Updated OCT 25, 2021
Privacy at Criminal Drip
Criminal Drip Inc. (“Criminal Drip” or “we” or “us”) is deeply committed to the relationship of trust we have with you, our customer. Accordingly, your privacy is important to us. When we do collect your personal information, our goal is to use it to make your experience with us better—wherever that experience takes place—be it a physical store, an event or online in the digital world. We also strive to be transparent about how we collect and use your personal information so you can make informed decisions and be in control of the information you share with us. For example, we do not sell your personal information to third parties and would never do so without your express permission. We are also committed to protecting the security of your personal information and in that regard we use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use or disclosure.
Categories Of Information We Collect
Personal information (or “PI”) generally means information that personally identifies you, or that could reasonably be used to identify you. The categories of PI that we may collect from you include:
✔ Contact PI such as name, postal or email address, or phone number. For example, we’ll ask for: an address if you order a catalog or create an account with us or join our member program; a phone number to notify contest winners or to help authenticate you; your cell number if you sign up for SMS alerts; and other personal information to help us anticipate your shopping needs or to make suggestions.
✔ Registration & Account PI such as PI you provide, or that we otherwise collect, when open an account with us. Such PI includes things like your name, email, mailing or billing address, telephone number, order history, and birthday. You may also provide additional PI if you choose to personalize your account, for example, by adding items to a wish list.
✔ Transactional PI for all purchases & returns. This includes things like credit, debit or gift card data, mailing & email addresses, phone number, IP or device addresses or identifiers, and other related information such as receipts, confirmations, shipping, billing, adjustments, loyalty programs and so on. This PI can be about you or others (such as a gift recipient’s data).
✔ Activity or Qualification PI includes supplying PI to meet an age or experience limit, or indicating your likes or dislikes by clicking a “thumbs up/down” type of icon. Please note that if one of your activities is posting PI in publicly available areas (with us or with others), that information becomes public. So please think before you post (because anyone may be able to see or copy it).
✔ PI you give us that we didn’t request, such as PI that you voluntarily put into a message to us or that happens to be in a picture or video that you provide to us.
✔ Community PI, such as PI that you post in areas of our websites or applications, or in interactive areas or communities that we or others maintain, such as social media sites, when the information you post is accessible to other users or the public (for example, posting a product review or creating a tag).
✔ Sensitive Data: This may consist of what you consider sensitive PI, such as financial related information, certain geo-location data or other stored information such as contacts, photos, and videos.
✔ Event PI such as a name badge or other attendance data. Event information varies with the event, but could include things like your hometown or emergency contact information.
✔ Promotional PI & Surveys. This is PI such as information relating to a survey or poll, contest, sweepstake, or other activity or promotion sponsored or presented by us alone or with others. This PI varies, but tends to include things like name, gender, email, postal code, birthday and mailing address (e.g., if a prize or catalog will be shipped).
Below are examples of types of PI we tend to collect from other sources or, indirectly, from you:
✔ PI from our previous records such as PI you gave us for one activity that we use for another (e.g., re-using data from one transaction to pre-populate fields in a subsequent transaction to decrease ordering hassle).
✔ PI we obtain from public or other sources, to the extent permitted by law, such as from phone books, websites, mobile applications, and other information that others may have about you.
✔ Indirect Transactional PI. When directly collecting “Transactional PI” we also indirectly collect information that is used for things such as fraud prevention or for authentication (e.g., time, date, store location, items purchased).
✔ Indirect PI. If you participate in an event or visit one of our retail locations, PI such as your image may be captured on surveillance cameras, which we use for safety, security and fraud prevention purposes. If you deal with us (or those who help us) over the phone or in a “live” meeting we may record the conversation for quality, training and record keeping purposes.
✔ PI we may lawfully obtain from commercial providers of information such as a data broker, ad network, marketing participant and so on.
✔ Metadata. Digital items often have embedded data that you might or might not know about. For example, a digital picture might have a record of where and when you took it. Unless you remove such data, it would be an example of PI we may collect and use.
Cookies and Other Technology and The Information They Collect
When you visit one of our websites, such as criminaldrip.com, contest.criminaldrip.com, or members.criminaldrip.com (these and any others we own or operate are referred to as a “Site”) or interact with us at one of our stores or at an event (this and our Sites and our Apps are collectively referred as “Channels”), we may use different kind of technologies for multiple reasons, including to improve your shopping experience, for example by reducing the amount of information required at checkout or by otherwise personalizing your experience with us.
Here are some examples:
• Browsers: a “browser” is essentially an application (such as Chrome, Firefox or Safari) used to access and view websites by processing HTML, the code used to help you see text, links and other items.
• Identifiers, including unique identifiers such as an IP address (basically, this is a number that is automatically assigned to a device such as a computer by your Internet Service Provider); a Media Access Control (or “MAC”) address which basically is a hardware ID number that is part of a network card such as a Wi-Fi or Ethernet card and that identifies each device on a network, or other identifiers (e.g., Android ID, Apple IDFA, or other identifiers that might otherwise relate to you or devices you use, or identifiers that are used by ads, advertisers, networks, platforms or other third parties). The above is not necessarily a complete list and we will change and add Technologies and Channels from time to time. Technologies are complex and can differ per Channel. Also, certain kinds of Technologies are likely to be used in multiple Channels.
We may use these types of third party technologies to collect information and when we do we work closely with these third parties to protect your PI. Third parties may offer some options that may be helpful to restrict some kinds of tracking. If you would like more information about this practice and to know your choices for not having this information used by third-party service providers, please visit: www.networkadvertising.org/managing/opt_out.asp
Set forth below are some examples of information that might be PI that can be collected by technologies we use.
• Information such as browser type and version; access device type (e.g., phone, tablet, laptop or whatever); operating system; Internet Service Provider; IP address, MAC address and/or other unique device identifier(s); phone number; hardware/software types, authentication data, demographic data, search history, screen resolution, and other data that might create a unique “fingerprint” or the like of your device.
• Domain name from which you came or a page, link, ad, website or source that referred you; time and date stamps; how long you stay and whether you are a return visitor; where and what you do in our Channel, including what’s in your shopping cart and details of items purchased; clickstream data and clicks on particular items such as an ad; other acts you take and pages you view; account holder activities (e.g., if you have an account with, or otherwise are a member of, Criminal Drip, we track what you do to accumulate points); patterns (e.g., how often you come back to a Channel or features you tend to use) and so on.
• General location data (e.g., country or postal code) or precise location data (e.g., an App of ours like our App for Criminal Drip might ask if it’s okay to collect exactly where you are).
• Other types of information such as: user history on use of Apps; social media check-ins or other types of log in information at stores and/or events; coupon information, Criminal Drip loyalty reward redemptions, etc.
How we use personal information
Set forth below are some non-exclusive illustrations of how we tend to or may make use of PI.
We may collect and use your PI to provide you products and services, notify you of product recalls or safety issues, process and respond to your application for current or future career opportunities, to respond to your comments or questions, determine your satisfaction with our programs and service, to personalize your experiences, if you ask us to, send you marketing communications and other information you have chosen to receive regarding our products, services, marketing or special events. We may also use push notification on our Apps. We also may use your PI for our everyday business purposes such as security, payment processing, analytics, operations, fraud detection and prevention, reporting, making back-ups and legal compliance. In addition, we may also use the personal information you provide:
• To pre-populate a form for you such as populating address information at check out.
• To deal with companies or celebrities or other third parties that participate with us in events, promotions, videos, and other activities.
• To deal with Third Party Services and other service providers, including data analytic providers such as Google Analytics. Third parties that we use, or even just third parties that you might reach via links from our Channels, may have their own privacy policies or separate terms & conditions.
• To receive and review a question or request from you.
• To deal with our current or future affiliates. This may include things like the transfer of personal information and other information from Criminal Drip to one of its affiliates.
• To make common uses of it (i.e., uses that an ordinary reasonable person should expect or that are typically thought to be legally acceptable).
• To make extraordinary uses (e.g., in a merger or bankruptcy etc.).
• To respond to a domestic or foreign legal process (e.g., a governmental or non-governmental subpoena).
• To make secondary uses (e.g., collecting information for one reason but using it for another when such use appears useful or relevant to our business).
• To include you in relevant lists (like club or customer lists, newsletters, blogs, feeds, alerts or other communications).
• To deal with social networks. We and you will be subject to their applicable policies and rules, some of which may allow you to restrict some disclosures.
• To make and disclose Aggregate Data
How We Use Your Personal Information
Service Providers. PI may be transferred to, or collected by, service providers (including affiliates acting in this capacity) for a variety of purposes such as credit card processing, shipping, authentication, email distribution, loyalty program management, market research, promotions management, call centers, information technology and data hosting or processing services.
Advertising Networks. We may use a variety of third party advertising networks, traffic measurement service providers, marketing analytics service providers and other third parties to, for example, facilitate targeting of advertisements and/or measure and analyze advertising effectiveness and/or traffic on our Sites. Some of these third party service providers participate in the Network Advertising Initiative’s Opt-Out Tool (//www.networkadvertising.org/choices/) and/or the Self-Regulatory Program for Online Behavior Advertising (//www.aboutads.info/choices/). You can learn more about these tools by clicking on the referenced links. Please note the following with respect to opting out:
• The opt-out tools discussed above are “cookie based.” This means that the tools rely on cookies to remember your choices with respect to the use of your information by the parties that offer you those choices. If you delete tracking technologies using the controls in your Web browser after opting out, you may have to opt out again to re-establish your opt-out preferences.
• Opt-outs are “browser-specific.” The opt-out preferences that you choose will apply only to the Web browser that you used when you selected these preferences. This means, for example, that if you opt-out while using Internet Explorer this choice will not affect the use of information collected by tracking technologies when you use Mozilla Firefox on the same Device. It also means that opting-out on one device will not affect the use of information by tracking technologies on other devices that you may use to access out Site.
Other. We may disclose PI as necessary to exercise, enforce or preserve our rights, to meet legal, regulatory, self-regulatory and insurance requirements, for security, fraud prevention, authentication and verification purposes, and to respond to a domestic or foreign legal processes (e.g., a governmental or non-governmental subpoena or a warrant or production order). We may also disclose PI for other purposes with your consent or as permitted or required by law, including foreign laws applicable to us, our affiliates and service providers.
How We Protect Your Personal Information
The file containing your PI will be maintained on our servers (or those of our affiliates or service providers) and will be accessible to our authorized employees, representatives and agents who require access in connection with their job responsibilities. We use physical, electronic, and procedural safeguards to protect your PI from unauthorized access, use or disclosure. We use what we believe are commercially reasonable security measures to protect your PI that we possess or control. You also have a role in security, for example you are in charge of the security of any applicable password for a Channel and you control the access device you use (some of which devices can be insecure). An unfortunate reality of our digital age is that security measures are seldom infallible, accidents happen and individuals (including, but not limited to, employees, or service providers) might fail to follow policies or contracts.
Phishing attacks attempt to steal consumers’ personal information and financial account credentials. “Phishers” use ‘spoofed’ e-mails to lead consumers to counterfeit websites designed to trick recipients into divulging Information such as credit card numbers, account usernames, passwords and social insurance numbers. WE DO NOT SEND EMAILS ASKING YOU TO PROVIDE OR CONFIRM CREDIT CARD NUMBERS, SOCIAL INSURANCE NUMBERS OR YOUR USERNAME OR PASSWORD! If you receive such email communication, please forward it immediately to us at firstname.lastname@example.org with the subject of “Privacy/Identify Theft”, and take appropriate actions to review the security of your computer or other device.
You can and should update your contact information so that we can communicate with you effectively, especially mobile phone numbers and your email address as this information is needed so that we can stop sending messages to your old number or address.
2921 Bancroft Dr
Sudbury, ON P3B1T8