and improve the advertising campaigns we conduct through our Social Media Pages. We do not collect or process any other personal information in connection with Social Network “Page Insights” function.

To the extent the EU and UK data protection laws apply, we are joint controllers with the Social Network for this processing. For the purpose of the EU and UK data protection laws, the legal basis for this processing is our legitimate interest in statistical evaluation of users on our Social Media Page for the improvement and adjustment of our advertising measures based on the information collected. If you object to this processing of your personal information and believe you have an overriding interest, you can submit your objection via email to privacy@rhone.com.

We do not retain this information independently. For information on data protection and the storage period on the Social Network in relation to its Insights function, see the Social Network privacy policy linked above. It has been contractually agreed with the Social Network that the Social Network is responsible for providing you with information about the processing for Page Insights.

Information Processed Solely by Social Networks. We do not know how the Social Networks use personal information for their own purposes, how long the personal information is stored on the Social Networks or whether the Social Networks’ data is passed on to third parties. If you are currently logged in to a Social Network as a user, the Social Network automatically collects, through trackers on your device, your Social Network ID or a link between the Social Network ID and the advertising ID (IDFA from Apple or GAID from Google) when you open the Social Network app through your mobile device (e.g., smartphone or tablet). This enables the Social Network to understand that you have visited our Social Media Page along with other social media pages that you have clicked on, whether you clicked on Social Network buttons integrated into sites that partner with the Social Network, and other online interactions that report user data to the Social Network. Based on this data, content or advertising tailored to you can be offered. You can find more information about the personal information collected by Social Networks, how it is used and how long it is stored by visiting the Social Network’s privacy policies, linked above.

Interact with the Services. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Services via cookies, pixels, web beacons, and similar tracking technologies. If you are located in the EU or UK, these trackers won’t deploy (i.e. collect your information) unless you provide your consent. To the extent the EU or UK data protection laws apply, the legal basis for the placement and access of strictly necessary cookies is the performance of a contract. These cookies are necessary to provide the Services to you. To the extent the EU or UK data protection laws apply to placement of non-essential cookies on the Services, the legal basis for this processing is your consent. You may withdraw your consent at any time with effect moving forward by visiting Your Privacy Choices.

We use essential, performance, marketing, and analytics cookies to automatically collect certain internet and other electronic network activity information when you interact with the Services. This includes things like IP address, location, device type, browser type and version, operating system, usage data (e.g. the pages of the Services that you visit, the time and date of your visit, the time spent on those pages), unique device identifiers, and other diagnostic data. We use this information to: (i) track you within the Services; (ii) enhance user experience; (iii) conduct analytics to improve the Services; (iv) prevent fraudulent use of the Services; (v) diagnose and repair technical errors, and, in cases of abuse, track and mitigate the abuse; and (vi) market to you more effectively across different web pages and social media platforms based on your browsing habits and history.

As mentioned above, if you are located in the EU or UK, these trackers won’t deploy (i.e. collect your information) unless you provide your consent. Our use of third-party party marketing and analytics cookies may be considered a sale, sharing, or disclosure for targeted advertising purposes under state data privacy laws. To opt out, please visit Your Privacy Choices. If we detect an opt-out preference signal (such as the Global Privacy Control signal) communicated from your (or your authorized agent’s) browser or device, we will treat the opt-out preference signal as a valid request to opt out of the sale/sharing of your personal information as it pertains to that browser or device (including any associated profile information). If we can associate the opt-out signal with you (for example, if the signal is sent when you are logged-in to your account), we will also treat the signal as an opt-out request pertaining to other browsers or devices that you use to access the Services, including any offline sale or sharing of personal information.

Certain third-party marketing and analytics cookies to note on the Services include the following:

Google Analytics. We use Google Analytics to collect information on your use of the Services for its improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there (for more information about how Google collects and uses the information see here). Google Analytics also receives information about you from applications you have downloaded or services that you use that partner with Google. Google’s ability to use and share information collected by Google Analytics about your visits to the Services or to another website that partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on, which can be accessed here. You can also adjust your Ad Settings or change settings in your Google My Activity if you are signed into your Google Account. To opt out, please visit Your Privacy Choices.

Meta Pixel. We use Meta Pixel, a tracking technology provided by Meta Platforms, Inc., a third party, to collect data about your interactions with the Services and to serve you ads on your social media based on your browsing behavior. Meta Pixel sets a cookie on your device that allows your behavior to be tracked after you have been redirected to the Services by clicking on a Meta ad. This enables us to measure the effectiveness of Meta ads for statistical and market research purposes and to provide targeted advertising. We do not have access to the information collected through the Meta Pixel. The information collected via Meta Pixel is stored and processed by Meta. Meta may link this information to your Facebook or Instagram account and use it for its own promotional purposes in accordance with Meta’s Privacy Policy. You can opt out of displaying Meta ads and sharing by visiting your Facebook or Instagram Ad Settings. To opt out, please visit Your Privacy Choices.

TikTok Pixel. We use TikTok Pixel, a tracking technology that collects and shares information about how users interact with the Services. TikTok uses the data collected through the TikTok Pixel to provide measurement services, serve targeted advertisements, and optimize ad delivery based on your browsing activity. Please see TikTok’s Privacy Policy for additional information on how TikTok uses the information it collects. To opt out of targeted advertising by TikTok, please visit its Ads and your data page, which provides information on how you can adjust your personalization and data settings within your TikTok account. To opt out, please visit Your Privacy Choices.

Aggregate and anonymize data. We deidentify and/or aggregate the data we collect and use and share it, in deidentified and/or aggregated form, for benchmarking purposes, advertising, and internal analytics. We maintain and use this data in deidentified form. We will not attempt to reidentify the data unless it is necessary to determine whether our deidentification processes satisfy applicable data protection laws.

Rhone will also use the personal information we collect as described in this section to comply with the law, to efficiently maintain our business, and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.

Rhone does not collect, use, or sell personal information for the purpose of training large language models.

DATA RETENTION

Unless otherwise stated in this Privacy Notice, we retain your personal information as long as reasonably necessary to retain it for the purpose for which it was collected or until we receive a valid request to delete the information, in which case we will delete or anonymize the information (unless there is a reason to retain the information for longer as explained below). This includes maintaining a customer account with us (if applicable) or until the information is no longer needed for a service provider or contractor’s operational purpose(s). Subscription, billing, tax, audit, and transaction-related records may also be retained for longer where reasonably necessary for accounting, dispute resolution, chargeback management, tax, audit, and legal compliance purposes.

We use the following criteria to determine whether it remains reasonably necessary to retain your personal information for such purposes or a service provider or contractor’s operational purpose(s): (i) any retention period required by applicable law or regulation; (ii) actual or threatened litigation requiring preservation of the information; (iii) statutes of limitations for potential legal claims; (iv) responding to legal process or enforceable governmental requests; (v) enforcing our contracts or Terms of Use (including investigating potential violations); (vi) keeping our properties and assets secure and preventing fraud; and (vii) showing proof of performance. When we determine that it is no longer reasonably necessary to retain your personal information based on the above criteria, we will delete or anonymize your personal information.

HOW WE SHARE YOUR PERSONAL INFORMATION

A. General Sharing

Rhone shares personal information as described in the PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG section, and generally in the following instances:

Within Rhone. We share your personal information within Rhone for the legitimate business purposes of efficiently and effectively providing the Services, such as accounting and customer service support. Access to your personal information is limited to those on a need-to-know basis. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in providing the Services more efficiently.

In the event of a corporate reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, including without limitation bankruptcy or liquidation, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. To the extent the EU or UK data protection laws apply, the legal basis for this is our legitimate interest in carrying out our business operations or, if required by law, consent.

For legal purposes. We share personal information where we are legally required to do so, such as in response to court orders, subpoenas, governmental/regulatory bodies, law enforcement or legal process, including for national security purposes. We may share your information with our legal advisors or auditors to establish, protect, or exercise our legal rights or as required to enforce our terms of service or other contracts or to defend against legal claims or demands. We also share this information with third parties as necessary to: detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; to comply with the requirements of any applicable law; or to comply with our legal obligations. To the extent the EU or UK data protection laws apply, the legal basis for this processing is compliance with the law or our legitimate interest in complying with non-EU data protection laws to which we are subject.

With your consent. Apart from the reasons identified above, we may request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide the personal information or before the personal information you have already provided is shared for such purpose. You may revoke your consent at any time with effect moving forward and may do so by contacting us via email at privacy@rhone.com.

All the above categories exclude mobile telephone numbers and SMS/RCS messaging opt-in data and consent. This information will not be sold or shared with third parties or affiliates for marketing or promotional purposes. We will disclose this information to service providers solely to facilitate the delivery of SMS/RCS messages on our behalf; however, those service providers are not permitted to use your information for their own marketing/promotional purposes.

B. Sharing in the Last Twelve (12) Months

For a business purpose. In the preceding twelve (12) months, Rhone has disclosed the following categories of personal information for a business purpose to the following categories of service providers or contractors:

We have disclosed your personal information to service providers that assist us in providing the Services. These service providers assist us with the following: information technology (“IT”) support; web hosting; cloud storage; data analysis; e-commerce; customer service; email delivery; SMS/RCS message delivery; marketing; external auditors; payment processing; shipping and distribution; and similar services.

We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Services and platform errors.

We have disclosed your internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Services.

C. Sale of Personal Information

In the preceding twelve (12) months, Rhone has shared your internet or other electronic network activity information collected via cookies and other tracking technologies with our data analytics providers and ad networks as described in PERSONAL INFORMATION WE COLLECT, WHY AND FOR HOW LONG to provide targeted advertising. Such sharing may be deemed a sale or sharing (i.e. disclosure for targeted advertising purposes) under state data privacy laws. To opt out of the sale/sharing through cookies and targeted advertising, please visit Your Privacy Choices.

In the preceding twelve (12) months, Rhone has shared your personal identifiers (name, email address), in hashed form, with Meta and Google for the purpose of creating Lookalike Audiences (groups of individuals who share similar characteristics with our existing customers) and delivering targeted advertisements to those audiences. Such sharing may be deemed a sale or disclosure for targeted advertising purposes under state data privacy laws. To opt out, you may submit your opt-out request through our webform or by contacting us via email at privacy@rhone.com. If you are a California resident, you may also submit your opt-out request by calling us toll-free at (833) 736-1216.

In the preceding twelve (12) months, using server-side integrations, including conversion APIs and server-to-server event transmissions, Rhone has shared your personal identifiers (e.g., name, email address, customer ID, in hashed form), commercial information (e.g., purchase amount, items purchased, store location, date/time of purchase), and device or online identifiers with third parties (Google, Meta, TikTok, CJ, Reddit, Pinterest) for advertising measurement, conversion attribution, audience management, and ad optimization purposes. Such sharing may be deemed a sale or disclosure for targeted advertising purposes under state data privacy laws. To opt out, you may submit your opt-out request through our webform or by contacting us via email at privacy@rhone.com. If you are a California resident, you may also submit your opt-out request by calling us toll-free at (833) 736-1216. For details on how each of these third parties processes your personal information, please see Google’s Privacy Policy, Meta’s Privacy Policy, TikTok's Privacy Policy, CJ’s Privacy Notice, Reddit's Privacy Policy, and Pinterest’s Privacy Policy.

YOUR INFORMATION CHOICES

You have the following choices with respect to your personal information:

Correct or View Your Information. You may access your account to correct or view certain personal information you have provided to us, and which is associated with your account.

Opt Out of Google Analytics. To prevent your personal information from being used by Google Analytics, you can download the Google Analytics opt-out browser, which can be accessed here.

Opt Out of Meta Pixel. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings.

Opt Out of TikTok Pixel. Navigate to "Ads" in your in-app settings to opt-out of targeted advertising by TikTok.

Opt Out of Advertising Cookies. All session cookies are temporary and expire after you close your web browser. In addition to opting out of certain trackers in Your Privacy Choices, persistent cookies can be removed by following your web browser’s directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit: https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer’s Sites and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our Sites may not function properly. If you choose to opt out, we will place an "opt-out cookie" on your device. The "opt-out cookie" is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the “Opt-Out” links below, you will be directed to the respective third-party Sites where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising, or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your machine. Our use of third-party marketing and analytics cookies is considered a sale/sharing under certain state privacy laws and is also considered to be what is known as interest-based advertising (IBA). To opt out of the sale/sharing through cookies and IBA across various platforms, please visit the Digital Advertising Alliance’s YourAdChoices program tools (Your Ad Choices) or visit one of the links below.

Network Advertising Initiative (NAI) Opt-Out: https://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance (DAA) Opt-Out: https://optout.aboutads.info
European Union (EU) /European Economic Area (EEA) Opt-Out: http://www.youronlinechoices.eu
In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent.

Opt Out of Email Tracking. You can disable this tracking by blocking automatic loading of images in your email.

Opt Out of Marketing Communications. You may opt out of receiving marketing emails from us by clicking the “unsubscribe” link provided at the bottom of each email we send. Please note that we will continue to send you notifications necessary to the Services.

YOUR DATA SUBJECT RIGHTS

Individuals in the European Union and United Kingdom are entitled to certain rights under General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018 (“DPA”), respectively. To the extent these laws apply to our processing of your personal information, you are entitled to the following rights:

Right to access. For any of the processing described above, you have the right to ask us for copies of your personal information. However, this right has some exemptions, which means you may not always receive all the personal information we process. Applicable exemptions may include the management information exemption (data that we process for management forecasting or management planning about a business or other activity), or certain instances of ongoing or prior negotiations with the requestor, among others.

Right to rectification. For any of the processing described above, you have the right to ask us to rectify personal information you think is inaccurate or incomplete.

Right to erasure. When we use cookies and other trackers or send you marketing emails, you have the right to request erasure of your personal information that we are not obligated to keep in some cases (also known as the right to be forgotten). For example, you can request us to delete your personal information if: (i) we no longer need the data for the purpose it was collected for, (ii) we process the data based on your consent and you revoke your consent, (iii) you object to our processing based on legitimate interest (and we do not have an overriding legitimate interest), or (iv) you object to our processing for direct marketing purposes. We may not be able to immediately erase your personal information if we have a lawful reason or a legal or contractual obligation to retain the personal information or continue the processing.

Right to restrict processing. For any of the processing described above, if you believe that your personal information is inaccurate, that our processing is unlawful, or that we do not need your personal information for a specific purpose, you have the right to request that we restrict the processing of this personal information. You also have the possibility to request that we stop processing your personal information while we assess your request.

Right to object to processing. You have the right to object to our processing of your personal information when the legal basis for the processing is pursuant to our legitimate interests by referencing your personal circumstances. This may apply, for example to processing in connection with our social media pages. If you object to our processing, you may also request us to restrict processing of your personal information while we make our assessment.

Right to data portability. You have the right to ask that we transfer the personal information you gave us from one organization to another or give it to you. However, this right only applies when: (i) you have provided your personal information to us; (ii) the legal basis for the processing is your consent or for the performance of a contract; and (iii) the processing is carried out by automated means. You can invoke this right for the processing of the information we automatically collect from you as you interact with the Sites via cookies, pixels, and similar tracking technologies.

Right to lodge a complaint. If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office at: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/y or accessicoinformation@ico.org.uk at their helpline on 0303 123 1113. If you are located in the EU, you have the right to lodge a complaint with the relevant Supervisory Authority.

To exercise these rights, please email privacy@rhone.com.

US STATE PRIVACY RIGHTS

Residents of California, Connecticut, Nebraska, and Texas are entitled to certain rights under their respective state’s comprehensive data privacy law. If you are a resident of one of these states, you are entitled to the following rights:

Right to Access/Know. Unless an exception applies, for example, if granting this right would require us to reveal a trade secret, you have the right to (i) receive confirmation of whether we process your personal information, (ii) receive a list of categories of personal information we have collected, used, disclosed, and sold about you, (iii) receive a list of the categories of third parties to which we have disclosed your personal information, and (iv) access your personal information. If you are a resident of Connecticut, you also have the right to (a) receive a list of specific third parties to which Rhone has sold your personal information, and (b) know whether we derived any inferences about you using your personal information and whether we process your personal information for purposes of profiling to make a decision that produces any legal or similarly significant effect on you.

Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. For example, if we are required by law to retain the information that you are asking to be deleted, we would not be able to delete the information until we are legally permitted to delete it.

Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain.

Right to Opt Out. You have the right to opt out of the processing of your personal information for the purposes of: (i) targeted advertising; (ii) profiling in furtherance of any automated decisions that produce a legal or similarly significant effect; and (iii) the sale or sharing of your personal information to third parties. We do not knowingly sell, share, profile, or process for purposes of targeted advertising the personal information of individuals between ages 13-18.

Right to Data Portability. You have the right to request that we transfer your personal information to another organization or give it to you. If you exercise this right, we will provide a copy of your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another organization.

Right to Non-Discrimination / Non-Retaliation. You have the right not to receive discriminatory treatment (or in California: not to be retaliated against) in the processing of your information if you choose to exercise your privacy rights. Such discriminatory treatment may include but is not limited to (i) the denial of goods or services, (ii) being charged a different price or rate, or (iii) receiving a different level of quality in goods or services.

Right to Limit Use of Sensitive Personal Information (California residents only). You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the Services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. However, Rhone does not process personal information in a manner that gives rise to this right.

Right to Appeal (Connecticut, Nebraska, and Texas residents only). You have the right to appeal our refusal to take action in response to your privacy rights request(s). To initiate your appeal, please email us at privacy@rhone.com, subject line: “Appeal My Consumer Request.” We will review the appeal and notify you of our response. If you are concerned with our response as a result of your appeal, you may submit a complaint to the applicable state regulator, as follows:
- For Connecticut residents: submit a complaint to the Connecticut Attorney General here.
- For Nebraska Residents: submit a complaint to the Nebraska Attorney General here.
- For Texas residents: submit a complaint to the Texas Attorney General here.

Exercising Your Privacy Rights

If you are a resident of one of the states identified above and wish to exercise your privacy rights, you may submit a request by completing our webform or by contacting us via email at privacy@rhone.com. If you are a California resident, you may also submit your request by calling us toll-free at (833) 736-1216. To opt out of the sale or sharing of your data through cookies or the processing of your personal information for purposes of targeted advertising, please visit Your Privacy Choices. If we detect an opt-out preference signal (such as the Global Privacy Control signal) communicated from your (or your authorized agent’s) browser or device, we will treat the opt-out preference signal as a valid request to opt out of the sale/sharing of your personal information as it pertains to that browser or device (including any associated profile information). If we can associate the opt-out signal with you (for example, if the signal is sent when you are logged-in to your account), we will also treat the signal as an opt-out request pertaining to other browsers or devices that you use to access the Services, including any offline sale or sharing of personal information.

When submitting a request to know/access, correct, or delete your personal information, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for know/access, correction, or deletion requests with the information provided, we may ask you to provide additional information.

Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are submitting a request on behalf of another person, you must provide us with written permission, signed by the person whom the request pertains to, that shows you are authorized to submit the request on behalf of that person.

NEVADA RESIDENTS

If you are a consumer in the State of Nevada, you may request to opt out of the current or future sale of your personal information. We do not currently sell any of your personal information under Nevada law, nor do we plan to do so in the future. However, you can submit a request to opt-out of future sales by contacting us at privacy@rhone.com regarding the sale of such information. Please include “Opt-Out Request Under Nevada Law” in the subject line of your message.

CROSS-BORDER TRANSFERS

As a US-based entity, we collect the data from you directly from the United States, meaning there is no cross-border transfer of personal information. The United States has not been found by the European Union nor the United Kingdom Secretary of State to provide an adequate level of protection of personal information, i.e. a level of protection of fundamental rights and freedoms that is essentially equivalent to that guaranteed within the European Union or United Kingdom. However, we still apply reasonable safeguards to protect such personal information from unauthorized access or use, including by implementing technical, administrative, and organizational measures to ensure the information is processed in compliance with the law and for reasons consistent with this Privacy Notice.

DO NOT TRACK

We do not respond to Do Not Track requests. Do Not Track is a preference you can set in your web browser to inform Sites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

INFORMATION SECURITY

We implement appropriate technical and organizational security measures, such as access controls and encryption, to protect the personal information that we collect and maintain from unauthorized access, destruction, use, modification, or disclosure. However, no security measure or modality of data transmission is 100% secure, and we are unable to guarantee the absolute security of the personal information we have collected from you.

CHILDREN’S PRIVACY

The Services are not intended for anyone under the age of thirteen (13). We do not knowingly collect personal information from anyone under the age of thirteen (13). If we learn that we have collected or received personal information from individuals under the age of thirteen (13), we will delete the personal information. If you believe we have collected or received personal information from individuals under the age of thirteen (13), please contact us at the contact information provided below.

CHANGES TO THIS PRIVACY NOTICE

We may amend this Privacy Notice in our sole discretion at any time. If we do, we will post the changes to this page and will indicate the date the changes go into effect. We encourage you to review our Privacy Notice to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Services and/or via email, and either obtain your opt-in consent (if required) or provide an opportunity to withdraw your consent.

CONTACT US

If you have any questions about this Privacy Notice or need to access this Privacy Notice in an alternative format due to having a disability, please contact us by email at privacy@rhone.com (and use “Privacy Inquiry” in the subject line).

MOBILE TERMS OF SERVICE

The Rhone Apparel mobile message service (the "Service") is operated by Rhone Apparel (“Rhone Apparel”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to Rhone Apparel’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Rhone Apparel through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with Rhone Apparel. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Service at any time. Text the single keyword command STOP to 18540648881+ or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Rhone Apparel mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to +18884604581 or email service@rhone.com.
We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.

US State Privacy Notices

This state doesn't have an active data privacy law yet

California (CCPA)

This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.

Information we collect from you

Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
Internet Activity
Commercial Information, including purchases
Financial Information, including credit or debit card number
Location Information, including precise geolocation
Physical and Audio Data, including physical characteristics or descriptions, audio recordings, photos, and video recordings
Protected Classifications and Other Personal Characteristics, including age

To the extent we process deidentified personal information, we will make no attempt to reidentify such data.

Information from other sources

We may collect personal information about you from third-party sources, including Ad Networks, Other consumers (e.g., referrals), and Social Networks.

How long we keep your data

We do not retain data for any longer than is necessary for the purposes described in this Policy.

We generally retain data according to the guidelines below.

Data Retention
Type of Data	Retention Period
Cookies and online data we collect while you use our website, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Credit or debit card number	We delete or anonymize data concerning your use of our website within 10 years of collecting it.
Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases	We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 10 years from your last purchase with us. We may keep data beyond this period in anonymized form.
Data we collect when you contact us for customer support and other inquiries, including Name, Email address	We keep customer feedback and correspondence with our customer service for up to 2 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form.
Data we collect when you sign up for promotional and marketing communications, including Email address, Online Identifiers	Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications.
Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Purchases, Precise geolocation	We retain review, survey, and feedback data for up to 10 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services.
Data we collect in connection with privacy requests, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Precise geolocation	We retain records related to privacy requests for a minimum of 24 months following the completion of the request.
Data we collect for security purposes, including Name, Email address, Online Identifiers	We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures.

Why we process your information

We process personal information for the following business and commercial purposes:

Conducting Surveys
Creating Customer Profiles
Data Storage
Delivering Targeted Ads
Fulfilling Customer Orders
Improving our Products & Services
Internal Business Operations
Meeting Compliance & Legal Requirements
Operating our Website or Mobile Apps
Organizing & Managing Data
Preventing Fraud
Processing Payments
Providing Customer Support
Providing Cybersecurity
Sending Promotional Communications
Tracking Purchases & Customer Data

How we disclose your information

We may disclose personal information about you for business and commercial purposes when you Consumers:

Data Disclosure
Personal Information Category	Categories of Service Providers	Categories of Third Parties
Personal Identifiers	Collaboration & Productivity Tools, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, Governance, Risk & Compliance Software, IT Infrastructure Services, and Sales & Marketing Tools	Ad Networks, Customer Support Tools, Data Analytics Providers, and Fraud Prevention Tools
Internet Activity	Ad Networks, Commerce Software Tools, Cybersecurity Providers, Data Analytics Providers, Governance, Risk & Compliance Software, and Sales & Marketing Tools	Ad Networks and Data Analytics Providers
Commercial Information	Ad Networks, Commerce Software Tools, Data Analytics Providers, and Sales & Marketing Tools	Ad Networks, Commerce Software Tools, Data Analytics Providers, and Payment Processors
Financial Information	Commerce Software Tools	Commerce Software Tools and Payment Processors
Physical and Audio Data	Commerce Software Tools	None

Information “sharing” and “selling”

We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

We "sell" certain personal data to third parties, as that term is defined in the CCPA, including Personal Identifiers, Internet Activity, and Commercial Information.

You may opt-out of these data practices here.

We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.

Opt-out preference signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Your CCPA rights

Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at privacy@rhone.com. Alternatively, you can make a request by calling us toll-free at (833) 736 1216.

Right to Access

You have the right to access the specific pieces of personal information we have collected about you.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.

Right to Non-Discrimination

If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

You have the right to opt-out of any selling and sharing of your personal information.

You may exercise your right to opt-out here.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Limit the Use of Sensitive Personal Information

The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.

Request Verification

Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.

Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.

Authorized Agent

A California resident's authorized agent may submit a rights request under the CCPA by emailing us at privacy@rhone.com. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.

If you have trouble accessing this notice, please contact us at privacy@rhone.com.

Contact Us

If you have any privacy-related questions or have trouble accessing this notice, please email privacy@rhone.com.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the California Attorney General’s Office or the California Privacy Protection Agency.

Notice of Financial Incentive

Consumers who sign up for our marketing emails receive a 20% discount on their first purchase. A consumer provides their email address and consents to receive emails in exchange for a discount provided via coupon code. To opt in, a consumer must enter their email address into the form and submit it. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer at any time. We calculate the value of the offer and financial incentive by using the expense related to the offer.

Colorado (CPA)

This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the CPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

CPA Rights

Your CPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General's Office.

Connecticut (CTDPA)

This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@rhone.com.

Data “Selling” and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the CTDPA, including Personal Identifiers, Internet Activity, and Commercial Information. The specific third parties we've sold personal data to are: Google Analytics, Shopify Network Intelligence.

We process personal data for purposes of targeted advertising (as defined in the CTDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Large Language Model Training

We do not process personal data for the purpose of training large language models.

CTDPA Rights

Your CTDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Profiling Rights

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.

Delaware (DPDPA)

This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the DPDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@rhone.com.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the DPDPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the DPDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

DPDPA Rights

Your DPDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to List of Third Parties

You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. You can also find that information in our Privacy Policy.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General's Office.

Florida (FDBR)

This section provides additional information for Florida residents under the Florida Digital Bill of Rights (FDBR). The terms used in this section have the same meaning as in the FDBR.

We do not sell your sensitive personal data.

Montana (MCDPA)

This section provides additional information for Montana residents under the Montana Consumer Data Privacy Act (MCDPA). The terms used in this section have the same meaning as in the MCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MCDPA.

Data “Selling” and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the MCDPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the MCDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

MCDPA Rights

Your MCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.

Minnesota (MNCDPA)

This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the MNCDPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

MNCDPA Rights

Your MNCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Obtain List of Third Parties

You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:

Amazon Pay
Gladly
Google Ads
Google Analytics
Google Pay
ID.me
Meta Ads
Microsoft Ads
PayPal - Pay with PayPal, Venmo, Pay Later
Shop Pay
Tiktok Ads
rise.ai

Right to Delete

Right to Non-Discrimination

If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Profiling Rights

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.

Iowa (ICDPA)

This section provides additional information for Iowa residents under the Iowa Consumer Data Protection Act (ICDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the ICDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the ICDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in ICDPA.

Sensitive Data

We do not process consumers’ sensitive data.

ICDPA Rights

Your ICDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your ICDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the ICDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Sensitive Data:
We do not process consumers’ sensitive data.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Authenticating Your Request

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Iowa Attorney General's Office.

Indiana (INCDPA)

This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

INCDPA Rights

Your INCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

Right to Non-Discrimination

If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.

Kentucky (KYCDPA)

This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

KYCDPA Rights

Your KYCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

Right to Non-Discrimination

If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.

Nebraska (NDPA)

This section provides additional information for Nebraska residents under the Nebraska Data Privacy Act (NDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@rhone.com.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the NDPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the NDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

NDPA Rights

Your NDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your NDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Nebraska Attorney General's Office.

New Hampshire (NHPA)

This section provides additional information for New Hampshire residents under the New Hampshire Privacy Act (NHPA). The terms used in this section have the same meaning as in the NHPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NHPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@rhone.com.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the NHPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the NHPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

NHPA Rights

Your NHPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your NHPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Hampshire Attorney General's Office.

New Jersey (NJDPA)

This section provides additional information for New Jersey residents under the New Jersey Data Privacy Act (NJDPA). The terms used in this section have the same meaning as in the NJDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NJDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@rhone.com.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the NJDPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the NJDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

NJDPA Rights

Your NJDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your NJDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Jersey Attorney General's Office.

Maryland (MODPA)

This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@rhone.com.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the MODPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

MODPA Rights

Your MODPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.

Right to Obtain List of Categories of Third Parties

You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.

Rhode Island (RIDTPPA)

This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the RIDTPPA, including Personal Identifiers, Internet Activity, and Commercial Information. The specific third parties we've sold personal data to are: Google Analytics, Shopify Network Intelligence.

We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

RIDTPPA Rights

Your RIDTPPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

Right to Non-Discrimination

If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.

Nevada (NPICICA)

This section provides additional information for Nevada residents under the Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA), Nevada Revised Statutes Chapter 603A. The terms used in this section have the same meaning as in NPICICA. This section does not apply to data that is not considered "covered information" as defined in the NPICICA.

NPICICA Rights

Your NPICICA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to review any covered information we have collected about you online.

Right to Delete

You have the right to request that we delete any covered information we have collected about you online. We will permanently delete any such covered information from our records and direct our processors to do the same. However, we may retain your covered information if it is necessary for certain purposes, as allowed by law.

Right to Correct

You have the right to correct inaccuracies in any covered information we have collected about you online, taking into account the nature of the data and our purposes for processing it.

Right to Opt-Out

We do not receive monetary consideration in exchange for your covered information and therefore do not sell your covered information as defined in the NPICICA.

Authenticating Your Request

Third-Party Tracking

We use cookies and other technologies that allow third parties to collect covered information about your online activities over time and across different Internet websites or online services.

Oregon (OCPA)

This section provides additional information for Oregon residents under the Oregon Consumer Privacy Act (OCPA). The terms used in this section have the same meaning as in the OCPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the OCPA.

Data “Selling” and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the OCPA, including Personal Identifiers, Internet Activity, and Commercial Information. We do not knowingly "sell" the personal data of Oregon residents under the age of 16.

We process personal data for purposes of targeted advertising (as defined in the OCPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you. We do not knowingly process personal data of Oregon residents under the age of 16 for purposes of targeted advertising.

You may opt-out of these data practices here.

Profiling

The OCPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

OCPA Rights

Your OCPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Obtain List of Third Parties

You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:

Amazon Pay
Gladly
Google Ads
Google Analytics
Google Pay
ID.me
Meta Ads
Microsoft Ads
PayPal - Pay with PayPal, Venmo, Pay Later
Shop Pay
Tiktok Ads
rise.ai

Right to Delete

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your OCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Oregon Attorney General’s Office.

Tennessee (TIPA)

This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.

Data "Selling" and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the TIPA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

TIPA Rights

Your TIPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

Right to Non-Discrimination

If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.

Texas (TDPSA)

This section provides additional information for Texas residents under the Texas Data Privacy and Security Act (TDPSA). The terms used in this section have the same meaning as in the TDPSA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TDPSA.

Data “Selling” and Targeted Advertising

We "sell" certain personal data to third parties, as that term is defined in the TDPSA, including Personal Identifiers, Internet Activity, and Commercial Information.

We process personal data for purposes of targeted advertising (as defined in the TDPSA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

Profiling

The TDPSA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

TDPSA Rights

Your TDPSA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded, excessive, or repetitive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.

Right to Non-Discrimination

If you exercise your TDPSA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

Right to Opt-Out

Sale of Personal Data:
Exercise your right to opt-out here.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Right to Appeal

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Texas Attorney General’s Office.

Utah (UTCPA)

This section provides additional information for Utah residents under the Utah Consumer Privacy Act (UTCPA). The terms used in this section have the same meaning as in the UTCPA. This section does not apply to information that is not considered "personal data," such as deidentified, aggregated, or publicly available information as defined in the UTCPA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the UTCPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in UTCPA.

UTCPA Rights

Your UTCPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than once in a 12-month period, or the request is manifestly unfounded or excessive, or it is part of an organized effort to harass, disrupt, or place undue burden on our business, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data you have provided to us. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.

Right to Non-Discrimination

If you exercise your UTCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the UTCPA.

Targeted Advertising:
Exercise your right to opt-out here.

Authorized Agent

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Authenticating Your Request

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Utah Division of Consumer Protection.

Virginia (VCDPA)

This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the VCDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in VCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

VCDPA Rights

Your VCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

Right to Non-Discrimination

If you exercise your VCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.