California Consumer Privacy Act (CCPA)

Our Privacy Policy describes the categories of personal information we collect from our users, the technologies, processes, and business uses of collecting personal information, the categories of third parties with whom we may share it, and the rights you have regarding your personal information. Under the California Consumer Privacy Act (CCPA) of 2018, California residents have the right to request that Home Gallery Stores disclose what personal information it collects, uses, discloses or sells. Home Gallery Stores does not sell your personal information to third parties without your prior consent. California residents also have the right to request the deletion of their personal information collected or maintained by Home Gallery Stores.

You can also designate an authorized agent to make a request on your behalf. Prior to responding to your request, we will verify your identity by matching any requested identifying information you provide against the information we have about you. You or your authorized agent have the right to request:

• A disclosure of your personal information we collect, use, disclose, or sell;
• To delete your personal information we collect or maintain;
• To opt-out of the sale of your personal information. If you choose to submit a request through an authorized agent, we will require proof that the authorized agent has your written permission to submit a request on your behalf. Additionally, we may require you to verify your identity with us through our verification process.

We will not subject you to discriminatory treatment as a result of your choice to exercise your privacy rights.

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer ("personal information"). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:

• Identifiers
  A real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, or other similar identifiers
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
  A name, signature, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, credit card number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories.
• Internet or other similar network activity
  Browsing history, search history, keystrokes, information on a consumer's interaction with a website, application, or advertisements
• Geolocation data
  Physical location or movements.
• Inferences drawn from other personal information
  Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We may use or disclose the personal information we collect. Specifically, we use user data, website data, and CRM data for the following business purposes:

1. To fulfill an order;
2. To provide you with information, products or services that you request from us;
3. To provide you with email alerts, registrations and other notices concerning our products or services, or events or news, that may be of interest to you;
4. To improve our website and present its contents to you;
5. For testing, research, analytics and development;
6. To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
7. As described to you when collecting your personal information or as otherwise set forth in the CCPA;
8. To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred;
9. To facilitate, operate, and provide our Services;
10. To authenticate the identity of users and to allow them to access and use our services;
11. To train and provide service-related insights to relevant members of our staff;
12. To provide our customers and users with assistance and support;
13. To gain a better understanding on how individuals use and interact with our sites and services, and how we could improve user experiences, and continue improving our products, offerings and the overall performance of our services;
14. To facilitate and optimize our marketing campaigns, ad management and sales operations, and to manage and deliver advertisements for our products and services more effectively, including on other websites and applications. Such activities allow us to highlight the benefits of using our services, and thereby increase your engagement and overall satisfaction with our services. This includes contextual, behavioral and interests-based advertising based on your activity, preferences or other data available to us or to our business partners;
15. To contact our customers, users and prospects with general or personalized service-related messages, as well as promotional messages that may be of specific interest to our customers and users;
16. To facilitate, sponsor and offer certain events, contests and promotions;
17. To support and enhance our data security measures, including for the purposes of preventing and mitigating the risks of fraud, error or any illegal or prohibited activity;
18. To create aggregated statistical data, inferred non-personal data, or anonymized or pseudonymized data (rendered non-personal and non-identifiable), which we or our business partners may use to provide and improve our respective services, or for any other purpose; and
19. To comply with applicable laws and regulations.

We do not sell your personal information for the intents and purposes of the California Consumer Privacy Act (CCPA).

In the preceding 12 months, we have not disclosed and/or sold personal information to third parties for a commercial or business purpose, as authorized under applicable law. When we disclose or sell personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We do not sell the personal information of minors under 16 years of age without affirmative consent.

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

1. The specific pieces and categories of personal information we collected about you.
2. Our business or commercial purpose for collecting or selling that personal information.
3. The categories of third parties with whom we share that personal information.

You also have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request to delete, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

You may submit a request to know or request to delete, free of charge, by emailing [email protected], or through our toll-free number at 888-965-5749. Note that for requests to delete, we will require you to separately confirm that you want your personal information deleted. Once submitted, you will receive an email within 10 days that we will use to verify your identity and provide confirmation of your request. We will respond to your request to know or request to delete within 45 days from the day we receive the request. If necessary, we may extend the time period to a maximum total of 90 days from the day we receive the request. In such a case, you will receive an email notifying you of the extension and explaining the reason for the extension. Any disclosure in response to a request to know will cover the 12-month period preceding the business's receipt of the request and will be delivered in a readily usable digital format, or by mail at your request.

Your request to know or request to delete may be denied for any reason allowable under the CCPA. For example, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
2. Comply with a legal obligation; or
3. Make other internal and lawful uses of that information that are compatible with the context in which you provided it or any other purpose permitted by the CCPA.

Similarly, we may deny requests:

1. For specific pieces of personal information if the disclosure creates a substantial, articulable, and unreasonable risk to the security of that personal information, your account with us, or the security of our systems or networks;
2. To access or delete information that is de-identified;
3. If your identity cannot be verified to a degree of certainty required by the CCPA; or
4. From an authorized agent that does not submit proof that they have been authorized by the consumer to act on the consumer's behalf.

If you are under 18 years of age, reside in California, and have a registered account with Home Gallery Stores, you have the right to request the removal of unwanted information that you publicly post on Home Gallery Stores. To request the removal of such information, you can contact Home Gallery Stores as provided within the Data Removal Request section. Upon receiving such a request, Home Gallery Stores will make sure that the information is not publicly available, but the information may not be completely or comprehensively removed from our systems and databases.

1. Klaviyo – Email & SMS Marketing
2. Kibana /Elastic.co – User Activity Logs
3. BigQuery – Data Warehouse
4. Amazon Web Services – Website Hosting & Storage
5. Salesforce – Customer Relationship Management
6. FullStory - Session Activity
7. Google Analytics - Data & Analytics
8. Yotpo - Review Requests & Analytics
9. Zendesk - Customer Service Ticketing

Home Gallery Stores will not disclose the customer's data to law enforcement except when instructed by you or where it is required by law. When governments make a lawful demand for customer data from Home Gallery Stores, Home Gallery Stores strives to limit the disclosure. Home Gallery Stores will only release specific data mandated by the relevant legal demand.

If compelled to disclose your data, Home Gallery Stores will promptly notify you and provide a copy of the demand unless legally prohibited from doing so.

If you wish to make a request for information or to delete your account, or for any questions about our privacy practices and compliance with California law, please contact us via email at [email protected].