Mabel's Labels: Privacy & Security information

How we collect your Personal Information

We collect your Personal Information depending on how you interact with our Website or Services. This includes:

Registration and billing information that you submit;
Log data collected automatically on the Website;
Information collected via cookies on the Website;
User data collected through your engagement with our Website and Services; and
Marketing and communication data provided to us by you, visitors, users, or subscribers to our marketing communications.

What we do with your Personal Information

We use your Personal Information for the following purposes:

Allowing you to use our Website;
Providing you with our Services and service communications;
Data management and support for our customers;
Improvements to our Services, website, and marketing strategies;
Sending out marketing and promotional materials in accordance with your preferences;
Billing coordination; and
As otherwise permitted or required by law.

When you provide us with personal information or personally identifiable information ('Personal Information') through the Websites, we respect your privacy.

When you purchase something through our Websites, we collect the Personal Information you provide such as your name, address, e-mail address and payment information. For purchases, we do not collect Personal Information about you, except when you provide it to us. When you submit your Personal Information on the Websites, you will be asked to consent to the processing and transfers of your Personal Information as set forth in this Privacy Policy. If you would prefer that we don't collect any Personal Information from you, please do not provide us with any such information. However, please note that if you do not consent to providing your Personal Information, you will not be able to use the Services.

When you browse our Websites, we may collect information about your usage of the Website for our business purposes, such as generating statistics and optimizing our Website. We may collect and processcertain non-personally identifiable information concerning your use of our Websites, such as information regarding pages visited, time on page, and other information for the general administration of the Websites.

E-mail marketing (if applicable): With your consent, we may send you e-mails about our Websites, new products and other updates.

Access to your Personal Information

If you wish to access your Personal Information that you have submitted via the Websites, please visit the 'my account' page or email us at  privacy@mabelslabels.com.

Personal Information may be accessed or used by our employees, only as required in order for them to carry out their responsibilities. Such personnel may include but is not limited to our Digital Marketing Specialists, Marketing Director, Data Scientist, Customer Service Team Members, Privacy Officer, and/or any other employee as may be required from time to time.

Consent

How do we get your consent?

When you provide us with Personal Information to complete a transaction, verify your credit card or place an order, you consent to our collecting your Personal Information and using it for that specific reason only.

If we ask for your Personal Information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to opt-in.

How do I withdraw my consent?

If after you opt-in you change your mind – you may withdraw your consent for us to contact you or for the continued collection, use, disclosure or transfer of your Personal Information at any time by contacting us at   privacy@mabelslabels.com or mailing us at Mabel's Labels Inc. 150 Chatham Street Hamilton ON Canada L8P 2B6. However, if you withdraw your consent, we may be unable to provide you with certain Services.

Collection of Personal Information

Your Personal Information is collected at checkout and when you subscribe to receive marketing communications from us. We collect your Email using tools provided by our third-party service providers (see below Third Party Services). We may also collect your Personal Information when you create an account on the Websites to identify you, or when you communicate with us, either by email, telephone, through the chat function on our Websites, or otherwise, for the purpose of responding to your inquiries, comments, complaints or requests. Personal Information collected may include your:

First Name
Last Name
Email address
Phone Number
Country
Address
Apartment Number
City
Province/State
Postal Code/ZIP Code

Communication of Personal Information

We may communicate your Personal Information if we are required by law to do so or to perform our obligations or enforce our rights under the Terms of Service.

Some of your Personal Information is also communicated to third-parties who provide services to us. Please see sections Payment and Third-party Services below for more details.

We share your Personal Information with the following third parties as necessary to provide the Services:

Credit card processors to manage payment processing;
Third party service providers, only as necessary to assist in allowing us to provide you with the Services, and only with contractual requirements in place to protect your Personal Information;
Our related companies, such as affiliates and subsidiaries, to assist in providing the Services;
Potential acquirers of our business, to evaluate or carry out a business transaction;
Other entities as permitted or required by law.

Payment

During transaction processing, your Personal Information is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a combined effort of brands such as: Visa, MasterCard, American Express and Discover.

PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

At the point of purchase on our Websites, we collect the following data to process your order:

Credit Card Holder Name
Credit Card Number
Credit Card Expiration Date
Credit Card CVV
PayPal Information
We also collect and store the following information:
- Custom data for a label order (if applicable)
- First Name
- Last Name
- Email Address
- Phone Number
- Country
- Address
- Apartment/Suite Number
- City
- State/Province
- ZIP/Postal Code
- User IP address

Third-party Services

We may share Personal Information with these other third-party service providers:

email or marketing service providers, who may process your first name, last name, email address and mobile number for the purpose of sending you personalized marketing communications via email or SMS and is shared with our third-party email provider. You may be contacted by email when you browse the Websites or leave something in your cart;
third-party delivery service providers, who may process your name and shipping address for the purposes of rendering our Services to you;
data partners who may process name, billing address, shipping address, phone, e-mail and order data for the purposes of data and analytics.

Third party service providers we work with include, among others:

Klaviyo E-mail Service Provider- Boston, Massachusetts, United States of America
Tableau Data Analytics – Seattle, Washington, United States of America
HelpScout Customer Experience Software - Boston, Massachusetts, United States of America
Amazon Web Services (AWS) (data host) - Seattle, Washington, United States of America
Shipping Fedex, Spring Global, Canada Post, USPS
Monitoring: Datadog, HotJar
Consulting Partners: Microsoft/Sharepoint
Payment Processing: Braintree
Tax and Audit: Avalara

The third-party providers used by us will only collect, use and disclose your Personal Information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your Personal Information will be handled by these providers.

In particular, certain providers may be located in other jurisdictions. If you are located in Quebec, please be advised that your Personal Information may be communicated outside of Quebec or if you are in Canada, your Personal Information may be communicated outside of Canada. Accordingly, your Personal Information may be accessible to courts, law enforcement and national security authorities in other jurisdictions. If you have any questions, or wish to obtain further written information about the processing and storage of your personal information by affiliates or service providers outside of Canada, please contact privacy@mabelslabels.com.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your Personal Information used in completing that transaction may be subject to disclosure under United States legislation.

Once you leave our Websites or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Websites’ Terms of Service.

We use cookies, web beacons and other storage technologies, to collect or receive information about you from our Websites to show you advertisements that may be relevant and interesting to you through third parties, including Facebook and its Custom Audience Tool. To learn more, opt out or change your ad targeting preferences with Meta, visit https://www.facebook.com/ads/preferences/.

Use of cookies

What are cookies and how do we use them?

Cookies are small files that are stored on your computer, handheld pc or mobile as you browse various web pages. We use cookies to make sure that our Websites are easy to use and you can browse without experiencing any problems. For example, one of the most common uses of cookies is to keep track of what you place in your basket – without such cookies enabled, our Websites would not remember what what items you have placed in your shopping basket.

Cookies do not collect or store Personal Information (e.g. credit card details, name, address etc.).

To use the Services on our Websites, you will need to have cookies enabled within your internet browser. Your computer will automatically do this for you, and you don't need to change anything for this to happen. You can disable cookies by changing your browser settings to reject cookies. You will not be able to shop on our Websites if you disable cookies.

We also utilize Meta and Google Tracking pixels to develop more personalized marketing campaigns.

Links

When you click on links on our Websites, they may direct you away from our Websites. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Security

To protect your Personal Information, we take reasonable technical and organizational measures and follow industry best practices to make sure it is not lost or inappropriately used, accessed, disclosed, altered or destroyed.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored through a third party payment processor with a SHA1- 256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

In the instance of a security incident involving your Personal Information, if required under applicable law, we will notify you.

Mabel’s Labels does perform redaction of customers’ Personally Identifiable Information (PII) at customer's request. We have three SQL scripts that perform redaction of the PII data on three databases. Should a customer request deletion, accounts are deleted on our systems and our third-party platforms. For more information, please contact our Privacy Officer.

Age of consent

The Websites and Services are not intended for children under the age of majority. By using the Websites, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use the Websites. Minors are not authorized to use the Websites or purchase Services unless their parent, legal guardians, or tutors have consented to their use of the Websites or the purchase of Services.

Retention of Your Personal Information

We keep Personal Information only for as long as it is needed to accomplish the purposes for which it was collected, to render the Services, or as permitted or required by applicable law. When Personal Information is no longer necessary or relevant for the identified purposes, or is no longer required to be retained by applicable laws, we will take steps to have it deleted, destroyed, erased or aggregated. We use reasonable industry practices to ensure we have adequate controls, schedules and practices for information and records retention and destruction, which apply to Personal Information.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time by providing you a notice to this effect, . Please be sure to review our privacy policy frequently. Changes and clarifications will take effect immediately upon their posting on the Website. If we make material changes to this policy, we will notify you.

If you are located in Quebec, we will provide at least 30 days’ notice prior to any new terms taking effect, which will set out the text of the amended clause of this Privacy Policy and the date the changes will come into force. You will then have a further 30 days after such entry into force to cease your use of the Services and Websites. Your use of the Services and Websites after such date constitutes your agreement to those changes.

If we are acquired or merge with another company, your information may be transferred to the new owners, in accordance with applicable laws, so that we may continue to sell products to you.

If you have any questions about security at our Websites, you can send an email to privacy@mabelslabels.com.

California Privacy Requirements

California Privacy Requirements:

Information Sharing by Mabel’s Labels	Mabel’s Labels will not share information it collects about you with its affiliates or third parties (both financial and non-financial), except as required or permitted by law.
Limit Use and/or Disclosure of Sensitive Personal Information	Certain categories of personal information that we collect and use might be “sensitive” under data privacy laws. Consistent with applicable law, you may limit certain uses or disclosures of your sensitive personal information and may exercise this right by contacting privacy@mabelslabels.com .
Right to Access	Consistent with applicable law, you may submit a verifiable consumer request to access, in a portable and (if technically feasible) readily-usable form, the personal information that we have collected about you as well as more information about our data practices.
Right to Correct	Consistent with applicable law, you may submit a verifiable consumer request to correct inaccuracies in your personal information held by Mabel’s Labels.
Right to Delete	Consistent with applicable law, you may submit a verifiable consumer request to delete your personal information.
Sale and Sharing of Data	We do not sell personal information to third parties; we are not data brokers and do not put personal information on the open market. We do not knowingly sell or share the personal information of individuals who are younger than 16. We do allow third parties to collect personal information through MabelsLabels.com and share personal information with third parties for the business purposes described in the Privacy Policy including, without limitation, advertising and marketing on the MabelsLabels.com and elsewhere based on users’ online activities over time and across Mabel’s Labels, services, and devices. Consistent with applicable law, you may opt out of such processing by contacting privacy@mabelslabels.com .
Right of Non-Discrimination	We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on the service may change or no longer be available to you. Any differences in the services are related to the information provided.
Data Retention	We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include: The length of time we have an ongoing relationship with you and provide services to you (for example, for as long as you have an account with us or keep using our services) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise; Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or Whether retention is allowed by applicable law (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
De-Identification	Consistent with applicable law, we commit to maintain and use information in de-identified form and not to attempt to re-identify the information, except that we may attempt to re-identify the information solely for the purpose of determining whether its de-identification processes satisfy the requirements of the California Privacy Rights Act.

Quebec Resident Rights

The Act respecting the protection of personal information in the private sector (as amended by the Act to modernize legislative provisions as regards the protection of personal information, and together with related legislation and regulations, the “Quebec Privacy Legislation”) is provincial legislation intended to enhance privacy rights for residents of Quebec. This section describes your additional rights as a Quebec resident under Quebec Privacy Legislation.

Right to request more information regarding the following:
- The Personal Information we have collected about you;
- The categories of sources from which the Personal Information was collected;
- The duration of the period of time your Personal Information will be kept;
- The categories of recipients with access to your Personal Information within Mabel’s Labels.
Right to withdraw your consent to the processing of your Personal Information.
Right to request a portable copy of the Personal Information we collect about you.
Right to request deletion.
You may request that we delete the Personal Information that we have about you and are currently maintaining, to the extent required under applicable law. Please note, however, that we may have a legal basis for retaining certain Personal Information under the law.

Please note: Before we can fulfill your request or provide you with the Services, we must be able to verify your identity. We will ask you to provide your email and will use a verification link pushed out through email or will otherwise attempt to verify that we have a record of you in our systems. If we cannot verify your identity, we may not be able to fulfill your request or render the Services.

To exercise any of your privacy rights, please contact our Privacy Officer. We will acknowledge and respond to your data protection rights requests in accordance with the applicable legislation in the jurisdiction where you are located.

Questions and Contact Information

If you would like to access correct amend or delete any of the personal information you have provided to us register a complaint or require more information you may contact our Privacy Officer at privacy@mabelslabels.com or by mail at Mabel's Labels Inc.

Re: Dave Smith-Hayes, Privacy Officer

150 Chatham Street Hamilton ON Canada L8P 2B6