Privacy Policy

1. INFORMATION COLLECTION

Depending on the nature of your interaction with Gentle Monster, we may collect personal information as follows:

Directly from you, when you provide information to us or interact with us:

• Account information, including your name, email address, selected password, and content preferences.
• Contact information, including your name, telephone number, email address, mailing address, and any other information you choose to include when you communicate with us via email, mail, phone, or other channels.
• Survey information in response to questions we may send you, including for feedback and research purposes.
• Transactional information, including payment information and payment history if you make a purchase.
• Your image captured by security cameras at our stores for safety and loss prevention purposes.
• Any additional information you choose to provide, including questions, suggestions, and feedback.

Automatically from you, device information and online user activity when you utilize our Services, as described in the next section.

From third parties, information about the marketing and advertisements you have seen or clicked on, from online advertising companies.

Some of this information may be collected by external parties on our behalf. For example, we use a payment processor when you engage in a transaction on our Services; Gentle Monster does not itself collect or store payment card information.

2. COOKIES AND INFORMATION COLLECTED BY AUTOMATED MEANS

When you interact with our online Services, certain information is automatically collected from you. This information includes:

• Usage details about your interaction with our online Services, such as the date, time, and length of visits, specific pages or content accessed, search terms, and frequency of visits.
• Device information about the device you use to access our online Services, such as IP address, device type, unique device identifier, operating system, browser type, and mobile network information.
• Location information where you choose to provide our online Services with access to information about your device's location.

Much of this information is collected through cookies and other tracking technologies, which may be operated by our partners who assist us in providing the online Services, understanding usage of the online Services, serving ads, security, and fraud prevention. See Section 4 for more information.

To manage your cookie preferences, please set your preferences. Please note that you will need to set preferences on each device you use to visit our online Services. Because definitions and rules for "Do Not Track" have not yet been established, including whether such signals must be user-enabled, we do not respond to "Do Not Track" signals.

See Section 6 for more information on managing cookie preferences and opting out of third-party cookies.

3. HOW WE USE YOUR INFORMATION

We use the information we collect from you to:

• Provide our Services to you, including to create and maintain your account and fulfill and manage orders, deliveries, and returns.
• Respond to your requests and questions; communicate with you; provide troubleshooting and other customer support; and provide important notices.
• Manage, maintain, and operate the Services; diagnose or fix technology problems; monitor the performance of the online Services; and understand how you access and use the online Services.
• Improve the Services and grow our business; better understand our customer base; administer surveys for market research and customer satisfaction purposes; and develop new products and services.
• Design and administer marketing and promotional campaigns and evaluate the effectiveness of these campaigns.
• Send you marketing emails with information on products or services that may be of interest to you and administer promotions or other special offers.
• Comply with legal requirements; defend against legal claims or other demands; respond to subpoena, court order, or other legal process or request; engage in risk management and compliance activities; protect the rights of Gentle Monster, you, or others; maintain the security of our in-store locations; and detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal.
• Perform internal administration, auditing, and operations activities.

We may use and share information in an aggregated or de-identified manner data at our discretion, including for research, analysis, modeling, marketing, and improvement of our Services.

4. HOW WE SHARE YOUR INFORMATION

We may share the information we collect in the following instances:

• With service providers that we believe need the information to perform a technology, business, or other professional function for us such as IT services, payment processing, customer support, accounting, analytics, auditing, and tax services, and other professional services.
• With shipping vendors to ship and deliver your orders.
• With advertising partners who assist us in serving interest-based advertising regarding the Services to others who may be interested in the Services. These third parties may use tracking technologies to collect or receive information from our online Services and elsewhere on the internet (such as web pages you visit and your interaction with our advertising and other communications) and use that information to provide measurement services and build a profile of your inferred interests in order to deliver ads that are more relevant to you. These advertising partners may allow other companies to access information about you so that they may market other products you may be interested in. See Section 6 for more information on managing cookie preferences and opting out of third-party cookies.
• With analytics providers that help us measure and analyze how you use the online Services via cookies so we can measure and improve the performance of the online Services.
• With entities in our corporate family, for purposes consistent with this Privacy Policy, to carry out our business activities, and to the extent permitted by law.
• With social media platforms, information about you and your interaction with us. If you interact with social media objects on our online Services, both the platform and your connections on the platform may be able to view that activity. To control this sharing of information, please review the privacy policy of the relevant social media platform.
• When a corporate event occurs, we reserve the right to transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Privacy Policy.
• For legal purposes; where necessary to comply with the law; in response to court orders, law enforcement or legal process, including for national security purposes, which may include lawful access by U.S. or foreign courts, law enforcement or other government authorities; to establish, protect, or exercise our legal rights; as required to enforce our terms or other contracts; to defend against legal claims or demands; or to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person.

5. HOW WE PROTECT AND STORE YOUR INFORMATION

We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf. If you access or use our Services outside of the United States, you understand that we and our service providers may collect, access, process, and store your personal information outside of the jurisdiction in which you reside, including in the United States and other countries.

6. PRIVACY CHOICES

You have the following choices when it comes to how we collect and use your information:

Opt out of Cookies and interest-based advertising: You have several options to prevent our collection of information regarding your online activity, or prevent third parties from collecting information on our online Services and using such information for interest-based advertising:

• To manage your cookie preferences on our online Services, please set your preferences.
• Generally, you can modify your browser setting to disable or reject cookies across the internet; but if you do so, some features of our online Services may not function properly or be available. Please note that you will need to set preferences on each web browser and device you use to visit our online Services.
• If your browser offers you the ability to use Global Privacy Control (GPC) to communicate your privacy preferences to us, we honor such signals.
• You may be able to prevent certain third parties from using your information for interest-based advertisements across the internet by using opt-out tools from the NAI or the Digital Advertising Alliance/Digital Advertising Alliance of Canada. Please note this does not opt you out of being served ads from us but the ads you receive may be less relevant to you and your interests, nor will it prevent the receipt of interest-based advertising from other companies that do not participate in these programs.

You may also opt out of third-party cookies we use by visiting their opt out pages. These are examples of our cookie providers, but the list is not exhaustive. In addition, we are not responsible for the effectiveness of any of these opt-out mechanisms:

• We use Google Analytics to collect usage details. You can learn more about privacy and Google Analytics here, and opt out of collection of your data by using the Google Analytics Opt-out Browser Add-on.
• We use Meta Pixel to customize our advertising and to serve you ads based on your browsing behavior. You can learn more about Meta Pixel here. You can opt-out of personalized advertising through Meta's Ad Settings.

Opt out of email marketing: If you no longer wish to receive marketing emails from us, you can click the unsubscribe link at the bottom of our marketing emails. Please note that you may continue to receive transactional messages from us, including messages about your account and purchases.

Update account information: If you have a Gentle Monster account, you can see, review, and update certain information associated with your account, such as your contact information, by logging in to your account.

7. UPDATES TO THIS PRIVACY POLICY

We may make changes to this Privacy Policy from time to time. The date at the top of this Privacy Policy indicates when this Privacy Policy was last revised. If we make material changes to this Privacy Policy, we will notify you through written, electronic, or other means.

8. ADDITIONAL NOTICE FOR CALIFORNIA RESIDENTS

As a California resident, you have the right to receive certain disclosures regarding our collection, use, and disclosure of your personal information, as well as certain rights to your personal information. California residents will not receive discriminatory treatment for exercising these privacy rights.

Collection, Use, and Retention

The following chart describes our practices about the collection, use, and retention of your information. The categories we use to describe the information are those listed in California law. Some of the categories include very different types of information within the same category and certain personal information may fall into multiple categories. How we use and how long we keep the information within each category will vary, and not all types of information within the same category will be used for all the purposes listed.

California law also requires us to provide information regarding the criteria we use to determine the length of time for which we retain personal information. We utilize the following criteria to determine the length of time for which we retain personal information:

• The business purposes for which the information is used, and the length of time for which the information is required to achieve those purposes;
• Whether we are required to retain the information type in order to comply with legal obligations or contractual commitments, to defend against potential legal claims, or as otherwise necessary to investigate theft or other activities potentially in violation of our policies and procedures applicable to you or against the law, to ensure a secure online environment, or to protect health and safety;
• The privacy impact of ongoing retention on you; and
• The manner in which information is maintained and flows through our systems, and how best to manage the lifecycle of information in light of the volume and complexity of the systems in our infrastructure.

Individual pieces of personal information may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used.

Sale, Sharing, and Other Disclosure of Personal Information and Right to Opt-Out

Any category of information listed in the chart above may be disclosed for a business purpose to service providers and contractors, which are companies or individuals that we engage to conduct activities on our behalf.

California law also requires us to provide you with information regarding the parties to whom we sell (disclosing personal information for monetary or other benefit) or share (disclosing personal information for purposes of cross-context behavioral advertising) your information. Like many companies, we use cookies and other tracking technologies to improve our online Services, optimize and analyze your experience, and serve ads relevant to your interests. Some of these uses may be considered a "sale" or "sharing" of your personal information. Below are the types of information we sell or share via cookies:

• Identifiers: Analytics and advertising partners
• Internet or other similar network activity: Analytics and advertising partners

To opt out, please set your preferences. Gentle Monster does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.

Additional Rights

Residents of California also have the right to access, correct, and delete certain personal information we collect about them. You or your authorized agent may submit a request to exercise your rights by calling us at [+1 (437) 466-0057].

For your security and to ensure unauthorized third parties do not access your personal information, we will require you to verify your identity before we can act on your request. We do this by asking you to provide personal identifiers we can match against information we may have collected from you previously and confirm your request using the email account stated in the request.

While you also have the right to limit use of your sensitive personal information, we only process your sensitive personal information for purposes allowed by law and therefore do not offer an option to limit further processing.

9. ADDITIONAL NOTICE REGARDING CERTAIN STATE RESIDENTS' PRIVACY RIGHTS

The laws of certain U.S. states provide their residents with certain rights with respect to their personal information. At this time, residents of the following states have a right to exercise certain rights with respect to Gentle Monster's processing of their personal information:

• Maryland
• Nebraska
• Texas

If you are a resident of one of these states, you have one or more of the following rights:

• Access certain personal information
• Correct certain personal information
• Delete certain personal information
• Opt-out of targeted advertising and the sale of personal information
• Not to receive discriminatory treatment for the exercise of privacy rights
• Appeal our decision if we deny your request

While these laws may provide state residents with the right to opt out of automated profiling that would produce legal or other similarly significant effects, we do not use personal information to make automated decisions in any situation where you would have a legal right to opt out.

Residents of these states can submit a request to access, correct, or delete personal information by calling us at [+1 (437) 466-0057]. For your security and to ensure unauthorized third parties do not access your personal information, we will require you to verify your identity before we can act on your request. We do this by asking you to provide personal identifiers we can match against information we may have collected from you previously and confirm your request using the email account stated in the request.

You can file an appeal via our Privacy Rights Request Form.

Like many companies, we use cookies and other tracking technologies to improve our online Services, optimize and analyze your experience, and serve ads relevant to your interests. Some of these uses may be considered a "sale" or targeted advertising. To opt out of targeted advertising and the sale of personal information via cookies, please set your preferences.

10. ADDITIONAL NOTICE REGARDING CANADIAN RESIDENTS' PRIVACY RIGHTS

If you are a Canadian resident, subject to applicable law, you have the right to access, update and correct inaccuracies in, and withdraw consent to our collection, use and disclosure of, your personal information in our custody or control. You may make such a request or withdraw your consent by calling us at [+1 (437) 466-0057]. We may request certain personal information for the purpose of verifying your identity when you seek access to your personal information.

If you have any questions or comments about this privacy policy or the manner in which we or our service providers (including our service providers outside Canada) treat your personal information, or to exercise any rights in respect of your personal information, please contact us at:

Privacy Officer
Please contact Customer Service Team with any queries on +1 (437) 466-0057 or service.ca@gentlemonster.com. (Customer Service Team operating hour: 9:30 AM - 5:00 PM PT)