Privacy policy

PRIVACY POLICY 

United States - Website Privacy Notice 5 December 2022

 This privacy notice applies to the personal information collected by The TSA Venture Srl, an Italian-based company with headquarters in Vicenza, Italy and its wholly-owned subsidiary The Sunny Artisan LLC, a USA-based company with headquarters in Indiana, U.S.A (“us”, “we”, or “our”) through website, microsites or mobile sites, or mobile applications for download to your mobile device that expressly adopt, and display or link to, this notice (collectively our “Websites”), through our pages on social media sites, such as Facebook, Twitter, Instagram et al., via our telephone support lines, and to the personal data collected through consumer satisfaction surveys (collectively, with Websites, referred to as the “Services”). Any reference to “visitor”, “you” or “your” means you, the user. We adopt this notice for our customers in the United States. 

If you have questions about this notice please contact us at support@thesunnyartisan.com.

By using our Websites and Services which reference this notice, you consent to us processing your personal information as described in this notice. If you do not consent to us processing your personal information as described herein, please do not use our Websites or participate in our Services.

WHAT PERSONAL INFORMATION DO WE COLLECT?

We collect the following types of Personal Information directly from you, from third parties we partner with, or through cookies or other automated means.

• Submitted Information: When you make a purchase; contact us with questions or comments; upload content to our Websites or social media pages; enter our contests or sweepstakes; save items to your shopping bag; create an account; respond to a survey; opt in to text messages; apply for a job; or fill out any forms on our Websites or social media pages we collect any Personal Information that you provide. When you voluntarily provide and submit Personal Information, you will know what categories of Personal Information we have collected and the purpose of collection based on the purpose and context of the submission.  This may include information like your name, postal address, e-mail address, telephone number, or billing and account information.

• Usage Information: When you visit our Websites, we automatically collect the following types of information during your use and navigation of our Websites (“Usage Information”): your browser type (to ensure compatibility between our Websites and your browser), the domain name of the website that allowed you to navigate to our Websites, your incomplete internet protocol (IP) address, time spent on our Websites, web pages viewed, frequency of visits, and other relevant statistics about your use of our Websites. Unless you also actively submit Personal Information to us, any Usage Information typically does not allow us to identify you personally.  Usage Information is collected through the use of cookies or other tracking technologies.

• Cookies: We use cookies to collect aggregate data. A “cookie” is a small piece of information sent by a Web server to a Web browser that enables the server to collect information from the browser. Cookies are stored on your hard drive and not on our Websites, so you can examine your data files and see what information is being recorded. Most cookies are “session cookies” that are automatically deleted when the user closes his or her browser at the end of a session. You may decline cookies if your browser permits. If you do so, however, you may be required to re-enter your previously submitted information each time you visit our Websites.  Data collected by cookies is used to monitor a website and improve its usability. We may use cookies on certain pages, for example, to eliminate the need for you to re-enter your password during a session. We can also use cookies to identify your IP address when you visit our Websites to keep track of your browsing patterns and to build a demographic profile.

• Third Parties: We work with third parties who provide services to us, like analytics or advertising companies. These third parties share information they have collected with us. Your information may also be collected and processed by third parties, such as the payment providers you select, who will process your information independently in accordance with their own privacy notices. 

• Social Media Platforms: Social media platforms share information, which is typically aggregated and does not include personal data. You can learn more about how social media platforms collect and use your information by reviewing their privacy policies and settings.

• Shopify: Our Websites are hosted by the online e-commerce platform Shopify, Inc. If you create an account or purchase products through our Websites, any personal data you provide (i.e., name, billing and shipping address information, email address, telephone number, and payment card information) will be stored in Shopify’s data storage facilities, databases, and the general Shopify application on a secure server behind a firewall. If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that transaction is complete, your purchase transaction information is deleted or rendered unreadable (masked). All direct payment gateways on Shopify adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.  For more information about Shopify’s privacy practices and use of information, please see Shopify’s Terms of Service (https://www.shopify.com/legal/terms) and Privacy Statement (https://www.shopify.com/legal/privacy).

HOW DO WE USE THE INFORMATION WE COLLECT FROM YOU?

We may use the information we collect for the following business purposes:

 

WHO DO WE SHARE YOUR INFORMATION WITH?

We may share personal information with third parties for certain purposes. For example, we share personal information with:

• Family Companies: We may share your information with our affiliated companies. Sharing personal information between affiliated companies is pursuant to contractual, physical, and technical safeguards.
• Services Providers: We partner with third parties to assist with many aspects of our e-commerce business, including fulfilling orders, advertising, analyzing your interests and activity on our Websites and social media pages, and helping us communicate with customers. These third parties may provide services related to any of the purposes described above, and we may share with them any types of information described above. We may also receive information collected by these third parties and combine it with the information we have collected. Some of these third parties may be located outside the United States. Your information may also be collected and processed by third parties, such as the payment providers you select, who will process your information independently in accordance with their own privacy notices.
• Other Third Parties: We will disclose information about you, including to government bodies or law enforcement agencies, when we believe it to be necessary for compliance with the law or to protect the users of our Websites, or the public. Parties to a Transaction If we were ever merged with or acquired by another company, or it acquires another company, or is involved in a corporate reorganization or other change in corporate control, your information could be shared with that business. 

Parties to a Transaction: If we were ever merged with or acquired by another company, or it acquires another company, or is involved in a corporate reorganization or other change in corporate control, your information could be shared with that business.

Other Disclosures with Your Consent: We may ask you to share your information with other recipients not described elsewhere in this Privacy Notice

We do not reveal your personal information to third parties for their independent use, other than as described above.

WHAT ARE YOUR RIGHTS?

You may have rights under applicable privacy laws, including to request that we:

• Provide you with more specific details about how we process your Personal Information;

• Provide you with copies of Personal Information that we hold about you;

• Amend, update or delete Personal Information we hold about you;

• Restrict our processing of your Personal Information; and

• No longer process Personal Information in ways that you previously consented to.

If you are a resident of California, please see our Supplemental California Consumer Privacy Act Privacy Notice below for information about rights that may be available to you under the California Consumer Privacy Act.

Please contact us at info@thesunnyartisan.com if you would like to exercise your rights under applicable privacy laws.  Please note that we may need to retain certain Personal Information for record keeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion.  You can also review and change your personal information by visiting the Websites and logging into your account profile page.

You can also control the information we collect in the following ways:

WHAT ABOUT CHILDREN’S INFORMATION?

Our Websites are not directed toward individuals under the age of eighteen (18) years old. Furthermore, we do not knowingly collect any personal data from individuals under the age of eighteen (18) years old. No one under the age of eighteen (18) years should provide any personal data to us. To request deletion of personal information relating to a child under 18, please email info@thesunnyartisan.com.

DO WE TRANSFER YOUR INFORMATION INTERNATIONALLY?

Some of your information is stored on cloud server, based within the United States. However, in order to provide our services we may transfer your personal information to other group companies, third party service providers and partners that are located and operate outside the United States. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). Specifically, TSA Venture Srl occasionally supports the marketing of products to our customers in the United States and may have access to your information in order to do so.  We have taken appropriate safeguards to require that your information will remain protected in accordance with this Privacy Notice.

HOW DO WE KEEP YOUR PERSONAL INFORMATION SECURE?

To help protect the personal information we collect and process, we maintain appropriate physical, technical, and administrative safeguards to avoid loss or unauthorized access, destruction, use, or disclosure of your personal information. We update and test our security technology on an ongoing basis. We also restrict access to your personal information to those employees who need to know that information to provide benefits or services to you. 

 While we implement the above security measures on our Websites, you should be aware that 100% security is not always possible.

SUPPORTED WEB BROWSERS AND DO NOT TRACK SIGNALS

We recommend that you use the latest web browser versions to optimize your experience. Older web browser versions may not be able to access or utilize all pages on our website as intended.

We may not be able to receive or honor web browser “Do Not Track” signals and our website may continue to collect information in the manner described within this privacy notice.

UPDATES TO THIS PRIVACY NOTICE

As we continue to offer our customers new and different types of content and services, we may revise this privacy notice to reflect the changes that we have made to our information collection, use or disclosure practices. Should there be a material change to our information collection, use or disclosure practices, it will be applied only to information collected on a going forward basis.

QUESTIONS ABOUT PRIVACY

If you have any questions or concerns about our use of your personal information our address is 2201 E 46th St, Indianapolis, IN 46205. You can contact us by post at the above address or by email at support@thesunnyartisan.com.

NEVADA OPT-OUT INFORMATION

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request by emailing us at support@thesunnyartisan.com. However, please know we do not currently sell personal information triggering that statute’s opt-out requirements.

 

SUPPLEMENTAL CALIFORNIA CONSUMER PRIVACY ACT PRIVACY NOTICE

As a resident of California, you have rights under the California Consumer Privacy Act, California Civil Code § 1798.100 et seq., (with any implementing regulations and as may be amended from time to time, “CCPA”) relevant to your Personal Information (as defined under the CCPA), as well as other laws. The rights described herein are subject to exemptions under the CCPA and other limitations under applicable law.  The following provisions apply to the Personal Information of California residents whether collected online or offline. These provisions supplement the other sections of the Privacy Notice.

CATEGORIES OF PERSONAL DATA THAT WE COLLECT AND DISCLOSE

Listed below are the categories of Personal Information about California residents that we have collected within the last twelve (12) months and disclosed for business purposes.  

We may also share your personal information by selling it to third parties, including service providers and our brand partners for promotions, but all sales are subject to your right to opt-out of those sales. [In the preceding twelve (12) months, Company has sold the following categories of personal information to the categories of third parties indicated in the chart below.]

• A. Identifiers: The company collects customers' name, postal address, email address, and IP address. Business Disclosures: Service Providers and Family Companies Sales:  Service Providers and Brand Partners.
• B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): The company collects customers' telephone number and credit card information. Business Disclosures: Service Provider; Family Company Sales: Service Provider; Brand Partners
• C. Protected classification characteristics under California or federal law: The company has access to demographic details about customers, such as birthdate, gender, ZIP code, and other similar details. Business Disclosures: Service Provider; Family Company
• D. Commercial information: The company may keep records of conversations with customer service agents if customers call, email, text, or chat with them. Business Disclosures: Service Provider; Family Company
• E. Biometric information: The company collects information about customers' interactions with their websites, including non-sensitive keystroke activity. Business Disclosures: Service Provider; Family Company
• F. Internet or other similar network activity: The company learns about customers' browser, device type, IP address, internet service provider, and other technical information about their device when they visit their websites, interact with their social media pages or online ads, or open their emails. Business Disclosures: Service Provider; Family Company
• G. Geolocation data: The company uses various technologies to learn customers' geographic location, including by collecting their IP address or other device information, which may depend on their device's settings for location services. Business Disclosures: Service Provider; Family Company
• H. Sensory data: The company does not collect any sensory data such as audio, electronic, visual, thermal, olfactory, or similar information. Business Disclosures: None
• I. Professional or employment-related information: The company does not collect any professional or employment-related information such as current or past job history or performance evaluations. Business Disclosures: None
• J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)): The company does not collect any non-public education information directly related to a student maintained by an educational institution or party. Business Disclosures: None
• K. Inferences drawn from other personal information: The company does not draw any inferences from other personal information to create a profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. Business Disclosures: None

As described in the WHAT PERSONAL INFORMATION DO WE COLLECT Section above, we collect this Personal Information from you and from other categories of sources: e-commerce platforms, social media platforms, and other third parties, when they share the information with us.

Also as described above in the HOW DO WE USE THE PERSONAL INFORMATION WE COLLECT FROM YOU Section, we may use this Personal Information to operate our business; to deliver services, products, and information; to maintain and improve our Websites; to communicate with you and complete and fulfill your requests; to perform and enforce contracts; to tailor marketing programs and campaigns and conduct market research; for compliance and legal interests; and in association with mergers and acquisitions.

INDIVIDUAL RIGHTS

Subject to certain exceptions, California residents have the right to make the following requests, at no charge, up to twice every 12 months:

• Copy: You may request a copy of the specific pieces of Personal Information that we have collected about you in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows you to transmit this information to another entity without hindrance.

• Deletion: You may request deletion of your personal data that we have collected about you. We may deny your deletion request if retaining the information is necessary for us or our service providers, and we will explain to you the reason for which it was necessary to retain it.

• Know: You may request that we provide you certain information about how we have handled your personal data in the prior 12 months, including the:

• categories of personal data collected;

• categories of sources of personal data;

• business and/or commercial purposes for collecting your personal data;

• categories of third parties/with whom we have disclosed or shared your personal data; and

• categories of personal data that we have disclosed or shared with a third party for a business purpose.

We will not discriminate against you for exercising these CCPA rights.

SALES OPT-OUT AND OPT-IN RIGHTS

We do NOT sell your Personal Information. 

SUBMITTING REQUESTS

 If you wish to exercise your right to delete, copy, know and/or access your Personal Information, or authorize an agent to exercise these rights on your behalf, please submit your request by emailing us at support@thesunnyartisan.com. Your request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it.