Privacy policy

Revised July 1, 2023

Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from ryleeandcru.com, quincymae.com, and shopnoralee.com (the official sites of the Rylee + Cru Collective, and collectively, the “Site”). Personal information is that which identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. Personal information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.

Personal information we collect

We collect personal information directly from you when you purchase our products, use our services, or otherwise interact with our Site, including:

Profile Information. We collect information or content you provide to us in connection with creating an account or joining a mailing list. Examples of profile data we may collect include your name, email address, phone number, mailing address, account login name and password.

Transaction Information. We collect transaction information related to the products you purchase from us. Examples of information collected include the type of products purchased, order details, delivery information, amount charged, payment method (including credit card information, i.e., credit card numbers, expiration date, etc.), billing or shipping information, and information about any products you returned or exchanged with us. When you make a purchase, we work with third-party payment processors to collect and process your payment information.

Communications Data. We collect information when you communicate with us, such as when you interact with our customer service team. Examples of such data may include your contact information, the date and time of your communications, online identifiers and the content of your communications.

When you visit the Site, we automatically collect certain information about your device, which may include:

Device Information. We collect information about your web browser, IP address and some of the cookies that are installed on your device.

Usage Information.  We collect information about your activity on our Site via log files, cookies, web beacons, and other tracking technologies.

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
• “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.
  
  As you browse the Site, we collect information about access dates and times, the individual web pages or products that you view, what websites or search terms referred you to the Site, and any orders you make on the Site.

We may also collect personal information from about you from other sources. For example, we may collect personal information about you from:

• Third parties. We may collect personal information from our service providers, analytics companies, marketing or advertising service providers, fraud prevention service providers and other third parties that provide us with information, so we can better understand you and provide you with information and offers that may be of interest to you.

 

How do we use your personal information?

We may use or disclose the personal information we collect for one or more of the following purposes:

• In general, to fulfill or meet the reason you provided the information. Purchase of product is a prime example; if you provide your personal information to purchase a product, we will use that information to process your payment and facilitate delivery. Another example is if you share your name and contact information for a customer service inquiry, we will use that personal information to respond to your inquiry. We may also save your information to facilitate new product orders or process returns.
• To provide, support, personalize, and develop our Site and our products, including improving and optimizing our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments and prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your Site experience and to deliver content and product offerings relevant to your interests based on the preferences you have shared with us, including targeted offers and ads that are generated via use of our Site, third-party sites, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our Site, our products, our databases and our business.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our consumers is among the assets transferred.

Sharing your Personal Information

We share your personal information with third parties to help us use your personal information, as described above. For example, we use Shopify to power our online store; you can read more about how Shopify uses your Personal Information here.

We also use Google Analytics to help us understand how our customers use the Site; you can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here.

We also share your personal information via Meta Pixels on our Site that allow for targeted advertising based upon your usage of the Site. You can read more about how Meta uses your personal information here.

Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioral Advertising

As described above, we use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the links below:
- Facebook: https://www.facebook.com/settings/?tab=ads[1]
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Do not track
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Data Retention

Our retention periods for personal data are based on business needs and legal requirements. We store personal data associated with your account for as long as your account remains active. If you close your account, we will delete your account data within the applicable regulatory timeline. We retain other personal data for as long as is necessary for the processing purpose(s) for which we originally collected it and for other business purposes explained in this Privacy Policy. For example, we may retain certain transaction details and correspondence until the time limit for claims arising from the transaction has expired. In addition, we retain your email address and information about your marketing preferences to ensure that we can honor those preferences.

 

Children

Our websites and services are not targeted or directed at children under the age of 13. Our websites are general audience sites that are not designed nor intended to collect Personal Information from children under the age of 13. We do not knowingly collect Personal Information from children under the age of 13.

California Users

The California Consumer Privacy Act (the “CCPA” or “Act”) provides California residents with specific rights regarding their personal information. You may learn more about your rights under the CCPA.

Revisions to this Privacy Policy

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at orders@ryleeandcru.com or by mail using the details provided below:

Rylee & Cru, 11035 Technology Place, Suite 100, San Diego CA 92127, United States

CCPA Privacy Policy for California Residents

This Privacy Policy for California Residents supplements the information contained in Rylee and Cru, Inc.'s Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this notice to comply with the California Consumer Privacy Act of 2018 ("CCPA") and any other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this Policy.

Information We Collect

We have collected the following categories of personal information from consumers within the last twelve (12) months (or are informing you below that a category has not been collected):

 

Category	Examples	Collected
A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, address, telephone number, credit card number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	NO
D. Commercial information.	Records of products purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES
G. Geolocation data.	Physical location or movements.	NO
H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment-related information.	Current or past job history or performance evaluations.	NO
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

The Site obtains the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete or products you purchase.
• Indirectly from you. For example, from observing your actions on our Site.

 

Use of Personal Information

See the section titled “How do we use your personal information?” in the general Privacy Policy for a full listing of how we may use your personal information.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

Category A: Identifiers.
Category B: California Customer Records personal information categories.
Category D: Commercial information.

We disclose this personal information for a business purpose to the following categories of third parties:

• Advertising partners, data analytics providers, payment processors, fulfilment partners, customer support partners, and fraud prevention partners.

Category F: Internet or other similar network activity.

We disclose this personal information for a business purpose to the following categories of third parties:

• Advertising and marketing partners, internet service providers, data analytics providers, customer support partners and fraud prevention partners.

We “share” and “sell” (with regard to the latter, e.g., by entering into contractual arrangements with third parties for receipt of services which entails sharing personal information) personal information for the purpose of engaging in advertising and marketing activities. In the preceding 12 months, we have shared and sold the following categories of personal information to the following categories of third parties:

Category A: Identifiers.
Category B: California Customer Records personal information categories.
Category D: Commercial information.

Category F: Internet or other similar network activity.

We have “shared” and “sold” the above information to advertising and marketing partners.

NOTICE OF FINANCIAL INCENTIVE

• For those customers providing personal information in the form of an e-mail address or phone number to be on our mailing list, a ten percent discount on the Rylee + Cru Collective website is offered. We disclose this personal information to our service providers that perform services on our behalf, including payment processing, product fulfillment and email marketing. 
• The Company does not place any specific monetary value on the collection of this personal information from customers, and has concluded that such ten percent discount is reasonably related to the benefit of having customers on its mailing list without relying on any specific analytical method for a valuation of same.
• Customers can opt in to the mailing list and receive this discount by opting in here. 
• Customers can opt out of the mailing list at any time by submitting such a request at https://ryleeandcru.com/pages/contact-us -- such request should list your name and contact information used to place you on our mailing list, i.e., your e-mail address or phone number. If you request that we delete personal information that is essential to providing you with the financial incentive, we will not be able to provide you with such benefits going forward.

 Your Rights and Choices

The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months (the "right to know"). Once we receive your request and confirm your identity, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
• The specific pieces of personal information we collected about you (also called a data portability request).

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Right to Correct

You may also request correction of inaccurate personal information by contacting us as set forth below.

Exercising Your Rights to Know, Delete or Correct

To exercise your rights to know or delete described above, please submit a request by either:

• Emailing us at orders@ryleeandcru.com; or
• Mailing a request to us at Rylee & Cru, 11035 Technology Place, Suite 100, San Diego CA 92127

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. 

You may also make a request to know or delete on behalf of your child by either of the above-listed methods (i.e., email or physical mail), listing your child’s name, email used for a prior purchase and account name and login (if applicable).

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include:
  • Providing sufficient identifying information for you (if the request is being made on your behalf) or for your child (if you are making the request as a parent or guardian)
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

You do not need to create an account with us to submit a request to know or delete.

We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact us at orders@ryleeandcru.com.

We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

 

Personal Information Sales Opt-Out and Opt-In Rights

If you are age 16 or older, you have the right to direct us to not sell your personal information at any time (the "right to opt-out"). We do not sell the personal information of consumers we actually know are less than 16 years old, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is between 13 and 15 years old, or the parent or guardian of a consumer less than 13 years old. Consumers who opt-in to personal information sales may opt-out of future sales at any time.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link:

https://ryleeandcru.com/pages/contact-us 

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales. However, you may change your mind and opt back in to personal information sales at any time by:

https://ryleeandcru.com/pages/contact-us

You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or products, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time. 

NOTICE OF FINANCIAL INCENTIVE

• For those customers providing personal information in the form of an e-mail address or phone number to be on our mailing list, a ten percent discount on the Rylee + Cru Collective website is offered. We disclose this personal information to our service providers that perform services on our behalf, including payment processing, product fulfillment and email marketing. 
• The Company does not place any specific monetary value on the collection of this personal information from customers, and has concluded that such ten percent discount is reasonably related to the benefit of having customers on its mailing list without relying on any specific analytical method for a valuation of same.
• Customers can opt in to the mailing list and receive this discount by opting in here. 
• Customers can opt out of the mailing list at any time by submitting such a request at https://ryleeandcru.com/pages/contact-us -- such request should list your name and contact information used to place you on our mailing list, i.e., your e-mail address or phone number. If you request that we delete personal information that is essential to providing you with the financial incentive, we will not be able to provide you with such benefits going forward.

Data Retention

See the “Data Retention” section in the general Privacy Policy.   

California “Shine the Light Law”

California Civil Code Section 1798.83, also known as California “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about the personally identifying information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of the personally identifying information that was shared and the names and addresses of all third parties with which we shared personally identifying information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing using our contact information in the “Contact Information” section below.

Changes to Our CCPA Privacy Policy

We reserve the right to amend this CCPA Privacy Policy at our discretion and at any time. When we make changes to this privacy policy, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which Rylee and Cru, Inc. collects and uses your information described here and in the CCPA Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: orders@ryleeandcru.co

Postal Address:  Rylee & Cru, 11035 Technology Place, Suite 100, San Diego CA 92127