Additional State-Specific Privacy Disclosures

Last Updated: July 15, 2024

This additional state-specific privacy disclosure page ("Disclosure") supplements the Concepts Privacy Notice and is effective as of July 15, 2024. The Concepts Privacy Notice describes the personal information that we collect, the sources from which we collect it, the purposes for which we use it, the limited circumstances under which we share personal information, and with whom we share it. These additional disclosures are required by certain state privacy laws and provide a Notice at Collection under the California Privacy Rights Act:  

Categories of personal information collected. The personal information that Concepts collects, or has collected from consumers in the twelve months prior to the effective date above, falls into the following categories established by the California Privacy Rights Act and other state privacy laws, depending on which Concepts service is used:

• identifiers such as your name, alias, address, phone numbers, or IP address, or your Concepts account log-in information;
• personal information, such as a credit card number or other payment information;
• commercial information, such as purchase activity;
• internet or other electronic network activity information, including browsing history, or information used to prevent and detect fraud or other unauthorized activity, including informing customers if such activity were to affect them;
• geolocation data, such as the location of your device or computer;
• visual information, such as images and videos if you upload them, for example in connection with reviews; and
• inference data, such as information about your purchase preferences.

Categories of personal information disclosed for a business purpose. The personal information that Concepts may have disclosed for a business purpose to the third parties identified in the “Disclosure,” “Shopify,” and “Third-Party Services” sections of the Concepts Privacy Notice in the twelve months prior to the effective date above falls into the following categories established by the California Privacy Rights Act and other state privacy laws, depending on which Concepts service is used:

• identifiers such as your name, address, phone numbers, or IP address, for example if we use a third-party carrier to deliver your order;
• personal information, such as a credit card number or other payment information, for example if we use a third-party payment processor;
• commercial information, such as the details of a product or service you purchased if a third-party service provider assists in providing that product or service to you;
• internet or other electronic network activity information, such as if we use a service provider to help us gather crash reports for analyzing the health of our devices and services, or information relating to our prevention and detection of fraud or other unauthorized activity, which may require disclosing certain information about potentially affected customers to law enforcement;
• audio or visual information, for example if a service provider reviews recordings of customer service phone calls for quality assurance purposes; and
• inference data, for example if we use a service provider to help us optimize the accuracy of your shipping address to make sure your order reaches you.

Your Data Rights. You may have certain data rights under state privacy laws, including to request information about the collection of your personal information by Concepts, to access your personal information in a portable format, and to correct or delete your personal information. If you wish to do any of these things, please email [email protected]. You may have the right to appeal the denial of any of these rights by emailing [email protected]. Depending on your data choices, certain services may be limited or unavailable.

To ensure the security of your Concepts account, we will generally ask you to verify your request using the contact information you have already provided. If you do not have an account, or if you are an authorized agent under applicable state law, please contact us as described above.

No Sale or Sharing of Personal Information. In the twelve months prior to the effective date of this Disclosure, Concepts has not sold or shared any personal information of consumers, as those terms are defined under the California Privacy Rights Act.

De-Identified Data Disclosure. Concepts may use de-identified data in some instances. Concepts either maintains such data without attempting to reidentify it or treats such data as personal data subject to applicable law. 

California Privacy Rights Act Retention Disclosure. To enable your continued use of Concepts services, we keep your personal information for as long as it is required in order to fulfill the relevant purposes described in the Concepts Privacy Notice, as permitted or as may be required by law, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevance of products and content we recommend.

California Privacy Rights Act Sensitive Personal Information Disclosure.  The categories of data that Concepts collects and discloses for a business purpose may include "sensitive personal information" as defined under the California Privacy Rights Act. Concepts does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

California Privacy Rights Act Non-discrimination Statement. Concepts will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.

Colorado Privacy Act and Oregon Consumer Privacy Act Profiling Disclosure. Concepts does not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act or the Oregon Consumer Privacy Act.

Oregon Consumer Privacy Act Controller Entity Disclosure.  The controller entity that is subject to the Concepts Privacy Notice and this Disclosure is Concepts International LLC.

For questions or concerns about this information or the Privacy Policy, please email [email protected].