As provided in applicable law, you may also have the right to not be discriminated against for exercising your rights. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you. We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address.
Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request.
If you would like further information regarding your legal rights or would like to exercise any of them, you may contact us as stated in the “How to Contact Us” section below.
Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you. To exercise such an appeal right, you may contact us as stated in the “How to Contact Us” section below.
California residents can learn more about the rights available to them in the “California Privacy Notice at Collection” section.
We employ reasonable security precautions to protect the information we collect from and about you, but despite our reasonable efforts, no security measures are perfect or impenetrable and we cannot guarantee “perfect security.” Please further note that any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you help us keep your information safe by taking reasonable steps such as keeping your passwords private, changing them from time to time, and not disclosing personal data in places that can be accessed publicly.
The Services may contain links to various websites that we do not control. When you click on one of these links, you will no longer be transacting business through the Services. Third-party websites maintain their own privacy policies, and we do not exercise any control over any of the third-party websites that may be linked to the Services. If you visit a website that is linked to the Services, you should consult that website’s privacy policy before providing any personal information. Please be aware that we are not responsible for the privacy practices of such other websites, and we are not liable for their misuse of personal information about you.
The Services are not directed for children under eighteen (18) years of age and we do not knowingly collect or maintain personal information from children under the age of 18. If we nevertheless discover that we have received personally identifiable information (as defined by the United States Children’s Online Privacy Protection Act) in violation of applicable law, we will promptly take steps to delete such information. If you believe that we may have personal information from a person under 18, please contact us as set forth in the “How to Contact Us” section below.
This section supplements our Privacy Statement with additional information for California residents about our information collection and use practices as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”). In this section, the terms “personal information” and “sensitive personal information” have the meanings set forth in the CCPA.
Over the last 12 months, personal information we have collected and disclosed for business and operational purposes includes the following:
| Categories of Information | Use Purposes of Information | Categories of Third Parties to Whom We Disclose the Information for Business and Operational Purposes |
|---|---|---|
| Identifiers, such as username, name, email address, zip code, IP address, and telephone number or, if you chose to connect via a third party social network, names and Social Network IDs. |
|
|
| Characteristics of protected classifications, such as age and gender. |
|
|
| Transactional information, such as information about the item(s) you buy or sell through the Services; any descriptions or pictures of the item(s) you provide; additional commentary or communication about the item(s); certain metadata, such as the timestamp of such activity; and logistical information pertaining to the pick-up or delivery of furniture. |
|
|
| Internet network and device activity data, such as browsing and usage information. |
|
|
| Geolocation data, such as approximate location based on IP address. |
|
|
| Audio, electronic, visual , thermal, olfactory or similar information, such as your photograph if you choose to provide it, recordings of customer service communications, and CCTV recordings in our warehouses. |
|
|
| Communications and customer service information, such as messages you send to our customer service team by phone, email, or chat, and summaries or voice recordings of your interactions with customer service. |
|
|
| Financial information, such as payment card information stored by our payment processors on our behalf. |
|
|
| Device data, such as information about your device’s hardware and the operating system on your device. |
|
|
| Inferences, derived from any of the above categories of information. |
|
|
Sale and Sharing of Personal Information.
During the 12 months leading up to the effective date of this Privacy Statement, we provided personal information to third-party advertising providers for targeted advertising purposes, so that we can provide you with more relevant and tailored ads regarding our Services, and used analytics partners to assist us in analyzing use of our services and our user/customer base. The disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” of personal information under the CCPA, or the “sharing” of your personal information for purposes of “cross-context behavioral advertising.”
The following chart lists the categories of personal information we have sold or shared over the last 12 months and the categories of third parties to which we have sold or shared:
| Categories of Information | Categories of Third Parties to Whom We Have “Sold” This Information | Categories of Third Parties with Whom We Have “Shared” This Information |
|---|---|---|
| Identifiers |
|
|
| Transactional information |
|
|
| Internet network and device activity data |
|
|
Your CCPA Right to Opt Out of “Sale” or “Sharing” of Personal Information.
California residents have a right to direct us not to “sell” or “share” certain personal information as those terms are defined in the CCPA. You can find out more information on how to exercise that right by reviewing the steps outlined here:
https://www.kaiyo.com/legal/privacy-request/
Opting out of “sales” and “sharing” limits only some types of disclosures of personal information, and there are exceptions to all of the rights described in this section. Please note that we do not “sell” or “share” personal information (as those terms are defined under the CCPA) if we have actual knowledge that the consumer is less than 16 years of age.
Retention. We normally plan to retain information about California residents until we determine that the personal data in a particular record no longer is necessary for the processing purpose or legal compliance. In determining how long to retain information, factors for consideration include the amount, nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we process the information, applicable legal requirements, and our legitimate interests. The purposes for which we process information (as well as the other factors listed above) may dictate different retention periods for the same types of information. For example, if you opt out of email marketing, we maintain your email on our suppression list for an extended time to comply with your request. We may delete or de-identify your information sooner if we receive a verifiable deletion request, subject to exemptions under applicable law. We may retain cached or archived copies of your information.
Your CCPA Information, Correction, Deletion, and Other Rights. The CCPA allows you to request us to:
If you would like to exercise any of these rights, you may submit your request at https://kaiyo.com/contact-us/ or through our toll free number at 1 (646) 844-8585.
Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide our services to you, so we may reject a deletion request for that information while providing services to you.
Verification of Requests to Exercise CCPA Rights. We may take reasonable steps to verify your identity before responding to your request, which may include, depending on the sensitivity of the information involved, the nature of our relationship with you, and the type of request you are making, verifying your name, email address, and other information regarding your use of our services.
Requests Made by Agents. You can designate an authorized agent to make a CCPA request on your behalf. To do so, we must receive a legally sufficient power of attorney signed by you pursuant to California Probate Code sections 4121 to 4130, or other written authorization acceptable to us, for the agent to act on your behalf. You may still need to verify your identity and confirm the agent’s authority directly with us if we are not convinced of the validity of the agent’s request. For security and legal reasons, we may refuse to accept requests that require us to visit an agent’s website. Because opt-out requests for sales made through cookies and related technology must be performed from each browser that is used to access our services, it is easiest for the consumer to perform such opt-outs themselves. However, if you wish for an agent to perform browser-based requests on your behalf, you may arrange for the agent to your consumer’s browser to make such requests, but you may not share your login credentials or logged-in access to our websites with an agent or any other third party.
We are not responsible for the security risks of giving an agent browser access or any other arrangements that you may have with an agent.
Nondiscrimination. You also have a right not to receive “discriminatory treatment” (within the meaning of the CCPA) for the exercise of the privacy rights conferred by the CCPA.
Notice of Financial Incentives. We offer certain loyalty and rewards programs that may be considered financial incentives under California privacy law. When you sign up for and participate in these programs, we may ask you to provide us with your email address and zip code. Participation in these programs is voluntary and no purchase is required receive this coupon. We generally do not assign monetary or other value to personal information. If, however, we are required by law to assign such value, we have valued the personal information collected and used based in part on the value of consumer trial of new products and sharing future offers tailored to your interest with competitive value. The value is a practical and good-faith effort often involving the (i) categories of personal information collected (e.g., names, email addresses), (ii) the transferability of such personal information for us, (iii) the discounted price offered, (iv) the volume of consumers enrolled in our programs, and (v) the product or service to which the programs, or price or service differences, applies. The disclosure of the value described herein is not intended to waive, nor should be interpreted as a waiver to, our proprietary or business confidential information, including trade secrets, and does not constitute any representation with regard to generally accepted accounting principles or financial accounting standards. You may withdraw from such programs at any time by contacting us using the information provided below or opting out from our email communications.
“Shine the Light” Disclosure. California law permits users in California to request certain details about how their “personal information” (as defined in California Civil Code Section 1798.83) is shared with third parties for direct marketing purposes. We may from time to time elect to share certain personal information about you with third parties for those third parties’ direct marketing purposes. California users may, under certain circumstances, request and obtain certain information regarding our disclosure, if any, or personal information to third parties for their direct marketing purposes. If this applies, you may obtain the categories of personal information shares and the names and addresses of all third parties that received personal information for their direct marketing purposes during the immediately prior calendar year.
To make such a request, please contact us using the information listed below. Please note that we are only required to respond to one request per California resident each year.
We may change or update the Services or any of our policies and procedures without prior notice. If we make material changes to the way in which we will process your information, we will post a notice on the Services, update the “Last Updated” date at the top of this Privacy Statement and take any other steps required by applicable law.
If you have any questions or comments regarding this Privacy Statement or if you want to submit any rights requests, please send us an email at [email protected] or call 1 (646) 844-8585.