The Cotton Collective is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement.
The Cotton Collective may change this policy from time to time by updating this page. We reserve the right to modify the content of these Terms and Conditions at any time without any sort of notice, and it is your responsibility to check this page periodically for any such changes. This policy was last updated October 1, 2019.
What personal information do we collect?
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, website or other details to help you with your experience.
We also collect non-personal Information. Non-Personal Information is anonymous data that cannot be used to personally identify you. This includes general demographic information we may collect, referring/exit pages and URLs, platform types, interests, other information relevant to customer surveys and/or offers, preferences you submit, and preferences that are generated based on the data you submit.
When do we collect information?
We collect information from you when you fill out a contact form, comment, opt-in for a free resource, opt-in for the weekly newsletter, enter information on our site, or place an order, as well as any data we collect automatically from you based upon your activity on our website.
We also use Honeybook to collect your email and name. Honeybook is a third-party provider, which may process your data using industry standard technologies to help us monitor our leads, customers, and improve your customer experience.
What do we use your information for?
Any of the information we collect from you may be used in one of the following ways:
• To personalize user’s experience and to allow us to deliver the type of content and product offerings in which you are most interested.
• To improve our website in order to better serve you.
• To allow us to better service you in responding to your customer service requests.
• To administer a contest, promotion, survey or other site feature.
• To send periodic promotional emails regarding new blog posts, other products and services, special offers or other information which we think you may find interesting using the email address which you have provided.
• We may use the information to provide and improve our future products and services.
• We may use the information you provide to us to make you offers to purchase products and services provided by third parties in exchange for a commission to be paid to us by such third parties. Should you opt to take part in such promotions, the third parties will receive your information.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email. We may use the information to customize the website according to your interests.
We use your personal information primarily for our own internal purposes, such as providing, maintaining, evaluating, and improving our Website and the products and services we may offer in the future and sell.
We use the non-personal information we collect to track the use of the Website and to assist us in providing, maintaining, evaluating, and improving our Website and the services and products we may offer in the future.
How do we protect your information?
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
We consider protecting the security of your personal information as extremely important.
We follow generally accepted industry standards to protect personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we do not guarantee absolute security. We are not responsible for the unauthorized acts of others and we assume no liability for any disclosure of information due to errors in transmission, unauthorized third party access (such as through hacking) or other acts of third parties, or acts or omissions beyond our reasonable control.
As a general rule, we do not sell, trade, or otherwise transfer to outside parties your personally identifiable information unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may disclose your personal information to our subsidiaries, affiliates, and service providers for the purpose of providing our services to you.
We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
This website uses Google Analytics to collect information about how visitors use our website. Google Analytics collects information from users such as age, gender, location, interests, internet browser, how often they visit our website, and what pages they visit. We use the information we get from Google Analytics to analyze traffic, improve our marketing, and improve our website.
For more information on how Google collects and processes your data, visit https://www.google.com/policies/privacy/partners/.
You can prevent Google Analytics from using your information by opting out at this link: https://www.google.com/policies/privacy/partners/.
International Data Transfer
COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under the age of 13 years old, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States’ consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online. We do not specifically market to children under the age of 13 years old and prohibit children from using the Site.
We will not knowingly collect or use any personal information from children that we know to be under the age of 13. In addition, we will delete any information in our database that we know originates from a child under the age of 13.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
• We will notify the users via email within 7 business days
• We will notify the users via in site notification within 7 business days
We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.
CAN SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
• Send information, respond to inquiries, and/or other requests or questions.
To be in accordance with CANSPAM we agree to the following:
• NOT use false, or misleading subjects or email addresses
• Identify the message as an advertisement in some reasonable way
• Include the physical address of our business or site headquarters
• Monitor third party email marketing services for compliance, if one is used
• Honor opt-out/unsubscribe requests quickly
• Allow users to unsubscribe by using the link at the bottom of each email
If at any time you would like to unsubscribe from receiving future emails, you can email us at firstname.lastname@example.org.
Follow the instructions at the bottom of each email and we will promptly remove you from ALL correspondence.
Third-party Links to Other Websites
Visitors’ GDPR Rights
If you are within the European Union, you are entitled to certain information and have certain rights under the General Data Protection Regulation. Those rights include:
We will retain the any information you choose to provide to us until the earlier of: (a) you asking us to delete the information, (b) our decision to cease using our existing data providers, or (c) the Company decides that the value in retaining the data is outweighed by the costs of retaining it.
You have the right to request access to your data that the Company stores and the rights to either rectify or erase your personal data.
You have the right to seek restrictions on the processing of your data.
You have the right to object to the processing of your data and the right to the portability of your data.
To the extent that you provided consent to the Company’s processing of your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based upon consent that occurred prior to your withdrawal of consent.
You have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the General Data Protection Regulation.
We require only the information that is reasonably required to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us.