Privacy Notice

Privacy Notice

Last Updated: 11/25/2020

This Privacy Policy describes the policies and procedures of nabfly, Inc, doing business as Bespoke Post, ("we", "our" or "us") and our collection, use and disclosure of your personal information ("Personal Information"), including on bespokepost.com (the "Site") and the services, features, content or applications we offer (collectively with the Site, the "Services"). The Services are not available to individuals under 18 years of age. The Site and Services are intended for users who access the Site from the United States or Canada.

This Privacy Policy does not apply to the practices of third parties that we do not own or control, including but not limited to any third party websites, services, and applications ("Third-Party Services") that you elect to access through the Service or to individuals that we do not manage or employ. While we attempt to facilitate access only to those Third-Party Services that share our respect for your privacy, we cannot take responsibility for the content or privacy policies of those Third-Party Services. We encourage you to carefully review the privacy policies of any Third-Party Services you access.

What Information Do We Collect?

In connection with certain aspects of the Services, we collect your Personal Information in a variety of ways depending on how you interact with us, the Services you use, and the choices you make.

We collect information about you from different sources and in various ways when you use our Services, including information you provide directly, information collected automatically, third-party data sources, and data we infer or generate from other data.

Information You Provide Directly. We collect personal data you provide to us. For example:

User Content

Some features of the Services allow you to provide content to the Services, such as written comments or any other content or files you might provide to us. If you send us email messages or other communications, we will collect and retain those communications.

Contact Information

Some features of the Services may give you the option to request information, complete surveys or otherwise interact with us and our partners. We may collect information you provide in connection with your profile such as, but not limited to, your contact information such as name, username, password, email address, postal address, and phone number.

Demographic Data

Some features of the Services may request that you provide demographic data such as likes, dislikes, profession, hobbies, gender, age, responses to surveys, and other demographic details.

Payment Information

When you create an account or place an order, we process Personal Information such as billing address(es), billing phone number, and credit card number.

Information Collected Automatically. When you use our Services, we collect some Personal Information automatically. For example:

Identifiers and Device Information

We automatically receive and record information from your web browser when you interact with the Services, including your IP address, location, and information about your device, including device identifiers (such as MAC address), device type, and your device’s operating system, browser, and other software including type, version, language, settings, and configuration. As further described under Cookies and Similar Technologies below, we also collect cookie information and other data.

Usage Data

We automatically log your activity on our Services, including the URL of the website from which you came to our sites.

Information We Create or Generate. We infer new Personal Information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics ( "inferences"). For example, we infer your city, state, and country location based on your IP address.

Information we obtain from third-party sources. We also obtain information from third parties. We protect information obtained from third parties according to the practices described in this statement, plus any additional restrictions imposed by the source of the information. These third-party sources and the categories of personal data we obtain from these third parties include, for example:

Third Party Sources Categories of Personal Information
Third party partners. Third party applications and services, including social networks you choose to connect with or interact with through our services. Contact information, demographic data, payment information, user content, identifiers and device information, usage data, inferences.
Service providers. Third parties that collect or provide Personal Information in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address. Contact information, demographic data, payment information, user content, identifiers and device information, usage data, inferences.
Publicly available sources. Public sources of Personal Information such as open government databases. Contact information, demographic data.

When you are asked to provide Personal Information, you may decline. And you may use device controls to prevent certain types of automatic Personal Information collection. But if you choose not to provide or allow Personal Information that is necessary for certain products or features, those products or features may not be available or function correctly.

Cookies and Similar Technologies (California "Do Not Sell My Info")

We use cookies, web beacons, mobile analytics and advertising IDs, and similar technologies to operate our websites and online services and to help collect data, including other identifiers and device information and usage data.

Cookies are pieces of text that may be provided to your computer through your web browser when you access a website. Your browser stores cookies in a manner associated with each website you visit. We use cookies to enable our servers to recognize the mobile or web browser, to tell us how and when you visit the Site and otherwise use the Services through the Internet, and for the other purposes described in this Privacy Policy.

Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website. When your browser opens a webpage that contains a web beacon, it automatically connects to the web server that hosts the image (typically hosted by a third-party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our promotional email messages or newsletters to tell us if you open and act on them.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies.

Information Related to Advertising

We, and our analytics and advertising partners, use these technologies in our Services to collect personal information (such as the cookies stored on your browser, the advertising identifier on your mobile device, or the IP address of your device) when you visit our Services. We and our partners also use these technologies to collect personal information about your online activities over time and across different websites or online services. This information is used to store your preferences and settings, enable you to sign-in, analyze how our Services perform, track your interaction with the Services, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We and/or our partners also share the information we collect or infer with third parties for these purposes.

The third-party analytics and advertising providers we use on our websites include, but are not limited to:

Company/Service Purpose(s) Privacy Notices Manage Settings (opt-out)
DoubleClick (Google) Advertising, analytics https://policies.google.com/privacy See association links below.
Google Analytics Analytics www.google.com/policies/privacy/partners https://tools.google.com/dlpage/gaoptout
Google Tag Manager Advertising www.google.com/policies/privacy/partners https://policies.google.com/technologies/partner-sites
Facebook Audiences Advertising https://www.facebook.com/privacy/explanation https://www.facebook.com/settings?tab=adsOr, you can also click here to opt out ofBespoke Post's Facebook settings
Facebook Connect https://www.facebook.com/privacy/explanation See association links below.
Impact Radius Advertising, analytics https://impact.com/privacy-policy/ See association links below.
Live Intent Advertising, analytics https://www.liveintent.com/services-privacy-policy/ http://d.liadm.com/opt-outSee association links below.

To learn about their privacy practices and how to opt-out from their use of cookie data for targeted advertising purposes, click on the links above.

Many of these companies are also members of associations, which provide a simple way to opt out of analytics and ad targeting, which you can access at:

California "Do Not Sell My Info"

Under the California Consumer Protection Act (CCPA), a "sale" means providing to a third party personal information for valuable consideration. It does not necessarily mean money was exchanged for the transfer of personal information. The CCPA requires us to disclose categories of personal data sold to third parties under this broad definition and how to opt-out of future sales. The CCPA defines personal information to include online identifiers, including IP address, cookies IDs, and mobile IDs. The law also defines a "sale" to include simply making data available to third parties in some cases. We let advertising and analytics providers collect IP addresses, cookie IDs, mobile IDs and Usage Data through our sites and apps when you use our online services, but do not "sell" any other types of personal information. If you prefer not to receive interest-based advertising, you can make your Do Not Sell Request by visiting NAI
( http://www.networkadvertising.org/managing/opt_out.aspx ) or DAA
( http://www.aboutads.info/choices/ ). To opt out of Facebook data collection, click here

Note that although we will not "sell" your Personal Information after you click that link, we will continue to share some personal information with our partners (acting as our service providers) to help us perform advertising-related functions such as, but not limited to, measuring the effectiveness of our ads, managing how many times you may see an ad, reporting on the performance of our ads, ensuring services are working correctly and securely, providing aggregate statistics and analytics, improving when and where you may see ads, and/or reducing ad fraud. Further, clicking the link will not necessarily opt you out of the use of previously sold personal information or stop all interest-based advertising. If you access the Services from other devices or browsers, visit the link below from those devices or browsers to ensure your choice applies to the data collected when you use those devices or browsers.

Other information related to your right to opt-out from sales of Personal Information is contained in the California Privacy Rights section of this Privacy Policy.

Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.

Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs.

Email web beacons. Most email clients have settings which allow you prevent the automatic downloading of images, which will disable web beacons in the email messages you read.

Do Not Track. Some browsers have incorporated "Do Not Track" (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our websites do not currently respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described above.

How is my Personal Information Used?

We use the Personal Information we collect for purposes described in this Privacy Policy or otherwise disclosed to you. One goal in collecting Personal Information from you is to provide an efficient, meaningful, and customized experience. For example, we can use your Personal Information to:

Purposes of Use Categories of Personal Information
Product and Service Delivery. To provide and deliver our Services, including securing, troubleshooting, improving, and personalizing those Services, and providing the most awesome box to you as possible. Contact information, demographic data, payment information, content and files, identifiers and device information, usage data, inferences.
Business Operations. To operate our business, such as billing, accounting, improving our internal operations, securing our systems, and detecting fraudulent or illegal activity. Contact information, demographic data, payment information, content and files, identifiers and device information, usage data, inferences.
Product Improvement, Development, and Research. To improve our Services, develop new products or features, and conduct research. Contact information, demographic data, content and files, identifiers and device information, usage data, inferences.
Personalization. To understand you and your preferences to enhance your experience and enjoyment using our Services. Contact information, demographic data, content and files, identifiers and device information, usage data, inferences.
Customer Support. To provide customer support and respond to your questions. Contact information, demographic data, payment information, content and files, identifiers and device information, usage data, inferences.
Communications. To send you information, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages. Contact information, demographic data, content and files, identifiers and device information, usage data, inferences.
Marketing. To communicate with you about new products, offers, promotions, rewards, contests, upcoming events, and other information about our products and those of our selected partners (see the Choice and Control section of this Privacy Policy for how to change your preferences for promotional communications). Contact information, demographic data, content and files, identifiers and device information, payment method, usage data, inferences.
Advertising. To display advertising to you (see the Cookies section of this Privacy Policy for information about personalized advertising and your advertising choices). Contact information, demographic data, identifiers and device information, usage data, inferences.

In carrying out these purposes, we combine data we collect from different sources to give you a more seamless, consistent, and personalized experience.

How, and With Whom, Is My Information Shared?

We share Personal Information with your consent or as necessary to complete your transactions or provide the Services you have requested or authorized. For example, when you provide payment information to make a purchase, we will share that data with banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, or other related financial services.

In addition, we share each the categories of Personal Information described above as follows:

  • Our subsidiaries and affiliates share common data systems and process Personal Information as needed to provide our Services and operate our business.
  • We share Personal Information with vendors or agents working on our behalf for the purposes described in this Privacy Policy. For example, companies we've hired to provide customer service support or assist in protecting and securing our systems and services may need access to Personal Information to provide those functions.
  • We may also disclose Personal Information as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or at transfer, divestiture, or sale of all or a portion of our business or assets.

We will also access, transfer, disclose, and preserve Personal Information when we believe that doing so is necessary to:

  • comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;
  • protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;
  • operate and maintain the security of our Services, including to prevent or stop an attack on our computer systems or networks; or
  • protect the rights or property or ourselves or others, including enforcing our agreements, terms, and policies.
Public Information about Your Activity on the Services

Some of your Profile Information and activity on and through the Services is public by default. This may include, but is not limited to, content you have posted publicly on the Site or otherwise through the Services.

Please also remember that if you choose to provide User Content using certain public features of the Services, then that information is governed by the privacy settings of those particular features and may be publicly available. Individuals reading such information may use or disclose it to other individuals or entities without our control and without your knowledge, and search engines may index that information. We therefore urge you to think carefully about including any specific information you may deem private in content that you create or information that you submit through the Services.

Information You Elect to Share

You may use certain features of the Services to respond to advertisers, request information, purchase products or Services, respond to surveys, enter contests, surveys or sweepstakes, or for other purposes. We may use information that you elect to provide for the purposes stated at the time of submission.

You may access other Third Party Services through the Services, for example by clicking on links to those Third Party Services from within the Site. We are not responsible for the privacy policies and/or practices of these Third Party Services, and you are responsible for reading and understanding those Third Party Services' privacy policies. This Privacy Policy only governs our collection of information through the Services.

Third Party Analytics and Advertising

Third party analytics and advertising companies also collect Personal Information through our Services including, transaction details, account information, marketing and communications data, demographic data, content and files, geolocation data, usage data, and inferences associated with identifiers and device information (such as cookie IDs, device IDs, and IP address) as described in the Cookies section of this Privacy Policy.

Aggregate Information

We share Aggregate Information with our partners, service providers and other persons with whom we conduct business. We share this type of statistical data so that our partners can understand how and how often people use our Services and their services or websites, which facilitates improving both their services and how our Services interface with them.

Is Information About Me Secure?

We take reasonable and appropriate steps to help protect Personal Information from unauthorized access, use, disclosure, alteration, and destruction.

To help us protect Personal Information, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.

Retention of Personal Information

We retain Personal Information for as long as necessary to provide the Services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.

International Users

If you are located outside of the United States, please note that the Site is hosted on our computer servers in the United States. Therefore, your information may be processed and stored in the United States, which may provide for different data protection rules than in your country.

California Privacy Rights

If you are a California resident and the processing of personal information about you is subject to the California Consumer Privacy Act ("CCPA") you have certain rights with respect to that information.

Right to Know. You have a right to request that companies provide you with the following information:

  • The categories and specific pieces of personal information we have collected about you.
  • The categories of sources from which we collect personal information.
  • The purposes for collecting, using, or selling personal information.
  • The categories of third parties with which we share personal information.
  • The categories of personal information we have disclosed about you for a business purpose. Note that the CCPA defines "business purpose" broadly; and because we use service providers for a number of business purposes that require access to our systems that hold personal information (such as supplying cloud data storage, maintaining the security of our systems, and providing customer support), in the past 12 months we have disclosed for a business purpose data from each of the categories of personal information we maintain.
  • The categories of personal information we have "sold" about you (if any), for each category of third parties to which the personal information was "sold" (if any). The CCPA defines "sell" and "personal information" very broadly, and some of our data sharing described in this privacy statement may be considered a "sale" under those definitions. In the past 12 months, we have sold the following categories of personal information: Identifiers and Device Information and Usage Data. In particular, we let advertising and analytics providers collect IP addresses, cookie IDs, and mobile IDs through our Services when you use our Services, but do not "sell" any other types of personal information. We provide our "Do Not Sell My Info" disclosures in the Cookies section of this Privacy Policy. We do not knowingly sell the personal information of minors under 16 years of age without affirmative authorization.

You may make such a "request to know" by contacting us at legal@bespokepost.com or call us at 888-565-6762. Note that we have provided much of this information in this Privacy Policy.

Right to Request Deletion. You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request to delete personal information, contact us at legal@bespokepost.com or call us at 888-565-6762. Please be sure to specifically mention that you are requesting a CCPA deletion to ensure we route your request to the proper channels.

Right to Opt-Out. You have a right to opt-out from future "sales" of personal information. To do so, please visit our "Do Not Sell My Info" page in the Cookies section of this Privacy Policy.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us. Further, to provide or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. Finally, you have a right to not be discriminated against for exercising rights set out in the CCPA.

Additionally, under California Civil Code section 1798.83, also known as the "Shine the Light" law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes ("California Customers") may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. Please be aware that we do not disclose personal information to any third parties for their direct marketing purposes as defined by this law. California Customers may request further information about our compliance with this law by e-mailing legal@bespokepost.com. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated e-mail address.

What Choices Do I Have Regarding My Information?

Access, correction, and deletion. If you wish to request access to, or correction or deletion of, Personal Information about you that we hold, you may utilize the settings associated with your Account.

If you cannot access or delete certain Personal Information we have directly through the Services, you can always contact us as described at the bottom of this Privacy Policy. However, to the extent permitted by applicable law, we reserve the right to decline requests that are unreasonable or excessive, where providing the data would be prohibited by law or could adversely affect the privacy or other rights of another person, or where we are unable to authenticate you as the person to whom the data relates.

Communications preferences. You can choose whether to receive promotional communications from us by email. If you receive promotional email from us and would like to stop, you can do so by following the directions in that message. These choices do not apply to mandatory service communications that are part of certain of our Services, or to surveys or other informational communications that may have their own unsubscribe method.

Choices for Cookies and Similar Technologies. See the Cookies section for choices about cookies and other analytics and advertising controls.

What Happens When There Are Changes to this Privacy Policy?

We may amend this Privacy Policy from time to time when necessary to reflect changes in our Services, how we use personal data, or the applicable law. When we post changes to the Privacy Policy, we will change the "Last Updated" date at the top of the Privacy Policy. If we make material changes to the Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law.

What If I Have Questions or Concerns?

If you have any questions or concerns regarding privacy using the Services, please send us a detailed message to legal@bespokepost.com.