FIREPLACEMALL PRIVACY NOTICE
Last Updated: November 2023
Welcome to our privacy notice.
Introduction
This privacy notice is intended for
1. visitors to FireplaceMall’s website;
2. members of the general public who are interested in contacting FireplaceMall; and
3. any individual who has received this notice.
FireplaceMall understands that privacy is important to you. We are committed to treating your personal data with care and integrity.
Our privacy notice tells you what personal data we collect and how we collect it, including any data you may provide through this website when you visit the site or inquire about a product or service or take part in an event. It explains what we use your personal data for and how we protect your personal data and keep it safe. This privacy notice explains our general practices. However, where local laws or regulations require that we process information differently, or refrain from such processing, we will always comply with the applicable local law. This website is not intended for children and we do not knowingly collect data relating to children.
Contact details
If you have any questions about this privacy notice or our privacy practices, please contact our DPO in the following ways:
Full name of legal entity: PennVentures, Inc.
Email address: privacy@fireplacemall.com
Post: PennVentures, Inc.
FireplaceMall.com Accounts
9520 Rainier Ave S, Suite 501
Seattle, WA 98118
You have the right to make a complaint at any time to the data protection regulator in the country where you usually live or work, or where the alleged data protection infringement has taken place. We would, however, appreciate the chance to deal with your concerns
before you approach the applicable data protection regulator so please contact us in the first instance.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Personal data means any information or piece of information which could identify you either directly (e.g. your name) or indirectly (e.g. a unique ID number).
In this privacy notice, we explain:
Who is the controller of your personal data?
Contact information and your privacy point of contact
What personal data do we collect about you?
How do we collect your personal data?
How do we use your personal data?
Why are we allowed to collect and use your personal data?
How do we protect your personal data?
What are your rights regarding your personal data?
How long do we keep your personal data?
With whom do we share your personal data?
In what instances do we transfer your personal data outside of your home country?
Additional information if you are in the European Economic Area (EEA)
Information about children
Cookies, Website and Application Data; Use for Analytics and Marketing
Third Party Marketing
Opting out
Change of Purpose
How we update this Privacy Notice?
Our responsibility regarding websites that we do not own or control
Who is the controller of your personal data?
PennVentures, Inc. (“FireplaceMall”) has a relationship with you, are the controllers of your personal data.
Contact information and your privacy point of contact
If you want to exercise your rights, have any questions about this privacy notice, need more information or would like to raise a concern, contact privacy@fireplacemall.com.
What personal data do we collect about you?
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). The personal data we collect, and process, may include:
1. Identity data – your name, surname (including prefix or title), email address.
2. Contact data – information that enables us to contact you, e.g. your email, mailing address, etc.;
3. Technical data and network activity information – information about your device and your usage of our websites, apps and systems, including your IP address, device ID, hardware model and version, mobile network information, operating system, platform and other online identifiers, type of browser, browser plug-in types and versions, browsing history, search history, access time, pages viewed, URLs clicked on, forms submitted, time zone setting/physical location and other technology on the devices that you use to access our website;
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
You can choose not to give us personal data when we ask you for it. If you decide not to give us your personal data, it may restrict our relationship with you. For example, we may not be able to provide you with the services that you have requested.
How do we collect your personal data?
Directly from you when you:
1. Use our website;
2. Contact FireplaceMall;
From other sources:
1. We will receive personal data about you from various third parties, for example, analytics providers such as Google.
How do we use your personal data?
When the law allows us to, we use your personal data for the purposes we have described below in this privacy notice, or for purposes which are reasonably compatible to the ones described:
1. Purposes
a. To manage our relationship with you (whether you are a client or an employee or staff member of FireplaceMall) via performance of a contract (see below);
b. To perform the contract (for services to you if are a client, or the employment contract if you are an employee of FireplaceMall) that we are about to enter into or have entered into with you, or where it is necessary for our legitimate interests (see below), or those of a third party and your interests and fundamental rights do not override those interests;
c. Where we need to comply with a legal obligation (see below); or
d. To manage and improve FireplaceMall’s processes and our business operations.
2. Practically – this means that we will use your personal data to:
a. Provide our services to you;
b. Provide online blog to you;
c. To respond to your queries and provide you with information when you request it or when we believe our services may be of interest to you.;
d. Personalize your experience when interacting with FireplaceMall;
e. Respond to you if you reach out for support, to us; and
f. Perform analytics, market research and segmentation to understand your preferences, improve our products and services and our communications to
you.
g. Manage our network and information systems security;
h. Perform data analyses, auditing and research to help us deliver and improve our FireplaceMall digital platforms, content and services;
i. Monitor and analyze trends, usage and activities in connection with our services to understand which parts of our services are of the most interest and to improve them accordingly; and Generally, we do not rely on consent as a legal basis for processing your personal data. You have the right to withdraw consent to these activities at any time by contacting us at privacy@fireplacemall.com. “Performance of a contract” means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
“Comply with a legal obligation” means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.
To achieve other purposes.
We will use your personal data:
1. To follow applicable laws and regulations;
2. To respond to requests from competent public authorities;
3. To tell you about changes to our terms, conditions and policies;
4. To exercise or defend FireplaceMall against potential, threatened or actual litigation;
5. To investigate and take action against illegal or harmful behavior of users.
6. To protect FireplaceMall, your vital interests, or those of another person;
7. To gain insights and feedback on our services in order to correct or improve them, by analyzing information from external sources such as Google, Bing, Turn, Tribalfusion;
8. To deliver services to you via your smart device and our mobile apps; and
9. When we sell, assign or transfer all or part of our business.
We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.
Why are we allowed to collect and use your personal data?
We can collect and use your personal data when one of the following applies:
1. To take steps before entering into a contract or perform a contract;
2. To follow the law, for example:
a. Record-keeping regulatory monitoring and reporting obligations;
b. Complying with anti-corruption and transparency obligations;
c. You have specifically given us your permission when such permission is obligatory (the law calls it “consent”). You can withdraw your consent at any time. We will normally need your consent in the following circumstances:
i. Placing cookies on your device to find out how you use our websites so we can personalize what you see by tailoring content and notifications to the things you are interested in;
ii. In any other situation where personal data processing relies upon your consent.
3. We need to use your personal data for legitimate business purposes, for example, to enable us to run our business successfully. These include:
a. Conducting audits and internal investigations and complying with internal policies on anti-bribery and conflict of interest;
b. Managing our IT and communications systems and networks;
c. Planning and improving our business activities;
d. Protecting our rights, privacy, safety or property, and/or that of our affiliates, you or others;
e. To provide the functionality of the services we provide you;
f. Analyzing or predicting your preferences to identify aggregated trends to
develop, improve or modify our services and business activities;
g. Responding to and handling your queries or requests;
h. For the establishment, exercise or defense of legal claims or proceedings;
i. To protect your vital interests or those of others; and
j. Because it is necessary for reasons of substantial public interest, on the basis of
applicable laws.
How do we protect your personal data?
We want to make sure your personal data is not shared with or used by those not allowed to see it. We use a variety of security measures and technologies to help protect your personal data.
We carefully choose service providers to work with, and check they have security measures and technologies in place to protect your personal data. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
However, there are no guarantees that a data transmission or storage system is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us.
What are your rights regarding your personal data?
You have rights we need to make you aware of. The rights available to you depend on our reason for processing your personal data and the local law in your jurisdiction, and there are exceptions to some rights. Depending on this you may have the right to:
1. Ask FireplaceMall about the processing of your personal data including to be provided with copies of your personal data (through a “data subject access request”);
2. Ask us to correct information you think is inaccurate or incomplete, although we may need to verify the accuracy of the new data you provide to us;
3. Ask us to delete your personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request;
4. Ask us to restrict the processing of your information. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
a. If you want us to establish the data’s accuracy;
b. Where our use of the data is unlawful but you do not want us to erase it;
c. Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
d. You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
5. Object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;
6. Ask that we transfer information you have given us from one organization to another, or to give it to you. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you; and
7. Complain to your local data protection authority.
You can find out how to get in touch with us to ask us to do any of the above by contacting us. For your protection, and to protect the privacy of others, we may need to verify your identity before completing what you have asked us to do and to ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also
contact you to ask you for further information in relation to your request to speed up our response.
If you are accessing our website from an EEA country or the UK, you will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Where we have relied upon your permission to use your personal data, and you later withdraw that permission, we may not be able to complete some of the activities described in ‘How do we use your personal data’.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data retention: How long do we keep your personal data?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. Insofar as the processing of personal data is based on your consent, we will delete this data if you withdraw your consent.
In some jurisdictions, we are legally required to keep your personal data for certain periods How long depends on the specific legal requirements of the jurisdiction you are in when you share your information with us.
We will always keep your personal data for the period required by law and where we need to do so in connection with legal action or an investigation involving Fireplacemall. Otherwise, we will keep your personal data for as long as we have a relationship with you, in order to respond or process a question or request from you.
We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
Insofar as the processing of personal data is based on your consent, we will delete this data if you withdraw your consent, subject to the technical ability to do so and so far as such a deletion would not require disproportionate effort on our part. This deletion request will need to be handled by the FireplaceMall data protection officer, to assess what personal data (if any) can be deleted, and if so, for what specific use. Please note that personal data that forms a part of medical records cannot be deleted as a matter of public policy.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
With whom do we share your personal data?
We share your personal data on a need to know basis, and to the extent necessary to follow laws and regulations, and in the context of managing our relationship with you.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We will also share your personal data with other entities, for example:
1. Technology suppliers and system administration services providers who work with us to develop and improve our websites, digital forums and apps;
2. Media services providers who work with us;
3. Any entity who may acquire us or part of our business or brands. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice;
4. Local or foreign regulators, courts, governments, tax authorities and law enforcement authorities who require reporting of processing activities in certain circumstances; and
5. Professional advisors, such as insurers, bankers, auditors, accountants and lawyers.
In what instances do we transfer your personal data outside of your home country?
We implement appropriate measures to protect your personal data when we transfer your personal data outside of your home country such as data transfer agreements that incorporate standard data protection clauses. The data privacy laws in the countries we transfer it to may not be the same as the laws in your home country. Law enforcement agencies, regulatory agencies, security authorities or courts in the countries we transfer your personal data to may have the right to see your personal data. If applicable law does not allow transfer of specific personal data outside a country, we will comply with that applicable law.
How Do We Transfer Data We Collect Internationally?
This Privacy Policy will apply even if we transfer Personal Data to other countries. We have taken appropriate safeguards to require that your Personal Data will remain protected wherever it is transferred. When we share Personal Data of individuals in the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”) within FireplaceMall and its clients, we make use of the Standard Contractual Clauses (which have been approved by the European Commission) and the UK Addendum (as defined within our Customer Data Processing Agreement) as well as additional safeguards where appropriate (such as commercial industry standard secure encryption methods to protect customer data at rest and in transit, TLS for FireplaceMall’s services, web application firewall protection, and other appropriate contractual and organizational measures).
International transfers to third parties
When we share Personal Data of individuals in the EEA, Switzerland or UK with third parties, we make use of a variety of legal mechanisms to safeguard the transfer including the European Commission-approved standard contractual clauses, as well as additional safeguards where appropriate. For transfers to or from the United Kingdom, we make use of the UK Addendum. For transfers to or from Canada, we make use of the standard contractual clauses. With respect to personal data received from or transferred to Canada, FireplaceMall is subject to the regulatory enforcement powers of the Office of the Privacy Commissioner of Canada. Please contact us if you need more information about the legal mechanisms we rely on to transfer personal data outside the EEA, Switzerland, Canada, and UK.
Additional information if you are based in the European Economic Area (EEA)
The European Commission recognizes that some countries outside the EEA have similar data protection standards. If we transfer your personal data to a country outside the EEA that clauses adopted by the European Commission, to ensure the respective recipient protects your Personal Data adequately in accordance with this privacy notice. These enable us to make international transfers of personal data and meet the data protection laws of the European Union and the General Data Protection Regulation (GDPR).
Information about Children
Whilst our services are not ordinarily directed to children and we don’t normally process children’s data. Please see ‘What personal data we collect about you’ for more information.
Cookies, Website and Application Data; Use for Analytics and Marketing
Our websites may use cookies and similar technologies. You can choose to accept or decline cookies. If you choose to decline cookies, not all elements of our websites, apps and services may function as intended, so your experience may be affected.
To the extent that your local laws consider the information collected by cookies and other technologies as personal data, we will treat that information to the standards set out in this privacy notice.
We strive to provide you with choices regarding certain personal data uses.
We may collect information about your computer browser type and operating system, websites you visited before and after visiting our websites, standard server log information, Internet Protocol (IP) addresses, location data, mobile phone service provider, and mobile phone operating system. We use this information to understand how our visitors use our websites and mobile applications so that we can improve them, the services we offer, and our advertising.
We also use remarketing services offered by our advertising partners to personalize advertisements for visitors to sites of their advertising networks (i.e. websites other than FireplaceMall’s). On these pages, you may be shown advertisements that refer to your interactions with FireplaceMall previously. To turn off personalization for advertisements served by Google, please refer to Google . To turn off personalization for advertisements served by Facebook please refer to Facebook. Many companies that display interest-based advertising are members of the Network Advertising Initiative (“NAI”), the Digital Advertising Alliance (“DAA”) or the European Interactive Digital Advertising Alliance (“EDAA”). To opt-out of interest-based advertising by members of these initiatives, you can visit their websites at https://optout.networkadvertising.org, https://optout.aboutads.info and https://www.youronlinechoices.com.
We may use the data you share with us to make decisions about your interests and preferences so we can make the marketing materials we send you more relevant. We may also combine the information we hold about you with data about your interests or demographics that third parties have collected from you online and offline, to make your experience more personalized and further tailor our marketing materials. You have certain rights in relation to this – please see ‘What are your rights regarding your personal data?’ above for further information.
Third Party Marketing
FireplaceMall does not share your personal data with any third party for direct marketing purposes. In the event, we wish to do so, we will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
How do we update this Privacy Notice?
From time to time, we will update this Privacy Notice. Any changes become effective when
we post the revised Privacy Notice on the FireplaceMall website. This Privacy Notice was last
updated as of the “Last Updated” date shown above. If updating changes are significant, we
will provide a more prominent notice to let you know what the changes are.
Our responsibility regarding websites that we do not own or control. Our websites and applications may contain links to third party websites, we do not own or control. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Our Privacy Notice does not cover them. Please read the privacy notices on those websites and mobile applications if you would like to find out how they collect, use and
share your personal data.
Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your
personal data.
Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Right to withdraw consent.
If you wish to exercise any of the rights set out above, please contact us at privacy@fireplacemall.com .
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights
before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess
our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.
THIRD PARTIES
External Third Parties
Service providers who provide IT and system administration services.
Professional advisers
Regulators and other applicable authorities who require reporting of processing activities in certain circumstances.
YOUR LEGAL RIGHTS
You have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
If you want us to establish the data’s accuracy.
Where our use of the data is unlawful but you do not want us to erase it.
Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
California Privacy Rights
a. Applicability
This section applies only to California consumers. For purposes of this section “Personal Information” has the meaning given in the California Consumer Privacy Act (“CCPA”). It describes how we collect, use, and share California consumers’ Personal Information in our role as a business, and the rights applicable to such residents. The California Consumer Privacy Act (“CCPA”) requires businesses to disclose whether they sell Personal Information. Fireplacemall is a business, and does not sell Personal Information. We may share Personal Information with third parties if those third parties are authorized service providers or business partners who have agreed to our contractual limitations as to their retention, use, and disclosure of such Personal Information.
If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access.
b. How We Collect, Use, and Share your Personal Information
We have collected the following statutory categories of Personal Information in the past twelve (12) months:
Identifiers, such as name, e-mail address, mailing address, and phone number. We collect this information directly from you or from third party sources.
Internet or network information, such as browsing and search history. We collect this information directly from your device.
Geolocation data, such as IP address. We collect this information from your device.
Inferences.
Other Personal Information, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Subscription Service. The business and commercial purposes for which we collect this information are described in this Privacy Policy. The categories of third parties to whom we “disclose” this information for a business purpose are described in this Privacy Policy.
c. Your California Rights
You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.
The right of access means that you have the right to request that we disclose what Personal Information we have collected, used and disclosed about you in the past 12 months.
The right of deletion means that you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.
The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.
FireplaceMall does not sell Personal Information to third parties (pursuant to California Civil Code §§ 1798.100–1798.199, also known as the California Consumer Privacy Act of 2018).
d. How to Exercise your California Rights
You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent’s identity to protect your Personal Information.
Please use the contact details below if you would like to:
Access this policy in an alternative format;
Exercise your rights;
Learn more about your rights or our privacy practices; or
Designate an authorized agent to make a request on your behalf.
