As of November 1, 2022
Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By using our Services, you consent to our collection, use and disclosure of your information, including Personal Information (defined below), as described in this Policy. Your use of our Services is subject to this Policy and our Terms of Service.
This Policy may change from time to time (see Changes to this Policy). Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check this Policy periodically for updates.
Table of Contents
Information we collect
How we use your information
How we share your information
Cookies and other tracking mechanisms
Your California privacy rights
Your EU resident rights
Cross-Border Transfers and Data Storage
Changes to this Policy
Information we collect
We may collect information directly from you, automatically through your use of our Services, and from third parties. We may combine all of the information we collect about you from these various sources.
Information we collect directly from you. When you join a fan club, subscribe to a newsletter, participate in a forum, purchase products, or otherwise sign up for the Services, you may provide us with certain information that can identify you as an individual, including but not limited to your name, email address, credit or debit card information, shipping or billing address, gender, and birth date (collectively, “Personal Information”). We will also collect any other information that you choose to provide to us through our Services (e.g., contents of messages you send to us or postings on a forum). We may also collect data pertaining to your online transactions, purchase history, and Services usage patterns. Further, when you register for the Services, you may be asked to create a password for your account. You may also be requested to provide secret questions and secret answers. You may also be requested to answer various questions and/or surveys about your consumer preferences or other information. We may store the information described in this paragraph.
Content that you provide. You may upload comments, reviews, graphics, photos or other materials to the Services (“Content”). If you post Content on our Services, the Content, as well as other information (e.g., username or profile picture), may be available to other visitors to our website, and we cannot prevent such Content or information from being used in a manner that may violate this Policy, our Terms of Service, the law, or your personal privacy.
Information we collect about you from third parties. We may collect information about you from third parties. For example, we may collect demographics information from public sources and from third-party data and analytics companies.
Information we collect automatically through your use of our Services. We may automatically collect information about your use of our Services and your orders, including but not limited to your internet protocol (“IP”) address, which we may also use to establish your geolocation; the type of device and web browser you are using; the website that led you to our website; the website you visit after leaving our website; the pages you view on our website; the dates and times you access our Services; and information about any orders you place, such as your order identification number, items ordered and the cost of your order.
How we use your information
We may use your information, including Personal Information and/or Content, for the following purposes:
Providing the Services. To facilitate your orders, and to operate and administer your account; to respond to your questions or requests; to provide you with news or other information we think may interest you; to communicate with you about your account, orders or use of our Services or for other informational purposes; to improve our Services; and for other account or customer support-related purposes. For example, we may use your email address to send you a welcome email message when you first register informing you about the Services and telling you how to manage your account. You may be required to respond to this email in order to validate that you are the owner of the email address associated with your account. If applicable, failure to respond to the email and verify the address within the time stated in the email will cause your account to become inactive. This process is designed to verify the validity of the email address and to help prevent email addresses from being used without permission. We may also send you emails about periodic service updates, recommended security updates, or surveys related to our Services or other matters. These periodic emails are considered essential to the provision of the Services you have requested. If you unsubscribe from these mailings, we will not be able to provide certain Services to you.
Marketing and advertising. As part of our Services, we may recommend for your consideration various special offers, services, products, merchandise and other marketing or promotional communications. Accordingly, we may analyze data pertaining to your online transactions, purchase history, and Services usage patterns so that we can make recommendations suited especially to you. We may provide marketing or advertising to you in a variety of ways, including through our Services, via email or on other third-party websites (e.g., using Google Customer Match or Facebook Ads). See our Online advertising and Your choices sections below for more information.
Research and analytics. To analyze how customers use our Services; to analyze how customers interact with marketing or other communications we send to them; and for other research, analytical and statistical purposes.
Protecting rights and interests. To investigate, protect or defend the rights, safety or property of us, our customers or the public; to investigate or enforce perceived violations of our Terms of Service or this Policy; as evidence in litigation in which we are involved; and for fraud protection and credit risk reduction purposes.
How we share your information
Service providers. We use third-party service providers, vendors, agents, contractors, or others to provide services on our behalf or to fulfill a service or transaction you may have requested, such as answering customer support inquiries, fulfilling merchandise orders, delivering packages, sending emails, credit card payment processing, selling concert tickets, etc. We will only provide these companies with your Personal Information to the limited extent necessary to deliver the services.
We will obtain consent for such sharing with service providers where legally required. We enter into written agreements with these third-party service providers requiring them to provide the same level of protection for your Personal Information as provided under this Policy and limiting their use of your Personal Information to the specified services provided on our behalf.
Other unaffiliated third parties. With your separate written consent, we may share your information directly with third parties, including so they may send you marketing offers directly. The information that we share with such third parties may include, without limitation, your email address, billing address, shipping address and order information (e.g., total price).
Protecting rights and interests. We may disclose Personal Information if required to do so by law or in the good-faith belief that such action is necessary to investigate, protect or defend the our rights, safety or property, our customers or the public; to investigate or enforce perceived violations of our Terms of Service or this Policy; as evidence in litigation in which we are involved; and for fraud protection and credit risk reduction purposes.
Sale or acquisition of assets. We may share your information if we become involved in a transaction involving the sale of our assets, such as a merger or acquisition, if we are transferred to another company, in the event of a bankruptcy, or as part of any other business transfer. If the surviving entity in such a transaction is not us, the surviving entity may use your information pursuant to its own privacy policies, which may be different from this Policy.
Legal compliance. We may share your information to comply with laws, regulations, legal process (e.g., a warrant or subpoena) or guidance; and to respond to governmental requests (e.g., requests from a regulator).
Aggregate or anonymous information. We may share anonymized or aggregated information (“Aggregate Information”) to third parties without restriction. Aggregate Information may include overall usage patterns of our users, the total number of users, the percentage of users who are female, or in a certain age range, or who live in a particular region, etc., or the percentage of users who are also consumers of various other products and services. Aggregate Information may be compiled in reports and disclosed, sold, licensed, or rented to third parties. However, since Aggregate Information does not include any information that can be used to individually identify you or any other user, it is not possible for the third-party recipient of the Aggregate Information to use it to identify or contact you. For example, we may share Aggregate Information to inform a third party’s decision on whether to place advertisements on our Services or on other websites. These companies may use such information about your visits to the Services and other websites to provide advertisements on the Services and other websites.
Cookies and other tracking mechanisms
We may automatically collect information about you through the use of common information-gathering tools, as well as new tracking technologies that develop as technology evolves. The tools that we or our service providers may use to track you include the following:
Web beacons/clear GIFs. Clear graphics interchange format images (“GIFs”) are tiny graphics with a unique identifier, similar in function to cookies, that are embedded invisibly on web pages or in emails. We or our service providers may use clear GIFs (also known as web beacons, web bugs or pixel tags) in connection with our Services to track the activities of visitors to our website and help us manage content and compile statistics about usage of our Services. We or our service providers may also use clear GIFs in emails to our users, to help us track email response rates, identify when our emails are viewed and track whether our emails are forwarded.
Users in the United States may opt out of many third-party ad networks. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and your choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and your choices regarding having information used by NAI members.
Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will opt you out from those companies’ delivery of interest-based content or advertisements to you, but it does not mean you will no longer receive any advertising through our website or on other websites. Please note that even if you opt out, you may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on the DAA or NAI websites, your opt out may not be effective. Additional information is available on the DAA’s website at www.aboutads.info or the NAI’s website at www.networkadvertising.org.
The service providers we use for online advertising may change. By visiting our website, you accept and consent to our use of Google, Facebook, and other services to serve advertisements to you.
Opt-in features. If you choose, you may opt-in to various features which may be available as part of our Services which allow you to voluntarily share information, whether to a group designated by you (for example, a “buddy list” or “friends” who also have a registered account) or to everyone (for example, when you post Content to a forum or other publicly accessible area on our website). You are cautioned not to post your personal information in the interest of safety, privacy, and security. You should not post your address, telephone number, or anything that might put you at risk. We are not responsible for monitoring this information, and we are not liable for any consequences that may result from the exchange of this information.
Account information. You can update or make changes to the registration information stored in relation to your account. This is accessible by signing into the website in which you are registered. You may access your Personal Information, update your Personal Information or cancel your account by contacting Customer Service. Please note that we may retain your Personal Information with respect to your purchase transactions on our website indefinitely for certain legitimate business purposes, including for tax audit and accounting purposes and to protect against fraud.
- Data access, correction, and deletion. You may have the right to access the Personal Information that we hold about you and to request that we correct, amend, or delete it if it is inaccurate or processed in violation of this Policy. These access rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than the individual requesting access. If you would like to request access to, correction, amendment, or deletion of your Personal Information, you can submit a written request using the contact information provided below. We may request specific information from you to confirm your identity. In some circumstances we may charge a reasonable fee for access to your information.
- Data retention. We will retain your Personal Information only for as long as reasonably necessary for the purposes described in this Policy. Please be aware that we may also be required to retain your Personal Information for legal and accounting reasons.
Communications from us. We may send periodic promotional or informational emails to you, about us and other third-party information and offers if you have affirmatively opted-in to receive such emails. In the event you do not wish to receive such emails from us, you may opt out of such communications by following the opt-out instructions contained within the body of any email message you receive or by emailing us at firstname.lastname@example.org and requesting that you no longer receive communications from us. It may take us up to ten (10) business days to process your opt-out request. Even if you have opted out of receiving marketing and promotional emails from us, we may still send you transactional emails, such as emails about your account or the services you have requested from us.
Online advertising. Please see our Online advertising section above for more information about your choices regarding online interest-based advertising.
Your California privacy rights
This California-Specific Section Specifically Last Modified: January 1, 2020
PRIVACY STATEMENT FOR CALIFORNIA RESIDENTS
Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:
|A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
|A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
|C. Protected classification characteristics under California or federal law.
|Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
|D. Commercial information.
|Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
|E. Biometric information.
|Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
|F. Internet or other similar network activity.
|Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
|G. Geolocation data.
|Physical location or movements.
|H. Sensory data.
|Audio, electronic, visual, thermal, olfactory, or similar information.
|I. Professional or employment-related information.
|Current or past job history or performance evaluations.
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
|Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
|K. Inferences drawn from other personal information.
|Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Personal information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA’s scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
We obtain the categories of personal information listed above from the following categories of sources:
- Directly from our clients and customers or their agents. For example, from documents and orders that our clients and customers provide to us related to the products they buy from us and services for which they engage us.
- Indirectly from our clients and customers or their agents. For example, through information we collect from our customers and clients in the course of providing products and services to them.
- Directly and indirectly from activity on our website. For example, from submissions through our website portal or website usage details collected automatically.
- From third parties that interact with us in connection with the services we perform.
Use of Personal Information
We may use or disclose the personal information we collect for one or more of the following business purposes:
- To fulfill or meet the reason for which the information is provided. For example, if you provide us with personal information in order for us to ship a product, we will use that information to prepare the shipment and submit it to the applicable shipping provider.
- To provide you with information, products, or services that you request from us.
- To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
- To improve our website and present its contents to you.
- For testing, research, analysis, and product development.
- As necessary or appropriate to protect the rights, property or safety of us, our clients and customers or others.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Your Rights and Choices
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
- Visiting our website.
- Emailing us at support@ cowboyrevival.com.
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage.
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
109 West Park Drive
Brentwood, TN 37027
Your EU resident rights
If you are a resident of the European Union, you have certain rights under the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”), including the right to lodge a complaint with the data protection supervisory authority of your country, if you believe we have breached your data protection rights and we have not adequately addressed your concerns. We will not transfer Personal Information that is subject to the GDPR to any country that has not been deemed by the European Commission to provide adequate protection for personal data unless those transfers are subject to appropriate safeguards recognized by the European Commission. If you wish to receive your Personal Information from us, we will provide such information to you in a structured, commonly used, and machine-readable format, and you have the right to transmit such Personal Information to another controller without hindrance from us (data portability).
Cross-Border Transfers and Data Storage
Our Services are not targeted to children under thirteen (13) years of age, and we do not knowingly collect Personal Information from children under 13. In addition, for children between the ages of 13 and 17, we permit the use of our Services only under the supervision and with the written consent of a parent or legal guardian. If we discover that we have inadvertently collected Personal Information from a child under 13, or from a child between the ages of 13 and 17 without the written consent of a parent or legal guardian, we will promptly take measures to delete that Personal Information from our systems.
Our Services may contain links to other websites. Your use of an external website is subject to and governed by the terms and policies of that website. We are not responsible for the privacy practices of such other websites. We encourage our users to read the privacy statements of each and every website they visit.
We have taken steps to protect your information. For example, we limit internal access to our servers and have physical, electronic, and administrative safeguards in place that are designed to protect your information. However, the transmission of information via the internet is not completely secure, and we cannot guarantee the security of information transmitted through our Services. We cannot ensure or warrant the security of any such information, and you provide such information at your own risk.
You can also take steps to help protect your information. For example, if you have an account with us, you should take steps to protect against unauthorized access to your account by, among other things, choosing a robust password that nobody else knows or can easily guess and keeping your log-in and password private.
Changes to this Policy
This Policy was last updated as of the “Last Modified” date above. We may update this Policy from time to time, including to comply with changes in regulatory requirements. If any material changes are made, you will be notified by email or by means of a notice on our website. We encourage you to periodically review this page for the latest information on our privacy practices.
If you have any questions or comments about this Policy, or to exercise your rights under this Policy, please contact us using the information below.
109 West Park Drive
Brentwood, TN 37027