UPDATED 01.04.24

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from hempz.com (the “Site”).

 

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

 We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

 

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information”.

 

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

 

How do we use your personal information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

- Communicate with you;

- Screen our orders for potential risk or fraud; and

- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

- Improve and personalize your shopping experience

 

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

 

We also use this information for marketing purposes to better tailor your shopping experience both on and off the site.

 

Sharing you personal Information

We share your Personal Information with third parties to help us use your Personal Information, as described above.

For example, we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

We also use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

 

Behavioral advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the links below:

- Facebook: https://www.facebook.com/settings/?tab=ads

- Google: https://www.google.com/settings/ads/anonymous

- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

 Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

 

Do not track

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

 

Your rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

 

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

 

Data retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

 

 

Hempz California Privacy Notice

Information for California Residents

We collect Personal Information from California residents and comply with the California Consumer Privacy Act and related laws and regulations (“California privacy laws”).  This California Privacy Notice applies to California residents (“users,” “you,” or “your”).

For the purposes of this California Privacy Notice, “Personal Information” means information that is linked or reasonably linkable to a particular individual or household. However, the following categories of information are not Personal Information:

  • Publicly available information;
  • Deidentified or aggregated data; or
  • Information otherwise excluded from the scope of California privacy laws.

This Privacy Notice provides the following information to California residents:

  • Categories of Personal Information we collect;
  • Purposes for which we use Personal Information;
  • Categories of Personal Information we disclose to third parties;
  • Categories of third parties to which we disclose Personal Information; and
  • Consumer rights under California privacy laws and how to exercise those rights, specifically including:
    • The rights to access, correct, or delete their Personal Information;
    • The right to limit the use of their Sensitive Personal Information in certain circumstances; and
    • The rights to opt out of targeted advertising, sales of Personal Information, or profiling.

Categories of Non-Sensitive Personal Information

The table below outlines the categories of Personal Information Hempz collects about California residents and whether and how they are disclosed to third parties.

We collect Non-Sensitive Personal Information from the following sources:

  • Directly from our users

Category of Personal Information:

Identifiers

Examples

Identifiers may contain the following: cookies, names, email addresses, home addresses, prior purchase history

Purpose(s) for Collection

To send customers their order that they purchased, to market to them in a personalized fashion, to communicate to them the status of their purchase

Targeted Advertising

We may disclose this information with advertising partners for targeted advertising purposes

Sale

This information is not sold to third parties

Other Disclosures

This information may be disclosed to Advertising Partners. We disclose Identifiers to enable our processors to provide customer service on our behalf, to conduct research and development to improve our existing services, and to market in a personalized fashion.

Retention Period

We retain this information until the user deletes their account

Category of Personal Information:

Internet/Electronic Activity

Examples

Internet/Electronic Activity may contain the following: cookies, prior purchase history

Purpose(s) for Collection

To send customers their order that they purchased, to market to them in a personalized fashion, to communicate to them the status of their purchase

Targeted Advertising

We may disclose this information with advertising partners for targeted advertising purposes

Sale

This information is not sold to third parties

Other Disclosures

This information may be disclosed to Advertising Partners. We disclose Internet/Electronic Activity to enable our processors to provide customer service on our behalf, to conduct research and development to improve our existing services, and to market in a personalized fashion.

Retention Period

We retain this information until the user deletes their account

Categories of Sensitive Personal Information

We do not Process any categories of Sensitive Personal Information.

Use of Personal Information

We use Personal Information for the purposes described above. Personal Information may also be used or disclosed as otherwise permitted or required by applicable law.

Disclosing Personal Information

We disclose Personal Information to the following categories of third parties:

  • Processors (also referred to as “Service Providers” or “Contractors” in California law): We use processors to securely handle Personal Information on our behalf for our business purposes and only on our instructions. California privacy laws and our contracts with these companies prevent them from using your Personal Information for their own purposes.
  • Our Analytics and Advertising Partners: We use analytics services to collect and process certain data and to provide you with relevant advertising. These services may also collect information about your use of certain other websites, apps, and online resources.

See the table above for more details about how different categories of Personal Information are disclosed.

We do not sell Personal Information to anyone.

Exercising Your Personal Information Rights

California residents have the following rights under California privacy laws:

  • The right to know the Personal Information we have collected about them, including the categories of sources from which we collected the Personal Information, the purpose(s) for collecting, selling, or sharing your Personal Information, and the categories of third parties to whom we have disclosed your Personal Information;
  • The rights to correct or delete Personal Information;
  • The right to limit the use of Sensitive Personal Information in certain circumstances;
  • The rights to opt out of targeted advertising, sales of Personal Information, or profiling; and
  • The right not to receive discriminatory treatment for exercising their privacy rights.

If you are a California resident, you can submit a request to exercise your personal data rights under California privacy laws by visiting our online portal at https://www.requesteasy.com/651e-2128 or calling our toll-free number at 800-851-4206. Hempz also processes Opt-Out Preference Signals frictionlessly in compliance with California law. You can send an Opt-Out Preference Signal for our business to process frictionlessly by visiting our website using a device or browser that broadcasts commonly used and recognized Opt-Out Preference Signals, such as the Global Privacy Control. We will apply the Opt-Out Preference Signals we receive to the browser or device that sent the signal.

To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will verify your identity by verifying your identity by IP Address location. If you do not complete the verification process, we may be unable to process your request. Any information you provide to authenticate your identity will only be used to process your rights request and not for any other purpose. Please be aware that we do not accept or process rights requests submitted through other means.

We will respond to your rights request within 45 days (or 15 days for requests to opt-out of the sale of Personal Information, requests to opt-out of targeted advertising, and requests to limit the use of Sensitive Personal information), though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions.

We reserve the right to decline to process, or charge a reasonable fee for, requests from a California resident that are manifestly unfounded, excessive, or repetitive.

Notice of Right to Opt-Out of Sale/Sharing for Targeted Advertising

California law gives California residents the right to direct a business that “sells” or “shares” their Personal Information to stop selling and/or sharing their Personal Information at any time. California law defines “selling” as exchanging Personal Information with a third party for money or anything of value, and it defines “sharing” as disclosing Personal Information to a third party for use in conducting “cross-context behavioral advertising,” also referred to as “targeted advertising.” An example of targeted advertising is displaying advertisements to a person where the advertisement is selected based on Personal Information obtained from their activities over time and across non-affiliated websites or applications to predict their preferences or interests. In certain situations and as detailed above, we share for targeted advertising Personal Information with third parties. You can opt out of the sharing of your Personal Information by visiting our online portal at https://www.requesteasy.com/651e-2128 or calling our toll-free number at 800-851-4206.

Notice of Right to Limit the Use of Sensitive Personal Information

You have the right to limit some uses of Sensitive Personal Information. In general, you may direct companies not to use Sensitive Personal Information except as necessary to provide goods or services you have requested or other exempt purposes.  However, Hempz does not Process any Sensitive Personal Information.

Children’s Data

We do not knowingly collect or use the Personal Information of children under 16. If you believe that we have collected the Personal Information of a child under 16, please contact us at Support@hempz.com.

Authorized Agent Requests

California privacy law allows you to designate an authorized agent to make a rights request on your behalf. Your authorized agent may submit such a request by following the same method described above in the section titled Exercising Your Personal Information Rights. We may require verification of your authorized agent’s authority in addition to the information we require for verification of your identity.

Contact Us

If you have any questions or concerns regarding this California Privacy Notice, contact us at Support@hempz.com.

Last updated: February 13, 2024

Children

Our Services are not directed to children, and we do not knowingly collect Personal Information from children under the age of 16. If you learn that a child has provided us with Personal Information, then you may contact us as indicated above.

Do Not Track

Hempz does not currently take steps to respond to browsers’ “Do Not Track” signals as no uniform standard to respond to such signals has been developed at this time.

 

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

 

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at support@hempz.com or by mail using the details provided below:

Hempz
15770 North Dallas Parkway
Dallas, TX 75248
United States

 

Last updated: February 13, 2024