Effective Date: July 9, 2021
Cups N’ Such collects data to fulfill services you request, ease your navigation on our website, communicate with you, and improve your shopping experience using. You provide some of this information directly, such as when you make a purchase. Some of the information is collected through your interactions with the website. We collect such data using technologies like cookies and other tracking technologies, error reports, and usage data collected when you interact with Cups N’ Such on your device.
Name and contact information. We may collect your first and last name, email address, postal address, phone number, and other similar contact data. We may use this information to contact you or fulfill your purchase order.
Payment information. We collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number).
Usage data. We collect personalized information about your use of Cups N’ Such, to better understand uses thereof and identify potential improvements, as well as to send you promotional communications or offers tailored to your interests.
Web requests. We collect information regarding every web request sent to our servers. This information is used to provide support, as well as to assess usage and performance of the website. The data collected for each request can include such things as timestamps, any exception messages, user agent, IP address, and request time and duration.
Surveys. We may ask you to participate in a survey; and may request information from you. Participation is voluntary, and you have the choice of whether to disclose any requested information.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data for the following lawful purposes:
Examples of the uses of information include:
Providing Services. We use data to carry out your transactions with us. Often, this includes personal data such as email, name and address.
Improving the Services. We use data to continually improve the website, including adding new features or capabilities. Data is collected throughout your interactions with the website that enable us to understand usage and tailor future capabilities. We track general, non-personalized information (e.g., operating system, browser version and type of device being used) to know how many people visit specific pages of the website.
Processing Payments. If you make a payment to Cups N’ Such, we will ask for Payment Information and other information requested for processing your payment. We use third party payment processors to assist in securely processing your Payment Information. If you pay with a credit card, the Payment Information that you provide through the Services is encrypted and transmitted directly to the payment processor. We do not store your Payment Information and do not control and are not responsible for the payment processors or their collection or use of your information. All payments received via credit card are processed securely by Cups N’ Such’s payment processing vendors using measures that comply with the Payment Card Industry Data Security Standard (“PCI DSS”).
Cups N’ Such is committed to protecting the security of your personal data. Depending on the circumstances, we may hold your information in hard copy and/or electronic form. For each medium, we use technologies and procedures to protect personal data. We review our strategies and update as necessary to meet our business needs, changes in technology, and regulatory requirements. These measures include, but are not limited to, technical and organizational security policies and procedures, security controls and employee training. If we become aware of a breach that affects the security of your personal data, we will provide you with notice as required by applicable law. To the extent permitted by applicable law, Cups N’ Such will provide any such notice that Cups N’ Such must provide to you at your email address on file. By using the website, you agree to accept notice electronically.
Cups N’ Such retains personal data in a form which permits identification of data subjects for as long as necessary to fulfill the transactions you have requested. We are required by law to keep some types of information for certain periods of time (e.g., statute of limitations).
Cups N’ Such respects your right to access and control your personal data. You have choices about the data we collect. When you are asked to provide personal data that is not necessary for the purposes of providing you with a service, you may decline. We aim to keep all personal data that we hold accurate, complete and up-to-date. While we will use our best efforts to do so, we encourage you to tell us if you change your contact details. If you believe that the information we hold about you is incorrect, incomplete or out-of-date, please contact firstname.lastname@example.org.
Access to personal data. In some jurisdictions, you have the right to request access to your personal data. In these cases, we will comply, subject to any relevant legal requirements and exemptions, including identity verification procedures. Before providing data to you, we will ask for proof of identity and sufficient information about your interaction with us so that we can locate any relevant data. We may also charge you a fee for providing you with a copy of your data (except where this is not permissible under local law).
Correction and deletion. In some jurisdictions, you have the right to correct or amend your personal data if it is inaccurate or requires updating.You may also have the right to request deletion of your personal data. Please note that such a request could be refused because your personal data is required to provide you with a services you requested, e.g., to send an invoice to your email address, or that it is required by the applicable law.
Portability. If you reside within the EU, you have the right to ask for a copy of your personal data and/or ask for it to be ported to another provider of your choice. Please note that such a request could be limited to only personal data you provided us with or that we hold at that given time and subject to any relevant legal requirements and exemptions, including identity verification procedures.
Marketing preferences. If you have provided us with your contact information, we may, subject to any applicable Spam Act or similar regulation, contact you via e-mail, postal mail or telephone about Cups N’ Such products and services that may be of interest to you.
Marketing e-mail communications you receive from Cups N’ Such will generally provide an unsubscribe link or instructions on how to opt-out of receiving future e-mail or to change your contact preferences. You can also request changes to your contact preferences by contacting Cups N’ Such via email at email@example.com. Please remember that even if you opt out of receiving marketing emails, we may still send you important information related to your purchases.
If you reside within the EU you may be entitled to other rights under the GDPR. These rights are summarized below. We may require you to verify your identity before we respond to your requests to exercise your rights. If you are entitled to these rights, you may exercise these rights with respect to your personal data that we collect and store:
In the event that your personal data is subject to the GDPR, we will only use your personal data for the original purpose for which we collected it, unless we reasonably consider that we need to use it for another purpose and that purpose is compatible with the original purpose. If we need to use your EU personal data for an unrelated purpose, we will notify you and we will explain the legal basis, which allows us to do so. If your personal data is no longer necessary for the legal or business purposes for which it is processed, we will generally destroy or anonymize that data.