California Privacy Notice

This California Privacy Notice supplements the information contained in the rest of our Privacy Policy and is intended to comply with the California Consumer Privacy Act of 2018 (“CCPA”). Any capitalized term used and not otherwise defined below has the meaning assigned to it in our Privacy Policy. For the purposes of this California Privacy Notice, except where a different definition is noted, “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal data does not include publicly available information, information that has been de-identified or aggregated, or other information subject to certain federal and state regulations.

If you are a visually impaired customer, a customer who has another disability or a customer who seeks support in another language, you may access this California Privacy Notice by emailing us at privacy@whiteandwarren.com.

A. Personal data we collect.

We have collected the following categories of personal data from consumers within the last twelve (12) months:

  • Identifiers

  • Commercial information

  • Internet or other electronic network activity information

  • Geolocation data

  • Financial data

  • Audio, electronic, visual, or similar information

  • Characteristics of protected classifications

  • Inferences

We do not collect sensitive personal data.

B. Use of personal data.

We may use or disclose the personal data we collect for one or more of the following purposes:

  • Provide, operate, maintain, improve, personalize, and expand our Services

  • Provide customer service and support

  • Facilitate orders

  • Develop new features and functionalities

  • Communicate with you in accordance with your preferences to provide you updates and other information relating to our Site and our policies, and for marketing and promotional purposes

  • Perform internal analytics

  • For systems and data security, including to prevent unauthorized, improper, or illegal activities on our Site

  • For internal business purposes, including general business administration

  • Market our products and services

  • Market the products and services of others

  • For targeted advertising

  • Comply with our legal obligations, including responding to subpoenas, court orders, or legal process; and to establish or exercise our legal rights or defenses against legal claims

  • Evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by us about the users of our Services is among the assets transferred

  • For purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy or for any other legal purpose not inconsistent with this Privacy Policy

  • Any other purpose consistent with your consent and expressed preferences

C. Disclosure of personal data.

We limit our disclosure of the categories of personal data above to our service providers for one or more business purposes. “Business purposes” means the reasonably necessary and proportionate use of personal data for our operational purposes, other purposes described in this Privacy Policy, for the operational purposes of our service providers and contractors, as well as other purposes compatible with the context in which the personal data was collected.

We may “sell” and/or “share” personal data with third party advertising networks and platforms for purposes of providing targeted behavioral advertising on those platforms; joint marketing partners; and Third-Party Businesses.

In the last 12 months (from the last updated date listed at the top of this Privacy Policy), we have “sold” or “shared” the following categories of personal data:

  • Identifiers

  • Commercial information

  • Internet or other electronic network activity information

  • Geolocation data

  • Audio, electronic, visual, or similar information

  • Characteristics of protected classifications

  • Inferences

D. Retention of personal data.

Your personal data will be retained by us for as long as necessary for the purposes outlined in this Privacy Policy. This information will be used and retained to the extent necessary to comply with any legal obligations or policies, to resolve disputes, and/or enforce legal agreements. Personal data may also be retained for internal analytic purposes. This information is retained for a shorter period, unless it used to enhance security features or improve the functionality of our Services. Our determination of precise retention periods will be based on (1) the length of time we have an ongoing relationship with you; (2) whether there is a legal obligation to which we are subject; and (3) whether retention is advisable considering our legal position, including regard to applicable statutes of limitations, litigation or regulatory investigations.

E. Your privacy rights.

The CCPA provides California residents with specific rights regarding their personal data. If you are a California resident, you may have the following rights under applicable California law:

  • Right to know and access. You have the right to know what personal data we collect, use, disclose, and sell and/or share, as those terms are defined under applicable law. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period.

  • Right to delete and erase. You have the right to request under certain circumstances that we, as well as our service providers and contractors, delete the personal data that we collect about you.

  • Right to correct inaccurate personal data. You have the right to request the correction of inaccurate personal data.

  • Right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

  • Right to opt out of sale and/or sharing. You have the right to opt-out of the sale and/or sharing of your personal data by a business.

  • Right to limit use and disclosure. You have the right to limit the use or disclosure of your sensitive personal data to only the uses necessary for us to provide goods or services to you. We will not use or disclose your sensitive personal data after you have exercised your right, unless you subsequently provide consent for the use of your sensitive personal data for additional purposes. As noted above, we do not collect sensitive personal data.

  • Sharing with third parties for their own direct marketing purposes. You have the right to request information regarding third parties to whom we have disclosed certain categories of personal information during the preceding year for the third parties’ direct marketing purposes under California’s “Shine the Light” law (Cal. Civ. Code §1798.83). If you wish to request information regarding such practices, please Contact Us. You must include your full name, email address, and postal address in your email or mail request so that we can verify your California residence and respond. California’s “Shine the Light” law also provides you the right to opt-out of such disclosures on a going forward basis. You may exercise this right as referenced above under “Right to Opt Out of Sale/Sharing.”

F. How to exercise your rights.

You may exercise any of the rights described in this section by following the instructions in Your Privacy Choices & Rights.

G. Notice of right to opt-out of sale/sharing.

California residents may opt out of the “sale” or “sharing” of their personal data. As noted above, we may “sell” and/or “share” personal data with third party advertising networks and platforms for purposes of providing targeted behavioral advertising on those platforms. We may also “sell” and/or “share” personal data with other third parties including joint marketing campaign partners; and Third-Party Businesses. You may opt out by following the instructions in Your Privacy Choices & Rights.

We do not knowingly sell or share the personal data of minors under 16 years of age without legally required affirmative authorization. If you are a parent or guardian and you believe that your child has provided us with information without your consent, please review the Children’s Privacy section and contact us by email at privacy@whiteandwarren.com. You can also opt out of such sale or sharing by clicking the Your Privacy Choices link at the bottom of our Site and selecting your preferences.

H. Notice of financial incentives.

We may provide programs and offers, such as promotional campaigns, email newsletters, and referral programs. When you sign up for one of these programs, we typically ask you to provide your email address, first and last name, and phone number. Because these programs involve the collection of personal data and offering of certain benefits, they might be interpreted as a “financial incentive” program under California law. Such programs may include:

  • Email Newsletter. When you subscribe to our newsletter, we may offer you special savings in the form of digital coupons for free or discounted products and announcements of sweepstakes, contests, and giveaways. To receive the newsletter, you must provide a valid email address. To opt out of our newsletter, please click “unsubscribe” located at the bottom of any email newsletter.

  • Referral Program. We may offer digital coupons for free or discounted products, store credit to our online store, or gift cards through our Referral Program. When you sign up for our Referral Program, you will be asked for personal data such as your first and last name, valid email address, and phone number to participate in the program. When you sign up for our Referral Program, you may also be given the opportunity to sign up for our promotional emails. To opt out of these emails, please click “unsubscribe” located at the bottom of any email.

The value we place on personal data collected for these promotions varies, but we estimate it equals the additional spending per promotion participant, compared to individuals for whom we do not have email addresses or other collected information.