This Privacy Notice for Five Lions Design, doing business as Dontbelated, heirs, successors, affiliates, or assigns (“we,” “us,” or “our”), describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
- Visit our website at https://www.dontbelated.com/ or any website of ours that links to this Privacy Notice
- Use Dontbelated to order and send handwritten cards
- This service is intended only for use within the United States.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.
Summary of key points
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? Some information may be considered “special” or “sensitive” in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.
Do we collect any information from third parties? If you sign in using a social account (Apple or Google), we receive certain profile information from that provider. We do not otherwise purchase or collect information about you from public databases, marketing partners, or other outside sources.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties, described below.
What are your rights? Depending on where you are located, applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights? The easiest way to exercise your rights is by contacting us at info@dontbelated.com. We will consider and act upon any request in accordance with applicable data protection laws.
01
What information do we collect?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, place an order, express an interest in obtaining information about us or our products and Services, or otherwise when you contact us. This includes your name, email address, mailing address, payment information (processed by our payment provider, Stripe), and, where you choose to provide it, information about a contact you’re sending a card to (their name, address, relationship, and birthday or other event date).
Sensitive Information. We do not process sensitive information.
By providing personal information, you warrant and agree that the information you provide to us is true, complete, and accurate, and you must notify us in writing on this website of any changes to such personal information.
Information automatically collected
In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
02
How do we process your information?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including to:
- Create and manage your account
- Process your orders and payments (via Stripe)
- Print, address, and mail your cards, and coordinate related scheduling and reminders
- Communicate with you about your account or orders, including responding to support inquiries
- Protect our Services from fraud, unauthorized transactions, and other liability
03
When and with whom do we share your personal information?
In Short: We may share information in specific situations described in this section and/or with the following third parties.
We may need to share your personal information in the following situations:
- Service providers. We share information with vendors who perform services on our behalf, such as Stripe (payment processing), AWS SES (email delivery), and, once finalized, a shipping/postal provider for the purpose of delivering physical mail.
- Business Transfers. We may share or transfer your publicly available information in connection with, or during negotiations, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
04
Do we use cookies and other tracking technologies?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.
Specific information about how we use such technologies and how you can refuse certain cookies will be set out in our Cookie Notice, once our analytics and tracking tools are finalized.
05
How do we handle your social logins?
In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.
Our Services offer you the ability to register and log in using your third-party social media account details (your Apple or Google account). Where you choose to do this, we will receive certain profile information about you from that provider, which will often include your name, email address, and profile picture, as well as other information you choose to make public on that platform.
We will use the information we receive only for the purposes described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information.
06
Is your information transferred internationally?
Our Services are offered exclusively within the United States, and we do not knowingly collect or transmit information from individuals located outside the United States.
Our servers are located in the United States. Dontbelated does not offer its Services outside the United States and does not knowingly collect personal information from individuals located outside the United States.
07
How long do we keep your information?
In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
If you delete your account, we retain your information (contacts, order history, and unused credits) for 90 days, during which you may restore it by signing back in to your account. After 90 days, this information is permanently deleted, unless retention is required by law or regulation. An account cannot be deleted while any card paid for on it has not yet been delivered.
08
Do we collect information from minors?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
We do not knowingly collect any Personal Identifiable Information from children under the age of 13. If we learn at any time that we have been providing services to or have collected the information of a child under the age of 13 then we will immediately destroy this personal information unless we are legally obligated to retain such data. Please email us at info@dontbelated.com if you believe that we have unintentionally provided services to or collected the information of a child under the age of 13.
If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records. Children between the ages of 13 and 18 years of age must receive permission from a parent or legal guardian to access this website.
Please note that if you send a card to a minor (for example, your own child), the minor’s name and address are provided by you, the adult account holder, not collected from the minor directly.
09
What are your privacy rights?
In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.
Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details in “How can you contact us about this notice?” below. Withdrawing consent will not affect the lawfulness of processing before its withdrawal.
Account Information: If you would at any time like to review or change the information in your account, or terminate your account, you can do so through your account settings, or by contacting us. Upon your request to terminate your account, we will deactivate or delete your account and information as described in “How long do we keep your information?” above. We may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with applicable legal requirements.
10
Controls for Do-Not-Track features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.
If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.
11
Do we make updates to this notice?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
12
How can you contact us about this notice?
If you have questions or comments about this notice, you may contact us by email at info@dontbelated.com, or by post at:
Five Lions Design2275 Marietta Blvd, Suite 270-113Atlanta, GA 30318United States13
How can you review, update, or delete the data we collect from you?
Based on the applicable laws of your country or state, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please contact us at info@dontbelated.com.
14
California Consumer Privacy Act (CCPA) notice
In this notice, we are addressing specific disclosure requirements under the California Consumer Privacy Act of 2018 for California residents. This notice applies only to “personal information” that is subject to that law and applies to all California residents who visit our Sites or use the Services. California residents have rights to request access to certain personal information collected about them over the past 12 months, or deletion of their personal information, subject to certain exceptions, and may not be discriminated against because they exercise any of their rights under the California Consumer Privacy Act. We may require you to provide additional personal information to verify your identity before we process your request; we may not process your request if we are unable to verify your identity.
We collect, use and share personal information regarding California residents as described in this notice.
15
EEA resident rights
If you are a resident of the European Economic Area, you have the following data protection rights:
- If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under “How can you contact us about this notice?”
- In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the same contact details.
- You have the right to opt out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. Registered users can manage their account settings and email marketing preferences from their account. If you are an unregistered user, or to opt out of other forms of marketing (such as postal marketing or telemarketing), you may contact us using the contact details provided above.
- Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You have the right to complain to the applicable data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.
We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We will respond to all requests within a reasonable timeframe. Notwithstanding the foregoing, we reserve the right to keep any information in our archives that we deem necessary to comply with our legal obligations, resolve disputes and enforce our agreements.
16
Canadian Anti-Spam Law (CASL)
CASL applies to commercial electronic messages (CEMs) of all types (i.e., email, texts, sound, voice or image messages) meant to encourage participation in a commercial activity (e.g., offer to purchase a product, advertise or promote a product). Its key feature requires organizations that send CEMs within, from, or to Canada to receive consent from the consumer before sending messages. Consent can be obtained either explicitly or implicitly. Examples of explicit consent include but are not limited to signing up for our mailing list online, entering sweepstakes and contests, and information requests made via one of our online services. Implied consent stems from either the purchase of a product or inquiry about a product; implied consent is considered valid for 24 months following the purchase of a product, and 6 months following an inquiry about a product.
If you are on our commercial electronic messages mailing list, you may unsubscribe from it at any time. Unsubscribe instructions are included with each of our emails. You may also visit our online email page and unsubscribe. If you choose to unsubscribe, your address will be removed in no more than 10 business days. Please allow 5 days for us to remove your email address from any future mailings. Please note that should you order from us in the future, you will still receive order and shipping confirmations from us via email.