Last Updated: Apr 20, 2022
BY VISITING, SIGNING UP, USING, BROWSING, OR ACCESSING THE SERVICES, YOU CONSENT TO THE DATA PRACTICES DESCRIBED IN THIS STATEMENT. IF YOU DO NOT AGREE WITH OUR PRIVACY PRACTICES, DO NOT USE THE SERVICES.
INFORMATION WE COLLECT
We may collect information, including: Personal Health Information, Personal Information, and Non-Personal Information, when you interact with us and the Services, for example when you:
- 1. Access or use the Services;
- 2. Open or respond to our e-mails;
- 3. Contact customer service;
- 4. Visit any page online that displays our ads or content;
- 5. Make a purchase on or through the Services (if applicable);
“Personal Information” means information about you that specifically identifies you or, when combined with other information we have, can be used to identify you. As a general rule, we do not collect Personal Information about you when you visit and/or use the Services, unless you choose to provide such information to us. Submitting Personal Information through the Services is voluntary. By doing so, you are giving us your permission to use the information for the stated purpose.
(a) LEGAL BASIS FOR COLLECTING YOUR PERSONAL INFORMATION
- 1. With your consent: We ask for your agreement to process your information for specific purposes, and you have the right to withdraw your consent at any time.
(b) INFORMATION WE COLLECT AND HOW WE COLLECT INFORMATION
Through the Services, we may collect information that can identify you when you voluntarily submit it to us. Your Personal Information may include:
- 1. Full Name or ID Number;
- 2. Address;
- 3. Email address;
- 4. Date of Birth
- 5. Other similar information
(c) PERSONAL HEALTH INFORMATION (PHI) and HIPAA
Certain demographic, health and/or health-related information that Small Joys collects about its Users as part of providing the Services to Providers may be considered “Protected Health Information” or “PHI” under the Health Insurance Portability and Accountability Act (“HIPAA”). Specifically, the results of your visual acuity test may be considered PHI. However, Personal Information that you provide to Small Joys outside of the foregoing context is not PHI. For example, when you provide information directly to us, such as when creating an account or using our interactive tools and services, or when you voluntarily provide information in free-form text boxes through the Services or through responses to surveys and questionnaires, or when you send us an email or otherwise contact us, that information is not PHI. HIPAA provides specific protections for the privacy and security of PHI and restricts how PHI is used and disclosed. Small Joys may only use and disclose PHI in the ways permitted by law.
(d) STORAGE OF PERSONAL INFORMATION
We will take reasonable precautions, as well as physical, technical, and organizational measures in accordance with industry standards, as described herein, to protect your Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Computer safeguards, such as firewalls and data encryption may be used to protect your information. We authorize access to your information only for those employees or agents who require it to fulfill their job responsibilities and these individuals are required to treat this information as confidential.
However, the security of information on or transmitted via the Internet cannot be guaranteed. Unauthorized entry of use, hardware or software failures, and other factors may compromise the security of your Personal Information. All information you send to us electronically or through email is not secure. Any transmission is at your own risk as the transmission of information via the Internet is not completely secure.
We collect and temporarily store certain information about your usage of the Services. Non-Personal Information means information that alone cannot identify you, including data such as cookies, pixel tags, web beacons and device information. The information includes, without limitation:
- 1. Device Data: We may collect information such as: the type of computer and/or mobile device you use; the unique device ID of your computer and/or mobile device; the IP address of your computer and/or mobile device; the operating system of your computer and/or mobile device; and the type of mobile internet browsers of your computer and/or mobile device.
- 2. Usage details: When you access and use the Services, we may automatically collect certain details of your access to and use of the Services, including traffic data, location data, logs and other communication data and the resources that you access and use on or through the Services.
- 3. Location information: When you first visit or use the Services, we may request permission to collect and use your device’s precise geolocation. You can opt not to permit the collection of this information, but you may not be able to use the Services provided by Small Joys without access to your location. We need your location information in order to provide our Services. You can control how and whether we collect your precise geolocation information through your device’s settings.
We may use information that has been de-identified and/or aggregated to better understand who uses our Services and how we can deliver a better experience, or otherwise at our discretion.
If you do not want us to collect this information, you may either change your device’s privacy settings or DO NOT ACCESS OR USE THE SERVICES.
INFORMATION COLLECTION TECHNOLOGIES
The technologies we use for automatic information collection may include:
- 1. Cookies (or mobile cookies): We may use "cookies" to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you. The purpose of a cookie is to tell the web server that you have returned to a specific page. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Services.
- 2. Retargeting/Advertising Cookies: Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you.
- 3. Web Beacons: The Services and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related Services statistics.
- 4. Social Ad Platforms: We may also use Google Analytics, Facebook, Instagram, and Twitter’s functionality of re-marketing through their tracking cookies and pixel-based retargeting services. This means that if you provided your consent to Google, Facebook, Instagram or Twitter (the “Social Ad Platforms”) to be provided with personalized commercial offers, you may be served with ads (including advertisements of third parties) based on your access to the Services, outside of the Services and across the internet. In such event, the Social Ad Platforms, will place cookies on your web browser and use such cookies to serve you ads based on past visits to our Services.
- Google: https://policies.google.com/technologies/ads
- Facebook: https://www.facebook.com/about/privacy/
- Instagram: https://help.instagram.com/478880589321969/
- Twitter: https://business.twitter.com/en/help/ads-policies/other-policy-requirements/policies-for-conversion-tracking-and-tailored-audiences.html
- 5. Mobile Device Identifiers: Mobile device identifiers help Small Joys learn more about our users’ demographics and internet behaviors. Mobile device identifiers are data stored on mobile devices that may track mobile device and data and activities occurring on and through it, as well as the applications installed on it. Mobile device identifiers enable collection of Personal Information (such as media access control, address and location, and tracking data, including without limitation IP address, domain server, type of device(s) used to access the Services, web browser(s) used to access the Services, referring webpage or other source through which you accessed the Services, other statistics and information associated with the interaction between your browser or device and the Services).
- 6. Cross Device Matching: To determine if users have interacted with content across multiple devices and to match such devices, we may work with partners who analyze device activity data and/or rely on your information (including demographic, geographic and interest-based data). To supplement this analysis, we may also provide de-identified data to these partners. Based on this data, we may then display targeted advertisements across devices that we believe are associated or use this data to further analyze usage of Services across devices.
CHANGING YOUR DATA COLLECTION SETTINGS
We strive to provide you with choices regarding the Personal Information you provide to us. You may need to adjust the settings on your computer and/or device to restrict the collection of information by the Services, but this may prevent you from accessing all of the features of the Services.
- 2. Location Information:You can choose whether or not to allow the Services to collect and use real-time information about your device’s location through the device’s privacy settings. If you block the use of location information, some parts or all of the Services may be inaccessible or not function properly.
- 3. Social Ad Platforms:If you wish to opt-out of re-targeting and tracking functionality of the Social Ad Platforms, you may do so through each platform directly. PLEASE NOTE that these tracking and targeting by Social Ad Platforms, is provided pursuant to your engagement with the Social Ad Platforms and the actual nature and scope of Personal Information collection and processing performed by such Social Ad Platforms may not be fully known to us. If you would like to learn more or make further inquiries with respect to such nature or scope, please refer to each Social Ad Platforms directly.
You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You may also be able to reject mobile device identifiers by activating the appropriate setting on your mobile device. You can also delete all Cookies that are already on your computer. Although you are not required to accept Small Joys’ Cookies, if you block, reject, or delete them, you may have to manually adjust some preferences every time you visit a site and some of the Services and functionalities may not work.
To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about Cookies, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/
THIRD-PARTY AUTOMATIC INFORMATION COLLECTION
When you use the Services or its contents, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include:
- 1. Advertisers, ad networks and ad servers;
- 2. Analytics companies;
- 3. Your mobile device manufacturer;
- 4. Your mobile service provider; and/or
- 5. Your Internet provider.
These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your Personal Information or they may collect information about your online activities over time and across different websites, mobile applications and other online sites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
HOW WE USE YOUR INFORMATION
- 1. Operate, maintain and improve the Services;
- 2. Provide you with the Services and its contents, and any other information, products or services that you request from us;
- 3. Send you reminders, technical notices, updates, security alerts, support and administrative messages and marketing messages;
- 4. Request customer feedback;
- 5. Answer your questions and respond to your requests;
- 6. Ensure that content from our Services is presented in the most effective manner for you and for your computer or device for accessing the Services;
- 7. Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including the Terms and Conditions; and
- 8. Notify you when there are changes to any services we offer or provide though the Services.
(b) Usage and Analytics
- 1. Estimate our audience size and usage patterns;
- 2. Perform analytics and conduct customer research;
- 3. Analyze advertising effectiveness; and
- 4. Communicate and provide additional information that may be of interest to you about us and our business partners.
(c) LocationWe will use location data for the following reasons:
- To provide our Services targeted to your geographical area;
- To display information that is relevant to your particular location.
HOW WE DISCLOSE YOUR PERSONAL INFORMATION
The Personal Information you provide to us whether voluntarily or automatically, may be used and disclosed without limitations, in the following instances:
- 1. With vendors who provide services for us (who are required to protect the Personal Information);
- 2. To report or collect on debts owed to us;
- 3. To a prospective buyer or buyer of Small Joys, or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all our assets;
- 4. As part of bankruptcy, liquidation or similar proceeding;
- 5. To comply with legal requirements for the enforcement of law, regulations, court orders, subpoena, a warrant during the course of a legal proceedings or otherwise;
- 6. To protect and safeguard our copyright, trademarks, legal rights, intellectual property rights or safety; or
- 7. In response to a subpoena, or similar legal process, including to law enforcement agencies, regulators, and courts in the United States.
HOW WE DISCLOSE YOUR NON-PERSONAL INFORMATION
We may also disclose Non-Personal Information:
- 1. For the same reasons, we might share Personal Information;
- 2. With our advertisers for their own analysis and research;
- 3. To facilitate targeted content and ads; or
- 4. With Third-Party Ad Servers to place our ads on the Services and on third-party websites or mobile applications.
HOW TO ACCESS, UPDATE, WITHDRAW CONSENT OR DELETE YOUR INFORMATION
If the laws applicable to you grant you such rights, you may ask to access, correct, or delete your Personal Information that is stored in our systems or that we otherwise control. You may also ask for our confirmation as to whether or not we process your Personal Information or ask to withdraw any consent you have previously provided to Small Joys in connection with our use and processing of your Personal Information. Subject to the limitations in law, you may request that we update, correct, or delete inaccurate or outdated information. You may also request that we suspend the use of any Personal Information the accuracy of which you contest while we verify the status of that data.
If you wish to exercise any of these rights or withdraw your consent, please contact us at: email@example.com. When handling these requests, we may ask for additional information to confirm your identity and your request. Please note, upon request to delete your Personal Information, we may retain such data in whole or in part to comply with any applicable rule or regulation and/or response or defend against legal proceedings versus us or our affiliates, or as we are otherwise permitted under such law applicable to you. While we strive to honor all reasonable requests, please be aware that we backup the data to prevent accidental or malicious destruction of your information. Information on backup servers may take some time to be completely deleted from the system. If you request that we remove you from our system and delete all your information, please note that you may still receive materials while your request is being processed.
SECURITY AND DATA RETENTION
The security of your Personal Information is important to us. We seek to protect your Personal Information from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Information and how we are processing that data. We endeavor to follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and in storage. For example, the Services use industry standard Secure Sockets Layer (SSL) technology to allow for the encryption of Personal Information. We store and process your information on our servers in the United States and abroad. We maintain what we consider industry standard backup and archival systems. Although we work to protect the security of the data that we hold in our records, for example, by making good faith efforts to store Personal Information in a secure operating environment that is not open to the public, please be aware that no method of transmitting data over the Internet or storing data is completely secure. We cannot and do not guarantee the complete security of any data you share with us, and except as expressly required by law, we are not responsible for the theft, destruction, loss or inadvertent disclosure of your information or content.
If at any time during or after our relationship we believe that the security of your Personal Information may have been compromised, we may seek to notify you of that development. If a notification is appropriate, we will endeavor to notify you as promptly as possible under the circumstances. If we have your e-mail address, we may notify you by e-mail to the most recent e-mail address you have provided us. If you receive a notice from us, you can print it to retain a copy of it. To receive these notices, you must check your e-mail account using your computer or mobile device and email application software. You consent to our use of e-mail as a means of such notification. If you prefer for us to use the U.S. Postal Service to notify you in this situation, please e-mail us at firstname.lastname@example.org. Please include your address when you submit your request. You can make this election any time, and it will apply to notifications we make after a reasonable time thereafter for us to process your request. You may also use this e-mail address to request a print copy, at no charge, of an electronic notice we have sent to you regarding a compromise of your Personal Information.
We retain Personal Information about you consistent with all internal policies and procedures. We may retain Personal Information to comply with our legal obligations, resolve disputes or collect fees owed, or as is otherwise permitted or required by our data retention policies and procedures.
COMPLIANCE WITH APPLICABLE LAWS AND REGULATIONS
We represent and warrant that we will comply with all applicable laws, rules, regulations, directives and guidelines regarding the collection, use and disclosure of data collected from or about Users or specific devices which apply to the services utilized hereunder (collectively, the “Rules”). The term “Rules” shall include, without limitation,(i) United States Federal Trade Commission Laws regarding the collection, use and disclosure of data from or about users and/or specific devices; (ii) the Children’s Privacy Protection Act of 1998 (COPPA); (iii) The California Consumer Privacy Act of 2018 (“CCPA”) and (iv) if applicable, the Rules of any other jurisdiction, including and European Union General Data Protection Regulation (“EU GDPR”), rules, regulations and/or directives promulgated by a pertinent Data Protection Act, and all amendments and updates to them or regulations as replaced or superseded from time to time.
CALIFORNIA ‘DO NOT SELL MY INFO’ NOTICE
Like many companies online, we work with Google, Facebook and other companies that use information collected from cookies and similar technologies to try to make the ads you see online more relevant to your interests. This is called interest-based advertising. Our use of these services may constitute a “sale” of Personal Information as defined under the California Consumer Protection Act (CCPA). You can opt-out of the use of your information for interest-based advertising by:
- Browser settings. Blocking third party cookies in your browser settings.
- Privacy browsers/plug-ins. Using privacy browsers or ad-blocking browser plug-ins that let you block advertising trackers.
- Platform settings. Using the opt-out settings offered by some of the advertising companies that we work with.
- Ad industry tools. Opting out of interest-based ads from companies participating in the following industry opt-out programs:
- Network Advertising Initiative: https://optout.networkadvertising.org/?c=1
- Digital Advertising Alliance: optout.aboutads.info, which will allow you to opt-out of interest-based ads served by on websites by participating members.
- AppChoices mobile app: https://www.youradchoices.com/appchoices, which will allow you to opt-out of interest-based ads in mobile apps served by participating members.
Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes. You will need to apply these opt-out settings on each device from which you wish to opt-out. Not all companies that serve interest-based ads participate in these opt-out programs, so even after opting-out, you may still receive some cookies and interest-based ads from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online, but they may be less relevant to you.
Our sharing of information with the data providers described above may also constitute “sales” as defined under the CCPA. You may submit a request to opt-out of this information sharing by sending an email to email@example.com. with “Privacy” in the subject line.
Your CCPA rights. As a California resident, you have the following rights as of January 1, 2020:
- a. Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
- 1. The categories of Personal Information that we have collected.
- 2. The categories of sources from which we collected Personal Information.
- 3. The business or commercial purpose for collecting and/or selling Personal Information.
- 4. The categories of third parties with whom we share Personal Information.
- 5. Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information disclosed to each category of third-party recipient.
- 6. Whether we’ve sold your Personal Information, and if so, the categories of Personal Information received by each category of third-party recipient.
- b. Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
- c. Deletion. You can ask us to delete the Personal Information that we have collected from you.
- d. Opt-out. You can opt-out of any “sale” of your Personal Information as defined in the CCPA.
- e. Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA.
You may submit a request to exercise your right to information, access or deletion by emailing to firstname.lastname@example.org with “Privacy” in the subject line. We reserve the right to confirm your California residency to process these requests and will need to confirm your identity. Government-issued identification may be required. You may designate an authorized agent to make a request on your behalf by providing a valid power of attorney or other proof of authority acceptable to us in our reasonable discretion, the requester’s valid government-issued identification, and the authorized agent’s valid government-issued identification. You can submit a request to opt-out of sales of your Personal Information as described above. We cannot process your request if you do not provide us with sufficient information to allow us to understand and respond to it. In certain cases, we may decline your request as permitted by law.
The Services are not directed to or intended for use by children under 13 years of age. If you are a child under the age of 13, parental registration must be obtained prior to using the Services. By accessing, using and/or submitting information without parental consent, to or through the Services, you represent that you are not under the age of 13. As noted in the Terms and Conditions, we do not knowingly collect or solicit Personal Information from children under the age of 13. If we learn that we have received any Personal Information directly from a child under age 13 without first receiving his or her parent’s verified consent, we will use that Personal Information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use the Services. We will then subsequently delete that child’s Personal Information. If you believe that a child under 13 may have provided us with Personal Information, please contact us at to email@example.com
In order to comply with the Children’s Online Privacy Protection Act (“COPPA”). The information shall include the name, date of birth, the name of parent or guardian, and parental contact information of any child under the age of 13 who will be receiving the Services. Such information shall be used by Small Joys in order to obtain “verifiable parental consent” as defined by 16 CFR § 312.5.
UPDATES TO THIS POLICY
Small Joys, Inc.
One Bridge Plaza North
Fort Lee, NJ 07024
By Email: firstname.lastname@example.org