1. Introduction
At PimpYourHome, operated by PimpYourWorld LLC (“us”, “we”, “our” or the “Company”), we value your privacy and the importance of safeguarding your data. This Privacy Policy (the “Policy”) describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data (“Personal Data”) refers to any information that on its own, or in combination with other available information, can identify an individual.
We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under the below regulations:
- Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislations
- the EU’s General Data Protection Regulation (GDPR)
- California’s Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
- Colorado Privacy Act (CPA)
- Utah Consumer Privacy Act (UCPA)
- Connecticut Data Privacy Act (CTDPA)
- Virginia Consumer Data Protection Act (VCDPA)
Scope
This policy applies to the PimpYourHome website (pimpyhome.com) and the products and services we offer through it.
This Policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through (non-PimpYourHome) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third-party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.
Processing Activities
This Policy applies when you interact with us by doing any of the following:
- Make use of our application and services as an authorized user
- Visit any of our websites that link to this Privacy Statement
- Receive any communication from us including newsletters, emails, calls, or texts / SMS
2. Personal Data We Collect
What Personal Data We Collect
When you make a purchase, or attempt to make a purchase, we collect the following types of Personal Data:
This includes:
- Account Information such as your name, email address, and password
- Payment Information such as your billing address, phone number, credit card, debit card or other payment method
- Purchase Information
- Location Data
When you use our products and/or features, we collect the following types of Personal Data:
- Account Information such as your name, email address, and password
- Payment Information such as your billing address, phone number, credit card, debit card or other payment method
- Purchase Information
- Location Data
- Product information, such as serial number, product registration, licensing information
We do not intentionally collect Sensitive Personal Data (such as health data, biometric data, or precise geolocation). If we ever need to collect such data, we will ask for your explicit consent first.
How We Collect Your Personal Data
We collect Personal Data from the following sources:
From You. You may give us your Account Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, Product Information, by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide, for example, when you:
- Create an account or purchase products on our website;
- Use our products or services;
- Create content through our products or services;
- Express interest in our products or services;
- Subscribe to our newsletter;
- Complete a voluntary market research survey;
- Contact us with an inquiry or to report a problem (by phone, email, social media, or messaging service);
Automated technologies or interactions: As you interact with our website, we may automatically collect the following types of data (all as described above): Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data by using cookies, server logs and other similar technologies. Please see our Cookie section (below) for further details.
Third parties: We may receive Personal Data about you from various third parties, including:
- Account Information and Payment Information from another individual when they purchase a gift for you on our website;
- Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks;
- Account Information and Payment Data from third parties, including organizations (such as law enforcement agencies), associations and groups, who share data for the purposes of fraud prevention and detection and credit risk reduction; and
- Account Information, Payment Data, and Financial Data from providers of technical, payment and delivery services.
If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the “Contact us” section below.
Contact form
When you send us a message through our contact form, we collect your first and last name, your email address, the topic you choose, your subject and message, and, if you add them, an order number and up to three photos (with their file names). We use this information only to answer you. If the order number you give belongs to an order placed with the same email address, we link your message to that order so we can help faster. To keep out spam, the form uses Cloudflare Turnstile, which runs a short check in your browser and receives your IP address to verify it. On our side we store only a one-way coded (hashed) version of your IP address, to limit repeated sending. Photos are converted into new image files, which removes hidden data such as camera details and location, and are kept in a private folder on our server that only our shop team can view; they are never attached to emails. Your message is emailed to our support inbox through Amazon Simple Email Service, and we send an automatic confirmation to the email address you entered. The copy of your message and any photos stored on our website are deleted automatically after 180 days; our email-sending log keeps a copy of the emails for 14 days, and the email in our support inbox is kept as part of our customer correspondence. We do not use what you send through the contact form for marketing and do not add you to any mailing list.
Device and Usage Data
When you visit the PimpYourHome website, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help Feature on most browsers will provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.
We also process information when you use our services and products. This information may include:
- Device IDs
- Login information
- IP Address
- Time stamps
- Authentication records
- Individual Products you view
- Web terms or searches that led you to the site
- Time zone
Data we collect from third parties
We may receive your Personal Data from third parties such as our partners and other sources. This Personal Data is not collected by us but by a third party and is subject to the relevant third party’s own separate privacy and data collection policies. We do not have any control or input on how your Personal Data is handled by third parties. As always, you have the right to review and rectify this information. If you have any questions you should first contact the relevant third party for further information about your Personal Data. Where that third party is unresponsive to your rights, you may contact the Data Protection Officer at PimpYourWorld LLC (contact details below).
Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties’ privacy statements, which you should review to better understand those third parties’ privacy practices.
Purpose and Legal Basis for the Processing of Personal Data
We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them.
These purposes include:
- To deliver your product or service
- To fulfill orders including electronic and non-electronic shipment
- Building a Safe and Secure Environment
- To verify or authenticate your identity; and
- Investigate and prevent security incidents such as breaches, attacks and hacks
- Providing, Developing, and Improving our Products and Services
- Deliver, maintain, debug and improve our products and services.
- Enable you to access PimpYourHome services and set up accounts.
- Provide you with technical and customer support
- Organize and Deliver Advertising and Marketing
- Send you newsletters and other marketing communications about current and future products, programs and services, events, competitions, surveys and promotions held by us or hosted on our behalf; and
- Organize events or register attendees and schedule meetings for events.
- To communicate with you about the Products and Services
Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business for example against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. Within our contract, if you fail to provide consent, some services may not be available to you.
International Data Transfer and Storage
Where possible, we store and process data on servers within the general geographical region where you reside (note: this may not be within the country in which you reside).Our website is hosted by our hosting provider, and your data may be processed in the United States and in other countries where our service providers operate. Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy as well as applicable data protection law.Data may be kept in other countries that are considered adequate under your laws.In regions that are not considered adequate, we will enter into EU standard contractual clauses (or equivalent measures) with parties outside the EEA and ensure adequate controls are in place for the security of your data. More information about these clauses can be found here: https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32021D0914
Sharing and Disclosure
We will share your Personal Data with third parties only in the ways set out in this Policy or set out at the point when the Personal Data is collected.
We use your Personal Data to measure and improve our advertising, as described under “Analytics and advertising” below. We do not send newsletters at this time.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/
Analytics and advertising
Depending on your cookie choices (see “Cookies” below), we use the following services:
- Google Analytics (Google) to understand how our website is used, for example which pages are visited and which products are viewed, added to the cart and bought.
- Google Ads (Google) to measure the results of our ads. When you place an order, we share the order number, the order value and the products bought and, to match the purchase to an ad, a one-way hashed (SHA-256) version of your e-mail address, phone number and name, together with your city, region, postal code and country (“enhanced conversions”).
- Pinterest to measure the results of our ads on Pinterest. Pinterest does not run any code in your browser on our website. Unless you have opted out (and, if you are in the European Economic Area, the United Kingdom, Switzerland or Canada, only after you have accepted advertising cookies), our website’s server tells Pinterest about your page visits (the page address and, on a product page, the product number) and add-to-cart actions (the product, quantity and value), together with your IP address, your browser’s user agent, a one-way hashed (SHA-256) version of a random visitor identifier that we set (the “pyh_vid” cookie) and, if you came from a Pinterest ad, the Pinterest click identifier. After a paid order, we send Pinterest the order number, order value and products, a one-way hashed (SHA-256) version of your e-mail address, phone number, city, state and postcode (the hashed e-mail address and the hashed visitor identifier are also used as identifiers), your IP address, your browser’s user agent and, if you came from a Pinterest ad, the Pinterest click identifier.
Information for Pinterest, and order information after your order is paid, is sent from our website’s server rather than from your browser. If you are in the European Economic Area, the United Kingdom, Switzerland or Canada, or we cannot tell where you are, Pinterest receives information only after you have accepted advertising cookies. Elsewhere, including the United States, we share your page visits, add-to-cart actions and orders with Pinterest to measure our ads unless you opt out: choose “Reject” in our cookie banner, switch off “Advertising” in our cookie settings (the “Cookie settings” link in the site footer and on our “Do Not Sell My Personal Information” page), or turn on Global Privacy Control (GPC) in your browser. Page visits and add-to-cart actions waiting to be sent are kept on our server for no longer than 30 days. For this purpose we store your IP address, your browser’s user agent and the analytics and advertising identifiers set in your browser together with your order. We do not send your order information to Google or Pinterest if you have opted out, that is if you chose “Reject” or switched off “Advertising” in our cookie settings, if your browser sends a Global Privacy Control (GPC) signal, or, if your order ships to the European Economic Area, the United Kingdom or Switzerland, if you have not accepted advertising cookies. Pinterest also does not receive your order if you placed it from Canada, or from a location we cannot identify, without accepting advertising cookies.
After you place an order, we may offer you the option to take part in Google Customer Reviews. If you opt in, Google receives your email address, order number, delivery country and estimated delivery date so that it can send you a short survey about your purchase. In the European Economic Area, the United Kingdom, Switzerland and the rest of Europe, this offer is only shown if you have accepted optional cookies.
When you start typing your street address at checkout, we use Google Maps Platform to suggest matching addresses. Google receives the characters you type and your selected country only to return suggestions; we do not use this for advertising.
If your address is in the United States, Canada, Australia or New Zealand and you enter your email address at checkout, we keep it together with the contents of your cart. If you leave without placing your order, we may send you one reminder email about that cart about two hours later. Each reminder contains an unsubscribe link, and we delete this information after 14 days.
About a week after delivery in the United States, or two weeks elsewhere, we may email you once to ask for a review of your order. If you submit a review through that email, we send you a one-time discount code, whatever rating you give.
Legal Requirement
We may use or disclose your Personal Data in order to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.
Service Providers and Other Third Parties
We may use a third party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve our products and services. The categories of third parties we currently share Personal Data with are: payment processors (Stripe, PayPal) to process your payment; if you choose a pay-later or wallet option at checkout (such as Affirm, Afterpay, Zip, Cash App Pay or Amazon Pay), that provider receives the details it needs for your payment under its own privacy policy; our print-on-demand production and fulfillment partners (Printful, Printify), who receive your name, shipping address, email address, phone number (if provided) and order contents to produce and ship your order; email service providers (Amazon Simple Email Service to send order emails, and Google Workspace for our mailboxes); our hosting and content-delivery providers (Rocket.net, Cloudflare); a parcel-tracking service (17TRACK), which receives the tracking number and our order number to show you delivery updates, never your name, email or address; and, depending on your cookie choices, analytics and advertising providers (Google Analytics, Google Ads and Pinterest), as described under “Analytics and advertising”. We do not sell your Personal Data for money. For further information on the recipients of your Personal Data, please contact us by using the information in the “Contacting us” section below.
3. Cookies
What are Cookies?
A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the site in addition to potential partners and third parties to that business. The collection of this information may be used in the function of the site and/or to improve your experience.
How we use cookies
We use three kinds of cookies:
- Essential cookies are needed for the shop to work, for example to keep your cart and session, to remember your cookie choice (the “pyh_consent” cookie, kept for 180 days), and to process payments securely at checkout (our payment providers Stripe and PayPal may set their own cookies for security and fraud prevention). These cookies are always on.
- Statistics cookies are optional. WooCommerce’s order attribution feature stores cookies (named “sbjs_…”) that remember how you arrived at our shop, for example through a link or a search, and saves this information with your order. Google Analytics sets its own cookies (named “_ga…”) to measure how our website is used.
- Advertising cookies are optional. Google Ads (cookies named “_gcl_…”) and, for Pinterest, our own cookies “pyh_vid” (a random visitor identifier, kept for 365 days) and “pyh_epik” (the Pinterest click identifier, kept for 30 days) are used to measure which ads led to a visit or a purchase. Our own cookie “pyh_gck” stores the ID of the Google ad you clicked, for 90 days, only if you allow advertising cookies. It lets Google Ads know which ad led to your order. Outside the European Economic Area, the United Kingdom, Switzerland and Canada, our Pinterest cookies are set unless you opt out, together with “pyh_rg”, a cookie that is deleted when you close your browser and only remembers that Pinterest measurement may run for your region. Pinterest itself sets no cookies on our website.
How to control your cookies
When you first visit our website, our cookie banner lets you accept or reject the optional cookies, or choose Statistics and Advertising separately under “Settings”. If you are located in the European Economic Area, the United Kingdom or Switzerland, optional cookies stay off until you accept them. Elsewhere, Google Analytics and Google’s advertising measurement are on by default unless you reject them, and so is Pinterest measurement, except in Canada, where Pinterest also waits until you accept it. WooCommerce’s order source cookies are only used after you accept them. You can change your choice at any time with the “Cookie settings” link in the site footer; if you withdraw your consent, the order source cookies and our “pyh_vid”, “pyh_epik” and “pyh_gck” cookies are deleted, and Google’s tags stop using the withdrawn categories. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a rejection of the optional cookies. You can also delete or block cookies in your browser settings.
4. Retention & Deletion
We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it.
5. Merger or Acquisition
If we are involved in a merger, acquisition or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy. Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
6. How We Keep Data Safe
We have appropriate organizational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.
The communication between your browser and our website uses a secure encrypted connection wherever your Personal Data is involved.
We require any third party who is contracted to process your Personal Data on our behalf to have security measures in place to protect your data and to treat such data in accordance with the law.
In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.
7. Your Rights for Your Personal Data
Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:
- Right to Access (PIPEDA, GDPR Article 15, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)You have the right to learn whether we are processing your Personal Data and to request a copy of the Personal Data we are processing about you.
- Right to Rectification (PIPEDA, GDPR Article 16, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA)You have the right to have incomplete or inaccurate Personal Data that we process about you rectified.
- Right to be Forgotten (right to erasure) (GDPR Article 17, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)You have the right to request that we delete Personal Data that we process about you, unless we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
- Right to Restriction of Processing (GDPR Article 18, LGPD)You have the right to restrict our processing of your Personal Data under certain circumstances. In this case, we will not process your Data for any purpose other than storing it.
- Right to Portability (PIPEDA, GDPR Article 20, LGPD)You have the right to obtain Personal Data we hold about you, in a structured, electronic format, and to transmit such Personal Data to another data controller, where this is (a) Personal Data which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you or the third party that subscribes to services.
- Right to Opt Out (CPRA, CPA, VCDPA, CTDPA, UCPA)You have the right to opt out of the processing of your Personal Data for purposes of: (1) Targeted advertising; (2) The sale of Personal Data; and/or (3) Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Under CPRA, you have the right to opt out of the sharing of your Personal Data to third parties and our use and disclosure of your Sensitive Personal Data to uses necessary to provide the products and services reasonably expected by you.
- Right to Objection (GDPR Article 21, LGPD, POPIA)Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for processing which override your interests and rights, or if we need to continue to process the Personal Data for the establishment, exercise or defense of a legal claim.
- Nondiscrimination and nonretaliation (CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA)You have the right not to be denied service or have an altered experience for exercising your rights.
- File an Appeal (CPA, VCDPA, CTDPA)You have the right to file an appeal based on our response to you exercising any of these rights. In the event you disagree with how we resolved the appeal, you have the right to contact the attorney general located here:If you are based in Colorado, please visit this website to file a complaint.
If you are based in Virginia, please visit this website to file a complaint.
If you are based in Connecticut, please visit this website to file a complaint. - File a Complaint (GDPR Article 77, LGPD, POPIA)You have the right to bring a claim before their competent data protection authority.If you are based in the EEA, please visit this website (http://ec.europa.eu/newsroom/article29/document.cfm?action=display&doc_id=50061) for a list of local data protection authorities.
Withdrawing Consent
If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to opt out from marketing messages that you receive from us. If you wish to withdraw your consent, please contact us using the information found at the bottom of this page.
How to Exercise Your Rights
You can make a request to exercise any of these rights in relation to your Personal Data by emailing our privacy team at help@pimpyhome.com.
For your privacy and security, we may, at our discretion, require you to verify your identity before providing the requested information.
8. Changes
We may modify this Policy at any time. If we make changes to this Policy then we will post an updated version of this Policy at this website. When using our services, you will be asked to review and accept our Privacy Policy. In this manner, we may record your acceptance and notify you of any future changes to this Policy.
9. Contact Us
To request a copy for your information, unsubscribe from our email list, request for your data to be deleted, or ask a question about your data privacy
To contact us, please email help@pimpyhome.com
Write to us at:
Data Privacy Officer of PimpYourWorld LLC (operator of PimpYourHome)
30 N Gould St Ste N, Sheridan, WY 82801 USA
