Privacy Policy

Introduction
Welcome! You have arrived at a web site or mobile application that is provided by Hello Basics (“Hello Basics” or “we,” “our” or “us”). This “Privacy Policy” governs your use of www.hellobasics.com (including, without limitation, both mobile and online versions of our site and our site store), and also applies to your use of all features, widget, links, applications, content, downloads and other services that we make available through the site and/or that post a link to this Privacy Policy (collectively, referred to herein as the “Site”). regardless of how you access or use the Site, whether via personal computers, mobile devices or otherwise. This Privacy Policy will also apply to our data collection activities offline or otherwise outside of our Site in specific instances when we indicate that the Privacy Policy applies at the time when we collect your information.

What Information Does the Site Collect?
Information You Provide to Us
Personal Information and Demographic Information. On the Site, we may ask you to provide certain categories of information such as: (1) personally identifiable information, which is information that identifies you personally, such as your first and last name, email address, home address, date of birth and phone number (“Personal Information”); and (2) demographic information, such as information about your gender (“Demographic Information”). We may collect this information through various forms and in various places on the Site, including if you register for an account, through “contact us” forms, or when you otherwise interact with the Site. If we combine Demographic Information with the Personal Information we collect directly from you on the Site, we will treat the combined data as Personal Information under this Privacy Policy.

Information We Collect and Store As You Access and Use the Site

In addition to any Personal Information or other information that you choose to submit to us via our Site, we and our third-party service providers may use a variety of technologies that automatically (or passively) collect and store certain information whenever you visit or interact with the Site (“Usage Information”). This Usage Information may be stored or accessed using a variety of technologies that may be downloaded to your personal computer, laptop, tablet or mobile phone (a “Device”) whenever you visit or interact with our Site. Usage Information may be non-identifying or may be associated with you. Whenever we associate Usage Information with your Personal Information, we will treat it as Personal Information. This Usage Information may include:

  • your IP address or other unique identifier (“Device Identifier”). A Device Identifier is a number that is automatically assigned to your Device used to access the Site, and our computers identify your Device by its Device Identifier;
  • your Device functionality (including browser, operating system, hardware, mobile network information);
  • the URL that referred you to our Site;
  • the areas within our Site that you visit and your activities there, including remembering you and your preferences;
  • your Device location;
  • your Device characteristics; and
  • certain other Device data, including the time of day, among other information.

We may use various developed methods and technologies to collect Usage Information (“Tracking Technologies”). Tracking Technologies may set, change, alter or modify settings or configurations on your Device. A few of the Tracking Technologies include, without limitation, the following (and subsequent technology and methods later developed):

Cookies. A cookie is a data file placed on a Device when it is used to visit the Site. A Flash cookie (or locally shared object) is a data file placed on a Device via the Adobe Flash plug-in that may be built-in to or downloaded by you to your Device. HTML5 cookies can be programmed through HTML5 local storage. Unlike Flash cookies, HTML5 cookies do not require a plug-in. Regular cookies may generally be disabled or removed by tools that are available as part of most commercial browsers, and in some but not all instances can be blocked in the future by selecting certain settings. Each browser you use will need to be set separately and different browsers offer different functionality and options in this regard. Also, these tools may not be effective with regard to Flash cookies or HTML5 cookies. For information on disabling Flash cookies go to Adobe’s web site www.adobe.com. Please be aware that if you disable or remove cookies, Flash cookies, or HTML5 cookies on your Device, some parts of our Site may not function properly, and that when you revisit our Site your ability to limit cookies is subject to your browser settings and limitations.

Web Beacons. Small graphic images or other web programming code called web beacons (also known as “1x1 GIFs” or “clear GIFs”) may be included in our Site’s pages and messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a page or e-mail can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Site, to monitor how users navigate the Site, to count how many e-mails that were sent were actually opened or to count how many particular articles or links were actually viewed.

Embedded Scripts. An embedded script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on. The code is temporarily downloaded onto your Device from our web server or a third party service provider, is active only while you are connected to the Site, and is deactivated or deleted thereafter.

Browser Fingerprinting. Collection and analysis of information from your Device, such as, without limitation, your operating system, plug-ins, system fonts and other data, for purposes of identification.

ETag, or entity tag. A feature of the cache in browsers. It is an opaque identifier assigned by a web server to a specific version of a resource found at a URL. If the resource content at that URL ever changes, a new and different ETag is assigned. Used in this manner ETags are a form of Device Identifier. ETag tracking may generate unique tracking values even where the consumer blocks HTTP, Flash and/or HTML5 cookies.

Recognition Technologies. Technologies, including application of statistical probability to data sets, which attempt to recognize or make assumptions about users and devices (e.g., that a user of multiple devices is the same user).

We may use Tracking Technologies for a variety of purposes, including:

Strictly Necessary. We may use cookies or other Tracking Technologies that we consider are strictly necessary to allow you to use and access our Site, including cookies required to prevent fraudulent activity, improve security or allow you to make use of shopping-cart functionality.

Performance Related. We may use cookies or other Tracking Technologies that are useful in order to assess the performance of the Site, including as part of our analytic practices or otherwise to improve the content, products or services offered through the Site.

Targeting Related. We may use Tracking Technologies to deliver content, including ads, relevant to your interests on our Site and third party sites based on how you interact with our content and ads. This includes using Tracking Technologies to understand the usefulness to you of the content and ads that have been delivered to you. Further information on this, and your opt-out choices, is found in Section 5 below.

There may be other Tracking Technologies now and later devised and used by us in connection with the Site. Further, third parties may use Tracking Technologies in connection with our Site, which may include the collection of information about your online activities over time and across third-party web sites or online services. We may not control those Tracking Technologies and we are not responsible for them. However, you consent to potentially encountering third-party Tracking Technologies in connection with use of our Site and accept that our statements under this Privacy Policy do not apply to the Tracking Technologies or practices of such third parties.

Information Third Parties Provide About You
We may receive information about you from our affiliates and others that use the Site, such as when they submit content to us or post on the Site. Additionally, we may, from time to time, supplement the information we collect directly from you on our Site with outside records from third parties for various purposes, including to enhance our ability to serve you, to tailor our content to you and to offer you opportunities that may be of interest to you. To the extent we combine information we receive from those sources with Personal Information we collect on the Site, it will be treated as Personal Information and we will apply this Privacy Policy to such combined information, unless we have disclosed otherwise. In no other circumstances do our promises under this Privacy Policy apply to information we receive about you from third parties.

Interactions with Third Party Sites
The Site may include functionality that allows certain kinds of interactions between the Site and your account on a third-party web site or application. The use of this functionality may involve the third-party operator providing certain information, including Personal Information, to us. For example, when you register with the Service, you may have an option to use your Facebook, Google or other account provided by a third-party site or application to facilitate the registration and log-in or transaction process on the Service, or otherwise link accounts. If we offer and you choose to use this functionality to access or use our Service, the third-party site or application may send Personal Information about you to us. If so, we will then treat it as Personal Information under this Privacy Policy, since we are collecting it as a result of your accessing of and interaction on our Service. In addition, we may provide third-party sites’ interfaces or links on the Site to facilitate your sending a communication from the Site. For example, we may use third parties to facilitate emails, Tweets or Facebook postings. These third parties may retain any information used or provided in any such communications or other activities and these third parties’ practices are not subject to our Privacy Policy. Hello Basics may not control or have access to your communications through these third parties. Further, when you use third-party sites or services, you are using their services and not our services and they, not we, are responsible for their practices. You should review the applicable third-party privacy policies before using such third-party tools on our Site.

Information You Provide About a Third Party
You may send someone else a communication from the Service, such as sending an invitation to a friend. If so, the information you provide (names, e-mail addresses, mobile number, etc.) is used to facilitate the communication and is not used by us for any other marketing purpose unless we obtain consent from that person or we explicitly say otherwise. Please be aware that when you use any send-to-a-friend functionality on our Site, your email address, mobile number, name or user name and message may be included in the communication sent to your addressee(s). Some of these tools may be third-party tools subject to third-party privacy policies as further detailed in Section 1(d) and Section 5.

California Do Not Track Disclosures
Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party web sites or online services (e.g., browser do not track signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms.

How Do We Use the Information Collected?

  • Use of Information By Us. We may use your Personal Information, Demographic Information or Usage Information for various purposes, including:
  • to place an order made through the Site;
  • to process transactions or provide you with information such as to send you electronic newsletters or to provide you with special offers or promotional and marketing materials on behalf of us or third parties, including to let you know about new products, services or upcoming events;
  • to enable you to participate in a variety of the Site’s features such as to enable you to participate in online entry sweepstakes, contests or other promotions;
  • to process your registration with the Service, including verifying your information is active and valid;
  • to improve the Site, marketing endeavors or our Site offerings;
  • to customize your experience on the Site or to serve you specific content or ads that are relevant to you;
  • to provide customer support;
  • to contact you with regard to your use of the Site and, in our discretion, changes to the Site and/or Site’s policies;
  • to notify you of product recalls or providing other information concerning products you have purchased;
  • to identify your product and Site preferences so that you can be informed of new or additional products, services and promotions;
  • to improve merchandise selections and the overall shopping experience at the Site;
  • for internal business purposes; and
  • for purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy.

Use of Information for Recruitment Purposes. Where you have provided us with information as part of an online application for employment or internship, we may use that information in order to allow us to make an informed decision about whether to proceed with your application. We may, as part of this recruitment process, collect information about your education, employment history and similar matters. Where this information is considered to be sensitive, you expressly consent to our processing of this information for recruitment purposes by submitting it to us.

How and When Do We Disclose Information to Third Parties?
We may share non-Personal Information, such as aggregated user statistics, with third parties. Further, we may share your Personal Information with third parties such as our co-promotional and donation partners or and others with whom we have marketing or other relationships for the third parties’ direct marketing purposes. If you are a California resident, you have the right to request additional information about this sharing, so please see Section (3)(g) below. We may share your Device Identifiers with third parties along with data related to you and your activities. In addition, we may share the information we have collected about you, including Personal Information, as disclosed at the time you provide your information and as described below or otherwise in this Privacy Policy. Brandless may disclose your information as follows:

  1. When You Request Information From or Provide Information to Third Parties. You may be presented with an option on our Site to receive certain information and/or marketing offers directly from third parties or to have us send certain information to third parties or give them access to it. If you choose to do so, your Personal Information and other information may be disclosed to such third parties and all information you disclose will be subject to the third-party privacy policies and practices of such third parties. In addition, third parties may store, collect or otherwise have access to your information when you interact with their Tracking Technologies, content, tools apps or ads on our Site or link to them from our Site. This may include using third party tools such as Facebook, Twitter, Pinterest or other third party posting or content sharing tools. It may also include ordering or purchasing products from third parties through us where we indicate that the third party rather than us is the seller. We are not responsible for the privacy policies and practices of such third parties and, therefore, you should review such third party privacy policies and practices of such third parties prior to requesting information from or otherwise interacting with them.
  2. Third Parties Providing Services on Our Behalf. We may use third-party vendors to perform certain services on behalf of us or the Site, such as: (a) to assist us in Site operations such as e-commerce operations, shipping of products and services and fulfillment of orders; (b) to manage a database of customer information; (c) hosting the Site; (d) designing and/or operating the Site’s features; (e) tracking the Site’s activities and analytics; (f) enabling us to send you special offers or perform other administrative services; and (g) other services designed to assist us in maximizing our business potential. We may provide vendors with access to your information to carry out the services they are performing for you or for us. Third-party analytics and other service providers may set and access their own technologies on your Device and they may otherwise collect or have access to information about you. We are not responsible for those third party technologies or activities arising out of them. However, some third parties may offer you certain choices regarding their practices, and information we have been informed of regarding such choices is available here. We are not responsible for the effectiveness of or compliance with any third parties’ opt-out options. When you purchase a Hello Basics product, your payment transaction is processed on our behalf by a third-party payment processor, Stripe, Inc. (“Stripe”). What this means for you is that we do not collect or store your credit card data, rather when you purchase a Hello Basics product on the Site, you are providing your credit card information directly to Stripe. Accordingly, Stripe’s privacy policy available at https://stripe.com/us/privacywill apply to Stripe’s collection and use of your payment information.
  3. Administrative and Legal Reasons. We may access, use, preserve, transfer and disclose your information (including Device Identifiers and Personal Information) to third parties: (i) to satisfy any applicable law, regulation, subpoenas, governmental requests or legal process if in our good faith opinion such is required or permitted by law; (ii) to protect and/or defend the Site’s Terms and Conditions of Service or other policies applicable to the Site, including investigation of potential violations thereof; (iii) to protect the safety, rights, property or security of the Site or any third party; and/or (iv) to detect, prevent or otherwise address fraud, security or technical issues. Further, we may use IP address or other Device Identifiers, to identify users, and may do so in cooperation with third parties such as copyright owners, internet service providers, wireless service providers and/or law enforcement agencies, including disclosing such information to third parties, all in our discretion, subject to applicable law. Such disclosures may be carried out without notice to you.
  4. Affiliates and Business Transfer. We may share your information, including your Device Identifiers and Personal Information, Demographic Information and Usage Information with our parent, subsidiaries and affiliates. We also reserve the right to disclose and transfer all such information: (i) to a subsequent owner, co-owner or operator of the Site or applicable database; or (ii) in connection with a merger, consolidation, restructuring, the sale of substantially all of our interests and/or assets or other corporate change, including, during the course of any due diligence process.
  5. Co-branded Areas. Certain areas of the Site may be provided to you in association with third parties (“Co-Branded Areas”) such as our donation partners, and may require you to disclose Personal Information to them. Such Co-Branded Areas will identify the third party and indicate if they have a privacy policy that applies to their collection and use of you information. If you elect to register for products and/or services, communicate with such third parties or download their content or applications, at Co-Branded Areas, you may be providing your information to both us and the third party. Further, if you sign-in to a Co-Branded Area with a username and password obtained on the Site, your Personal Information may be disclosed to the identified third parties for that Co-Branded Area. We are not responsible for such third party’s data collection or practices and you should look to such third-party privacy policies for more information.
  6. Sweepstakes, Contests and Promotions. We may offer sweepstakes, contests, and other promotions (any, a “Promotion”) through the Site that may require registration. By participating in a Promotion, you are agreeing to official rules that govern that Promotion, which may contain specific requirements of you, including, allowing the sponsor of the Promotion to use your name, voice and/or likeness in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion’s official rules, such as on a winners list.
  7. To Deliver Social Content and Advertising. We, and others we work with (e.g., third party publishers, advertisers and advertising services providers) may use your Personal Information, Demographic Information and/or Usage Information we have collected in connection with the Service to target and deliver content and advertisements to you and other users, both on and off of our Service. Further, by using the Service, you consent to the use of your Personal Information and your Service activity information.
  8. Your California Privacy Rights. We may elect to share information about you with third parties for those third parties’ direct marketing purposes. California Civil Code § 1798.83 permits California residents who have supplied personal information (as defined in the law) to us to, under certain circumstances, request and obtain certain information regarding our disclosure, if any, of personal information to third parties for their direct marketing purposes. If this law applies to you, you may obtain the categories of personal information shared by us and the names and addresses of all third parties that received personal information for their direct marketing purposes from us during the immediately prior calendar year (e.g., requests made in 2017 will receive information about 2016 sharing activities). To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California address for our response. To make such a request (limit one request per year), please send an email to: letstalk@sparkelabs.com, with “California Privacy Rights” as the subject line. You must include your full name, email address, and postal address in your request.

    What About Information I Disclose Publicly?

    1. User-Generated Content and Public Information. The Site may permit you to submit ideas, photographs, user profiles, writings, music, video, audio recordings, computer graphics, pictures, data, questions, comments, suggestions or other content, including Personal Information (collectively, “User Content”), such as on profiles, blogs and message boards. We or others may store, display, reproduce, publish, distribute or otherwise use User Content online or offline in any media or format (currently existing or hereafter developed) and may or may not attribute it to you. Others may have access to this User Content and may have the ability to share it with third parties. Please think carefully before deciding what information you share, including Personal Information, in connection with your User Content. Please note that Brandless does not control who will have access to the information that you choose to make public, and cannot ensure that parties who have access to such publicly available information will respect your privacy or keep it secure. Our promises under this Privacy Policy do not apply to any information that you disclose publicly, share with others or otherwise upload onto the publicly available positions of our Site. We are not responsible for the accuracy, use or misuse of any User Content that you disclose or receive from third parties through the Site.
    2. Name and Likeness. We may also publish your name, voice, likeness and other Personal Information that is part of your User Content, and we may use the content, or any portion of the content, for advertising, marketing, publicity and promotional activities. For full terms and conditions regarding User Content you submit to the Site, please review our Terms and Conditions of Service.

    Ads and Information About You
    We may use third parties such as network advertisers and ad exchanges to serve advertisements across the Internet and may use third party analytics service providers to evaluate and provide us and/or third parties with information about the use of these ads on third party sites and viewing of ads and of our content. Network advertisers are third parties that display advertisements, which may be based on your activities across the Internet and mobile media (“Behavioral Ads”). Behavioral Ads enable us to target advertisements to you for products and services in which we believe you might be interested. If you object to receiving Behavioral Ads from us on third party sites, you can learn more about your ability to limit Behavioral Ads below. Our third party ad network and exchange providers, the advertisers and/or traffic measurement services may themselves set and access their own technologies on your Device and track certain behavioral Usage Information via a Device Identifier. These third party technologies may be set to, among other things: (a) help deliver advertisements to you that you might be interested in; (b) prevent you from seeing the same advertisements; and (c) understand the usefulness of the advertisements that have been delivered to you.


    Statements regarding our practices do not apply to the methods for collecting information used by these third parties or the use of the information that such third parties collect. We do however work with third parties to make efforts to have you provided with information on their practices and any available opportunity to exercise choice. The relevant third party’s terms of service, privacy policy, permissions, notices and choices should be reviewed regarding their collection, storage and sharing practices. We make no representations regarding the policies or practices of third party advertisers or advertising networks or exchanges or related third parties.

    Some third parties may offer you certain choices regarding their practices, and information we have been informed of regarding such choices is available here. Further, while sites use a variety of companies to serve advertisements, you may wish to visit http://www.networkadvertising.org/optout_nonppii.asp, which provides information regarding this practice by Network Advertising Initiative (“NAI”) members, and your choices regarding having this information used by these companies, including the “opt-out” procedures of NAI members. Opting out of one or more NAI members only means that those NAI members no longer will be allowed under their own rules to deliver Behavioral Ads to you, but does not mean you will no longer receive any targeted content and/or ads. Also, if your browsers are configured to reject cookies when you visit this opt-out page, or you subsequently erase your cookies, use a different Device or change web browsers, your NAI opt-out may not, or may no longer, be effective. You may also opt-out of receiving Behavioral Ads on participating sites and services by visiting the Digital Advertising Alliance (“DAA”) website at http://www.aboutads.info/choices/#completed. Similar limitations may apply to the DAA opt-out. We are not responsible for effectiveness of or compliance with any third parties’ opt-out options or programs.

    Do Third-Party Content, Links to Third-Party Sites and/or Third-Party Apps Appear on the Site?
    The Site may contain content that is supplied by a third party, and those third parties may collect Usage Information and your Device Identifier when pages from the Site are served to you. In addition, when you are on the Site you may be directed to other sites that are operated and controlled by third parties that we do not control. We are not responsible for the data collection and privacy practices employed by any of these third parties or their services and they may be tracking you across multiple sites and may be sharing the results of that tracking with us and/or others. For example, if you “click” on a link, the “click” may take you off the Site onto a different site. These other sites may associate their Tracking Technologies with you, independently collect data about you, including Personal Information, and may or may not have their own published privacy policies.

    Third-party applications may also be available via the Site. The owners of these applications (“Third-Party Owners”) may collect Personal Information and other data from you and may have their own policies and practices. We are not responsible for how Third-Party Owners or their applications collect or use your information and they may be tracking you across multiple sites and may be sharing the results of that tracking with us and/or others. These Third-Party Owners may have their own terms of service, privacy policies or other policies and ask you to agree to the same. We are not responsible for these third-party privacy policies or the practices of Third-Party Owners. Be sure to review any available policies before submitting any personally identifiable information to a third-party application or otherwise interacting with it and exercise caution in connection with these applications. We also encourage you to note when you leave our Site and to review the third-party privacy policies of all third-party locations and exercise caution in connection with them.

    How Do I Change My Information and Communications Preferences?
    You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information provided as part of registration. The Site may allow you to review, correct or update Personal Information you have provided through the Site’s forms or otherwise, and you may provide updates and changes by contacting us at letstalk@sparkelabs.com. If you send us an email to update your information, please include “Change of Information” in the subject line of your email. If so, we will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable. Please note that it is not always possible to completely remove or delete all of your information from our databases and that residual data may remain on backup media or for other reasons. Also, if you have made any public postings on the Site such as in forums or blogs, these communications cannot generally be removed. When you edit your Personal Information or change your preferences on the Site, information that you remove may persist internally for our administrative purposes. You may cancel or modify our email marketing communications you receive from us by following the instructions contained within our promotional emails or in some cases by logging into your Site account and changing your communication preferences. This will not affect subsequent subscriptions and if your opt-out is limited to certain types of emails the opt-out will be so limited. Subsequent or different subscriptions will be unaffected. Please note that we reserve the right to send you certain communications relating to your account or use of our Site, such as administrative and Site announcements and these transactional account messages may be unaffected if you choose to opt-out from receiving our marketing communications. If you have any questions about the Privacy Policy or practices described in it, you should contact us by email at letstalk@sparkelabs.com.


    What About Transfer of Information to the United States?
    Our Site is operated in the United States and intended for users located in the United States. If you are located outside of the United States, please be aware that information we collect, including Personal Information, will be transferred to, and processed, stored and used in the United States. The data protection laws in the United States may differ from those of the country in which you are located, and your Personal Information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By using the Site or providing us with any information, you consent to the transfer to, and processing, usage, sharing and storage of your information, including Personal Information, in the United States as set forth in this Privacy Policy.

    What Should Parents Know About Children?
    The Site is a general audience web site and we do not knowingly collect any personal information from children younger than the age of thirteen (13) as required by U.S. law. We will delete any personal information collected that we later determine to be from a user younger than the age of thirteen (13). If you are a parent or guardian of a child under the age of thirteen (13) and believe he or she has disclosed personal information to us, please contact us at letstalk@sparkelabs.com.

    What About Security?
    We incorporate commercially reasonable safeguards to help protect and secure your Personal Information. However, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can be guaranteed to be 100% secure. Please note that we cannot ensure the security of any information you transmit to us, and you use our Site and provide us with your information at your own risk.

    What About Changes to the Privacy Policy?
    We reserve the right to change this Privacy Policy at any time without notice to you. Any changes will be effective immediately upon the posting of the revised Privacy Policy. However, we will not use your Personal Information in a manner materially different than promised at the time it was collected without your consent. To the extent any provision of this Privacy Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

    The following third parties that collect information from you on our Site have given us notice that you may obtain information on their policies and practices, and in some instances opt-out of certain of their activities, as follows:

     Party Google
    Site Google Analytics for Display Advertisers, Ads Preferences Manager, and Google Analytics Opt-out Browser Add-on
    For More Information https://support.google.com/analytics/answer/6004245
    http://www.google.com/settings/ads/onweb/?hl=en&sig=ACi0TCg8VN3Fad5_pDOsAS8a4
    Use of Tracking Technologies Yes
    Privacy Choices https://tools.google.com/dlpage/gaoptout/


    PLEASE NOTE: We are not responsible for third-party policies or practices. We try to keep this information current, and will add to and subtract from the chart above as appropriate, but it is provided as a courtesy and may not be current or accurate. Please contact the applicable third parties regarding their privacy and data security policies and practices.