Privacy policy
Last Modified: January 16, 2020
GATTA Bag, LLC operates this website, www.gattabag.com. GATTA Bag, LLC (herein, “we,” “us,” “Gatta Bag,”or “GATTA”) recognizes that you care how information about you is used and shared. We have created this Privacy Policy to inform you of our information collection, use and sharing practices for this website. If you have any questions regarding this Privacy Policy, you should contact us at info@gattabag.com.
This policy covers how Gatta Bag treats personal information that Gatta bag collects and receives. By using or accessing Gatta Bag’s Services in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent that we will collect, use, and share your information in the following ways.
Remember that your use of Gatta Bag’s Services is at all times subject to the Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.
You may print a copy of this Privacy Policy by clicking here. If you have a disability, you may access this Privacy Policy in an alternative format by contacting info@gattabag.com.
1. What does this Privacy Policy cover?
This Privacy Policy covers our treatment of Personal Information that we gather when you are accessing or using our Services, but not to the practices of companies we don't own or control, or people that we don't manage. "Personal Information" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations. This Policy applies only to Personal Data that we collect from you directly; if we did not collect data directly from you, you should contact the entity that collected your Personal Data in the first instance to address your rights with respect to such data. We gather various types of Personal Information from our users, as explained in more detail below, and we use this Personal Information internally in connection with our Services, including to personalize, provide, and improve our services, to allow you to set up a user account and profile, to contact you, to fulfill your requests for certain products and services, and to analyze how you use the Services. In certain cases, we may also share some Personal Information with third parties, but only as described below.
We do not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not attempt to register for the Services or send any personal information about yourself to us. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under 13 may have provided us personal information, please contact us at info@gattabag.com.
2. Will Gatta Bag ever change this Privacy Policy?
We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes by placing a notice on www.gattabag.com, by sending you an email, and/or by some other means. Please note that if you've opted not to receive legal notice emails from us (or you haven't provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is collected.
3. What Information does Gatta Bag Collect?
Our primary goals in collecting information are to provide and improve our Services, to administer your use of the Services (including your Account, if you are an Account holder), and to enable you to enjoy and easily navigate our Services.
The categories of personal information we collect depend on whether you are a customer, user, applicant or visitor, and the requirements of applicable law.
Information You Provide to Us.
o Account Creation. When you create a user account, we may collect your name, email address, postal address, phone number, and password, as well as other optional information you may provide like the type of clothing you prefer.
o Shopping with Us. We may collect Personal Information from you to improve your in-store shopping experience, including collecting your phone number to provide real-time reservation updates
o Your Communications with Us. We collect personal information from you such as email address, phone number, or mailing address when you request information about our Services, register for our newsletter or loyalty program, request customer or technical support, apply for a job or otherwise communicate with us.
o Surveys. We may contact you to participate in surveys. If you decide to participate, you may be asked to provide certain information which may include personal information.
o Social Media Content and Reviews. We may offer forums, blogs, or social media pages, including for you to review your Gatta Bag purchases. Any content you provide on these channels will be considered “public” and is not subject to privacy protections.
o Registration for Sweepstakes or Contests. We may run sweepstakes and contests. Contact information you provide may be used to reach you about the sweepstakes or contest and for other promotional, marketing and business purposes, if permitted by law. In some jurisdictions, we are required to publicly share information of winners.
Information Collected Automatically or From Others
o Automatic Data Collection We may collect certain information automatically when you use the Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information, Internet service provider, pages that you visit before, during and after using the Services, information about the links you click, and other information about how you use the Services. Information we collect may be associated with accounts and other devices.
In addition, we may automatically collect data regarding your use of our Services, such as the types of content you interact with and the frequency and duration of your activities. We may combine your information with information that other people provide when they use our Services, including information about you when they tag you.
o Cookies, Pixel Tags/Web Beacons, Analytics Information, and Interest-Based Advertising Technologies. We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Services. Technologies are essentially small data files placed on your computer, tablet, mobile phone, or other devices that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.
o Cookies. Cookies are small text files placed in visitors’ computer browsers to store their preferences. Most browsers allow you to block and delete cookies. However, if you do that, the Services may not work properly.
o Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in the Services that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement.
Analytics. We may also use Google Analytics and other service providers to collect information regarding visitor behavior and visitor demographics on our Services. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and processing of data generated by your use of the Services by going to http://tools.google.com/dlpage/gaoptout.
Information from Other Sources. We may obtain information about you from other sources, including through third party services and organizations to supplement information provided by you. For example, if you access our Services through a third-party application, such as an app store, a third-party login service, or a social networking site, we may collect information about you from that third-party application that you have made public via your privacy settings. Information we collect through these services may include your name, your user identification number, your user name, location, gender, birth date, email, profile picture, and your contacts stored in that service. This supplemental information allows us to verify information that you have provided to us and to enhance our ability to provide you with information about our business, products, and Services.
Consent: In some cases, we process Personal Data based on the consent you expressly grant to us at the time we collect such data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection.
Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
We may communicate with you if you’ve provided us the means to do so. For example, if you’ve given us your email address, we may send you promotional email offers for Gatta Bag products and on behalf of other businesses that we work with, or email you about your use of the Services. Also, we may receive a confirmation when you open an email from us. This confirmation helps us make our communications with you more interesting and improve our services. If you do not want to receive communications from us, please indicate your preference by clicking here.
Categories of Third Parties with Whom We Share Personal Data
We share Personal Data with vendors, third party service providers and agents who work on our behalf and provide us with services related to the purposes described in our Terms of Use. These parties include:
Payment processors
Fraud prevention service providers
Ad networks
Marketing service providers
Analytics service providers
Staff augmentation and contract personnel
Hosting service providers
Co-location service providers
Communications service providers
We also share Personal Data when necessary to complete a transaction initiated or authorized by you or provide you with a product or service you have requested. In addition to those set forth above, these parties also include:
Fulfillment partners
Third party business partners who you access through the Sites
Other parties authorized by you
We also share the information with third parties when you have given us consent to do so (as indicated at the point such information is collected).
We also share Personal Data when we believe it is necessary to:
Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies
Protect us, our business or our users, for example to enforce our Terms of Use, prevent spam, or other unwanted communications and investigate or protect against fraud
Maintain the security and stability of our products and services
Last, we share Personal Data with our affiliates or other members of our corporate family. Furthermore, if we choose to buy or sell assets, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party, and we would share Personal Data with the party that is acquiring our assets. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this policy.
5. How Does Gatta Bag Share and Disclose the Personal Information it Receives?
This section describes how Gatta Bag may share and disclose Information. Gatta Bag may disclose your Personal Information to service providers and other parties for the following business purposes:
Information that's been de-identified. We may de-identify your Personal Information so that you are not identified as an individual, and provide that information and/or aggregate usage information with service providers, and/or with other persons we conduct business with. These service providers and other persons may also share with us aggregated de-identified information that they have independently developed or acquired. Additionally, we may combine aggregate usage information from the pixel tags, web beacons and cookies we discussed above with similar data we collect from other visitors to help us improve our Services, but that de-identified information cannot be linked back to you.
Affiliated Businesses: In certain situations, businesses or third parties we’re affiliated with that may sell or provide products or services to you through or in connection with the Services (either alone or jointly with us). You can recognize when an affiliated business is associated with such a transaction or service, and we will share your Personal Information with that affiliated business only to the extent that it is related to such transaction or service. We have no control over the policies and practices of third party websites or businesses as to privacy or anything else, so if you choose to take part in any transaction or service relating to an affiliated website or business, please review all such business’ or websites’ policies.
Advertisers: We work with advertisers and/or merchant partners ("Advertisers") to advertise Gatta Bag and Gatta Bag’s partners’ products and services, and you agree that we may provide information (such as email address, cookies and IP addresses for online advertising and your name and address for physical mailers) to our Advertisers, in order for that Advertiser to select the appropriate audience for those advertisements and/or offers.
Agents: We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products or services to you; for example, third party analytics companies help us understand and improve our Services and we may use a payment processing company to receive and process your credit card transactions for us. Unless we tell you differently, our agents do not have any right to use the Personal Information we share with them beyond what is necessary to assist us. Note that an "agent" may also be considered a "service provider" in certain circumstances, and would be subject to the terms of the "Information that's been de-identified" section in that regard.
Business Transfers: We may choose to buy or sell assets, and may share and/or transfer customer information in connection with the evaluation of and entry into such transactions. Also, if we (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, Personal Information could be one of the assets transferred to or acquired by a third party.
Protection of Company and Others: We reserve the right to access, read, preserve, and disclose any information that we believe is necessary to comply with law or court order; enforce or apply our Terms of Use and other agreements; or protect the rights, property, or safety of Company, our employees, our users, or others.
6. Is Personal Information about me secure?
Your account is protected by a password for your privacy and security. If you access your account via a third party site or service, you may have additional or different sign-on protections via that third party site or service. You must prevent unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.
We endeavor to protect the privacy of your account and other Personal Information we hold in our records, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.
7. What Personal Information Can I Access?
Through your account settings, you may access, and, in some cases, edit or delete the following information you've provided to us:
name and password
email address
date of birth
gender
shipping address
credit card information (in conjunction with our third party payment processor)
The information you can view, update, and delete may change as the Services change. If you have any questions about viewing or updating information we have on file about you, please contact us at info@gattabag.com.
8. What Choices Do I Have?
You can always opt not to disclose information to us, but keep in mind some information may be needed to register or to take advantage of some of our features.
You may be able to add, update, or request the removal of Personal Information as explained above. When you update information, however, we may maintain a copy of the unrevised information in our records. You may request the removal of your Personal Information in your account by emailing us at info@gattabag.com. Some information may remain in our records after the removal of such information from your account (including, without limitation, in back-up records that we create automatically or information regarding purchases of products). We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally.
CALIFORNIA RESIDENT RIGHTS
If you are a California resident, you have the rights outlined in this section. Please see the "Exercising Your Rights" section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following applies to you, please contact us at info@gattabag.com.
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at info@gattabag.com.
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Our Services do not support DO Not Track requests at this time. To find out more about “Do Not Track,” you can visit www.allaboutdnt.com.
Access
You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. We will provide you with the following information:
The categories of Personal Data that we have collected about you.
The categories of sources from which that Personal Data was collected.
The business or commercial purpose for collecting or selling your Personal Data.
The Categories of third parties with whom we have shared your Personal Data.
The specific pieces of Personal Data that we have collected about you.
If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient.
If we have sold your Personal Data over the past 12 months, we will identify the categories of Personal Data purchased by each category of third party recipient.
Deletion
You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
Exercising Your Rights
To exercise the rights described above, you must send us a request that (1) provides a verified email address and a valid photo ID to allow us to confirm that you are the person about whom we have collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may submit a Valid Request via Email at: info@gattabag.com
You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to do, and we may request a copy of this written permission from your Authorized Agent when they make a request to exercise your rights on your behalf.
We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA
We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.
Our Financial Incentive Program
From time to time, we may offer financial incentives, including payments to you as compensation, for the collection of your personal information, the sale of your personal information, or the deletion of your personal information. These financial incentives include offering a promotion to customers on their birthdays where relevant. You may revoke your consent to participate in our financial incentive program at any time by emailing us at info@gattabag.com.
OTHER STATE LAW PRIVACY RIGHTS
Nevada Resident Rights
If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at info@gattabag.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.
How Long Do We Retain Your Personal Data? We retain Personal Data about you as long as you have an open account with us and for three (3) months after you close your account. In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. Afterward, we retain some information in a depersonalized or aggregated form but not in a way that would identify you personally.
What Security Measures Do We Use? We seek to protect Personal Data using appropriate technical and organizational measures based on the type of Personal Data and applicable processing activity. For example, we encrypt certain sensitive personal information such as credit card information when we transmit such information over the Internet. We also require that our suppliers protect such information from unauthorized access, use and disclosure.
Personal Data of Children: As we said above, we do not knowingly collect or solicit Personal Data from anyone under the age of 16. If you are under 16, please do not attempt to register for the Sites or send any Personal Data about yourself to us. If we learn that we have collected Personal Data from a child under age 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us Personal Data, please contact us at info@gattabag.com.
What Rights Do You Have Regarding Your Personal Data? You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please fill out this request form. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need to you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data. You can also access certain of your Personal Data by emailing info@gattabag.com and we can email or mail you the requested information.
Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. In certain circumstances, you can correct some of this information directly by updating the information via your My Account section on Gattabag.com – if you are unable to correct the information via your My Account section then please email us at info@gattabag.com.
Erasure: You can request that we erase some or all of your Personal Data from our systems. To do so, please email us at info@gattabag.com.
Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Sites.
Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes.
Restriction of Processing: You can ask us to restrict further processing of your Personal Data.
Right to File Complaint: You have the right to lodge a complaint about Gatta Bag’s practices with respect to your Personal Data with the supervisory authority of your country or EU Member State.
9. Have questions about this policy?
If you have any questions or concerns regarding our privacy policies, please send us a detailed message to info@gattabag.com, and we will try to resolve your concerns.