Privacy Policy

Personal information we collect

When you visit the Site or the App, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site or the App, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site or the App, and information about how you interact with the Site or the App. We refer to this automatically-collected information as "Device Information."

We collect Device Information using the following technologies:

• "Cookies" are data files that are placed on your device or computer and often include an anonymous unique identifier.
• "Log files" track actions occurring on the Site or the App, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• "Web beacons," "tags," and "pixels" are electronic files used to record information about how you browse the Site or the App.

Additionally, when you make a purchase or attempt to make a purchase through the Site or the App, we collect certain information from you, including your name, billing address, payment information (this may include credit card numbers, email address, and phone number). We refer to this information as "Order Information."

When we talk about "Personal Information" in this Privacy Policy, we are talking both about Device Information and Order Information.

By using any service controlled or provided by Reasonable Minds, LLC ("Reasonal" or "we" or "us") on which these Terms and Conditions appear (each, a "Service" or collectively, "Services"), you agree to be bound by all of the terms in these Terms and Conditions. You may wish to print and keep a copy of these Terms and Conditions. These Terms and Conditions are personal to you, and you may not delegate your obligations under them to anyone. If any provision in these Terms and Conditions is invalid or unenforceable under applicable law, the remaining provisions will continue in full force and effect.

How do we use personal information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to: Communicate with you; screen our orders for potential risk or fraud; and when in line with the preferences you have shared with us, provide you with information or advertising related to our products or services. We use the device information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our site (for example, by generating analytics about how our customers browse and interact with the site, and to assess the success of our marketing and advertising campaigns). We use contact information for the purpose of alerts within the system (example: Text message based price alerts.)

Sharing personal information

We share your personal information with third parties to help us use your personal information, as described above. For example, we use payment processing from PayPal, Stripe and Host Merchant Services to power our online store–you can read more about how these companies uses your personal information on their respective websites. We also use Google Analytics to help us understand how our customers use the site–you can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Security

We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline. Whenever we collect sensitive information (such as credit card data) that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a closed lock icon at the bottom of your web browser or looking for "https" at the beginning of the address of the webpage. While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.

Advertising

As described above, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.

You can opt out of targeted advertising by:

• Facebook - https://www.facebook.com/settings/?tab=ads
• Google - https://www.google.com/settings/ads/anonymous
• Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: http://optout.aboutads.info/

Do not track

Please note that we do not alter our site's data collection and use practices when we see a Do Not Track signal from your browser.

Data retention

When you place an order through the Site or the App, we will maintain your order information for our records unless and until you ask us to delete this information.

Age restriction

The Site and the App are not intended for individuals under the age of 13.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. If we update this policy, we will notify you via e-mail to the e-mail address under your account.

EEA residents' rights under GDPR

If you are a resident of the European Economic Area ("EEA"), you have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us at support@reasonal.co.

Additionally, if you are a EEA resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

From May 25, 2018, all processing of Personal Information of EEA Residents is subject to the General Data Protection Regulation (2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of Personal Information and on the free movement of such data ("GDPR").

Under the GDPR, we are both a controller and a processor of the Personal Information of EEA Residents. Our purpose for collecting and processing Personal Information from EEA Residents is to allow users to subscribe to and log in to our Website and Services and to provide our Services to our customers. Our legal basis for collecting Personal Information will be one of the following:

• to fulfill our contractual obligations to you;
• to comply with our legal and/or regulatory obligations, for example obtaining proof of your identity to enable us to meet our anti-money laundering obligations; and/or
• to meet our legitimate interests, for example to: understand how you use the Services and to enable us to use this knowledge to improve our products and services and to develop new ones; to communicate with you about the products and services that you use or we offer; maintain our accounts and records; to assess patterns of use; and to plan and evaluate our marketing and business development programs. When we process Personal Information to meet our legitimate interests, we put in place, when needed, safeguards designed to protect your privacy interests, freedoms, and rights under applicable laws.
• We may obtain your consent to collect and use certain types of Personal Information when we are required to do so by law (for example, in relation to some direct marketing activities, our use of cookies and tracking technologies or when we process sensitive personal information). If we ask for your consent to process your Personal Information, you may withdraw your consent at any time by contacting us using the details at the end of this Privacy Policy.
• We may anonymize your Personal Information and use it for other purposes. For example, we may prepare aggregated reports about how users interact with the Services for research.

Under GDPR, rights of EEA residents in relation to privacy and data protection are as follows:

• Right of Access and Rectification. You have the right to know what Personal Information we collect about you and to ensure that such data is accurate and relevant for the purposes for which we collected it. We allow our users the option to access and obtain a copy of their Personal Information and to rectify such Personal Information if it is not accurate, complete, or updated. However, we may first ask you to provide us certain credentials to permit us to identify your Personal Information.
• Right to Delete Personal Information or Restrict Processing. You have the right to delete your Personal Information or restrict its processing. We may postpone or deny your request if your Personal Information is in current use for the purposes for which it was collected or for other legitimate purposes such as compliance with legal obligations.
• Right to Withdraw Consent. You have the right to withdraw your consent to the processing of your Personal Information. Exercising this right will not affect the lawfulness of processing your Personal Information based on your consent before its withdrawal.
• Right of Data Portability. Where technically feasible, you have the right to ask to transfer your Personal Information in accordance with your right to data portability.
• Right to Lodge Complaint. You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your Personal Information.
• International Data Transfers. If you are located in the EU, you have a right to request further information regarding the data transfer mechanisms used by us with respect to data transfers to third countries. In order to keep your Personal Information safe, we apply strict safeguards when transferring it outside of the EEA, which may include the following: Transferring your personal information to countries approved by the European Commission (EC) as having adequate data protection laws; Entering into standard contracts that have been approved by the EC and which provide an adequate level of high-quality protection, with the recipients of your Personal Information.

California residents' rights under CCPA/CPRA

This section is provided for purposes related to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the "CPRA"). As used in this section, "personal information" means information that meets the definition of "personal information" as set forth in the CPRA and is not otherwise excluded from the scope of the CPRA.

Please note that we do not "sell" or "share" (as defined in the CPRA) personal information about you to any third party and have not done so at any time during the 12-month period preceding the date this privacy policy was last updated. In addition, we do not sell or share personal information of minors under 16 years of age. Because we do not sell or share personal information, we do not have any obligation under the CPRA to accept CPRA requests requesting that the Reasonable Minds, LLC not sell or share a consumer's personal information.

The CPRA gives certain rights to California residents and imposes certain obligations on those businesses that are subject to the CPRA. As required by the CPRA, set forth below is a description of certain rights that California residents generally have under the CPRA. As used below, a "consumer" means a resident of the State of California and a "covered business" means a business that is subject to the CPRA.

Right to Know/Right to Access. A consumer has the right to request that a covered business that collects a consumer's personal information disclose to that consumer the categories and specific pieces of information the business has collected. A consumer also has the right to request that a covered business that collects a consumer's personal information disclose to that consumer the following:

• The categories of personal information it has collected about that consumer
• The categories of sources from which the personal information is collected
• The business or commercial purpose for collecting, selling or sharing (if applicable) personal information
• The categories of third parties to whom the covered business discloses personal information
• The specific pieces of personal information that the covered business has collected about that consumer

These disclosures are not required to include any information about activity that occurred prior to January 1, 2022. Please also note that a covered business is not required to honor more than 2 of these requests from the same consumer during any 12-month period.

• Right to Delete. A consumer has the right to request that a covered business delete any personal information that the business has collected from the consumer, subject to certain exceptions.
• Right to Correct. A consumer has the right to request that a covered business correct inaccurate personal information that a business maintains about a consumer.
• Right to Opt-Out of Sale/Sharing. If a covered business sells or shares personal information, a consumer has the right to opt-out of the sale or sharing of their personal information by the business.
• Right to Limit Use and Disclosure of Sensitive Personal Information. If a covered business uses or discloses sensitive personal information for reasons other than those set forth in the CPRA, a consumer has the right to limit the use or disclosure of sensitive personal information by the business.
• Non-Discrimination. A consumer has the right not to receive discriminatory treatment by the covered business for the exercise of privacy rights conferred by the CPRA.

If you would like to exercise these rights, please contact us at support@reasonal.co.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us at support@reasonal.co.