Privacy Policy

LAST UPDATED AND EFFECTIVE:  September 2023

This Privacy Policy describes how Henry Rose LLC (“us,” “we” or “our”) collect, use, disclose and safeguard your personal information, how we use this information, how this information may be shared, and what choices and right you have with respect to this information.

If you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you may be entitled to certain individual rights under the California Consumer Privacy Act of 2018 [as amended by the California Privacy Rights Act of 2020 ("CPRA")] (collectively, "CCPA"), Virginia Consumer Data Protection Act ("VCDPA"), Colorado Privacy Act ("CPA"), Connecticut Act Concerning Personal Data Privacy and Online Monitoring ("CTDPA"), or Utah Consumer Privacy Act ("UCPA"). Please see the Notice to CALIFORNIA RESIDENTS and NOTICE TO Certain Residents of Data Subject Rights Section of our Privacy Policy for your rights and how to exercise them for users located in California, Virginia, Colorado, Connecticut, and Utah only.

BY ACCESSING THE WEBSITE, USING OUR PRODUCTS OR SERVICES, OR OTHERWISE INTERACTING WITH HENRY ROSE ONLINE OR OFFLINE, YOU AGREE TO BE BOUND BY THE TERMS OF THIS PRIVACY POLICY and our TERMS OF USE, including the ARBITRATION and CLASS ACTION WAIVER provisions.

If you do not agree to this Privacy Policy, you are instructed not to use the Site or Services.

1. Information We May Process.

When may collect or process the following types of information about you.  The specific information we collect about you may vary depending on how you interact with us.:

• Contact information and personal identifiers, such as your name, email address, telephone number, username, date of birth or social media handle. Device Identifiers, such as information about your device like your IP address, browser type or other online identifiers.
• Demographic information such as your age, sex, ethnicity and gender.
• Physical characteristics, such as your hair type, skin type, eye color.
• Commercial information, such as the products or services you have purchased, returned or considered, and your product preferences.
• Payment information, such as your method of payment and payment card information (including payment card number, delivery address, billing address).
• Identity verification information, such as loyalty member ID and authentication information like passwords.
• Online or network activity information, such as information regarding your interaction with our website, mobile applications, digital properties, and advertisements, information about your browsing and search history on our website, and log file information like your browser type and webpages you visit.
• Geolocation information, such as information that can help identify your physical location (like your GPS coordinates or the approximate location of your device).
• Audio and visual information, such as recordings of your voice when you call our customer service.
• Professional or employment related information, such as professional licenses or certifications in connection with our professional programs.
• User content, such as your communications with us and any other content you provide including imagery, videos, reviews, articles, survey responses and comments.
• Inferences drawn from or created based on any of the information identified above.

This Privacy Policy do not apply to Information that is:

• Collected Directly by Third Parties: Any data you disclosed on websites not operated or controlled by us (“Third Party Sites”), even though we may provide links to them on the Site or in our emails. We are not responsible for the policies and practices employed by, or the content of, Third Party Sites. We suggest contacting those sites directly for information about their privacy policies and practices.

• Aggregated, De-Identified or Non-Personal Data: Any Information that is publicly available, or can no longer be used to identify you (i.e., is de-identified, aggregated or otherwise not constitute PII) will be treated as non-personally identifiable data under this Privacy Policy

2. How We Collect Your Information.

          We may collect personal information about you from various sources.  For example:

• Directly from you, such as when you make a purchase on one of our websites or in one of our retail stores, contact us with a question or complaint, use one of our mobile applications or virtual try on experiences, chat with an automated virtual agent or live person on one of our websites, create an account on one of our websites, register for one of our brand loyalty programs or marketing lists, respond to a survey, participate in a contest or other promotion, make an appointment or sign-up to attend an event.

• From your friends or family members, such as when your friend or family member sends you a gift or makes a referral.
• When you interact with our websites or emails. When you visit our websites, or when you open or click on emails we send you, we (and third parties we work with) may automatically collect information from your browser or device, such as device identifiers and online and other network activity information using technologies such as cookies, pixel tags, and similar technologies.
• Cookies are small text files that websites place on your Internet-connected device to uniquely identify your browser or to store information or settings in your browser. Pixel tags are small images which are embedded into our websites or emails. We use pixel tags to collect information about your browser or device, how you interact with our websites, or whether you open or click on the emails we send you. Pixel tags also enable us (and third parties we work with) to place cookies on your browser. 

• For example, our Service Provider Rakuten Advertising may collect personal information when you interact with our digital property, including IP addresses, digital identifiers, information about your web browsing and app usage and how you interact with our properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads and other commercial purposes.

• For information about Rakuten Advertising, please click here: 

• Additionally, our Service Providers and/or third parties SMS provider and Superfiliate may also collect personal information when you in interact with our Website or digital properties.

• For information on how our SMS provider collects and uses your personal information when we use its Services, please click here.

• For information on how Superfiliate collects and uses your personal information when we use its Services, please click here: Superfiliate | Privacy

• We also use Google Analytics and related Google-owned products (YouTube) on our websites. For details on how Google collects and uses your personal information when we use its services, please visit: How Google Uses Information From Sites Or Apps That Use Our Services.

• CHAT FEATURES. We may also deploy a chatbot or other functionality on the Website for customer service or other business purposes.  By using the Website and engaging with the chatbot or chat function, you consent to the recording and use of information about you and the chat session or any authorized service provider acting solely on Henry Rose’s behalf.  You further agree that we may use or disclose the information you provide via the chatbot or chat function in accordance with this Privacy Policy. If you do not consent to these terms, you should not use the chatbot or chat functionality.  Your continued interaction with, or submission of information to, any chat feature will be deepend your acceptance of Henry Rose’s Privacy Policy and this provision.

• Through in-store and other offline technologies, such as video surveillance, traffic counting devices and WiFi technology in and around our retail stores, and call recording technology when you speak to customer service.
• From our business partners and service providers, such as demographic companies, analytics providers, advertising companies and networks, third-party retailers or distributors, and other third parties that we choose to collaborate or work with.
• From social media platforms and networks, such as Facebook, Instagram, Twitter, Pinterest, and Google. For example, we may obtain your information from a social media platform or network if you interact with us on social media or choose to log-in to our websites using your social media credentials.

          We may combine the information we obtain from the above sources.  For example, we may combine information we collect in stores with information we collect online.

1. How We Use Your Personal Data.

          We may use the information we have about you:  

• To provide products and services to you, such as fulfilling orders and processing payments, creating, servicing and/or maintaining your account or loyalty program membership, identifying concerns and assisting with product recommendations, providing real time support via our automated virtual agent and live person chat feature on one of our websites and maintaining a transcript of the chat, and managing current or past purchases.
• To communicate with you, including to respond to your inquiries or complaints, and to help you place an order.
• To administer your participation in special events, contests, sweepstakes, surveys or promotions.
• For marketing and advertising, such as to send you postal mail, text messages, email, push notifications or other messages, show you advertisements for products and/or services tailored to your interests on social media and other websites.
• To operate and understand your use of our websites and mobile applications, such as to remember your information so you do not have to re-enter it, understand your preferred method of purchasing with us; determine what browser and devices you use to visit our websites or mobile applications; and to evaluate and improve our services, advertisements, websites and mobile applications. • To operate and improve our business, including to conduct analytics, provide quality assurance and process adverse event or product related claims, conduct research and development, and perform accounting, auditing and other internal business functions.
• For legal and security purposes, such as to detect, prevent, and prosecute harmful, fraudulent, or illegal activity, loss prevention, identify and repair bugs on our websites or mobile applications, and to comply with applicable legal requirements, relevant industry standards and our policies.

We also may use your information in other ways for which we provide specific notice at the time of collection.

1. How We Share Information.

• Our Subsidiaries and Affiliates. We may transfer your personal information to our subsidiaries and affiliates for a business purpose or for the other purposes identified in this Privacy Policy.
• The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

• Service Providers. We may transfer personal information to service providers who perform services on our behalf based on our instructions. We do not authorize these service providers to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements. Examples of these service providers include entities that process credit card payments, fulfill orders, and that provide website and application functionality, hosting, analytics, customer support including through automated virtual agent and live person chat, advertising and marketing services.

• Parties to a corporate transaction. We also reserve the right to transfer personal information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation).
• Advertising Companies. We work with third party advertising companies (such as advertising networks) to serve advertisements on our behalf.
• Social Media Companies. If you use third party social media features available on our Site, we or the third party may collect or share your Information.  We consider information collected from or shared through any such social media features as public information because the third party social media sites made it publicly available.  If you do not want us to be able to access information about you, including Personal Data, from Third Party Sites, you must limit data collection and disclosure in the privacy settings on the Third Party Sites.  We reserve the right to remove the Personal Data or other data of any person for any reason we, in our sole discretion, deem appropriate.

• Other third parties. In addition, we may disclose personal information about you (i) if we are required to do so by law or legal process, (ii) to law enforcement authorities or other government officials, (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity, (iv) when disclosure of your personal information is otherwise required or permitted by law, or (v) with your consent.

5. HOW YOU CAN CONTROL YOUR INFORMATION.

• Data Subject Rights: Depending on local laws, you may have rights with respect to your personal information. For example, you may be able to request access to the personal information we maintain about you, update and correct inaccuracies in your personal information, and have the personal information deleted or transmitted to a third-party.  You may request to access, change, or delete your personal information by email at privacy@henryrose.com. We may take reasonable steps to verify your identity when you make a request.  You may also have the right to lodge a complaint with a data protection authority.
• Marketing & Advertising Preferences: Your online account may offer you the ability to edit your marketing preferences. You can also opt-out of receiving marketing communications (such as email, postal mail or text messages) by following the unsubscribe instructions sent within those communications or you can make a request by email at privacy@henryrose.com.  When you unsubscribe from our marketing communications, we will no longer use the related personal information (such as your email address or phone number) for targeted advertising purposes.
• Mobile Device & Browser Preferences: Depending on your mobile device or web browser, we may request your location or request to send you push notifications.  You can edit your preferences using the settings on your device.
• Cookie Preferences: You can choose how certain cookies are used in connection with our websites. You can edit your cookie preferences at any time by editing your browser settings or selecting the “Manage Cookies” or “Do Not Sell or Share My Personal Information / Target Ads” link available at the bottom of our Website. For additional details see the How We Use Cookies section.

6. HOW WE USE COOKIES.

Cookies are small text files that websites place on your Internet-connected device to uniquely identify your browser or to store information or settings in your browser which allows us to remember you when you come back to our websites and provide you with personalized experiences and advertisements. We use different types of cookies on our websites, which may include strictly necessary cookies, performance cookies, functional cookies and targeting cookies. 

You can edit your preferences by accessing the “Manage Cookies” or “Do Not Sell or Share My Personal Information / Target Ads” link at the bottom of our Website or by editing your browser settings.  When editing your cookie preferences, please note that your settings only apply to the browser you use to submit your opt-out request, so if you use multiple browsers or devices, you must opt-out on each browser, on each device. Your opt-out is enabled using cookies so once you opt-out, if you delete your browser’s saved cookies on a device, you will need to opt-out again on that browser on that device. The website henryrose.com uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminders messages via SMS.

Our website will honor and respond to “do not track” signals from browsers.

7. HOW WE USE INFORMATION TO ADVERTISE.

We may use, disclose or otherwise process your personal information to advertise our products and services in different ways, including targeted advertising.   We work with third party advertising companies (such as advertising networks) to serve advertisements on our behalf. These advertising companies may use cookies, pixel tags and similar technologies to collect device identifiers, online or network activity information, commercial information, or inferences, such as information about the websites you visit over time and the advertisements you click on to deliver advertisements that are targeted to you. You can opt-out of cookie-based advertising based on your visits to our sites by editing your cookie preferences as described in the How We Use Cookies section. Please note that even if you opt-out, you may still see ads from us, but the ads will not be targeted based on the websites you visit over time and the advertisements you click on and may therefore be less relevant to you and your interests.

We also work with third-party platforms, including platforms operated by social networks, to show you advertisements or measure the effectiveness of our advertisements. We may convert your email address, telephone number, or other information into a unique value and have these third-party platforms match this unique value with a user on their platform or with other data they may have. This matching enables us to deliver advertisements to you and others on these platforms. You also can request that we refrain from using your personal information in this way by contacting us via email at privacy@henryrose.com.  

8. HOW WE MAY CONTACT YOU. 

You agree that we, our affiliates, and/or our third-party service providers with whom we collaborate and contract, may communicate with you via electronic messages, including email, text message, or mobile push notification to, for example, send you information relating to our products and services that we think may be of interest to you, communicate with you about offers, promotions, upcoming events, and other news about products and services offered by us.  

To opt-out of receiving promotional communications, you may Contact Us at any time or use the “unsubscribe” link in emails.

 

YOUR CHOICES

Email

By using our Services, you agree that we may contact you by email as set forth herein.  If you do not want to receive marketing and promotional emails from us, you may click on the “unsubscribe” link in the email to unsubscribe and opt-out of marketing email communications or Contact Us.

Mobile Push Notifications

By using our Services, you agree that we may contact you by calling or sending messages to your mobile device.  You may be able to use the settings on your mobile device to enable or turn off mobile push notifications from us or Contact Us. 

Text Messages

When using our Services, there may be situations where you can elect to receive text messages.  We will ask for your consent before we send any text messages to you.  If at any time you no longer want to receive text messages from us, reply STOP (or as otherwise instructed) to the text message or Contact Us.

9. INTERNATIONAL TRANSFERS 

In offering and providing our products and services, your personal information may be transferred, stored or processed in countries other than the country in which the information was originally collected (such as the United States).  Those countries may not have the same data protection laws as your country of residence, and your personal information will be subject to applicable foreign laws. When we transfer your personal information to other countries, we will protect that information in the manner described in this Privacy Policy.  

10. HOW WE PROTECT INFORMATION

We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure, or use.  We restrict access to personal information on a need-to-know basis to employees and authorized service providers who require access to fulfil their job requirements.

11. HOW LONG WE RETAIN INFORMATION 

In general, we retain personal information as long as reasonably needed to achieve the purposes outlined in this Privacy Policy.  There are many factors that we use to determine how long personal information is retained, such as:

• the purposes for which the personal information was collected, including to provide our products and services;
• your marketing preferences and how you engage with our Website, Services or Products;
• any legal or regulatory requirements that apply to the personal information; and
• whether the personal information may be relevant to us in protecting our own rights (e.g. applicable limitation periods). 

12. HOW WE TREAT CHILDREN’S INFORMATION

Our products and services are designed for a general audience and are not intended for or directed to children.

13. UPDATES TO OUR PRIVACY POLICY

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will post a notice on our websites to notify you of any significant changes to our privacy practices and indicate at the top of the Privacy Policy when it was most recently updated. 

14. HOW TO CONTACT US 

If you have any questions or comments about this Privacy Policy or if you would like to exercise your rights, you can contact us by emailing us at privacy@henryrose.com.

If we need, or are required, to contact you concerning any event that involves your personal information, we may do so by postal mail, telephone, email or through a notice on our websites. 

15. ARBITRATION & CLASS ACTION WAIVER. 

If you have a complaint about this Privacy Policy or our privacy practices, we will work with you in an attempt to resolve your complaint under the arbitration procedures described in the Dispute Resolution section of the Site’s Terms of Use.  BY CHECKING THE BOX PROMPT BEFORE SUBMITTING YOUR INFORMATION TO US, WE EACH AGREE TO SETTLE DISPUTES ONLY BY NON-CLASS, INDIVIDUAL ARBITRATION, INSTEAD OF SUING IN COURT (EXCEPT CERTAIN SMALL CLAIMS).  THE RULES IN ARBITRATION ARE DIFFERENT.  THERE IS NO JUDGE OR JURY, LIMITED DISCOVERY RIGHTS, AND REVIEW IS LIMITED, BUT AN ARBITRATOR CAN AWARD THE SAME DAMAGES AND RELIEF, AND MUST HONOR THE SAME LIMITATIONS STATED IN THE AGREEMENT, AS A COURT WOULD.  

To initiate an arbitration proceeding, you must send us a notice of your complaint that includes a written statement of your name, address, and contact information, the facts giving rise to your complaint, and the relief you are requesting (the “Dispute Notice”).  The Dispute Notice must be addressed to:  Henry Rose LLC, 10960 Wilshire Blvd., Suite 1100, Los Angeles, CA 90024 and sent to us by certified mail as described in the Dispute Resolution section of the Site’s Terms of Use.  If we do not reach an agreement to resolve your privacy complaint within sixty (60) days after we receive your Dispute Notice, you may commence an arbitration proceeding under the Dispute Resolution section of the Site’s Terms of Use.   

NOTICE TO California Residents

This section applies solely to California residents and supplements our Privacy Policy above.

Collection and Disclosure of Personal Information

We may collect and disclose or may have collected and disclosed your personal information to certain categories of third parties, as described below.

Category	Disclosed to Third Parties
Contact information and personal identifiers	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Device Identifiers	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Commercial Information	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Payment Information	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Demographic Information	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Identity Verification Information	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Online or network activity information	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
User Content	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law
Inferences	We may disclose or may have disclosed this information to: ·       Our subsidiaries and affiliates ·       Service Providers ·       fraud detection providers ·       law enforcement authorities or other government officials where required or permitted by law

 

Collection and Use of Sensitive Personal Information

We may collect certain categories of personal information that may be used to infer characteristics about consumers.  Some of these categories used to infer characteristics about consumers may be considered “sensitive personal information” under California law, and demographic information like your ethnicity.  In addition to the purposes set forth above, we use this information to further our business goals, such as to advertise our products and services or provide personalized product recommendations. 

Sale or Sharing of Personal Information

We do not sell or share your personal information for monetary consideration. Certain advertising practices, such as those described in the How We Use Information to Advertise section, may be considered a “sale” under California law when the personal information is exchanged for non-monetary consideration. You have the right to opt out of these types of disclosures of your information. We may “sell” or “share” (or may have “sold” or “shared”) the following categories of personal information to the third parties listed below:

CATEGORY	SOLD OR SHARED WITH THIRD PARTIES
Contact information of personal identifiers	We may sell or share or may have sold or shared with Advertising Companies.
Device Identifiers	We may sell or share or may have sold or shared with Advertising Companies.
Online or network activity	We may sell or share or may have sold or shared with Advertising Companies.
Commercial Information	We may sell or share or may have sold or shared with Advertising Companies.
Inferences	We may sell or share or may have sold or shared with Advertising Companies.

We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.  We do not sell or share sensitive personal information.

NOTICE OF FINANCIAL INCENTIVES

We may offer you various financial incentives such as discounts and special offers when you provide us with contact information and identifiers such as your name, email address and/or mobile phone number. When you sign-up for one of our brand loyalty programs, marketing lists or other discounts and special offers, you opt-in to a financial incentive. You may withdraw from a financial incentive at any time by opting out from the brand marketing communications for which you initially signed-up for, or closing your brand loyalty member accounts or referral programs.   

Generally, we do not assign monetary or other value to personal information, however, California law requires that we assign such value in the context of financial incentives. In such context, the value of the personal information is related to the estimated cost of providing the relevant financial incentive(s) for which the information was collected.

 

YOUR CALIFORNIA STATE PRIVACY RIGHTS

If you are a California resident, you may have the right to:

• Request, twice in a 12 month period, access to the personal information we have collected, used, disclosed, and sold or shared about you,
• Deletion of the personal information we have collected from you (subject to certain exceptions),
• Correction of the personal information we maintain about you, if that information is inaccurate,
• Limitation of our use and disclosure of sensitive personal information used for inferring characteristics about you,
• Opt-out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising purposes.

You can exercise your rights by submitting a request by email at privacy@henryrose.com. Before processing your request, we will take reasonable steps to verify your identity, which will include verifying that the email address from which you submit the request matches the email address we maintain on file for you. To ensure you are the owner of the email address, you must respond to a confirmation email that we will send to such email address. In some cases, we may ask that you provide additional information to verify your identity. You may also designate an authorized agent to make a request on your behalf. The authorized agent may submit the request through email at privacy@henryrose.com and will be required to provide proof that they have been authorized to act on your behalf. If the authorized agent does not provide such proof, you will be required to confirm your identity and the authenticity of the request.

To opt-out of the sale or sharing of your personal information for cross-contextual behavioral advertising purposes, you must also edit your preferences using the “Do Not Sell or Share My Personal Information / Target Ads” link at the bottom of each our Website.  You may also use the Global Privacy Control signal. For more information about the Global Privacy Control, visit https://globalprivacycontrol.org/.

We will not discriminate against you on account of your exercise of your California privacy rights.

 

NOTICE TO CERTAIN RESIDENTS OF DATA SUBJECT RIGHTS

Colorado, Connecticut, Virginia and Utah Residents

This section applies solely to Colorado, Connecticut, and Virginia residents and supplements our Privacy Policy above.

Subject to certain exemptions, if you are a Colorado, Connecticut, Virginia or Utah resident, you may have the right to:

• request access to, or correction or deletion of, your personal information; or
• opt out of the processing of your personal information for targeted advertising purposes or the sale of your personal information. Certain advertising practices, such as those described in the How We Use Information to Advertise section, may be deemed targeted advertising or a “sale” under some state laws.

You can exercise your rights by submitting a request at privacy@henryrose.com. Before processing your request, we will take reasonable steps to verify your identity, which will include verifying that the email address from which you submit the request matches the email address we maintain on file for you. To ensure you are the owner of the email address, you must respond to a confirmation email that we will send to the email address. In some cases, we may ask that you provide additional information to verify your identity. You may appeal our decision with respect to a request you have submitted by contacting us at privacy@henryrose.com.

To opt-out of the processing of your personal information for targeting advertising purposes or the sale of your personal information, you must also edit your preferences using the “Do Not Sell or Share My Personal Information / Target Ads” link at the bottom of each our Website.

4. Contact Us.

If you have any questions about this Privacy Policy, our practices, or your dealings with us, or to exercise any and all of your rights, please contact us at privacy@henryrose.com.