This website and its content are owned by Lit By Leaf. The terms “we”, “us” and “our” refer to Lit By Leaf. The term “you” refers to the user or viewer of www.LitByLeaf.com (“Website”).
INFORMATION WE MAY COLLECT
We collect personal information from you so that we can provide you with a positive experience when utilizing our Website or content.
We collect this information for the following reasons:
- To provide and operate the services offered at LitByLeaf.com;
- To provide our users with ongoing customer assistance;
- To be able to contact our visitors and users with general or personalized service-related notices or promotional messages;
- To create aggregated statistical data and other aggregated and/or inferred non-personal information, which we or our Select Partners, as described below, may use to provide and improve our respective services; and
- To comply with any applicable laws and regulations.
We will only collect the minimum amount of information necessary for us to fulfill our obligation to you. We may collect:
- Name and email address. We offer a sign up for our email list, which provides notice of sales, new merchandise, blog updates, and special promotions and announcements. If you would like to unsubscribe from our email list, you can unsubscribe directly from our emails, or contact us and we will remove your name from our email list promptly. Please recognize that you may receive emails between the time you request to be removed from our list and the time we are able to remove you.
- Billing information including name, address and credit card information you provide upon purchase so that we can process payment to deliver our products or services to you.
- A name and an email address if you complete our contact form with a question. We may send you marketing emails with either your consent or if we believe we have a legitimate interest to contact you based on your contact or question.
By providing such Confidential Information or Other Information to us, you grant us permission to use and store such information. Your Confidential Information is stored through us internally or through a data management system. Your Confidential Information will only be accessed by those who help to obtain, manage or store that Information, or who have a legitimate need to know such Confidential Information.
As of May 25, 2018, we will ask you to affirmatively opt in and consent to our storage of this personal information. We store this information on our secure web servers located in the United States.
Please note that the information above (“Personal Data”) that you are giving to us is voluntarily, and by you providing this information to us you are giving consent for us to use, collect and process this Personal Data. You are welcome to opt-out or request for us to delete your Personal Data at any point by contacting us at: firstname.lastname@example.org
If you choose not to provide us with certain Personal Data, you may not be able to participate in certain aspects of our Website or content.
OTHER INFORMATION WE MAY COLLECT:
Anonymous Data Collection and Use
To maintain our Website’s high quality, we may use your IP address to help diagnose problems with our server and to administer the Website by identifying which areas of the Website are most heavily used, and to display content according to your preferences. Your IP address is the number assigned to computers connected to the Internet. This is essentially “traffic data” which cannot personally identify you, but is helpful to us for marketing purposes and for improving our services. Traffic data collection does not follow a user’s activities on any other websites in any way. Anonymous traffic data may also be shared with business partners and advertisers on an aggregate basis.
Use of “Cookies”
We may use the standard “cookies” feature of major web browsers. We do not set any personally identifiable information in cookies, nor do we employ any data-capture mechanisms on our Website other than cookies. You may choose to disable cookies through your own web browser’s settings. However, disabling this function may diminish your experience on our Website and some features may not work as intended.
What We Do With Information We Collect
- Contact You. We may contact you with information that you provide to us based on these lawful grounds for processing.
- Consent. We may contact you if you give us your clear, unambiguous, affirmative consent to contact you.
- Contract. We will contact you under our contractual obligation to deliver goods or services you purchase from us.
- Legitimate Interest. We may contact you if we feel you have a legitimate interest in hearing from us. For example, if you sign up for our newsletter, we may send you relevant emails. You will always have the option to opt out of any of our emails.
We will use the Personal Data you give to us in order to process your payment for the purchase of goods or services. We only use third party payment processors that take the utmost care in securing data and comply with the GDPR.
Share with Third Parties
We may share your information with trusted third parties such as our newsletter provider in order to contact you via email, our merchant accounts to process payments, and Google / social media accounts in order to run advertisements and our affiliates. For instance, we use the Pinterest tag to optimize content for our store.
VIEWING BY OTHERS
Note that whenever you voluntarily make your Personal Data available for viewing by others online through this Website or its content, it may be seen, collected and used by others, and therefore, we cannot be responsible for any unauthorized or improper use of the information that you voluntarily share (i.e., sharing a comment on a blog post, posting on social media that we manage, etc.).
SUBMISSION, STORAGE, SHARING AND TRANSFERRING OF PERSONAL DATA
Personal Data that you provide to us is stored internally or through a data management system. Your Personal Data will only be accessed by those who help to obtain, manage or store that information, or who have a legitimate need to know such Personal Data (i.e., our hosting provider, newsletter provider, payment processors or team members).
We retain your Personal Data for the minimum amount of time necessary to provide you with the information and / or services that you requested from us. We may include certain Personal Data for longer periods of time if necessary for legal, contractual and accounting obligations.
To use certain features of the Website or its content, you may need a username and password. You are responsible for maintaining the confidentiality of the username and password, and you are responsible for all activities, whether by you or by others, that occur under your username or password and within your account. We cannot and will not be liable for any loss or damage arising from your failure to protect your username, password or account information. If you share your username or password with others, they may be able to obtain access to your Personal Data at your own risk.
You agree to notify us immediately of any unauthorized or improper use of your username or password or any other breach of security. To help protect against unauthorized or improper use, make sure that you log out at the end of each session requiring your username and password.
We will use our best efforts to keep your username and password(s) private and will not otherwise share your password(s) without your consent, except as necessary when the law requires it or in the good faith belief that such action is necessary, particularly when disclosure is necessary to identify, contact or bring legal action against someone who may be causing injury to others or interfering with our rights or property.
You may unsubscribe from our e-newsletters or updates at any time through the unsubscribe link at the footer of all email communications. If you have questions or are experiencing problems unsubscribing, please contact us at email@example.com
Orders placed on our site are encrypted using SSL technology. In order for SSL security to work, you must use an SSL enabled browser. Most browsers support SSL, but please ensure yours does. We take reasonable steps to protect the Personal Data you provide to us from misuse, disclosure or unauthorized access. We only share your Personal Data with trusted third parties who use the same level of care in processing your Personal Data. That being said, we cannot guarantee that your Personal Data will always be secure due to technology or security breaches. Should there be a data breach of which we are aware, we will inform you immediately.
We have a strict no spam policy and provide you with the ability to opt-out of our communications by selecting the unsubscribe link at the footer of all e-mails. We have taken the necessary steps to ensure that we are compliant with the CAN-SPAM Act of 2003 by never sending out misleading information. We will not sell, rent or share your email address.
THIRD PARTY WEBSITES
We may link to other websites on our Website. We have no responsibility or liability for the content and activities of any other individual, company or entity whose website or materials may be linked to our Website or its content, and thus we cannot be held liable for the privacy of the information on their website or that you voluntarily share with their website. Please review their privacy policies for guidelines as to how they respectively store, use and protect the privacy of your Personal Data.
CHILDREN’S ONLINE PRIVACY PROTECTION ACT COMPLIANCE
As stated in our Terms of Service, you must be 21 years of age and/or a qualified medical marijuana patient to use the Site and/or Services. We do not collect any information from anyone under 18 years of age in compliance with COPPA (Children’s Online Privacy Protection Act) and the GDPR (General Data Protection Regulation of the EU).
NOTIFICATION OF CHANGES
DATA CONTROLLER AND PROCESSORS
We are the data controllers as we are collecting and using your Personal Data. We use trusted third parties as our data processors for technical and organizational purposes, including for payments and email marketing. We use reasonable efforts to make sure our data processors are GDPR- compliant.