Month: March 2024

California Privacy Notice

 Last Modified:           , 2024

Purpose

 This California Privacy Notice (the “Privacy Notice”) supplements the information contained in the Privacy Policy (“Policy”), located on the Tranquil Products, LLC (“Tranquil”) website (the “Site”), and applies solely to individual residents of the State of California (“consumers,” “residents,” or “you”). This Privacy Notice applies to Tranquil, and its affiliates and subsidiaries (collectively, “Tranquil,” “we,” “us,” or “our”), and describes how we collect, use, disclose, and otherwise process Personal Information of individual residents of the State of California, either online or offline, within the scope of the California Privacy Rights Act (“CPRA”).

When we use the term “Personal Information” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Any other terms defined in the CPRA have the same meaning when used in this Privacy Notice.

 

Personal Information We Collect

We collect Personal Information from and about you for a variety of purposes. To learn more about the types of Personal Information we collect, the sources from which we collect or receive Personal Information, and the purposes for which we use this information, please refer to the “Information We Collect” section in our Policy.

We have collected the following categories of Personal Information from consumers within the last twelve (12) months:

 

Categories	Examples	Collected	Categories of Sources
Identifiers	A real name, Internet Protocol address, email address, or other similar identifiers.	Y	Direct user entry into online forms or through email communications; [Name Third Parties],
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.   Some personal information included in this category may overlap with other categories.	Y	Direct user entry data into online application forms.
Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	N	N/A
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Y	[Name Third Parties]
Biometric information	Genetic, physiological, behavioral, and biological characteristics or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	N	N/A
Internet or other similar network activity	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	Y	[Name Third Parties]
Geolocation data	Physical location or movements.	Y	[Name Third Parties]
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	N	N/A
Professional or employment-related information	Current or past job history or performance evaluations.	N	N/A
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	N	N/A
Inferences drawn from other Personal Information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	N	N/A

 

Not included in the definition of Personal Information is information that is publicly available, information that has been de-identified or aggregated, or information exempt from the purview of the CPRA, such as:

• Protected Health Information (“PHI”) governed and protected by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and the California Confidentiality of Medical Information Act (“CMIA”) or clinical trial data; and
• Personal Information regulated by certain industry-specific privacy laws, such as the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA), California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

Purposes for Collection, Use, and Disclosure of Personal Information

Generally, we may collect, use, or disclose the Personal Information about you for one or more of the following purposes: (a) To fulfill or meet the reason you provided the information; (b) To administer our Site; (c) To market to you; (d) To address and remedy any inquiries or complaints made by or about you related to our services; (e) To recognize you and remember your information when you return to our Site; (f) To help maintain the safety, security, and integrity of our services, technology assets, and business; (g) To operate, maintain, and provide to you the features and functionality of our services; (h) To personalize your experience and to deliver custom content and product and service offerings relevant to your interests; and (i) To respond to law enforcement requests.

We may also use or disclose your Personal Information in accordance with your consent, when required by law to do so, or if it is necessary for a corporate transaction (such as a merger or acquisition). We will not collect additional categories of Personal Information or use the Personal Information for materially different, unrelated, or incompatible purposes without providing you additional notice.

 Sharing of Personal Information

 We may share the information we collect as described in this section of the Privacy Notice. We may share this information for the following reasons:

With Affiliates

We may share the information we collect with Tranquil affiliates (as listed in the Privacy Policy) to, among other things, provide the services you have requested or authorized and to help us manage the availability and connectivity of the Site.

 

With Employees, Contractors, and Agents

We may share information we collect with our employees, contractors, and agents, including third-party service providers, that perform services and functions at our direction and on our behalf, but their use of such information shall be limited to the performance of their duties and is consistent with our purposes for using such information.

 

With Other Third Parties for a Business Purpose or as Permitted or Required by Law:

We may share information about you with other parties [e.g., Google Analytics, [other Third Parties]] for our business purposes, to send you products or services that you may be interested in, or as permitted or required by law, including: (a) to comply with a law, legal process or regulations; (b) responding to or cooperating with law enforcement authorities, other government officials or other third parties pursuant to a subpoena, a court order or other legal process; (c) to protect the vital interests of a person; (d) to protect our property, services and legal rights; (e) to companies we plan to merge with or be acquired by; and (f) to support our audit, compliance and governance functions.

 

California Rights and Choices

 The CPRA provides California residents with certain rights regarding their Personal Information (subject to certain limitations at law). The following section describes your CPRA rights and explains how to exercise those rights.

 

Right to Access and Portability

Under the CPRA, California residents have the right to request that we disclose certain information about our collection and use of Personal Information over the last twelve (12) months. Once we receive and confirm your verifiable consumer request, in which we may have to gather further identifiable information in order to confirm your identity, we will disclose to you the following:

• The categories of Personal Information we collected about you;
• The categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting or selling that Personal Information;
• The categories of third parties with whom we share that Personal Information;
• The specific pieces of Personal Information we collected about you (also called a data portability request); and
• If we disclose your Personal Information for a business purpose, identifying the Personal Information categories disclosed.

Upon receiving a verifiable access request, we will deliver the accompanying information to you in a portable, easily readable electronic format.

 

Right to Deletion

 The CPRA allows California residents the right to request that we delete any Personal Information about you that we collect and retain, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, in which we may have to gather further identifiable information in order to confirm your identity, we will delete (and in turn direct our service providers to delete, if applicable) your Personal Information from our records, unless an exception applies.

 

We may deny a deletion request if retaining the information is necessary to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity;
• Debug products to identify and repair errors that impair existing intended functionality;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.);
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Enable solely internal uses that are reasonably aligned with consumer expectations;
• Comply with a legal obligation and requests from law enforcement agencies; and
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

 

Right to Opt-Out of the Sale or Sharing of Your Information

We do not sell Personal Information, as the term “sale” is defined in the CPRA, will not sell Personal Information in the future, and in the preceding twelve (12) months, have not sold any Personal Information. We do share your information with third parties who assist us in providing you with the services you signed up for. We also share information with third parties who assist us in operating our website and marketing our services. If you request, we will limit or cease sharing information we collect from you as directed. However, if you prevent the sharing of all information collected, we may not be able to provide you with the services you have requested.

 

Right to Limit Use and Disclosure of Sensitive Personal Information

Under the CPRA, with certain limitations, California residents have the right to limit the use of that resident’s sensitive personal information, as that term is defined in the CPRA, to that use which is necessary to perform the requested services or provide the goods requested. Under the CPRA, the following types of information are considered sensitive personal information:

• A consumer’s social security, driver’s license, state identification card, or passport number;
• A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
• A consumer’s precise geolocation;
• A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership;
• The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication;
• A consumer’s genetic data;
• Biometric information for the purpose of uniquely identifying a consumer;
• Personal information collected and analyzed concerning a consumer’s health; or
• Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation.

 

Request Submissions

To exercise the access and deletion rights under the CPRA as described above, please submit a verifiable consumer request by emailing help@findtranquil.com.

 

Verifiable Consumer Requests

A verifiable consumer request may be submitted by a California resident or a person registered with the California Secretary of State that is authorized to act on your behalf. These requests for access, which can only be made twice during a twelve (12) month period, and deletion must:

• Detail sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

 

Timeframe for Responding to Requests and Format

We will respond to your request within thirty (45) days of receipt.

The period of response may be extended to sixty (60) or ninety (90) days if more time is required. In that event, we will inform you of the reason and extension period in writing.

 

Fee

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

 

No Discrimination

The CPRA prohibits a business from discriminating against California residents for exercising the rights outlined above. We will not discriminate against you for submitting such requests by:

• Denying goods or services to you;
• Charging different prices or rates for goods or services, including through the use of discounts, benefits, or other penalties;
• Providing a different level or quality of goods or services; and
• Suggesting a different price or quality of goods or services will apply if rights are exercised.

 

No Financial Incentive

We do not offer any financial incentives or price or service differences in an attempt to influence a resident’s decision whether or not to exercise a right afforded to the consumer under the CPRA.

 

Children’s Information

 Our Site is not directed at children. We do not knowingly collect Personal Information from children under the age of 21. If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, please contact us by using the information in the “Contacting Us” section, below, and we will take steps to remove such Personal Information from our systems.

 

Authorized Agent

A California resident may use an authorized agent to submit a right to access request or a request to delete. To use an authorized agent, the California resident must provide the agent with written authorization. In addition, the California resident may be required to verify their own identity with us. Tranquil may deny a request from an agent that does not submit proof that they have been authorized by the California resident to act on their behalf. Such requirements, however, will not apply where a California resident has provided the authorized agent with power of attorney pursuant to Cal. Prob. Code Sections 4000 to 4465.

Updates to this Privacy Notice

We may update or change this Privacy Notice. The effective date at the top of this page states when this Privacy Notice was last revised. Any change to this Privacy Notice will become effective when we post the revised Privacy Notice on our Site. Your use of our Site means you accept our Privacy Notice.

If any change may materially and negatively affect the privacy of your Personal Information, we will use reasonable efforts to notify you in advance and give you a reasonable time to object to any changes.

We encourage you to periodically review this Privacy Notice to stay informed about how we collect, use, and share Personal Information.

Contacting Us

Use the contact information below if you have questions, concerns or complaints about this Privacy Notice or our privacy practices or would like additional information about Tranquil’s privacy practices.

 

Email Address: help@findtranquil.com

For our CA specific policy, please see here.

WEBSITE PRIVACY POLICY – U.S.

Last Modified: [DATE]

Tranquil Products, LLC and its affiliates and subsidiaries (“Tranquil” “we”, “us”, or “our”) values its partners, clients and customers and their information, privacy, and their trust. This Privacy Policy (“Policy”) applies to information collected online from users of the Tranquil website, findtranquil.com (the “Site”), and explains how we collect, use, and protect that information. This Policy applies to Tranquil’s collection, use, processing, storage, and transfer of information associated with Tranquil’s Site. For the purposes of this Policy, unless otherwise noted, all references to the Site, includes Tranquil’s online member portal, mobile applications, and other electronic messages between you and the Site.

Throughout this Policy, we refer to the term “Personal Information.” “Personal Information” means data which identifies, describes, is associated with, or could be linked to an individual, such as a name, birthdate, postal address, email address, telephone number, driver’s license number, Social Security Number or other government-issued identification number, credit card number, or other unique identifiers.

Personal Information does not include anonymous or aggregated data that can no longer be used to identify a specific person, even if combined with other data. Also, we may collect information related to businesses, companies, institutions, or other entities rather than individuals (“Business Information”). We do not consider Business Information, such as title, employer’s name, work email, work phone number, work address, and other similar business information, to be Personal Information.

Information we Collect 

We collect information from you in two ways: 1) directly from you; 2) from other sources that we combine with information we collect through our Site; and 3) indirectly from you via your use of the Site.

Information Collected Directly From You

When you register with our Site or make any purchase from our site, we will collect certain Personal Information about you so that we may verify your identity and set up your account. This Personal Information may include your name, account login, email address, phone number, billing and shipping addresses, a password, and a method of payment (credit or debit card information with expiration date). When you contact us through our Site or ask us questions about our products and services, we will collect Personal Information from you, including your name, email address, and your inquiry so that we may adequately respond to your inquiry or offer you our products or services.

If you make purchases, you may also provide your information to our third-party payment processor, the company we are working with to process your financial transaction with us.  The payment processor shares with us information about your name, payment prices, and payment timing.

ID Verification (“IDV”) and Purchase Check-out. We also employ a third-party age verification system (our “IDV Partners”) to capture a photo of your ID and compare it to a scan of your face to securely verify your identity, and to confirm that all purchasers and users are 21 years of age or older. Tranquil does not receive your face scan and our service providers delete the scan according to the periods described in our Biometric Data Privacy Notice. This verification process, incorporated into our checkout, requires your driver’s license/ID information and the last four digits of your social security number, which may be processed and securely stored in your customer account (if applicable). This is to ensure customer safety, prevent fraud and to verify that you are 21 years of age or older. While this process is a one-time requirement under your personal account, you may be asked to verify this information from time to time to verify your identity and ensure access to your account is secure.  We appreciate your cooperation in ensuring that our services and products remain inaccessible to minors. Once user age is verified, all such data is retained for up to 30 days and then securely destroyed.

Information Collected From Other Sources

We may collect information about you from social media, our business partners, vendors, subcontractors, other advertising companies, and publicly available sources to combine with information we collect from our Site about you. If you choose to login to the Site with your social media profile, you will receive prompts requesting access to specific user data. The information we receive from social media services depends on your privacy settings on the applicable social media service.

Information Collected Indirectly from You

When you visit our Site, we may collect information about your visit and maintain that information in our web server logs, which are records of the activities on our Site. The servers automatically capture and store the information electronically. Examples of the information we may collect include: Internet Protocol (IP) address; browser type and language; Internet Service Provider (ISP), referring and exit websites and applications; websites viewed while on the Site; operating system; date/time stamp of activity; clickstream data; whether you are a first-time or a returning user; links you clicked on while in the Site; and your flow and navigation path through the Site. We use this information in a deidentified and aggregated fashion to help us administer the site, analyze its usage, protect the website and its content from inappropriate use, and improve your Site experience.

In some parts of our Site and through email messages, you will find a “click-through URL” linked to content on our Site. We track this click-through data to help us determine interest in particular topics and measure the effectiveness of our customer communications. If you prefer not to be tracked in this way, you should not click such links in our email messages.

 

Cookies

We use technologies, such as “cookies,” so we can remember certain information about you, remember your preferences, or recognize you when you return to the Site. Cookies also help us compile aggregate data about Site traffic and Site interaction so that we can improve our Site and protect our Site from fraud.

A cookie is a text file that is stored on your computer. As text files, cookies cannot read information on your hard drive, run programs, or deliver viruses to your computer.

Most browsers are set to accept cookies automatically. You can set your browser to decline all cookies automatically or to prompt you for a response each time a cookie is offered. If you decline cookies, you may find that you cannot access all our Site’s features.

During your browsing session, we use “session” cookies to store information and monitor Site function. These session cookies are installed during your browsing session and are deleted when the browsing session has ended.

The only tags we utilize are for Google Analytics. Please see Google Analytics Privacy Policy https://policies.google.com/privacy?hl=en-US  for details.

The Site utilizes the following cookies:

 

Session Cookie	When Deleted	Purpose

 

We also use log files when you visit our Site. Log files track IP addresses, browser type, Internet Service Provider (ISP) identity, referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information in our legitimate interest in administering the Site, preventing fraud, tracking website navigation in the aggregate, and gathering broad demographic information for aggregate use.

Web beacons, (also known as clear GIFs, pixel tags and single-pixel gifs) are often used in combination with cookies. Often transparent, these images are part of web pages, and allow us to count users who have visited certain pages and to generate statistics about how our Site are used. They are not used to access Personal Information

Pixel tags enable us to send email messages in a format that customers can read, and they tell us whether mail has been opened. We may use this information to reduce or eliminate messages sent to you.

• Cookies – Need to list both Session and Persistent cookies utilized on your site. You need to identify each cookie you have on your Site, its purpose, and when it is deleted (i.e., after session, 1 year, etc.).
• If only Google Analytics, need to list it, identify the type of cookie it is (session/persistent), when it is deleted, and the purpose it serves.
• Also need to list all technologies used

 

Website Analytics

 

We use third-party website analytics software from third-party providers [e.g., Google Analytics] in connection with our Site to gather data such as age, gender, and interests to provide advertising targeted to suit your interests and preferences.

You may opt out of the automated collection of information by third-party ad networks for the purpose of delivering advertisements tailored to your interests by visiting the consumer opt-out page for the Self-Regulatory Principles for Online Behavior Advertising at https://support.google.com/adwordspolicy/answer/1316548?hl=en and edit or opt-out your Google Display Network ads’ preferences at http://www.google.com/ads/preferences/.

Tranquil utilizes analytics software provided by Google Analytics, Inc. Google collects anonymous information that is not used to identify a user. This information helps us better understand how visitors use our Sites, detect and defend against fraud and other security risks, and present advertisements, products, and/or services of interest to you.

To learn more about how Google Analytics collects and processes data, please visit “How Google users data when you use our partners’ Site or apps”, located at www.google.com/policies/privacy/partners/. To learn about how to opt-out of Google Analytics, please visit http://tools.Google.com/dlpage/gaoptout/.

 

Children’s Information

Our Site is not directed to children. We do not knowingly collect Personal Information from children or persons under the age of 21. If you are under 21, do not use or provide any information on this Site or through any of its features, register on the Site, make any purchases through the Site, use any of the interactive or public comment features of this Site, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or username you may use.  If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, please contact us by using the information in the “Questions and Contact Information” section, below, and we will take steps to remove such Personal Information from our systems.

Use of Personal Information

We only use your Personal Information for the original purposes it was given and to further our legitimate interests, such as to:

• To provide and deliver products and fulfill orders;
• To establish and manage business relations with you;
• To respond to inquiries, requests, and comments from you;
• To operate, improve, and personalize the products and services we offer, and to give each user a more consistent and personalized experience when interacting with us;
• To publish public product and customer review submitted by you;
• To send you newsletters and information about products, services and promotions of our business partners and affiliates;
• For customer service, for Site security, and to detect fraud or illegal activities;
• To prevent or investigate activity we believe may be potentially illegal, unlawful, or harmful;
• For archival and backup purposes in connection with the provision of the services;
• To better understand how you access and use the Site, for the purposes of trying to improve the Site, diagnose problems on the Site, administer our Site, and respond to user preferences;
• To enforce our other applicable policies; and
• For data aggregation purposes. We retain the right to collect and use any deidentified or anonymous information, incapable of identifying a particular user (even when combined with other information) collected from your use of our Site and to aggregate such data for internal analytics that improve our Site and service. At no time is Personal Information included in such data aggregations.

Our employees and agents may view your Personal Information to perform their jobs and address your needs. We authorize their access to your Personal Information on a need-to-know basis to provide you with information or services, or for one of the other reasons listed in this section, and always in connection with a contractual obligation to protect the privacy of that information.

We also provide your Personal Information to [payment processor], [any other vendors with whom Personal Information is shared? Operator of the website? Mailing vendor? Product review vendor? Customer list vendor? Targeted advertiser vendor? Promotions/contest vendor? All such vendors with whom you share information need to be disclosed] with whom we work to operate our payment system on the Site. [payment processor]receives information about your credit or debit card in order to make payments. These vendors use this information only to facilitate payments and are only hosted for these purposes.

We may also use information you provide to us to communicate with you in the future. We may also contact you about other services or products we may offer in which you may have an interest. If you do not wish to receive such communications, you may opt out (unsubscribe) as described below in the “Access and Consent to Use of Your Personal Information” and “Questions and Contact Information” section.

Tranquil Biometric Data Privacy Notice

This biometric privacy notice explains how Tranquil collects, uses, shares, retains, and destroys your Biometric Data when you use our services. “Biometric Data” includes: (i) “Biometric Identifiers,” which are data generated by measurements of your biological characteristics, such as your retina or iris scan, fingerprint, voiceprint, or a scan of your hand or face geometry; and (ii) “Biometric Information,” which is information based on a Biometric Identifier that can be used to identify you.

Please review this notice carefully. By agreeing to our collection of your Biometric Data, you consent to the collection, use, sharing, and retention of your Biometric Data as described in this notice

What type of Biometric Data do we collect?

• Face geometry.

Why do we collect it?

• We require our users and anyone who purchases products from our Site to be 21 years of age or older, as a means of age verification we require you to provide a government-issued ID prior to check-out of your items.
• In certain jurisdictions we are also required to collect a photo of a government-issued ID to comply with rules applicable to the sale and distribution of hemp derived products.

How do we collect it?

• We use a third-party service provider, such as Persona, to capture a photo of your ID and your face. The service provider then compares the face geometry extracted from the photos of your ID and your face to securely verify your identity.

How do we use and share it?

• Our third-party service providers collect your Biometric Data to verify your identity.
• Our third-party service providers do not use your Biometric Data for any purpose other than to verify your identity.
• Our service providers do not share your Biometric Data with us or with any other third party. We can view a copy of the photographs of your ID and your face to help process your check-in and comply with our legal recordkeeping requirements, but we do not have access to your Biometric Data.

How long do we retain your Biometric Data?

• Tranquil can view a copy of your ID and selfie to help process your order and comply with our legal recordkeeping requirements, but we do not receive your Biometric Data.
• Our service provider, Persona, deletes your Biometric Data immediately after your ID has been verified.
• Our service provider, [Vendor], deletes your Biometric Data within [X] after your ID has been verified.

What happens to your Biometric Data at the end of the retention period?

• Our service providers permanently erase your Biometric Data at the end of the retention period described above such that it cannot be recovered or reconstructed.

Disclosure of Your Information

We will not sell, rent, or lease any Personal Information we collect from you to others. We will not make your Personal Information available to any unaffiliated parties, except as follows:

• To employees, contractors, agents, website vendors, and/or contractors who may use it on our behalf or in connection with their relationship with us;
• To our affiliates, service providers, and third-parties [e.g., Google, list vendors] for marketing purposes, building targeted ad campaigns, and providing you information about us or our services.
• To others, including law enforcement, if we believe such release is reasonably necessary to comply with law or legal process; enforce or apply the applicable Tranquil Terms of Use, if reasonably necessary to protect our operations, members, or users; detect, prevent or otherwise address fraud, security, or technical issues; protect the rights, property, or safety of others; in a matter of public safety or Policy; or as needed in connection with the transfer of our assets. In the event of an insolvency, bankruptcy, or receivership, your Personal Information may also be transferred as a business asset.
• In the event of the sale of Tranquil’ S business, your Personal Information may be transferred as part of that sale to the purchaser

In addition, we may share aggregate, non-individual information, incapable of identifying a person, or Business Information, with third parties for lawful purposes. We will not disclose any of your Personal Information except as identified here, when we have your permission, or under special circumstances, such as when we believe in good faith that the law requires it or under circumstances described in this Policy. If you wish to restrict or limit any of this sharing, please contact us at the information provided in the “Questions and Contact Information” section below.

Payment Procedures

Our e-commerce store operates on a software platform designed to facilitate the sale of our products and services to you.

Payment: In the payment process, if you furnish us with your credit card details, we transmit this information to our PCI-DSS compliant payment gateway for secure processing using SSL encryption technology. Your credit card information is never retained for purposes beyond the specific transaction for which it was provided.

All direct payment gateways adhere to the standards established by PCI-DSS, overseen by the PCI Security Standards Council—a collaborative initiative involving major brands such as Visa, MasterCard, American Express, and Discover.

PCI-DSS requirements play a crucial role in ensuring the secure handling of credit card information by our store, as well as by our payment processors and service providers.

Access and Consent to Use of Your Personal Information

If you believe that the Personal Information that we have collected about you is incomplete, inaccurate, or not up to date, or if you would like to review and/or request changes or deletion of that information, please see the contact information in the “Questions and Contact Information” section.

If you do not consent or want to withdraw your consent for us to collect, use, or disclose your Personal Information as described in this Policy, please use the contact information provided in the “Questions and Contact Information” section. In your request, please identify the Personal Information at issue and the collection, use, or disclosure you wish to stop.

Denying or withdrawing consent may not allow us to provide you with some or all the products, services, or information you request.

You may opt-out of receiving marketing-related emails, targeted advertising messages, or promotional offers from Tranquil by clicking the “unsubscribe” link at the bottom of any email you receive from us or emailing us at

If you opt-out from receiving marketing emails or text messages, we may still need to send you communications about your account, membership, and other matters. If you agreed to receive future marketing communications directly from a third party through our Site, you will need to contact that party to opt-out of such communications. This process may be outlined on that party’s privacy policy. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI“) on the NAI’s website.

You have the option to decline personalized advertising through the following channels:

FACEBOOK – Facebook Ad Settings

GOOGLE – Google Ad Settings

BING – Bing Ads Personalized Ads

Additionally, you can choose to opt out of certain services by visiting the Digital Advertising Alliance’s opt-out portal at: Digital Advertising Alliance Opt-out Portal.

 

California Residents

 If you are a California resident, you may have certain rights with respect to your Personal Information including the following rights:

• The right to know, by way of our Policy and any specific inquiries you direct to us, where Personal Information we have about you comes from, what we use that information for, whether it is being disclosed or sold, and to whom it is being disclosed or sold;
• The right to have access to any Personal Information we have in our possession or control regarding you;
• The right to “opt-out” Tranquil’s sale or sharing of your Personal Information to any third parties and to “opt-out” of any automated decision making or profiling;
• The right, with some exceptions, to have your Personal Information deleted from Tranquil’s possession or control;
• The right to receive equal service and pricing from Tranquil even if you exercise any of your privacy rights
• The right to correct inaccurate Personal Information;
• The right to receive your Personal Information to allow it to be moved to other companies; and
• The right to restrict sensitive Personal Information processing.

 

California Civil Code Section 1798.83 permits users of the Site who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. A California resident may also use an authorized agent to submit a right to access request or a request to delete. If you are a California resident, you have a right to request from us a list of all third parties to which we have disclosed Personal Information during the preceding year for third-party direct marketing purposes. Once we verify your identity, we will respond to one request per California resident per calendar year. To make such a request, to learn more, or if you have any questions or concerns about your California privacy rights, please visit the Privacy Notice for California Residents or contact us at:

Tranquil Products, LLC

Attn: California Privacy Request

[mailing address]

 

Within sixty days of receipt of your appeal, Tranquil shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions. If unsatisfied, you may file a complaint with the Virginia Attorney General at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.

 

Colorado Residents

 If you are a Colorado resident, you may, upon request, have certain rights with respect to your Personal Information, including the following rights:

• To opt-out of the processing of your Personal Information for purposes of targeted advertising, the sale of Personal Information; or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;
• To confirm whether Tranquil is processing your Personal Information and to receive access to that Personal Information;
• To correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Information;
• To delete your Personal Information; and
• When exercising your right to access your Personal Information, to obtain the Personal Information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.

 

Tranquil will respond to any of the above requests within forty-five days. Tranquil may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:

Tranquil Products, LLC

Attn: Colorado Privacy Request

[mailing address]

 

If Tranquil declines to take action regarding your request, Tranquil shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen days of receipt of Tranquil’s initial response to the following:

Tranquil Products, LLC

Attn: Colorado Appellate Request

[mailing address]

 

Within forty-five days of receipt of your appeal, Tranquil shall inform you in writing of any action taken or not taken, in response to the appeal, including a written explanation of the reasons for the decisions. Tranquil may extend this period by sixty days where reasonably necessary, considering the complexity and number of requests serving as the basis for the appeal. If unsatisfied, you may file a complaint with the Colorado Attorney General at https://coag.gov/file-complaint/.

 

Connecticut Residents

If you are a Connecticut resident, you may, upon request, have certain rights with respect to your Personal Information, including the following rights:

1)    To know what Personal Information we have collected about you, so long as revealing such information would not reveal a trade secret;

2)    To obtain, where technically feasible, a copy of all the Personal Information that we have acquired about you;

3)    To correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Information;

4)    To delete your Personal Information; and

5)    To opt out of the processing of your data for the purposes of: a) targeted advertising, b) the sale of Personal Information, or c) profiling in furtherance of solely automated decisions that produce legal or similar significant effects on you.

 

Tranquil will respond to authenticated requests seeking any of the above requests within forty-five days. All requests pursuant to the above rights should be submitted to:

Tranquil Products, LLC

Attn: Connecticut Privacy Request

[mailing address]

 

Utah Residents

If you are a Utah resident, you may, upon request, have certain rights with respect to your Personal Information, including the following rights:

1)    To confirm if we are processing your Personal Information and to access that data;

2)    To delete Personal Information that you provided to us;

3)    If technically feasible, to obtain a copy of data that you provided to us in a portable manner; and

4)    To opt out of the processing of Personal Information for targeted advertising or sale.

 

Tranquil will respond to authenticated requests seeking any of the above requests within forty-five days. All requests pursuant to the above rights should be submitted to:

Tranquil Products, LLC

Attn: Utah Privacy Request

[mailing address]

 

Virginia Residents

 If you are a Virginia resident, you may, upon request, have certain rights with respect to your Personal Information, including the following rights:

• To confirm whether or not Tranquil is processing your Personal Information and to access such Personal Information;
• To correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information;
• To delete your Personal Information;
• To obtain a copy of your Personal Information that you previously provided to Tranquil in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Information to another controller without hindrance, where the processing is carried out by automated means; and
• To opt-out of the Personal Information processing for purposes of targeted advertising, the sale of personal Information, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Tranquil will respond to any of the above requests within forty-five days. Tranquil may extend this deadline once by an additional forty-five days when reasonably necessary, taking into account the complexity and number of your requests, so long as we inform you of the extension within the initial forty-five-day response period along with the reasons for the extension. All requests pursuant to the above rights should be submitted to:

Tranquil Products, LLC

Attn: Virginia Privacy Request

[mailing address]

If Tranquil declines to take action regarding your request, Tranquil shall inform you within the deadlines discussed above, along with the justification for that decision. Should you choose to, you may appeal the decision not to take action (or to take limited action) by submitting an appeal within fourteen days of receipt of Tranquil’s initial response to the following:

Tranquil Products, LLC

Attn: Virginia Appellate Request

[mailing address]

 

Other State Residents

 Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee and Texas provide (now or in the future) their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Correct inaccuracies in their personal information, taking into account the information’s nature processing purpose (excluding Iowa).
• Data portability.
• Opt-out of personal data processing for:
  1. targeted advertising (excluding Iowa);
  2. sales; or
  3. profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa).
• Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights please contact Tranquil by mail at the mailing address below. To appeal a decision regarding a consumer rights request please mail Tranquil at the appellate mailing address below.

 

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to the designated General Privacy Request mailing address below.

Tranquil Products, LLC

Attn: General Privacy Request

[mailing address]

 

Tranquil Products, LLC

Attn: General Appellate Request

[mailing address]

 

Security of your Personal Information

We are committed to protecting the information we receive from you.  We take appropriate security measures to protect your information against unauthorized access to or unauthorized alteration, disclosure or destruction of data. To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we maintain appropriate physical, electronic, and managerial procedures to safeguard and secure the information and data stored on our system. Tranquil uses SSL Protocol and SSL Encryption for this purpose.

When personal information (such as a credit card number) is transmitted by Tranquil to other websites, it is protected through the use of encryption, such as the Secure Sockets Layer (SSL) protocol. While no computer system is completely secure, we believe the measures we have implemented reduce the likelihood of security problems to a level appropriate to the type of data involved.

Links to Other Websites

Our Site may contain links to, or advertisements about, non-Tranquil websites. Other sites may also reference, advertise, or link to the Tranquil Site. You may be able to post content to third party Social Networking Sites on which we maintain a presence or share information from your Social Networking Sites with us. If you choose to do this, we will provide information to the Social Networking Site(s), and receive information from them, in accordance with your elections. You acknowledge and agree that you are solely responsible for your use of those websites and that it is your responsibility to review the applicable terms of use and privacy policies. We are not responsible for the availability, accuracy, content, products or services of third-party Social Networking Sites.

While you are using the Site, you may be linked or directed to other third-party websites that are beyond our control.  These third-party websites may have privacy policies and terms of use which differ from ours.  Please carefully review these policies. We are not responsible for any actions or policies of such third parties.

Retention and Accuracy of Personal Information

We do our best to ensure that the Personal Information we hold, and use is accurate. We rely on the individuals we do business with to disclose to us all relevant information and to inform us of any changes. Personal Information is kept only for so long as is required, in accordance with our records retention policy and legal and regulatory requirements. If Personal Information is no longer required, we destroy it or render it anonymous. In any event, all Personal Information collected by us will be deleted within 24 months of your having last interacted with us or the Site.

Changes to the Policy

 From time to time, we may change this Policy and will notify you of material changes by posting the changed or modified Policy on our Site. Any changes will be effective immediately upon the posting of the revised Policy unless otherwise specified.

Questions and Contact Information

 If you have any questions, wish to access, correct, or amend your Personal Information or unsubscribe, want to register a complaint or simply want more information, you may contact us at:

Tranquil Products, LLC

help@findtranquil.com