Last updated: December 2, 2022
The term “you”, “your” or “User(s)” shall refer to any entity or person that accesses, views, uses our Website, and/or purchases our products though the website. The terms “we,” “our”, “us” shall refer to Elephant in a Box.
BY VISITING, USING, ACCESING AND/OR MAKING A PURCHASE THROUGH THE WEBSITE, YOU CONSENT TO THE DATA PRACTICES DESCRIBED IN THIS STATEMENT. IF YOU DO NOT AGREE WITH OUT PRIVACY PRACTICES, DO NOT USE THE WEBSITE.
INFORMATION WE COLLECT
We will collect information, including both Personal Information and Non Personal Information, when you interact with us and the Website, for example when you:
- Access or use the Website;
- Open or respond to our e-mails;
- Make a purchase;
- Contact customer service;
- Visit any page online that displays our ads or content;
“Personal Information” means information about you that specifically identifies you or, when combined with other information we have, can be used to identify you. As a general rule, we do not collect Personal Information about you when you visit and/or use the Website, unless you choose to provide such information to us. Submitting Personal Information through the Website is voluntary. By doing so, you are giving us your permission to use the information for the stated purpose.
(a) LEGAL BASIS FOR COLLECTING YOUR PERSONAL INFORMATION
- With your consent: We ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time.
(b) INFORMATION WE COLLECT AND HOW WE COLLECT INFORMATION
Through the Website, we may collect information that can identify you when you voluntarily submit it to us. Your Personal Information may include:
- Your name;
- Email address;
- Telephone number;
- Payment information;
- Other similar information.
(c) STORAGE OF PERSONAL INFORMATION
We will take reasonable precautions, as well as physical, technical, and organizational measures in accordance with industry standards, as described herein, to protect your Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.
The Website is maintained in the United States of America and all servers, which store your Personal Information, are secured and located in the United States of America. Computer safeguards, such as firewalls and data encryption may be used to protect your information. We authorize access to your information only for those employees or agents who require it to fulfill their job responsibilities and these individuals are required to treat this information as confidential.
We collect and temporarily store certain information about your usage of the Website. NonPersonal Information means information that alone cannot identify you, including data such as cookies, pixel tags, web beacons and device information. The information includes, without limitation:
- Device Data- We may collect information such as: the type of computer and/or mobile device you use; the unique device ID of your computer and/or mobile device; the IP address of your computer and/or mobile device; the operating system of your computer and/or mobile device; and the type of mobile internet browsers of your computer and/or mobile device.
- Usage details- when you access and use the Website, we may automatically collect certain details of your access to and use of the Website, including traffic data, location data, logs and other communication data and the resources that you access and use on or through the Website.
- Location information- When you first visit or use the Website we may request permission to collect and use your device’s precise geolocation. You can opt not to permit the collection of this information, but you may not be able to use the Website provided by Elephant in a Box without access to your location. We need your location information in order to provide our Website. You can control how and whether we collect your precise geolocation information through your device’s settings.
We may use information that has been de-identified and/or aggregated to better understand who uses our Services and how we can deliver a better experience, or otherwise at our discretion.
If you do not want us to collect this information, you may either change your device’s privacy
settings or DO NOT ACCESS OR USE THE SERVICES.
INFORMATION COLLECTION TECHNOLOGIES
The technologies we use for automatic information collection may include:
- Cookies (or mobile cookies): We may use "cookies" on our Website to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. The purpose of a cookie is to tell the web server that you have returned to a specific page. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the interactive features of the Website.
- Retargeting/Advertising Cookies: Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you.
- Web Beacons: Pages of the Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an e-mail and for other related Website statistics.
- Social Ad Platforms: We may also use Google Analytics, Facebook, Twitter and LinkedIn’s functionality of re-marketing through their tracking cookies and pixel-based retargeting services. This means that if you provided your consent to Google, Facebook, Twitter or LinkedIn (the “Social Ad Platforms”) to be provided with personalized commercial offers, you may be served with ads (including advertisements of third parties) based on your access to the Website, outside of the Website and across the internet. In such event, the Social Ad Platforms, will place cookies on your web browser and use such cookies to serve you ads based on past visits to our Website.
- Google: https://policies.google.com/technologies/ads
- TikTok: https://www.tiktok.com/legal/page/us/privacy-policy/en
- Facebook: https://www.facebook.com/about/privacy/
- Instagram: https://help.instagram.com/478880589321969/
- Twitter: https://business.twitter.com/en/help/ads-policies/other-policyrequirements/policies-for-conversion-tracking-and-tailored-audiences.html
- Cross Device Matching: To determine if users have interacted with content across multiple devices and to match such devices, we may work with partners who analyze device activity data and/or rely on your information (including demographic, geographic and interest-based data). To supplement this analysis, we may also provide de-identified data to these partners. Based on this data, we may then display targeted advertisements across devices that we believe are associated or use this data to further analyze usage of Services across devices.
CHANGING YOUR DATA COLLECTION SETTINGS
We strive to provide you with choices regarding the Personal Information you provide to us. You may need to adjust the settings on your computer and/or device to restrict the collection of information by the Website, but this may prevent you from accessing all of the features of the Website.
- Location Information: You can choose whether or not to allow the Website to collect and use real-time information about your device’s location through the device’s privacy settings. If you block the use of location information, some parts or all of the Website may be inaccessible or not function properly.
- Social Ad Platforms: If you wish to opt-out of re-targeting and tracking functionality of the Social Ad Platforms, you may do so through each Platform directly. PLEASE NOTE that these tracking and targeting by Social Ad Platforms, is provided pursuant to your engagement with the Social Ad Platforms and the actual nature and scope of Personal Information collection and processing performed by such Social Ad Platforms may not be fully known to us. If you would like to learn more or make further inquiries with respect to such nature or scope please refer to each Social Ad Platforms directly.
You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your computer. Although you are not required to accept Parallax Cookies, if you block, reject, or delete them, you may have to manually adjust some preferences every time you visit a site and some of the Services and functionalities may not work.
To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about Cookies, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/
THIRD-PARTY AUTOMATIC INFORMATION COLLECTION
When you use the Website or its contents, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include:
- Advertisers, ad networks and ad servers;
- Analytics companies;
- Your mobile device manufacturer; • Your mobile service provider; and/or
- Your Internet provider.
These third parties may use tracking technologies to collect information about you when you use the Website. The information they collect may be associated with your Personal Information or they may collect information about your online activities over time and across different websites, mobile applications and other online sites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
HOW WE USE YOUR INFORMATION
- Operate, maintain and improve the Website;
- Provide you with the Website and its contents, and any other information, products or services that you request from us;
- Send you reminders, technical notices, updates, security alerts, support and administrative messages and marketing messages;
- Answer your questions and respond to your requests;
- Ensure that content from our Website is presented in the most effective manner for you and for your computer or device for accessing the Website;
- Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including the Terms and Conditions; and
- Notify you when there are changes to any products or services we offer or provide though the Website.
(2) Usage and Analytics
- Estimate our audience size and usage patterns;
- Perform analytics and conduct customer research;
- Analyze advertising effectiveness; and
- Communicate and provide additional information that may be of interest to you about us and our business partners.
(3) Location: We will use location data for the following reasons:
- To provide our Website targeted to the city in which you are located;
- To display information that is relevant to your particular location;
HOW WE DISCLOSE YOUR PERSONAL INFORMATION
The Personal Information you provide to us whether voluntarily or automatically, may be used and disclosed without limitations, in the following instances:
- With vendors who provide services for us (who are required to protect the Personal Information);
- To Report or collect on debts owed to us;
- To a prospective buyer or buyer of Elephant in a Box, or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all our assets;
- As part of bankruptcy, liquidation or similar proceeding;
- To comply with legal requirements for the enforcement of law, regulations, court orders, subpoena, a warrant during the course of a legal proceedings or otherwise; or
- To protect and safeguard our copyright, trademarks, legal rights, intellectual property rights or safety; or
- In response to a subpoena, or similar legal process, including to law enforcement agencies, regulators, and courts in the United States.
HOW WE DISCLOSE YOUR NON-PERSONAL INFORMATION
We may also disclose Non-Personal Information:
- For the same reasons, we might share Personal Information;
- With our advertisers for their own analysis and research;
- To facilitate targeted content and ads; or
- With Third-Party Ad Servers to place our ads on the Website and on third-party websites or mobile applications.
HOW TO ACCESS, UPDATE, WITHDRAW CONSENT OR DELETE YOUR INFORMATION
If the law applicable to you grants you such rights, you may ask to access, correct, or delete your Personal Information that is stored in our systems or that we otherwise control. You may also ask for our confirmation as to whether or not we process your Personal Information or ask to withdraw any consent you have previously provided to Elephant in a Box in connection with our use and processing of your Personal Information. Subject to the limitations in law, you may request that we update, correct, or delete inaccurate or outdated information. You may also request that we suspend the use of any Personal Information the accuracy of which you contest while we verify the status of that data.
If you wish to exercise any of these rights or withdraw your consent, please contact us at firstname.lastname@example.org. When handling these requests, we may ask for additional information to confirm your identity and your request. Please note, upon request to delete your Personal Information, we may retain such data in whole or in part to comply with any applicable rule or regulation and/or response or defend against legal proceedings versus us or our affiliates, or as we are otherwise permitted under such law applicable to you. While we strive to honor all reasonable requests, please be aware that we backup the data to prevent accidental or malicious destruction of your information. Information on backup servers may take some time to be completely deleted from the system. If you request that we remove you from our system and delete all your information, please note that you may still receive materials while your request is being processed.
We take reasonable steps to protect the personal data provided to us from unauthorized access, use or disclosure. The safety and security of your information also depends on you. Unfortunately, the transmission of information via the internet and mobile services is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your personal information transmitted through our Website. Any transmission of Personal Information is at your own risk. We are not responsible for any third-party circumvention of any privacy settings or security measures we provide. If you suspect that there has been a breach of the security of your data you should contact us and include details of the nature of the breach, the date of the breach, and the full circumstances of the breach.
COMPLIANCE WITH APPLICABLE LAWS AND REGULATIONS
We represent and warrant that we will comply with all applicable laws, rules, regulations, directives and guidelines regarding the collection, use and disclosure of data collected from or about Users or specific devices which apply to the services utilized hereunder (collectively, the “Rules”). The term “Rules” shall include, without limitation, (i) United States Federal Trade Commission Laws regarding the collection, use and disclosure of data from or about users and/or specific devices; (ii) the Children’s Privacy Protection Act of 1998 (COPPA) and (iii) if applicable, the Rules of any other jurisdiction, including and European Union General Data Protection Regulation (“EU GDPR”), rules, regulations and/or directives promulgated by a pertinent Data Protection Act, and all amendments and updates to them or regulations as replaced or superseded from time to time.
CALIFORNIA ‘DO NOT SELL MY INFO’ NOTICE
Like many companies online, we work with Google, Facebook and other companies that use information collected from cookies and similar technologies to try to make the ads you see online more relevant to your interests. This is called interest-based advertising. Our use of these services may constitute a “sale” of Personal Information as defined under the California Consumer Protection Act (CCPA). You can opt-out of the use of your information for interestbased advertising by:
- Browser settings. Blocking third party cookies in your browser settings.
- Privacy browsers/plug-ins. Using privacy browsers or ad-blocking browser plug-ins that let you block advertising trackers.
- Platform settings. Using the opt-out settings offered by some of the advertising companies that we work with.
- Ad industry tools. Opting out of interest-based ads from companies participating in the following industry opt-out programs:
- Network Advertising Initiative: https://optout.networkadvertising.org/?c=1
- Digital Advertising Alliance: optout.aboutads.info, which will allow you to opt-out of interest-based ads served by on websites by participating members.
- AppChoices mobile app, at https://www.youradchoices.com/appchoices, which will allow you to opt-out of interest-based ads in mobile apps served by participating members.
Information. You can request the following information about how we have collected and used your Personal Information during the past 12 months:
- The categories of Personal Information that we have collected.
- The categories of sources from which we collected Personal Information.
- The business or commercial purpose for collecting and/or selling Personal Information.
- The categories of third parties with whom we share Personal Information.
- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information disclosed to each category of thirdparty recipient.
- Whether we’ve sold your Personal Information, and if so, the categories of Personal Information received by each category of third-party recipient
- Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
- Deletion. You can ask us to delete the Personal Information that we have collected from you.
- Opt-out. You can opt-out of any “sale” of your Personal Information as defined in the CCPA.
- Non-discrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA.
You may submit a request to exercise your right to information, access or deletion by emailing with “Privacy” in the subject line. We reserve the right to confirm your California residency to process these requests and will need to confirm your identity. Government-issued identification 10 may be required. You may designate an authorized agent to make a request on your behalf by providing a valid power of attorney or other proof of authority acceptable to us in our reasonable discretion, the requester’s valid government-issued identification, and the authorized agent’s valid government-issued identification. You can submit a request to opt-out of sales of your Personal Information as described above. We cannot process your request if you do not provide us with sufficient information to allow us to understand and respond to it. In certain cases, we may decline your request as permitted by law.
NOTICE CONCERNING CHILDREN
We do not direct our Website directly or indirectly towards children. We do not target the Website towards children, nor do we knowingly collect information about children. If we learn that the information of a child under the age of thirteen (13) is stored within its system, we will promptly delete any information in that Account. If you become aware that a child under the age of 13 has provided us with Personal Information, please notify us immediately and we will terminate the account, if applicable and delete such information.
UPDATES TO THIS POLICY
Elephant in a Box, Inc.
234 Fifth Avenue, 2nd Fl
New York, NY 10001