PERSONAL INFORMATION WE COLLECT
When you visit the Website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. In addition, we collect information about the individual web pages or products that you view, the websites or search terms that referred you to the Website, and information about how you interact with the Website. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, including how to disable cookies, visit http://www.allaboutcookies.org.
“Log files” track actions occurring on the Website and collect data such as your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Website.
In addition, when you make a purchase or attempt to make a purchase through the Website, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information.”
HOW WE USE YOUR PERSONAL INFORMATION
We use the Order Information that we collect to fulfill any orders placed through the Website, including processing your payment information, arranging for shipping, and providing you with order confirmations. In addition, we use this Order Information to communicate with you, screen our orders for potential risk or fraud, and occasionally provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risks and fraud (in particular, your IP address), as well as to improve and optimize our Website and to analyze the success of our marketing and advertising campaigns.
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Wix to power our online store. You can read more about how Wix uses your Personal Information here: https://www.wix.com/about/privacy. We also use Google Analytics to help us understand how our customers use the Website. You can read more about how Google uses your Personal Information here: If you wish to opt-out of Google Analytics, please visit here:
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information, or to otherwise protect our rights.
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at
DO NOT TRACK
Please note that we do not alter our Website’s data collection and use practices when we see a Do Not Track signal from your browser.
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
In addition, if you are a European resident we acknowledge that we are processing your information in order to fulfill contracts we might have with you or to otherwise to pursue our legitimate business interests listed above. Please note that your information will be transferred outside of Europe to the United States.
The California Consumer Privacy Act of 2018, Cal. Civ. Code §1798.100 et seq., (“CCPA)” took effect on January 1, 2020. The CCPA grants new privacy rights to California consumers, including:
The right to know what personal information is collected, used, shared, or sold, both as to the categories and specific pieces of personal information;
The right to delete personal information held by businesses and by extension, a business’s service provider;
The right to opt-out of the sale of personal information. Consumers are able to direct a business that sells Personal Information to stop selling that information. Children under the age of 16 must provide opt in consent, with a parent or guardian consenting for children under 13; and
The right to non-discrimination in terms of price or service when a consumer exercises a privacy right under CCPA.
A business subject to the CCPA that collects a California consumer's Personal Information must, at or before the point of collection, inform the consumer as to the categories of Personal Information to be collected and the purposes for which the categories of Personal Information shall be used.
A covered business must disclose and deliver the Personal Information the business collected about the consumer in response to a verifiable consumer request.
For purposes of the CCPA, “Personal Information” does not include:
Publicly available information from government records;
De-identified or aggregated consumer information; or
Information excluded from the CCPA's scope, such as:
health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
A further summary of consumer rights provided by the CCPA follows.
B. Right to Know.
A business that collects Personal Information must also disclose, in response to a verifiable consumer request, the following:
The categories of Personal Information the business has collected about the consumer;
The categories of sources from which that Personal Information is collected;
The business or commercial purpose for collecting or selling Personal Information collected from consumers;
The categories of third parties with which the business shares Personal Information;
The specific pieces of Personal Information the business has collected about the consumer making the request;
A business that sells a consumer's Personal Information or discloses a consumer's Personal Information for a business purpose must disclose the following in response to a verifiable consumer request:
The categories of Personal Information the business has collected about the individual consumer
The categories of Personal Information the business has sold about the consumer and categories of third parties to which the Personal Information was sold by category or categories of Personal Information for each third party to which the Personal Information was sold. Or, if the business has not sold any consumer Personal Information, it must state that fact)
The categories of Personal Information the business has disclosed about the consumer for a business purpose. Or, if the business has not disclosed any consumer Personal Information for a business purpose, it must state that fact.
C. Right to Deletion.
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our Service Providers to delete) your Personal Information from our records, unless an exception applies.
However, the CCPA provides for certain exceptions to the Right to Deletion. We may deny your deletion request if retaining the information is necessary for us or our Service Providers to:
Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
D. Right to Non-Discrimination.
A business must not discriminate against a consumer who exercises any of the consumer's rights under the CCPA. However, a business may charge different prices or provide a different quality of goods or services if the difference is reasonably related to the value provided to the consumer by the consumer's data and may offer financial incentives to a consumer for the collection, sale, or deletion of Personal Information on a prior opt-in consent basis.
E. Right to Opt-Out.
A business that sells consumers' Personal Information to third parties needs to provide notice to consumers thereof and that consumers have the right to opt out of the sale of their Personal Information. A business must provide a "Do Not Sell My Personal Information" link on its Internet homepage that links to an Internet webpage that enables a consumer to opt out of the sale of the consumer's Personal Information.
A business must not sell the Personal Information of consumers if the business has actual knowledge that the consumer is less than 16 years of age, unless the consumer, in the case of consumers between 13 and 16 years of age, or the consumer's parent or guardian, in the case of consumers who are less than 13 years of age, has affirmatively authorized the sale of the consumer's Personal Information.
Consumers' rights under the CCPA, including the consumer right to opt out of the sale of the consumer's Personal Information and a separate link to the "Do Not Sell My Personal Information" Internet Web page;
The methods for submitting and verifying consumer requests; and
A list of the categories of Personal Information that the business has collected about consumers, sold about consumers, and disclosed about consumers for a business purpose in the preceding 12 months
If you wish to exercise any of the CCPA consumer rights summarized above, such as a Request to Know or a Request to Delete Personal Information, you can do so by emailing us at or by using the contact form here.
Upon receiving a verifiable Request to Know or a Request to Delete, we will confirm receipt of the request within ten (10) days and provide some information about how we will verify and handle the request, and by when you should expect to receive a response.
Please note that you may only make a verifiable consumer Request to Know or Request to Access your data under the CCPA two times within any 12-month period.
B. Verification Of The Person Making A Consumer Rights Request.
Of course, we need to be reasonably sure that the person making the request is actually you! So, we may need some information from you to verify that you are the person whose Personal Information you are asking to know about or to delete. Accordingly, the verifiable consumer request must:
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
C. Designating An Authorized Agent to Make A Request for You.
Only you or a person registered with the California Secretary of State that you designate and authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. For your protection, we will need some proof that someone seeking to act on your behalf is actually authorized by you to do so. You may also make a verifiable consumer request on behalf of your minor child.
D. Response Timing and Format.
We will try to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we need more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt.
If you are making a Request to Delete your Personal Information, we will re-confirm with you that you really want your information deleted after verifying your request.
If we cannot respond to or comply with your Request to Know or Request to Delete, say because we cannot verify your identity or because an exception applies, we will explain the reasons we cannot comply with your request.
When you place an order through the Website, we will maintain your Order Information for our records unless and until you ask us to delete this information.
If you would like more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at or by mail using the following information:
Belle à Nouveau, LLC
3519 NE 15th Avenue, #573
Portland, OR 97212