Privacy policy

Ploom, Inc. Privacy Policy

Effective Date: September 1, 2024

At Ploom, Inc., your privacy is important to us. This Privacy Policy explains how we collect, use, and disclose your personal information when you interact with our products, services, and website (the “Services”). By using or accessing our Services, you acknowledge that you accept the practices and policies outlined below and consent to the collection, use, and sharing of your information as described.

Your use of Ploom, Inc. Services is also governed by our Terms of Use, which incorporates this Privacy Policy. Any undefined terms used in this policy have the meanings provided in our Terms of Use.


Privacy Policy Table of Contents

  1. What This Privacy Policy Covers

  2. Personal Data

  3. Categories of Personal Data We Collect

  4. Categories of Sources of Personal Data

  5. How We Use Your Personal Data

  6. How We Disclose Your Personal Data

  7. Tracking Tools, Advertising, and Opt-Out

  8. Data Security

  9. Data Retention

  10. Personal Data of Children

  11. California Resident Rights

  12. Virginia Resident Rights

  13. Other State Law Privacy Rights

  14. European Union and United Kingdom Data Subject Rights

  15. Changes to This Privacy Policy

  16. Contact Information


1. What This Privacy Policy Covers

This Privacy Policy applies to Ploom, Inc.'s collection and handling of Personal Data when you access or use our Services. "Personal Data" refers to any information that can identify you or relates to a specific individual, such as name, contact details, and other identifiers. This policy does not cover the practices of third-party companies or services that we do not own or control.


2. Personal Data

Personal Data refers to any information that directly or indirectly identifies or relates to an individual. This includes information commonly referred to as "personally identifiable information," "personal information," or "sensitive personal information" under applicable privacy laws.

We may collect Personal Data as part of your interaction with our Services, including when you create an account, make purchases, use our website, or engage with our customer support.


3. Categories of Personal Data We Collect

We collect the following categories of Personal Data:

  • Profile and Contact Information: Name, email address, phone number, shipping address, and account credentials.

  • Payment and Transaction Information: Payment card details, billing address, and order history.

  • Usage and Device Information: Information about your device, IP address, browser type, usage patterns, and interactions with our Services.

  • Social Media Information: If you sign in via a social media account or provide credentials, we may collect certain data from your social media profile.

  • Health and Wellness Data: If applicable, we may collect data related to your health interests (e.g., dietary or wellness preferences) for the purpose of personalizing your experience.

Note: Consumer Health Data subject to Washington’s My Health My Data law is processed in accordance with our Washington Consumer Health Data Privacy Policy.


4. Categories of Sources of Personal Data

We collect Personal Data from the following sources:

  • Directly from You: When you create an account, place an order, contact us, or use our Services.

  • Automatically: Through technologies like cookies, tracking pixels, and other automated means (see section on Tracking Tools, Advertising, and Opt-Out below).

  • Third Parties: From service providers, marketing partners, social networks, or analytics tools.


5. How We Use Your Personal Data

We use your Personal Data for the following purposes:

  • Providing Services: To create and manage accounts, process orders, provide customer support, and improve our Services.

  • Customization: To personalize your experience and tailor content based on your preferences.

  • Marketing: To send you promotional communications, offers, and updates about our products and Services (you can opt-out at any time).

  • Legal Compliance: To meet legal requirements, prevent fraud, protect our rights, and enforce agreements.

  • Operational Improvements: To analyze and enhance the performance of our Services, including through research and product development.


6. How We Disclose Your Personal Data

We may disclose your Personal Data to the following categories of parties:

  • Service Providers: These include vendors that assist us in providing Services, such as payment processors (e.g., Shopify), hosting services, customer support, and marketing partners.

  • Advertising Partners: These may include third-party ad networks and data brokers that help us deliver targeted advertisements and marketing messages.

  • Business Partners: We may share data with partners for joint promotions, shipping, or other business purposes.

  • Legal Authorities: We may disclose Personal Data in response to legal obligations or to protect our rights, property, or safety.

  • Business Transfers: In the event of a merger, acquisition, or other corporate transaction, your Personal Data may be transferred to the acquiring party.


7. Tracking Tools, Advertising, and Opt-Out

We use cookies and similar tracking technologies to collect data about your use of our Services and to personalize content and ads. These tools help us understand how visitors engage with our website and services.

You can manage your cookie preferences through your browser settings or by visiting our Cookie Policy.

Types of cookies we use:

  • Essential Cookies: Necessary for essential site functionality, such as logging in.

  • Functional Cookies: Help us remember your settings and preferences.

  • Analytical Cookies: Help us understand how users interact with our site and measure campaign effectiveness.

  • Advertising Cookies: Track your behavior across websites to serve relevant ads (you can opt-out via your browser settings or third-party opt-out pages).

For more information about interest-based ads and how to opt out, please refer to our Cookie Policy.


8. Data Security

We implement reasonable physical, technical, and administrative security measures to protect your Personal Data. However, no method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. You are also responsible for maintaining the security of your account by using strong passwords and limiting access to your device.


9. Data Retention

We retain Personal Data for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. This includes retaining data for legal, fraud prevention, or contractual obligations. Once data is no longer needed, we will either delete it or anonymize it.

For example:

  • Account Information: Retained as long as you maintain an account.

  • Payment Information: Retained only for as long as necessary to complete the transaction.

  • Device Data: Retained as long as needed to ensure service functionality.


10. Personal Data of Children

Our Services are not intended for children under the age of 16. We do not knowingly collect or solicit Personal Data from children. If we discover that we have collected Personal Data from a child under 16, we will delete that data promptly. If you believe that a child has provided us with Personal Data, please contact us at supp@takeploom.com.


11. California Resident Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Access: You may request information about the categories and specific pieces of Personal Data we have collected about you.

  • Deletion: You may request that we delete your Personal Data, subject to certain exceptions.

  • Correction: You may request that we correct inaccurate Personal Data.

  • Opt-Out: You may opt-out of the sale of your Personal Data. For more information, see the section on Data Sharing.

For more details or to exercise your rights, please contact us at supp@takeploom.com.


12. Virginia Resident Rights

Virginia residents have the right to access, delete, and correct their Personal Data, as well as to opt-out of the sale of their Personal Data under the Virginia Consumer Data Protection Act (VCDPA). Please contact us for further information or to exercise your rights.


13. Other State Law Privacy Rights

Depending on your state, you may have additional rights under applicable privacy laws. Please contact us for more information.


14. European Union and United Kingdom Data Subject Rights

If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, or object to the processing of your Personal Data. Please contact us for more information or to exercise your rights.


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we update the policy, we will post the updated version on this page with the new effective date. We encourage you to review this Privacy Policy periodically.

Sale of Personal Data and Opt-Out Rights

Sale of Personal Data:
Ploom, Inc. may sell your Personal Data to the following categories of third parties:

  • Advertising Partners

  • Analytics Partners

Over the past 12 months, we have sold the following categories of Personal Data:

  • Device/IP Data

  • Web Analytics Data

You have the right to opt-out of the sale of your Personal Data. To exercise this right, you may:

  1. Click the "Do Not Sell or Share My Information" link available on our website.

  2. Email us at supp@takeploom.com.

Once you have submitted an opt-out request, we will not ask you to reauthorize the sale of your Personal Data for at least 12 months.

Minors:
To our knowledge, Ploom, Inc. does not sell or share the Personal Data of minors under 16 years of age.


Non-Discrimination for Exercising Your Rights Under the CCPA

Ploom, Inc. will not discriminate against you for exercising your rights under the California Consumer Privacy Act (CCPA). We will not deny you goods or services, charge you different prices, or offer a lower quality of service if you choose to exercise your rights. However, we may offer different tiers of our Services, with varying prices or levels of quality, based on the value of the Personal Data we receive from you.


Financial Incentive Program

From time to time, Ploom, Inc. may offer financial incentives, such as discounts, in exchange for the collection, sale, or deletion of your Personal Data. These financial incentives include:

  • Price discounts

  • Shipping cost advantages

  • Access to special promotions, offers, and events

You may revoke your participation in our financial incentive program at any time by emailing us at supp@takeploom.com.


Virginia Resident Rights

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA). These rights include:

  • Access: The right to request confirmation of whether or not we are processing your Personal Data and to access that data.

  • Correction: The right to correct inaccuracies in your Personal Data.

  • Portability: The right to request a copy of your Personal Data in a machine-readable format.

  • Deletion: The right to delete your Personal Data.

  • Opt-Out of Certain Processing: The right to opt-out of the processing of your Personal Data for targeted advertising and profiling.

  • Appeals: If we deny your request, you may appeal the decision.

For more information or to exercise your rights, please contact us at supp@takeploom.com.


Exercising Your Rights Under CCPA and VCDPA

To exercise any of the rights described above, you (or an Authorized Agent) must submit a request that:

  1. Provides sufficient information to verify your identity.

  2. Describes the nature of your request.

You can submit a request via:

  • Email: supp@takeploom.com


We will respond to your request within 45 days of receiving it, and we will not charge a fee unless your request is excessive, repetitive, or manifestly unfounded.

You may also authorize an agent to submit a request on your behalf. To do so, please provide your agent with written permission and ensure they submit it when making the request.


Other State Law Privacy Rights

California:
Under California Civil Code Sections 1798.83-1798.84, California residents may opt-out of the disclosure of their Personal Data to third parties for direct marketing purposes. To make this request, please contact us at supp@takeploom.com.

Nevada:
Nevada residents have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell it. To exercise this right, please contact us with the subject line "Nevada Do Not Sell Request" at supp@takeploom.com.

EU and UK:
Residents of the European Union (EU) or United Kingdom (UK) have additional rights under the General Data Protection Regulation (GDPR). If you reside in the EU or UK, you have rights to access, rectify, erase, and restrict the processing of your Personal Data. If you need assistance, please contact our Data Protection Representatives:

  • EU: DP-Dock GmbH, Attn.: Ploom, Inc., Ballindamm 39, 20095 Hamburg, Germany

  • UK: DP Data Protection Services UK Ltd., Attn.: Ploom, Inc., 16 Great Queen Street, Covent Garden, London, WC2B 5AH, United Kingdom

  • Email: supp@takeploom.com

For more information about these rights or to submit a request, please contact us at supp@takeploom.com.


Transfers of Personal Data

Our Services are hosted in the United States, and if you are located outside the U.S., your Personal Data will be transferred to and processed in the U.S. By using our Services, you consent to the transfer of your Personal Data to the U.S. where it will be stored and processed in accordance with this Privacy Policy.


Changes to This Privacy Policy

We may update this Privacy Policy from time to time, and we will notify you of any significant changes by posting an updated version on our website or through other communication channels. Please review this policy regularly to stay informed about how we collect, use, and protect your Personal Data.

Contact Information

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your rights, please contact us at:

  • Email: supp@takeploom.com

  • Address: 181 N Mecca Street Cortland, OH 44410