Privacy Policy

ColorFast, Inc, an Ohio corporation, doing business as Nature’s Garden (the “Company,” “Nature’s Garden,” “we,” “our” or “us”) is committed to protecting the privacy of your personal information collected through www.naturesgardencandles.com (the “Website”).  This Privacy Policy is provided to inform you about what information is collected about you, how the Company uses and discloses such information and the security measures the Company employs to safeguard such information.  By using this Website, you consent to the terms of this Privacy Policy and the Website’s separate Sale Terms and Conditions and Terms of Use (the “Policies”).  If you do not agree with this Privacy Policy, or the other Policies, do not use or submit any information to this Website.

INFORMATION COLLECTED

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (”personal information”), including, the following:

Personal Identifiers.  A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number, or other similar identifiers.

Personal information. A name, signature, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, education, employment, employment history, bank account number, credit card number, debit card number, credit card tokens or any other financial information. Some personal information included in this category may overlap with other categories.

Protected classification characteristics. Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

Commercial information. Records of personal property, products or services purchased, obtained, or considered, login time, account creation information, ordering information, shopping cart information, items viewed and or other purchasing or consuming histories or tendencies.

Internet or other electronic network activity information. Browsing history, search history, Internet Protocol address, previous Internet Protocol addresses used, raw web logs for Internet Protocol addresses, browser user agent strings and other internet and browser information on a consumer's interaction with our Website, or an application or advertisement thereon, or associate therewith.

Geolocation data.  Physical location associated with IP address of the device utilized, and similar location information.

Personal information does not include: (a) publicly available information from government records, (b) de-identified or aggregated consumer information, or (c) other information excluded from the scope of certain privacy laws.

Sources of Information

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete on, or submissions through, our Website, account creation information submitted by you and other information provided to us by you through our Website, or via fax, telephone or email. 
• Indirectly from you. For example, from observing your actions on our Website and interactions thereon and Website usage details, which may be collected automatically.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

• To fulfill or meet the reason for which the information is provided. For example, if you share your name and contact information to ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
• To improve our Website and present its contents to you.
• For testing, research, analysis and product development.
• As necessary or appropriate to protect the rights, property or safety of us, you or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

• We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

  Sharing Personal Information

  We may disclose your personal information to a third party for a business purpose.  We disclose your personal information for a business purpose to the following categories of third parties: (a) our affiliates, (b) service providers, and (c) third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.  We may also disclose your personal information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

  We do not sell any personal information, but we reserve the right to transfer such information in connection with any merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets as noted above.

  Cookies

  A cookie is an element of data that is sent by a Website to be stored in your web browser so that the Website can recognize you the next time you visit the Website.  The Company reserves the right to use cookie technology on this Website in order to assist in customizing and personalizing your visit to this Website.  By using cookies, the Company will be able to identify your habits and be more responsive to your needs while on this Website.  Examples of how the Company may use cookies includes assisting its users with filling out forms or speeding the time to load graphic information or data.  You may set your web browser to notify you when you receive a cookie, which will allow you to accept or reject the cookie.  However, if you decide not to accept a cookie, you will limit the ability to personalize your visit to the Website, or you may be unable to utilize the Website at all.  Examples of cookies used (which can be changed at any time in the Company’s discretion), include, without limitation, the following:

• affiliate - tracking the affiliate ID; this affiliated ID is assigned when the visitor lands on the Website with that ID in the URL.
• last_login - remembering the last username/email used for logging-in.
• cart_marker - shopping cart identifier, used to associate the visitor on this browser with the items added to the shopping cart on the Website.
• mas_id - our own tracking cookie, it remembers internal user_id of the visitor when she introduced herself to the Website (register, login, checkout).
• welcome - remembering the first name of the user that introduced herself to the Website (users.first_name).
• ytivitca-tsal - "last-activity" cookie, tracks last cart/checkout operation.
• source_and_kw - tracking the "source" and "kw" parameters from visitor's landing page.
• eap_id - "email_acquisition_popup" flag.
• mc_cid, mc_eid - mailchimp IDs from http requests stored in cookies.
• sugs - segment user groups list, a cookie that remembers all the segment user groups for a visitor before she has introduced herself to the Website (login, register, checkout).

• Employment Information

  As indicated in the Website’s Terms of Use, the Company may make employment information or opportunities available on this Website.  If you submit your résumé or other personal information to this Website for any employment opportunity with the Company, the Company will not share such information with third parties, except as provided in this Privacy Policy.  The Company may circulate your personal employment information internally in order to consider your application and to contact you regarding the hiring decision.  The Company may also contact you regarding other employment opportunities.

• Security

  The Company maintains physical, electronic and procedural safeguards that comply with applicable law to guard your personal information collected by this Website.  The Company currently uses, among other things, the following safeguards with respect to personal information collected on the Website: (a) daily encrypted back-ups of user data, (b) encrypted back-ups are kept in a separate server that is protected by firewall to the public internet, (c) all back-ups have automatic rotation enabled and back-ups older than 60 days will generally be replaced automatically with newer backups, and (d) we perform a weekly audit to verify all user data is encrypted and to test our security.  These safeguards are reviewed periodically, and are subject to change at any time in the Company’s discretion.  While we strive for a Website that its 100% secure, no method of online communication is 100% secure.  Therefore, the Company and its agents cannot and do not ensure or warrant the security or accuracy of any information stored by this Website.  By submitting any information to this Website, you acknowledge that such information is not totally secure and agree to indemnify, defend, and hold the Company and its agents harmless for any failure to maintain the security of such information.

  California Residents

  If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws. For California residents, this Privacy Policy is supplemented by the “Privacy Notice for California Residents” below.

  California law requires us to let you know how we respond to web browser “Do Not Track” (DNT) signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not honor Do Not Track requests at this time.

  International Users

  This section supplements the other policies set forth in this Privacy Policy and applies solely to visitors, users, and others who reside in the European Union (“EU”) or European Economic Area (“EEA”).  If you are a resident of the EU/EEA, the EU General Data Protection Regulation (“GDPR”) may provide you with additional rights regarding our use of your personal information. To learn more about your GDPR privacy rights, visit www.gdpr.eu.  Any terms defined in the GDPR have the same meaning when used in this section.

  Retention.  We retain personal information (sometimes referred to “personal data” as well in this context) of EU/EEA residents only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal, regulatory or internal policy requirements. To determine the appropriate retention period for personal information in this context, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we collect, process and utilize your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

  Data Transfers to Countries Outside the EU/EEA.  The processing of personal information contemplated in this Privacy Policy may involve the data transfer to third countries located outside the EU/EEA.  In this case, we will ensure the protection of personal information by appropriate safeguards, which provide for an adequate level of data protection, for example, by (a) the execution of standard data protection clauses adopted by the EU Commission under applicable data protection laws; (b) the recipient’s certification under the EU-U.S. Privacy Shield framework (only applicable for transfers to the U.S.) or (c) the existence of any other specifically approved safeguard for data transfers as recognized by the GDPR.

  Right of Access, Rectification, Erasure, Restriction of Processing and Portability.  We would like to make sure that EU/EEA residents are fully aware of all of their data protection rights under the GDPR. Every EU/EEA resident is entitled to the following:

   

• The right to access – You have the right to request copies of your personal data from us.  We may charge you a small fee for this service.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request we complete information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal information, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal information, under certain conditions.

   

• The right to object to processing – You have the right to object to our processing of your personal information, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent - If you have given your consent to the collection or processing of your personal information, you have the right to withdraw your consent at any time on a prospective basis without affecting the lawfulness of processing based on the consent before its withdrawal.

• If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the information set forth in the “Contact Us” section below.

  Automated-Decision Making.  Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects that significantly affect the individuals involved.  We do not currently use automated-decision making using personal information.  If we do use automated-decisions making in the future, affected persons will be given an opportunity to express their views on the automated decision in question and object to it.

  Complaints.  Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office using the following information:  Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom, or at the following internet address: https://ico.org.uk/make-a-complaint/.

  Children’s Privacy

  This Website is not directed toward and does not intend to collect any personally identifiable information from children under the age of 13, or equivalent minimum age in the applicable jurisdiction (i.e., 16 under the GDPR) (“Children” or a “Child”).  This Website prohibits the submission of any personally identifiable information from Children unless a parent or guardian has provided verifiable consent.  If you are aware of any information being submitted to this Website by Children, please contact us immediately at info@naturesgardencandles.com.  If the Company determines that a Child has provided personally identifiable information in violation of this policy, the Company will delete such information from its files or database.

  Links

  This Privacy Policy applies only to this Website.  For your convenience, this Website may contain links to other websites not owned, controlled or maintained by the Company.  The Company is not responsible for and makes no representations regarding the privacy practices of these linked websites.  The Company strongly encourages you to review the privacy policy of any website that you visit, including those websites linked to this Website. 

  Opt-Out

  If you do not wish to receive any notices or other information from the Company, you may request to be taken off the Company’s mailing list by contacting the Company at info@naturesgardencandles.com. 

  Changes to Our Privacy Policy

  We reserve the right to amend this Privacy Policy (and the below Privacy Notice for California Residents) at our discretion and at any time. When we make changes to this this Privacy Policy (and the below Privacy Notice for California Residents), we will post the updated notice on the Website and update the effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.  We encourage you to visit this Website periodically to review the most updated Privacy Policy, including the Privacy Notice for California Residents.

  Contact Us

  If you have any questions or comments regarding this Privacy Policy (or this related notice), you may contact the Company using the following information:

  Phone: 440-647-0100

  Website: www.naturesgardencandles.com

  Email: info@naturesgardencandles.com

  Postal Address:  ColorFast, Inc., dba Nature’s Garden

                                                                                   42109 State Route 18

  Wellington, OH 44090

  Attorney Fees 

  In the event of a dispute between you and the Company regarding any claim arising out of your use of the Website or its Privacy Policy, the Company, if it prevails, shall be awarded all costs of bringing a claim, including reasonable attorney fees and the ordinary costs and expenses incurred in resolving the dispute, including, without limitation, all arbitration related fees and expenses.

  Arbitration/Class Action Waiver

  ALL DISPUTES BETWEEN YOU AND THE COMPANY, WHETHER ARISING IN TORT OR CONTRACT, INCLUDING WITHOUT LIMITATION ALL DISPUTES ARISING OUT OF THE POLICIES AND THE VALIDITY THEREOF, INCLUDING THIS ARBITRATION PROVISION AND CLASS ACTION WAIVER, SHALL BE FINALLY SETTLED BY ARBITRATION CONDUCTED EXPEDITIOUSLY IN ACCORDANCE WITH THE AMERICAN ARBITRATION ASSOCIATION CONSUMER ARBITRATION RULES BY A SOLE ARBITRATOR SELECTED BY THE PARTIES TO THE DISPUTE FROM THE NATIONAL OR AKRON, OHIO PANEL OF ARBITRATORS. IF THE PARTIES ARE UNABLE TO AGREE UPON AN ARBITRATOR WITHIN TEN (10) CALENDAR DAYS, EACH PARTY SHALL SELECT AN ARBITRATOR. THE TWO ARBITRATORS SELECTED SHALL SELECT A THIRD ARBITRATOR AND ALL DECISIONS THEREAFTER SHALL BE MADE BY A MAJORITY OF THE ARBITRATORS. THE ARBITRATION SHALL BE GOVERNED BY THE FEDERAL ARBITRATION ACT (9 U.S.C. § 1 et seq.) AND JUDGMENT UPON THE AWARD RENDERED BY THE ARBITRATOR(S) MAY BE ENTERED BY ANY COURT HAVING JURISDICTION THEREOF.  UNLESS OTHERWISE REQUIRED BY LAW, THE ARBITRATOR(S) IS NOT EMPOWERED TO AWARD DAMAGES IN EXCESS OF COMPENSATORY DAMAGES AND EACH PARTY HEREBY IRREVOCABLY WAIVES ANY DAMAGES IN EXCESS OF COMPENSATORY DAMAGES.

  ARBITRATION PROCEEDINGS SHALL BE COMMENCED BY ANY PARTY TO THIS AGREEMENT BY DELIVERING TO THE OTHER PARTY A WRITTEN NOTICE REQUESTING ARBITRATION.  ANY ARBITRATION HEARING SHALL BE HELD IN AKRON, OHIO, UNLESS THE PARTIES TO THE DISPUTE AGREE OTHERWISE. ANY AWARD RENDERED BY ARBITRATION SHALL BE FINAL AND BINDING ON THE PARTIES, AND JUDGMENT THEREON MAY BE ENTERED IN ANY COURT OF COMPETENT JURISDICTION. NOTWITHSTANDING ANY ARBITRATION RULES TO THE CONTRARY, THE AWARD OF THE ARBITRATOR(S) MUST BE MADE NO LATER THAN THREE (3) MONTHS FOLLOWING THE DATE ON WHICH THE ARBITRATOR(S) IS APPOINTED, UNLESS THE ISSUE IS THE SUBJECT OF LITIGATION BROUGHT BY A THIRD PARTY AND THE ARBITRATOR(S) DEEMS IT APPROPRIATE TO DEFER ITS AWARD UNTIL THE LITIGATION IS RESOLVED.

  Arbitration shall proceed solely on an individual basis without the right for any claims OR DISPUTES to be arbitrated on a class action basis or on bases involving claims OR DISPUTES brought in a purported representative capacity on behalf of others. The arbitrator's authority to resolve and make written awards is limited to claims OR DISPUTES between you and the Company alone. Claims OR DISPUTES may not be joined or consolidated unless agreed to in writing by all parties. No arbitration award or decision will have any preclusive effect as to issues or claims in any dispute with anyone who is not a named party to the arbitration.

   

  PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

  This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Policy of ColorFast, Inc, an Ohio corporation, doing business as Nature’s Garden (the “Company,” “Nature’s Garden,” “we,” “our” or “us”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws.  Any terms defined in the CCPA have the same meaning when used in this notice.

  Information We Collect

  We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”).  In particular, we have collected the following categories of personal information from consumers within the last twelve (12) months:

  Category	Examples	Collected
  A. Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	YES
  B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
  C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	YES
  D. Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES

• E. Biometric information.	Physiological, biological, or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity, including, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.	NO
  F. Internet or other electronic network activity information.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES
  G. Geolocation data.	Physical location or movements.	YES
  H. Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
  I. Professional or employment-related information.	Current or past job history or performance evaluations.	NO
  J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
  K. Inferences drawn from other personal information.	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

   

  Personal information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA's scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

• We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete on, or submissions through, our Website, account creation information submitted by you and other information provided to us by you through our Website, or via fax, telephone or email. 
• Indirectly from you. For example, from observing your actions on our Website and interactions thereon and Website usage details, which may be collected automatically.

• Use of Personal Information

  We may use or disclose the personal information we collect for one or more of the following business purposes:

• To fulfill or meet the reason for which the information is provided. For example, if you share your name and contact information to ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.
• To improve our Website and present its contents to you.
• For testing, research, analysis and product development.
• As necessary or appropriate to protect the rights, property or safety of us, you or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your personal information or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

• We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

  Sharing Personal Information

  We may disclose your personal information to a third party for a business purpose.  When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

• In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

  Category A:              Identifiers.

  Category B:              California Customer Records personal information categories.

  Category C:              Protected classification characteristics under California or federal law.

  Category D:              Commercial Information.

  Category F:               Internet or other electronic network activity information.

  Category G:              Geolocation data.

  We disclose your personal information for a business purpose to the following categories of third parties:

• Our affiliates.
• Service providers.
• Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

• In the preceding twelve (12) months, we have not sold any personal information.

  Your Rights and Choices

  The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

  Access to Specific Information and Data Portability Rights

  You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.

• Deletion Request Rights

  You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

  We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
•  
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
  • sales, identifying the personal information categories that each category of recipient purchased; and
  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

  • Exercising Access, Data Portability, and Deletion Rights

    To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by calling us at 1-440-647-0100, or emailing us at info@naturesgardencandles.com.  Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

    You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

  • We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.  Making a verifiable consumer request does not require you to create an account with us.  We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

    Response Timing and Format

    We endeavor to respond to a verifiable consumer request within 45 days of its receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.  If you have an account with us, we will deliver our written response to that account.  If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.  Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt.  The response we provide will also explain the reasons we cannot comply with a request, if applicable.  For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

    We do not charge a fee to process or respond to verifiable consumer requests unless they are manifestly unfounded or excessive (in particular because of their repetitive character).  If we determine that your request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

    Non-Discrimination

    We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

  • Changes to Our Privacy Notice

    We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.  We encourage you to visit this Website periodically to review the most updated Privacy Policy, including this privacy notice.

    Contact Information

    If you have any questions or comments regarding this Privacy Policy (or this related notice), you may contact the Company using the following information:

    Phone: 440-647-0100

    Website: www.naturesgardencandles.com

    Email: info@naturesgardencandles.com

    Postal Address:  ColorFast, Inc., dba Nature’s Garden

                                                                                     42109 State Route 18

    Wellington, OH 44090

    If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws.