BY USING OUR SERVICES, YOU:

REPRESENT AND WARRANT THAT:
1. YOU HAVE REACHED THE AGE OF 18,
2. YOU HAVE THE CAPACITY TO ENTER INTO BINDING OBLIGATIONS, AND
3. ALL INFORMATION SUPPLIED BY YOU TO US IS TRUE, ACCURATE, CURRENT AND COMPLETE;
AGREE TO BE BOUND BY AND COMPLY WITH OUR TERMS OF SERVICE AND PRIVACY POLICY.

OVERVIEW

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from gorillamind.com (the “Site”).

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including but not limited to information about your web browser, IP address, time zone, demographic information, analytical information, your email address, phone number, geographic information, and the cookies installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information”.

We collect Device Information using the following technologies:

“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit https://www.allaboutcookies.org.
“Log files” track actions occurring on the Site, and collect data, including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.
"Web Storage" and "Local Storage" are local browser data storage locations.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers and bank account information, which is collected and processed securely in compliance with relevant laws and regulations), email address, and phone number. We refer to this information as “Order Information”.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

Present our Website and its contents to you;
Provide information, products, or services you request from us;
Fulfill any other purpose for which you provide it;
Carry out our obligations and enforce our rights arising from contracts entered into between you and us, including for billing and collection;
Use in any other way we may describe when you provide the information;
Use for any purpose with your consent;
Communicate with you;
Screen our orders for potential risk or fraud; and
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns). We may also provide your data for relevant marketing and/or product campaigns, to which you can opt out. We may also sell or distribute anonymous data to third parties for analytical and other purposes.

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations; to respond to a subpoena, search warrant, or other lawful request for information we receive; or to otherwise protect our rights.

BEHAVIORAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the links below:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

OUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

DATA RETENTION AND SECURITY

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Site, like message boards. The information you share in public areas may be viewed by any user of the Site.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Site Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Site and this privacy policy to check for any changes.

MINORS

The Site is strictly intended for use by individuals 18 years of age or older. It is not designed or intended for use by children under the age of 18. We do not knowingly collect, use, or disclose personal information from children under the age of 18. If we become aware that we have unknowingly collected personal information from a child under the age of 18, we will make reasonable efforts to delete such information from our records. Furthermore, we reserve the right to terminate any account or refuse service to any user that we believe has violated these age restrictions.

SMS/MMS MOBILE MESSAGING MARKETING PROGRAM

We respect your privacy. We will only use information you provide through the Program to transmit your mobile messages and respond to you, if necessary. This includes, but is not limited to, sharing information with platform providers, phone companies, and other vendors who assist us in the delivery of mobile messages. WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS OR CUSTOMER INFORMATION COLLECTED THROUGH THE PROGRAM TO ANY THIRD PARTY. Nonetheless, we reserve the right at all times to disclose any information as necessary to satisfy any law, regulation or governmental request, to avoid liability, or to protect Our rights or property. When you complete forms online or otherwise provide us information in connection with the Program, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in our sole discretion, we believe that any such information is untrue, inaccurate, or incomplete, or that you have opted into the Program for an ulterior purpose, we may refuse you access to the Program and pursue any appropriate legal remedies.

California Civil Code Section 1798.83 permits users of the Program that are California residents to request certain information regarding our disclosure of the information you provide through the Program to third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

UPDATES & CHANGES

We reserve the right, at any time, to add to, change, update, or modify this Policy, simply by posting such change, update, or modification on the Site and without any other notice to you. Any such change, update, or modification will be effective immediately upon posting on the Site. It is your responsibility to review this Policy from time to time to ensure that you continue to agree with all of its terms.

STATE PROTECTION RIGHTS

We may use automated processing to verify personal data and determine whether to contact a prospective customer as part of a campaign on behalf of our clients. This is to ensure that we are providing the best service possible to our users and clients.

Under Data Protection Laws in some U.S. States and in the UK. Your rights are as follows:

The right to be informed: We collect your data to make our interactions smoother, and we will advise you of the purpose for which we collect personal data. We will ask for your permission if we want to use your personal information for another purpose. We will collect your personal information fairly, lawfully, for legitimate purposes only and where appropriate, only with your knowledge and consent.
The right to access: You have the right to ask us for information that we have about you, and in most cases, we will try to do this for no charge. If there is a burdensome amount of information, then we will ask you for a nominal, reasonable fee. We will try to satisfy your request in under 30 days, which is the time that we have under law. If we are unable to fully comply with your request, you can appeal to the data supervising authority, and you must do that within 30 days. We will, of course, try our best to deliver the data to you before that timeline.
The right to rectification: It is important for us to keep your trust, and so we will take care to keep your data accurate and to up to date. If you inform us of a change, then we will take steps to amend that data as soon as is reasonably possible. We want to make sure that any data we have about you is lawfully kept and that it is accurate.
The right to erasure: You may ask us to delete your data and withdraw consent at any time at [email protected]. We will honor this request as allowed by law. After a reasonable, legal period of time, we will not keep your data. So, for example, if we end up doing business together through a contract, we will only keep the contract specific information as long as the pertinent laws require.
The right to restrict processing: At any time, you can inform us that you want us to restrict processing and we will satisfy that request as soon as reasonably possible. Some types of processing are required for us to continue our relationship with you. We will always follow relevant laws about electronic record retention.
The right to object processing: If you are not satisfied with our data processing methods, you may complain to the data privacy authority where you live.
The right to data portability: If you give electronic personal data either by 1) consent to store your data or 2) we enter into a contract with each other, then you can request us to provide you with machine-readable data of your account information. In the case that we would process your data via automated means, you would also have this right, called the Right to Portability.
Rights relating to automated processing of personal data: The right to opt out of and/or restrict the use of automated decision making according to artificial intelligence with respect to your data.
The right to withdraw consent: We will inform you clearly which data we want to collect and how we want to use it so you can give informed consent. We do not use pre-ticked boxes and we ask you to positively show us your consent by ticking a box. You may withdraw consent at any time. If you wish to withdraw your consent or unsubscribe from any of our communications, you may contact us at: [email protected]. We will keep a record of when and how we get consent from you so that we can be accountable. It is our practice to regularly review consents to check that the relationship, the processing, and the purposes are consistent.
The right to be informed where your data is located: We will advise you where your data is located and how we transfer your data as part of the services that we provide to you. We also protect your data and identity. We confirm that only you are accessing our website and services. We use Amazon Web Services (AWS) and Google Drive with strong data protection and regulatory compliance policies. We will store your data at AWS and encrypted Google Drive repositories in North America and we can access or process that data from the US or a vendor located internationally. We will take all possible reasonable security safeguards against loss, unauthorized access, destruction, or improper disclosure of personal information. Cross border data transfers will occur if you conduct business in the future with us. This means that in order to execute our transactions, we will send or retrieve data across a border. Our trans border data flows will be protected under secure principles that do not create obstacles to developing economic relations. We will transfer your personal data to fulfill a contract that we enter together with you, for example, to process a payment or other lawful purposes. Remember, that you can withdraw consent for marketing purposes at any time.

If you would like to opt-out of our marketing emails, please contact [email protected].

CONTACT

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, you can reach us for support at https://support.gorillamind.com contact [email protected], or by mail using the details provided below:

Gorilla Mind, LLC
Privacy Compliance
7154 W State Street, STE 138
Boise, ID 83714
USA