.svg){kind=logo}
.svg)
PRIVACY POLICY
This Privacy Policy applies to the Site: www.cantabrialabs.com/us .
Cantabria respects your privacy and is committed to protecting your Personal Data. This Privacy
Policy describes how we collect, use, disclose, store, and protect information collected through
our website, products, services, communications, and related interactions.
By accessing or using the Site, you acknowledge the practices described in this Privacy Policy.
For purposes of this Privacy Policy, “Personal Data” or “Personal Information” means
information that identifies, relates to, describes, or can reasonably be associated with an
identifiable individual.
1. WHAT PERSONAL DATA DO WE COLLECT?
1.1 We collect and use the following Personal Data only to the extent reasonably necessary for
the purposes described in this Privacy Policy.
1.1.1 Information that you provide to us (e.g., by completing a form on the Site or contacting
us).
- Your name and contact details (including telephone number, home address, and email address);
- Billing information (including delivery address and payment details, including credit card information). We reserve the right to request additional evidence or proof of billing information when we believe it is necessary.
- Expressed personal preferences (e.g., communications and language settings);
- Interactions with us (e.g., transaction history);
- and correspondence and communications between you and us.
1.1.2 Information we collect from your use of the Site. We may automatically collect the
following information:
oTechnical information, including your computer’s IP address, browser type and version,
time zone setting, browser plug-in types and versions, operating system and platform;
oand Information about your visit, including the URL clickstream to, through, and from
our Site (including date and time);
oproducts you viewed or searched for;
opage response times, download errors, length of visits to certain pages, page interaction
information (such as scrolling, clicks, and mouse-overs), and methods used to browse
away from the page.
1.2 Where permitted by applicable law, we may also collect ancillary information either directly
or from third-party sources (e.g., business partners, growth acceleration platforms, sub-
contractors in technical, payment, and delivery services, advertising networks, analytics
providers, search information providers, and credit reference agencies) and may combine it with
your Personal Data for the purposes described in this Privacy Policy.
1.3 You do not have to provide Personal Data to access the Site, but certain functionality (such as
being able to purchase our products via the Site) will not otherwise be available to you.
1.4 You confirm that all information you provide to us at any time is true, accurate, and
complete.
1.5 You must not provide information about anyone else unless you have that party’s permission
to do so.
1.6 We retain Personal Data only for as long as reasonably necessary to fulfill the purposes
described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce
agreements, and protect our business interests.
2. WHY DO WE NEED YOUR PERSONAL DATA?
2.1 We may use your Personal Data for the following reasons:
oMarketing and Promotional Purposes: Send you personal invitations to Cantabria events
as well as marketing communications; to inform you of the scope of services offered; to
contact you for upcoming events; provide you with information about Cantabria; and
promote Cantabria services.
oBusiness Purposes: Process and receive payments, as well as inform you of needed
financial information. Transaction-related information is retained only for as long as
reasonably necessary for payment processing, accounting, fraud prevention, legal
compliance, dispute resolution, and legitimate business purposes.
oSupport Purposes: Provide you with information about our Site, products, and services;
answer your requests, comments, and questions; administer, maintain, and optimize our
Site, providing support and security services.
oLegal Purposes: Prevent and detect crimes; preventing fraud and other prohibited or
illegal activities and guaranteeing the safety and security of our Site; complying with our
billing and accounting requirements and other legal or regulatory obligations (e.g., anti-
money laundering obligations).
2.2 We do not sell or rent lists or sell or otherwise disclose Personal Data that we collect about
you, except as provided herein. However, we may share your information with other Cantabria
affiliates and with our suppliers and service providers for the purposes outlined in this Privacy
Policy.
2.3 We may also disclose Personal Data to third parties in the following circumstances:
oService Providers. We sometimes use third-party providers, such as banks and credit
report providers, to perform services on our behalf, including transaction processing,
which may keep a record of that information. If you choose a direct payment gateway to
complete your purchase, we will store your credit card data. It is encrypted in accordance
with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase
transaction data is stored only as long as necessary to complete your purchase. After your
purchase transaction is complete, your purchase transaction information is deleted. All
direct payment gateways adhere to the PCI DSS standards set by the PCI Security
Standards Council, a joint effort by brands like Visa, MasterCard, and American Express.
PCI-DSS requirements help to ensure the secure handling of credit card information by
our store and its service providers. Other third-party service providers may be payment
gateways and other payment transaction processors, who have their own privacy policies
regarding the information we are required to provide to them for your purchase-related
transactions. We recommend that you read their privacy policies to understand how your
Personal Data will be handled by these providers.
oThird parties (such as social networks), where you direct us to do so. Your personal data
will be subject to those third parties' privacy policies when it is shared with them. We are
not responsible for the privacy practices of other sites and encourage you to read their
privacy statements. If we or substantially all of our assets are acquired by a third party,
the Personal Data we hold about our customers will be one of the transferred assets that
may be disclosed to prospective and eventual buyers.
oGovernment Departments and Agencies. If we are under a duty to disclose or share your
Personal Data in order to comply with any legal obligation, or in order to enforce or
apply our Terms of Use or any other agreements.
oAffiliates and Associated Companies. To protect the rights, property, or safety of
Cantabria, our affiliates, our customers, or others. This includes exchanging information
with other companies and organizations for the purposes of fraud protection and credit
risk reduction.
2.4 In carrying out the above activities, we may transfer your Personal Data. Wherever we
transfer your Personal Data, we will take steps to safeguard it.
2.5 By submitting your Personal Data, you agree to us transferring, storing, or processing your
Personal Data as outlined above.
2.6 We will retain your Personal Data for as long as necessary to fulfill the purposes outlined in
this Privacy Policy.
3. COOKIES
3.1 Our third-party partners and we may use cookies, pixels, analytics tools, SDKs, and similar
technologies to collect information regarding use of the Site, improve functionality, analyze
performance, personalize content, and support marketing activities. By using the Site, you agree
that we may use cookies for these purposes.
3.2 The cookies that we use can be categorized as follows:
oStrictly necessary cookies are essential for your use of the Site and its features, such as
making a product purchase. We have to use these cookies for the Site to work as it
should, whether or not you agree to their use.
oPerformance cookies collect information about how visitors use the Site, so that we can
understand how our Site is used. We may use Google Analytics for this purpose:
https://developers.google.com/analytics/resources/concepts/gaConceptsCookies
oFunctionality cookies allow the Site to remember you in order to provide enhanced
customized features (e.g., language preferences).
oSocial media cookies are used when you share information using a social media sharing
button or “like” button on the Site or engage with us on or through social networking
websites such as Facebook, which may link your use of our Site to targeting/advertising
activities. We do not control how these social networks use cookies.
3.3 To find out more about cookies, visit: http://www.allaboutcookies.org/manage-cookies/. Your
browser settings may allow you to choose not to receive cookies; consult the ‘Help’ section of
your browser for more information. By rejecting or disabling cookies, certain Site content or
functionality may not be available to you.
3.4 Some browsers offer a “Do Not Track” feature. Because there is not yet a universally
accepted standard for responding to such signals, the Site may not respond to all “Do Not Track”
requests.
4. KEEPING YOUR PERSONAL DATA SECURE
4.1 We implement commercially reasonable administrative, technical, and physical safeguards
designed to protect Personal Data against unauthorized access, disclosure, alteration, or
destruction. However, no method of transmission or storage is completely secure, and we cannot
guarantee absolute security.
4.2 You are responsible for maintaining the confidentiality of your account password and for any
access to or use of our Site using your password, whether or not authorized by you. Please notify
us immediately of any unauthorized use of your password or account or any other breach of
security.
5. LINKS TO OTHER WEBSITES.
Our Site may contain links to and from third-party websites. If you follow a link to any of these
websites, please note that these websites have their own privacy policies and that we do not
accept any responsibility or liability for these policies or how those third parties may use your
Personal Data. Please check these policies before you submit any Personal Data to these
websites.
6. SAFETY OF MINORS.
We do not knowingly collect information about anyone under 18 years of age or the age of
majority in your state or province of residence. By using this Site, you represent that you are at
least the age of majority in your state or province of residence, or that you are the age of majority
in your state or province of residence, and you have given us your consent to allow any of your
minor dependents to use this Site.
7. YOUR RIGHTS.
7.1 Depending on applicable law, we process Personal Data based on consent, contractual
necessity, compliance with legal obligations, legitimate business interests, and other lawful
bases.
7.2 In accordance with applicable law, users of our Site may have the right to: access to the
Personal Data that we hold about you; request that we correct, amend, update your Personal
Data; and request that we stop using your information for marketing purposes and, in certain
circumstances, that we delete that information from our records. We will use reasonable efforts to
delete this information from our existing files.
7.3 Where required by applicable law, international transfers of Personal Data are conducted
pursuant to appropriate safeguards, including contractual protections approved under applicable
data protection laws.
8. NOTICE TO CALIFORNIA RESIDENTS.
If you are a California resident, please review our separate “Notice to California Residents,”
which supplements this Privacy Policy and contains additional disclosures and rights available
under California law.
9. INTERNATIONAL USERS
9.1 Please note that the Site is directed towards users who reside in the United States, as well as
users who reside outside the United States. By using the Site, you consent to the collection,
storage, processing, and transfer of your information in and to the United States, or other
countries and territories, pursuant to the laws of the United States. Some of these countries may
not offer the same level of privacy protection as your own. Any such transfers will comply with
the safeguards required by applicable law. If applicable, you may have a right to claim
compensation for damages caused by a breach of relevant data protection laws.
9.2 If you are a resident of the EEA or Switzerland, the following information applies:
9.2.1 Right to lodge a complaint. Users who reside in the EEA or Switzerland have the
right to lodge a complaint with the relevant supervisory authority regarding our data
collection and processing activities. Contact details for data protection authorities are
available here.
9.2.2 Purposes of processing and legal basis for processing. As explained above, we
process Personal Data, as defined under data protection laws, in various ways depending
on your use of the Site. We process Personal Data on the following legal bases: (1) with
your consent; (2) as necessary to sell products; and (3) as necessary for our legitimate
interest in operating the Site, where those interests do not override your fundamental
rights and freedom related to data privacy.
9.2.3 Transfers of Personal Information. Information we collect may be transferred to,
and stored and processed in, the United States or any other country in which we or our
affiliates or subcontractors maintain facilities. Upon the start of enforcement of the
General Data Protection Regulation (GDPR), we will ensure that transfers of Personal
Data to a third country or an international organization are subject to appropriate
safeguards as described in Article 46 of the GDPR.
9.2.4 Individual Rights. If you are a resident of the EEA or Switzerland, you are entitled
to the following rights, which you may exercise by contacting us as described below. In
order to verify your identity, we may require you to provide us with Personal Data prior
to accessing any records containing information about you. The right to request data
erasure. You have the right to have your data erased from our website if the data is no
longer necessary for the purpose for which it was collected, you withdraw consent, and
no other legal basis for processing exists, or you believe your fundamental rights to data
privacy and protection outweigh our legitimate interest in continuing the processing. The
right to restrict or object to our processing. You have the right to restrict or object to our
processing if we are processing your data based on legitimate interests or the
performance of a task in the public interest as an exercise of official authority (including
profiling); using your data for direct marketing (including profiling); or processing your
data for purposes of scientific or historical research and statistics.
9.2.5 The provisions of this Section 7.2 are intended to comply with the provisions of the
GDPR and should be interpreted in a manner to be consistent therewith.
10. TEXT MESSAGING/MOBILE TERMS
When you opt-in to receive text messages, you agree to receive recurring automated promotional
and personalized marketing SMS and/or MMS text messages (such as cart reminders, for
example) from Cantabria, including text messages that may be sent using an automatic telephone
dialing system, to the mobile telephone number you provided when signing up or any other
number that you designate.
Consent to receive automated marketing text messages is not a condition of any purchase.
Message and data rates may apply.
The Site uses cookies to track items you put in your shopping cart, including when you abandon
it, and this information is used to determine when to send cart reminder messages via SMS.
You may opt out of receiving text messages at any time by replying STOP to any message. Reply
HELP for assistance.
11. CONTACTING US
If you have any questions about our privacy or security practices, or you would like to request
access to or a correction to your Personal Data, please contact us via email at
support_usa@cantabrialabs.com. Your right to access or correct your Personal Data is subject to
applicable legal restrictions. We may take reasonable steps to verify your identity before granting
access or making corrections.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Any changes will become effective upon
posting the revised version on the Site. Your continued use of the Site following any updates
constitutes acceptance of the revised Privacy Policy