This policy is effective as of January 29, 2023
We may amend this policy from time to time. We encourage you to review this policy periodically, as changes will be posted on this page. If we make any material changes to this policy we will provide a prominent notice. If you do not agree with this policy, you should not use our website, products or services.
This Policy covers:
- What Personal Information We Collect
- How We Collect Information
- How We Use Your Information
- The Legal Basis For Collecting and Processing Information
- How We Share Information
- How Long We Retain Your Information
- Your Rights Regarding Access to and Control over Personal Information
- Managing Communication Preferences
- Information for California Residents
- International Data Transfers
- Children’s Privacy
- Sensitive Information
- Contact Us
What Personal Information We Collect
- Personal identifiers, including name, email address, postal address, telephone number, and general location information
- Commercial and Financial Information, including purchases and other purchasing behavior
We collect various types of information depending on how you interact with us and what products or services you use.
Personal Information you provide to us
If you fill out a form on our website that requires contact information, such as signing up for a newsletter, submitting a request for information, providing information to help assist in support, or products and services we will collect and process that information to provide you with the communication, products or services. These types of Personal Information may include your name, email address, company name, your physical address, payment and billing information.
Personal Information collected when you visit our website
Personal Information collected when you use our products or services
When you use our products and services to place an order, we collect other types of Personal Information. These types of Personal Information include:
- Email address
- Street Address
- IP Address
We may also collect usage data regarding your use of our products and services and this data may contain Personal Information.
We also collect payment and billing information when you register for the use of our products and services. For example, we may ask you to provide a billing address for your account and payment information when creating an order. We use this information solely to process payments and deliver our products and services.
For the purposes of GDPR, STAG Provisions is considered the data controller. This means that we are responsible for deciding how we use the information that we hold. We are a Texas corporation registered in the United States with an office at South Congress Stag LLC. PO Box 40339, Austin, Texas 78704, Attn: Privacy Notice.
GDPR applies to you if you are located in the European Economic Area, the United Kingdom or Switzerland (an “EEA Individual”).
How We Collect Information
Information you provide to us.
We collect Personal Information from you when you visit our website or use our products and services. Some of this information is provided by you, and some is collected automatically. We collect Personal Information in the following ways:
- Personal Identifiers, including name, email address, postal address, and telephone number
- Commercial and Financial Information, including purchases and other purchasing behavior
- Inferences, including inferences from other data
- In accessing and using the Site and the other STAG Services.
- In registering and creating an account in connection with the purchase of any Products from STAG.
- In purchasing any STAG Products from stagprovisions.com
- In e-mail, text and other electronic messages sent through or use of the Site, and the other STAG Services.
- Through services provided to us or to you by third-party companies, agents or contractors.
Some information is collected automatically when you visit our website; we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns. This may include information about your device and browser type, your operating software, your internet service provider, your device’s regional and language settings, and other similar information. This data may include IP address, MAC address, and other device identifiers.
How We Use Your Information
We process your personal information for the following purposes:
- To provide you with information, products, or services that you request from us.
- To respond to your requests for information.
- To fulfill any other purpose you provide, including customer support requests through email submission
- To contact you with updates about our services.
- To market and advertise our services, including sending marketing communications, with your consent.
- For any other purpose with your consent.
We may also use your information to contact you about our products and services that may be of interest to you. If you do not want us to use your information in this way, you may unsubscribe from such emails or let us know at firstname.lastname@example.org.
The Legal Basis For Collecting and Processing Information
We use the following legal bases for collecting Personal Information:
- We may collect or process information with your consent, such as when you subscribe to our newsletter, ask for information, or sign up for services.
- We may collect or process information we need to provide our services or fulfill a contractual obligation.
- We may collect or process information to fulfill a legal obligation.
- We may collect information when we have a legitimate interest to do so, such as for marketing, as long as our legitimate interests are not outweighed by your rights.
- We may collect or process information if necessary to protect the vital interests of the user or another individual.
How We Share Information
We share Personal Information with our affiliates and partners as needed to provide our services. We share Personal Information with service providers such as accountants, payment processing companies, and other vendors we use to operate our website and provide our products and services.
Our vendors and service providers are not permitted to use your personal information for any other purpose than to provide contracted services. Vendors are not permitted to use your personal information for their own marketing and are not allowed to share your information for marketing purposes. We may share personal information in response to a legal summons or subpoena or if required by law enforcement agencies.
How Long We Retain Your Information
We retain your personal information for as long as it is needed to provide our services to you and to fulfill our legal obligations and for a reasonable period of time after such services are completed.
Cookies and Other Tracking Technologies
Cookies are small files stored on your web browser when you visit our website. Some cookies last only as long as you remain on the website; others, called “persistent cookies” may be stored for longer periods of time. These cookies can make browsing easier by storing your password or your preferences regarding how you use the website. Cookies collect information such as the IP address of your computer, your browser settings, and information about how you use the website. Your general location may be estimated from your IP address. Some cookies track users’ activity on our website, apps, and services in order to deliver personalized advertising to you on this and other websites.
The technologies we use for automatic data collection may include:
- Tracking APIs.
Do Not Track Policy
Your web browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and across different websites. We do not honor any web browser “Do Not Track” signals or other mechanisms that provide you with the ability to exercise choice regarding the collection of personally identifiable information about your online activities over time and across third-party websites or online services. At present, no universally accepted standards exist on how companies should respond to do-not-track signals. In the event a final universally accepted standard is established, we will assess and provide an appropriate response to these signals.
Third-party Responsibilities and Services
We may use or partner with other third-party companies, agents or contractors for various purposes in connection with our business and operations (“Service Providers”), including for our online store, customer service, payment processing, support, user behavior on our Site, order and inventory management, customer support, email marketing, SMS/MMS marketing, our loyalty program, customer reviews, STAG Product returns, cloud computing and data storage, the marketing and growth of our business and the performance of services on our behalf, such as gathering and analyzing information and the provision of services to you. In the course of performing these responsibilities and providing such services, these other companies may have access to your information. We may also share information, including your information, with these Services Providers in order to enable them to perform these responsibilities and to provide these services. These Services Providers may have adopted their own privacy policies, which are not subject to control by STAG. You should always review the policies of these Service Providers to make sure that you are comfortable with the ways in which they collect, use, maintain, protect and disclose your information. We do not list our current Service Providers because they change from time to time. If you would like the names of any of our Service Providers, please email us at email@example.com.
The Service Providers may also transmit cookies to your computer or device when you click on ads that appear on or through the Service.
As a convenience to you, we may also provide links to other third-parties from within the STAG services. If you click on one of these links, you will be redirected to that third-party’s site (via affiliate cookies) and such third party may also transmit cookies to you. We do not have any control over that or how they collect, use, maintain, protect and disclose your information. Please be aware that cookies placed by third parties may continue to track your activities online even after you are no longer using any of the STAG Services, and those third parties may not honor “Do Not Track” requests you have set using your web browser.
We use Shopify to power our online store. To find out more information about how Shopify may use your personal data, we encourage you to visit: https://www.shopify.com/legal/privacy
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to, you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
DoubleClick: We may use Google Analytics and Google Adwords remarketing codes to log when users view specific pages or take specific actions on a website. This allows us to provide targeted advertising in the future. If you do not wish to receive this type of advertising from us in the future you can opt out using the DoubleClick opt-out page or the Network Advertising Initiative opt-out page.
Google has additional information available about its Remarketing Privacy Guidelines, Policies, and Restrictions on its website.
We use Facebook Pixel to track conversion and direct relevant advertising to our customers. It is an analytics tool provided by Meta Platforms Inc. (previously “Facebook”) that allows us to measure the effectiveness of our advertising by understanding the actions Users take on the Site.
To find out more information about how Facebook may use your personal data, we encourage you to visit: https://www.facebook.com/business/m/privacy-and-data.
Your Rights Regarding Access to and Control over Personal Information
If you reside in the EU/EEA, you may have the following rights with regard to your personal information:
- Right of information and access - You have the right to access your Personal Information we have about you and to be provided with a copy of your Personal Information.
- Right to rectification - You have the right to correct or update your inaccurate or out-of-date Personal Information.
- Right of erasure - You have the right to request that your Personal Information be permanently erased/deleted.
- Right to restrict processing - You have the right to restrict the processing of your Personal Information.
- Right to object to processing - You have the right to object to specific types of processing of your Personal Information.
- Right to portability - You may ask to receive a portable copy of your personal information in a format that may be transferred to another organization.
- Right to withdraw consent - If you have given us consent to collect or process your Personal Information, you may withdraw that consent at any time.
- The Right to Non-Discrimination - We may not discriminate against you if you exercise your privacy rights.
Accessing and Correcting Your Personal Data
You may change, correct or delete any personal data that you have provided to us through your account or by contacting us by emailing firstname.lastname@example.org... We may request additional information from you in order to verify your identity before processing your request.
Information for California Residents
The California Consumer Privacy Act (CCPRA) applies to information collected from California residents. Residents of California have the following rights with regard to their personal information:
- The Right to Know and Access Information
The categories of personal information we collect is described above in the section entitled “The Information We Collect”. California residents may submit a verifiable request regarding the information collected, the types of sources from which personal Information is collected, the purposes for which information is collected, and the specific personal information collected about them.
- The Right to Have Personal Information Deleted
- The Right To Portability
- California residents may request a copy of their personal information in a format that can be transferred to another person or entity.
- The Right to Non-Discrimination
We may not discriminate against you if you exercise your privacy rights.
You may be asked for more information in order for us to verify your identity when you make a request. You may exercise your rights by Emailing us at email@example.com or calling our customer service toll-free telephone number: (512) 939-3911
We do not sell Personal Information to third parties (pursuant to California Civil Code Sections 1798.100-1798.99, also known as the California Consumer Privacy Act of 2018.
The section above, “What Personal Information We Collect,” lists the categories of Personal Information we have collected in the preceding 12 months.
VIRGINIA CONSUMER DATA PROTECTION ACT POLICY
STAG (hereafter referred to as "we," "us," or "our") is committed to protecting the privacy of personal data of Virginia residents. This policy outlines our approach to complying with the Virginia Consumer Data Protection Act (VCDPA) and our obligations under this law.
"Personal data" means any information that can be used to identify an individual, including, but not limited to, name, address, telephone number, email address, financial information, and government-issued identification numbers.
"Controller" means the natural or legal person who determines the purposes and means of the processing of personal data.
"Processor" means the natural or legal person who processes personal data on behalf of the controller.
"Processing" means any operation or set of operations performed on personal data, such as collection, use, storage, and destruction.
This policy applies to all personal data that we collect, use, and process in the course of our e-commerce activities, including personal data that we receive from customers and other third parties.
Controller and Processor Responsibilities:
As the controller of personal data, we are responsible for ensuring that the processing of personal data is lawful and in accordance with the VCDPA. As the processor of personal data, we are responsible for implementing appropriate technical and organizational measures to protect the security of personal data.
Data Collection and Processing:
We collect personal data from customers and other third parties for the purpose of providing our e-commerce services, including processing orders, fulfilling deliveries, and communicating with customers. We process personal data based on the legitimate interest of providing our e-commerce services and fulfilling our contractual obligations to customers.
We have implemented appropriate technical and organizational measures to protect the security of personal data, including encryption of sensitive data, regular backups, and restricted access to personal data. We also regularly review and update these measures to ensure ongoing protection of personal data.
In the event of a data breach, we will promptly notify affected individuals and the authorities in accordance with the VCDPA. We will also take appropriate measures to secure personal data and prevent further unauthorized access.
Complaints and Disputes:
If you have a complaint or dispute related to our processing of personal data, please contact us by emailing firstname.lastname@example.org. We will investigate and respond to your concerns in a timely and appropriate manner.
Review and Revision:
This policy will be reviewed and revised periodically to ensure ongoing compliance with the VCDPA and other data protection laws.
We are committed to protecting the information we receive from you. We follow reasonable technical and management practices to help protect the confidentiality, security and integrity of data stored on our system. While no computer system is completely secure, we believe the measures we have implemented reduce the likelihood of security problems to a level appropriate to the type of data involved.
The Site uses security measures in order to protect from the loss, misuse, and alteration of any information under our control. All orders are transmitted over secure internet connections using SSL (Secure Sockets Layer) encryption technology. In addition, only those employees and third parties who need access to your information in order to perform their duties are allowed such access.
Minors under the Age of 18
None of the STAG Services are intended for minors under 18 years of age. No one under age 13 may provide any information on or through the Site or other STAG Services. We do not knowingly collect personal data from children under 13. If you are under 13, do not use or provide any information on or through any of the STAG Services or any of its features or register on the Site, use any of the interactive or public comment features of any of the STAG Services or provide any information about yourself to us, including your name, address, telephone number, e-mail address, any screen name, or username you may use or any pictures of you. If we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that information. If you believe that we might have any information from or about a child under 13, please contact us at email@example.com.
Unless specifically requested, we ask that you not send us, and you not disclose on or through our websites or otherwise to us, sensitive personal information unless specifically requested by us or required by law.