Privacy Policy

Last updated: July 11, 2022

PLEASE READ THIS POLICY CAREFULLY TO UNDERSTAND HOW WE TREAT YOUR PERSONAL INFORMATION AND YOUR CHOICES AND RIGHTS. IF YOU DO NOT AGREE WITH THE TERMS AND CONDITIONS OF THIS POLICY, YOU SHOULD NOT ACCESS OR USE THE SITE.

THE SITE IS INTENDED FOR USERS LOCATED IN THE UNITED STATES, AND IT IS NOT INTENDED FOR USERS LOCATED IN OTHER COUNTRIES, INCLUDING THE EUROPEAN UNION AND THE EUROPEAN ECONOMIC AREA.

INTRODUCTION

The Headrest Safe™ Company, LLC (also referred to herein as “we,” “us,” and “our”) is committed to protecting the privacy and security of the personal information we collect, use, share, and otherwise process as part of our business. We also believe in transparency, and we are committed to informing you about how we treat the data we collect and process.

This Privacy Policy (the “Policy”) describes our practices regarding your personal information when you visit our website, www.theheadrestsafe.com (the “Site”).

WHAT INFORMATION DO WE COLLECT?

We collect the following information for the purposes described in the “How Do We Use and Share Your Information?” section of this Policy.

Category	Description
Contact Information	When you visit our Site, purchase something from our store, or contact us, we may collect or receive your name, email address, mailing address, and telephone number.
Order and Payment Information	If you place an order, Shopify, our ecommerce vendor, will collect your credit card number, security code, and expiration date, and we will receive your order information and shipping details. Credit card numbers are not stored on our servers. We keep records of the products purchased along with your Contact Information.
Account Information	When you create an account, in addition to your Contact Information, we collect your username or account ID and the password that you choose to create.
Communications, Reviews, and Inquiries	If you contact us or leave a review or comment, in addition to your Contact Information, we will receive any comments, content, or other information that you choose to provide. If you receive email communications from us, we use certain tools to capture data related to if/when you open our message and if/when you click on any links or banners it contains. Other information collected through this feature includes: your email address, the date and time of your “click” on the email, a message number, the name of the list from which the message was sent, a tracking URL number, and a destination page.
Cookies and Similar Technologies	The Site uses cookies and similar technologies. Please see the “Cookies and Similar Technologies” section of this Policy for more information.
Usage Data	When you use the Site, we automatically collect information from your browser or device, which includes the date and time of access, your location, your Internet Protocol (IP) address or unique device identifier, your device type, your operating system, your browser type, and information about what pages you visit.

Cookies and Similar Technologies

First and Third-Party Cookies

A “cookie” is a small file created by a web server that can be stored on your device (if you allow) for use either during a particular browsing session (a “session” cookie) or a future browsing session (a “persistent” or “permanent” cookie). “Session” cookies are temporarily stored on your hard drive and only last until they expire at the end of your browsing session. “Persistent” or “permanent” cookies remain stored on your hard drive until they expire or are deleted by you. Local shared objects (or “flash” cookies) are used to collect and store information about your preferences and navigation to, from, and on a website. First-party cookies are set by the website you’re visiting, and they can only be read by that site. Third-party cookies are set by a party other than that website.

Other Similar Technologies

In addition to cookies, there are other automatic data collection technologies, such as Internet tags, web beacons (clear gifs, pixel tags, and single-pixel gifs), and navigational data collection (log files, server logs, etc.) that can be used to collect data as users navigate through and interact with a website. For example, web beacons are tiny graphics with unique identifiers that are used to understand browsing activity. In addition, UTM codes are strings that can appear in a URL when you move from one web page or website to another. The string can represent information about browsing, such as which advertisement, page, or publisher sent the user to the receiving website.

What Cookies and Similar Technologies Are in Use and Why Do We Use Them?

We use first-party and third-party cookies and similar technologies for purposes such as to improve Site functionality, to measure and track how users interact with the Site, to perform similar analytics, to market to you, to track ad-driven activity, and to otherwise tailor our communications with you. For example:

Facebook Technologies. We use Facebook’s technologies (Facebook Custom Audiences and Facebook Connect) to serve relevant advertisements and to track Facebook ad-driven visitor activity on the Sites. Facebook Connect also gives you the option to post information about your activities to your profile page to share with others within your network by using a single sign-in service to authenticate your identity. You may learn more about Facebook’s policies by visiting https://www.facebook.com/policy.php, and you can also find instructions for opting out of receiving advertisements via that page. Facebook technologies rely on the following cookies:

Cookie	Description	Type	Duration
_fbp	Identifies browsers for the purposes of providing advertising and site analytics services	Marketing	90 days

Google Analytics. We use Google Analytics to collect and process statistical data about the number of people using the Site and to better understand how they find and use the Site. The data collected includes data related to your device/browser, your IP address, and on-site activities to measure and report statistics about user interactions. The information stored is reduced to a random identifier. Any data collected is used in accordance with this Policy and Google’s privacy policy. You may learn more about Google Analytics by visiting https://www.google.com/policies/privacy/partners/ and https://support.google.com/analytics/answer/6004245. You can learn more about Google’s restrictions on data use by visiting the Google Privacy Policy at: https://www.google.com/policies/privacy. To opt-out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout and install the opt-out browser add-on feature. For more details, visit the “Google Analytics opt-out browser add-on” page located at https://support.google.com/analytics/answer/181881?hl=en. Google Analytics relies on the following cookies:

Cookie	Description	Type	Duration
_ga	Used to distinguish users	Analytics	2 years
_gat_UA-*	Used to throttle request rate	Analytics	1 minute
_gid	Used to distinguish users	Analytics	1 day

Google Tag Manager. We use Google Tag Manager, which allows marketed website tags to be managed using an interface. The tool itself (which implements the tags) does not use cookies and does not register identifiable data. The tool causes other tags to be activated which may, for their part, register personal data under certain circumstances. Google Tag Manager does not access this information. Google Tag Manager is subject to the Google Privacy Policy located at https://www.google.com/intl/en/policies/privacy.

Shopify also uses certain cookies to provide the online store:

Name	Function
_ab	Used in connection with access to admin.
_secure_session_id	Used in connection with navigation through a storefront.
cart	Used in connection with shopping cart.
cart_sig	Used in connection with checkout.
cart_ts	Used in connection with checkout.
checkout_token	Used in connection with checkout.
secret	Used in connection with checkout.
secure_customer_sig	Used in connection with customer login.
storefront_digest	Used in connection with customer login.
_shopify_u	Used to facilitate updating customer account information.

Other Third-Party Technologies

Some third parties may use automated data collection technologies to collect information about you when you browse the Internet. We do not control these third parties’ technologies or how they may be used. If you have any questions about targeted content, you should contact the responsible party directly or consult their privacy policies.

Choices About Cookies

Most web browsers are set by default to accept cookies. If you do not wish to receive cookies, you may set your browser to refuse all or some types of cookies or to alert you when cookies are being sent by website technologies. These settings may affect your enjoyment of the full functionality of the Site and Widget. In addition, adjusting the cookie settings may not fully delete all of the cookies that have already been created. To delete them, visit your web browser settings after you have changed your cookie settings. Additional information is provided below about how to disable cookies or manage the cookie settings for some of the leading web browsers:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer: http://windows.microsoft.com/en-GB/windows-vista/Block-or-allow-cookies

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac and https://support.apple.com/en-us/HT201265

To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website at: https://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html. For more information about how to modify your browser settings to block or filter cookies, visit http://www.aboutcookies.org/. You may learn more about internet advertising practices and related consumer resources at http://www.aboutads.info/consumers/, http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work, or http://www.networkadvertising.org/choices.

HOW DO WE USE AND SHARE YOUR INFORMATION?

How do we use the information described in this Policy? To the extent permitted by applicable law, we may use the information described above in order to:

Operate and improve our business and the Site;
Provide you with services, products, content, customer service, and functionality;
Honor our terms of service and contracts;
Manage our relationship with you;
Process and complete payments and other transactions, including refunds or returns;
Enable you to track the status of your order;
Register you for our email and text message distribution lists and send you periodic messages;
Engage with you on social media;
Enable you to share reviews, comments, questions, and answers;
Improve our products and services and develop new products and services;
Maintain our databases and back-ups, including records of our communications with you;
Ensure the privacy and security of our Site and services;
Detect fraud and prevent loss;
Support and improve the Site, including evaluations of functionality and features;
Improve our customer service;
Communicate with you and respond to your feedback, requests, questions, or inquiries;
Promote our products and services;
Contact you about other products and services;
Improve our marketing efforts, including by providing more tailored advertising;
Administer a contest, promotion, or survey;
Assess the success of marketing and advertising campaigns;
Analyze use of the Site and our services and prepare aggregate traffic information;
Recognize your device and remember your preferences and interactions;
Provide you with a more personal and interactive experience on the Site;
Determine and track user interests, trends, needs, and preferences;
Facilitate corporate mergers, acquisitions, reorganizations, dissolutions, or other transfers;
Obtain and maintain insurance coverage, manage risks, and obtain professional advice;
Accomplish any other purpose related to and/or ancillary to any of the purposes and uses described in this Policy for which your information was provided to us;
Accomplish another purpose described to you when you provide the information, for which you have consented, or for which we have a legal basis under law;
Comply with federal, state, or local laws;
Comply with a civil, governmental, or regulatory inquiry, order, subpoena, summons, or process;
Cooperate with law enforcement agencies;
Exercise or defend legal rights or claims; and
Create, use, retain, or disclose de-identified or aggregated data.

How do we disclose or share the information described in this Policy? Where permitted by applicable law, we may share the information described above in the following contexts:

Category	Description
Affiliates	We may share your information with our subsidiaries and affiliates and with their respective officers, directors, employees, and agents.
Acquisitions and Similar Transactions	We may disclose your information in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets. If our business is acquired by or merged with another company, your information may be transferred to the new owners.
Disclosures with Your Consent	We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this Policy. We will only disclose your information in this context with your consent.
Legal Obligations and Rights (Subpoenas, Court Orders, and Warrants)	We may disclose information in response to subpoenas, warrants, court orders, or other legal process, or to comply with relevant laws. We may also share information in order to establish or exercise our legal rights or claims; to defend against a legal claim; and to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our contracts or our terms of service.
Third Parties	We may provide information about you to third parties that may offer products and services specifically requested by you.
Service Providers	We share information with our service providers that need access to information to provide operational or other support services on our behalf. Among other things, service providers help us to administer the Site; support our operations; provide technical support; send communications to you; and assist with other legitimate purposes permitted by law. For example: We use Shopify to power our online store, and they are our ecommerce vendor. In order to provide the Site and our ecommerce platform, Shopify collects your name, email address, shipping and billing address, payment information, phone number, IP address, information about orders that are initiated, information about the Shopify-supported merchant stores that are visited by you, and information about the device and browser that you use. Shopify uses this information to provide us with the services, including supporting and processing orders, risk and fraud screening, authentication, and payments. Shopify also uses this information to improve its services. Because we use Shopify Pay, Shopify also stores and uses this information to pre-fill customer checkout information. Shopify also uses this information to help customize and improve the experience when you visit our store by presenting the goods and services that are more likely to be of interest to you. Shopify also uses personal information to conduct automated decision-making. For example, Shopify uses certain personal information (for example, IP addresses or payment information) to automatically block certain potentially fraudulent transactions for a short period of time. You can read more about how Shopify uses and shares personal information here: https://www.shopify.com/legal/privacy.
Professional Advisors	We may share your information with our and our affiliates’ insurers and professional advisors, including attorneys and accountants, that need access to your information to provide operational or other services on our behalf.
Deidentified or Aggregated Data	We may disclose aggregated information or de-identified information that does not identify any specific individual, such as groupings of demographic data or customer preferences.

HOW LONG DO WE STORE AND USE YOUR INFORMATION?

We retain and use your information for as long as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to resolve disputes, to protect our assets, to operate our business, and to enforce our agreements.

We may delete your information if we believe it is incomplete, inaccurate, or that our continued storage of it is contrary to our objectives or legal obligations. When we delete data, it will be removed from our active servers and databases, but it may remain in our archives when it is not practical or possible to delete it.

To the extent permitted by law, we may retain and use anonymous, de-identified, or aggregated information for performance reporting, benchmarking, and analytic purposes and for operational and product improvement.

HOW DO WE PROTECT YOUR INFORMATION?

We have put security measures in place to protect the personal information that you share with us from being accidentally lost, used, altered, disclosed, or accessed in an unauthorized manner. From time to time, we review our security procedures to consider appropriate new technologies and methods.

Shopify provides the online e-commerce platform for the Site, and your data is processed by Shopify. They store your data on a secure server behind a firewall. You may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy). If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption.

While our security measures seek to protect the personal information in our possession, no security system is perfect, and no data transmission is 100% secure. As a result, while we strive to protect your information, we cannot guarantee or warrant the security of any information transmitted to or from the Site. Your use of the Site is at your own risk. We cannot guarantee that your data will remain secure in all circumstances.

The safety and security of your personal information also depends on you. Where you use a password for access to restricted parts of the Site, you are responsible for keeping the password confidential. Do not share your password with anyone.

If a data breach compromises your personal information, we will notify you and any applicable regulator when we are required to do so by applicable law.

YOUR RIGHTS AND CHOICES REGARDING PERSONAL INFORMATION

Please use the “Contact Us” details provided at the end of this Policy to exercise your rights and choices under this Policy. We honor such requests when we are required to do so under applicable law.

Email Opt-Out. We may send you emails about our store, new products, and other updates. If you no longer wish to receive communications from us via email, you may opt-out by clicking the “unsubscribe” link at the bottom of our emails, if applicable, or by contacting us at privacy@theheadrestsafe.com and providing your name and email address so that we may identify you in the opt-out process. Once we receive your instruction, we will promptly take corrective action.

Text Message Opt-Out. If you opt-in, we may send you emails about our store, new products, and other updates. By subscribing to text notifications, you agree to receive recurring automated marketing messages at the phone number provided. Consent is not a condition of purchase. If you no longer wish to receive text messages from us, you may opt out at any time by replying “STOP” and you may request assisting by texting “HELP.” Standard messaging and data rates apply.

Accuracy and Updating Your Information. Our goal is to keep your personal information accurate, current, and complete. If any of the personal information you have provided to us changes, please update it in your user/account profile, or let us know via the “Contact Us” details at the end of this Policy. We are not responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

Complaints. If you believe your rights relating to your personal information have been violated, please contact us via the “Contact Us” details provided at the end of this Policy.

California Shine the Light. Under California Civil Code Section 1798.83, California residents who provide personal information in obtaining products or services for personal, family, or household use may be entitled to request and obtain from us once a calendar year information about the information we shared, if any, with other businesses for direct marketing uses. At present, we do not share your personal information with third parties for those third parties’ direct marketing purposes. Please be aware that not all information sharing is covered by the “Shine the Light” requirements and only information on covered sharing, if any, will be included in our response. As part of the California Online Privacy Protection Act, all users of our Site may make any changes to their information at any time by contacting us at privacy@theheadrestsafe.com.

Nevada Residents. Nevada residents may submit a verified request to us at privacy@theheadrestsafe.com to request that we not make any sale (as defined under Nevada law) of any covered information (as defined under Nevada law) that we have collected or will collect about you. Please provide your name and contact information in your request, and we will respond to your request in accordance with Nevada law.

THIRD-PARTY SITES AND SERVICES

This Policy only applies to the Site, and it does not apply to any third-party websites or applications.

The Site may contain links to, and media or other content from, third parties. These links are to external resources and third parties that have their own privacy policies. Because of the dynamic media capabilities of the Site, it may not be clear which links are to external, third-party resources. If you click on a third-party link, you will be redirected away from the Site. You can check the URL to confirm whether you have left the Site.

We cannot and do not (1) guarantee the adequacy of the privacy or security practices employed by or the content and media provided by any third parties or their websites, (2) control third parties’ independent collection or use or your information, or (3) endorse any third-party information, products, services or websites that may be reached through embedded links on the Site.

Any information provided by you or automatically collected from you by a third party will be governed by that party’s privacy policy and terms of use. You should review the privacy policy of the party whose website you are visiting.

CHILDREN’S ONLINE PRIVACY PROTECTION ACT

Our and services are not directed to children under the age of 13, nor is information knowingly collected from children under the age of 13. No one under the age of 13 may access, browse, or use the Site or provide any information to us. If we learn that we have collected or received personal information from a child under the age of 13 without a parent’s or legal guardian’s consent, we will take steps to stop collecting that information and delete it. If you believe we have any received information from a child under the age of 13, please contact us using the “Contact Us” details provided below.

For more information about the Children’s Online Privacy Protection Act, please visit the Federal Trade Commission’s website at: https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/childrens-online-privacy-protection-rule.

UPDATES AND CHANGES TO THIS POLICY

We may add to, change, update, or modify this Policy from time to time. We will post all changes to this Policy on this page, and the updated policy will be effective immediately upon posting. If we make material changes, we will also notify you through a notice on the homepage of the Site for a reasonable period of time. We may also, in our discretion, notify you of changes to this Policy via email.

You are expected to, and you acknowledge and agree that it is your responsibility to, carefully review this Policy prior to using the Site, and from time to time, so that you are aware of its current terms. Your continued use of the Site after the “Last Updated” date will constitute your acceptance of and agreement to any changes and to our collection and sharing of your information according to the then-current Policy. If you do not agree with this Policy and our practices, you should not use the Site.

CONTACT US

For more information, or if you have any questions or concerns regarding this Policy, you may contact us using the information below, and we will do our best to assist you.

Mail: 1909 27th Avenue South, Homewood, AL 35209

Email: privacy@theheadrestsafe.com