Privacy Policy

Last Updated: February 4th, 2025

Thank you for accessing millyllc.com, which is owned and operated by MMJ Apparel LLC (“MILLY”). The terms of this Privacy Policy apply to information collected from you online, on the MILLY® website at www.millyllc.com, related websites and our mobile sites (like our blog), on any of our mobile applications or social networking services, and in-person in boutiques operated by MILLY (collectively the “Sites”), or through any other method. 

We respect your privacy and want to protect your personal information. This Policy lets you know what information we collect from you, what information we disclose and to whom, and how we and our service providers use your personal information. The Policy also explains the steps we have taken to secure your personal information. Finally, this Policy explains your options regarding the collection, use, disclosure and deletion of your personal information. 

If you are a resident of the European Union, California, Nebraska, Texas, or Virginia, please see the following sections of this Policy: 

European Union

California

Multi-State Consumer Notice (Nebraska, Texas, and Virginia)

By visiting the Site, directly or through another site, you accept the practices described in this Policy. This Policy forms a part of our Site Terms of Use at https://www.millyllc.com/pages/terms-of-use. 

In addition, any information you may submit in connection with your participation in a contest, giveaway or other promotion sponsored by MILLY or any of its affiliates or partners will be treated in accordance with this Privacy Policy, except as specifically set forth in the rules for those contests, giveaways or promotions. 

COLLECTION OF PERSONAL INFORMATION 

What constitutes “personal information”? 

Personal information is information that can be directly or indirectly associated with a specific person such as a customer's name, mailing address, telephone number, mobile number, e-mail address, credit card number, social security number, information that would permit us to contact a customer physically or online, a customer's account name/number and related information (such as username and password), or information about activities directly linked to a person, such as his or her purchases. 

The definition of personal information includes data, such as a person’s Internet IP address, geolocation data, biometric information, unique personal identifier; online identifier; driver’s license number; passport number; other similar identifiers; records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies; Internet or other electronic network activity information (including browser and search histories); and audio, electronic, visual, thermal, olfactory, or similar information. 

Personal information does not include publicly available information that is lawfully made available from federal, state, or local government records. 

Personal information does not include “aggregate” or “deidentified” information. Aggregate information is data we collect about a group or category of products, services or customers, from which individual customer identities have been removed and there exist technological safeguards that prohibit reidentification of the consumer to whom the information may pertain. In other words, information about how you use a service may be collected and combined with information about how others use the same service, but no personal information will be included in the resulting data. 

Likewise, information about the products you purchase may be collected and combined with information about the products purchased by others. Aggregate data helps us understand trends and customer needs so that we can better consider new products and services, and tailor existing products and services to customer desires. 

When Do We Collect Personal Information? 

We collect certain personal information when you sign in to the Website; sign up for marketing communications; create an account for online shopping; register with millyllc.com; participate in a contest, promotion or survey; or request other services that require personal information for registration or subscription services. We also keep a record of your product interests and purchases online and automatically receive and record information on our server logs from your browser (including your IP address, data captured by cookies, pixels, tags and the web page(s) you requested). 

How We Collect Information 

MILLY collects personal information that you voluntarily provide to us, both online and in-stores, such as when you:  

  • make a purchase; 
  • register with our Sites;
  • sign up for special offers or promotions; 
  • use a third-party connection or log-in to create a membership or profile on any of our Sites, access any content on our Sites or forward content from our Sites to another person (such as email, Facebook, Twitter, Pinterest, Instagram, Google Plus and YouTube); or 
  • contact us for any reason, reply to one of our inquiries by email, postal mail, online, or by telephone through customer service. 

In addition, we and our third-party providers automatically collect certain information when you visit the Sites, such as your computer’s IP address, operating system, the site from which you linked to us, and the time and date of your visit and purchases. 

From time to time, we work with third parties (such as e-commerce sales and payment providers, marketing firms, networks, analytics providers, search information providers, credit reference agencies) that provide us information about you, excluding your credit card information (which we do not receive or store). For example, we use Shopify, PayPal, Amazon Pay, and Afterpay to administer payment processing. These and other third parties identified in this Policy may collect and store certain personal information about you, and you should carefully review those companies’ privacy policies to understand what information they obtain from you and how they use and secure it. We also use one or more fraud protection service providers that set cookies to protect both you as a consumer and us. 

If you want to access, correct or object to the collection of your personal information, you can contact us using the details set forth below in the Choice/Opt-Out paragraph. If you are a resident of California or the European Union, you have certain additional rights that are set forth below in the California Residents and European Residents sections. 

COOKIES

MILLY and its analytics and other service providers use technologies such as cookies, web beacons, tags, scripts and other similar technologies (collectively, “Cookies”) to collect certain information. These technologies are used to help us and our business partners analyze trends, administer the Sites, remember preferences, track users’ movements around the Sites and gather demographic information about our customer base as a whole. Some types of Cookies, like web beacons, allow us or third parties working on our behalf to gauge and enhance the effectiveness of our marketing by allowing us to understand whether users follow links in our e-mails or on our Sites, and by gathering information about other sites users visit before and after visiting our Sites. Certain other Cookies are used to store preferences on a user's computer or mobile device, or display content based upon what a user viewed on the Site to personalize their visit. Currently, MILLY employs cookies and tracking technologies on its Sites, including the following:  

  1. Essential cookies are crucial for basic website operations, ensuring that the site functions correctly by managing actions such as setting privacy preferences, logging in, or filling in forms. Without these cookies, key features of the website may not work properly.
  2. Personalization cookies improve website functionality and personalization. They remember choices like language preferences, themes, and other settings, ensuring a more customized and seamless user experience. These cookies also remember user-specific settings and preferences, such as preferred language and region. This ensures that users receive content and services tailored to their personal preferences and location, providing a more personalized experience on the website.
  3. Analytics cookies gather data on how visitors interact with the website. They track page visits, user behaviors, and any errors encountered. This information is used to improve the website’s performance and usability, with all data collected being anonymous and aggregated.
  4. Targeted advertising cookies are designed to deliver relevant advertisements to users. They track browsing habits to tailor ads to individual interests and limit the number of times a user sees a particular ad. They also measure the effectiveness of ad campaigns by remembering visits to the website and sharing this information with advertisers. These include social media cookies which enable integration with social media platforms, allowing users to share content and interact with the website through their social media accounts. These cookies can track users across different sites and build profiles based on their interests, influencing the content and advertisements seen on other websites.

Because technology is constantly changing, however, we may change the types of Cookies that are used with the Sites from time to time. We will update this Policy in accordance with applicable law and if we materially change the manner in which we collect information. 

Disabling Cookies and Tracking Technology 

Some, but not all, Cookies may be disabled or removed through cookie management tools provided by your browser. If you are concerned about cookies and tracking technologies, we encourage you to visit the websites www.allaboutcookies.org to better understand what Cookies are set on your computer or mobile device and how to manage, disable or delete them. In addition, some of our third-party advertisers or display networks (including Google Analytics) may participate in the Digital Advertising Alliance’s Self-Regulatory Program for Online Behavioral Advertising and allow consumers to opt-out of targeted advertising based on web activity tracking. Additional information about the foregoing is available at  https://www.aboutads.info/choices/. 

If you choose to disable or delete Cookies, you should know that you may not be able to take advantage of all the features of our Sites, including certain personalized features. Rejecting Cookies may also affect your ability to perform certain transactions on the Sites, and our ability to recognize your browser from one visit to the next. Accordingly, if you opt out, you will still see ads from us online, but we will not know it’s you, so we will not be able to apply any of your ad preferences. Note, also, that we will keep a cookie on your computer to remember that you have opted out. That opt-out cookie (like all Cookies) is associated with a particular computer and browser. So if you get a new computer, install a new browser, or clear your Cookies, you’ll need to opt-out again. 

How We Respond to “Do Not Track” Settings 

Our Sites do not respond to or alter the practices detailed herein based upon your selection of the “Do Not Track” setting or feature that may be offered by your browser. 

USE OF PERSONAL INFORMATION BY MILLY 

As you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. 

We may use your information according to this Policy and our Terms of Use in effect at the time of use. The provisions contained herein supersede all previous notices or statements regarding our privacy practices with respect to the Sites. We may use aggregated data (independent of any personal identifiers) for research and commercial purposes. This information includes what areas our users visit most frequently and what services they access most often. This information helps us develop better Site that are more useful and accessible to you. We may use your personally identifiable information:  

  • for the specific purpose for which it was voluntarily provided; 
  • to provide you with a personalized browsing experience when using the Sites; 
  • to fulfill any contractual agreements between you and us (for example when you place an order for products through the Sites); 
  • to send you details (including by mail, phone, e-mail or text) of other products that we think may interest you, where you have consented to this and share your information with third parties for this purpose, unless you inform us that you do not want to receive these details; 
  • to manage any account that you hold with us: 
  • to ensure that content from the Sites is presented in the most effective manner; 
  • to notify you about changes to the Sites or our services; 
  • to develop, market, sell or provide products and services of interest; 
  • to deliver communications or obtain feedback relevant to your use of the Sites; 
  • to evaluate the quality of the information, provide more relevant content, analyze Site usage, and improve the Sites and the services provided through them; 
  • for market research, project planning, troubleshooting problems, detecting and protecting against error, fraud or other criminal activity; 
  • to create anonymous data for market profiling purposes that may be used by us and shared with our group of companies or third party service providers; and 
  • as permitted by, and to comply with, any legal or regulatory requirements, process or provisions. 
  • To process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns. 
  • To create and secure your account with us. 
  • To process your requests, purchases, transactions, and payments, and prevent transactional fraud. 
  • To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. 
  • To send you newsletters, or to provide information on products or services to you. You can elect not to receive promotional emails from us either by “unsubscribing” to an email you receive or by contacting us as indicated below.  

If you prefer not to receive promotional information from us, we make it easy for you to let us know. You can contact us at any time to decline promotional information (see the Choice/Opt-Out paragraph below). 

DISCLOSURE AND RETENTION OF YOUR PERSONAL INFORMATION

Service Providers and Contractors
We may disclose your personal information with our vendors, subsidiaries, partners, and third-party independent contractors for purposes of: (1) performing functions on behalf of us, such as processing credit card transactions; (2) providing you with product offers, marketing or promotional materials through phone, text, or electronic and/or postal mail; and (3) tracking information generated through our Website or social media sites. Our vendors, partners and third-party independent contractors are obligated contractually not to use or share your personal information for unauthorized purposes.

Outside Parties
We disclose Personal Information to third parties we work with who help us gather information from you and communicate with you including entities that provide sweepstakes/contests sponsorship, social media companies, companies providing data analytics, targeted advertising, or online behavioral marketing services. We may share product reviews that you submit with our authorized dealers solely for informational and promotional purposes. If our information practices change at some time in the future we will post the policy changes to our Website. If you are concerned about how your information is used, you should check back at our Website periodically.

Legal Obligations
We may disclose personal information to outside parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; to enforce the Terms of Use of our Website; to prevent imminent physical harm; in the event that we find that your actions on our Website violate any laws, our Terms of Use, or any of our usage guidelines for specific products or services; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring
We may disclose Personal Information to third parties in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization or other transfer of our brand or company, provided that the third party agrees to adhere to the terms of this Policy.
Finally, we never use or share the personal information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

Deletion of your personal information

Regardless of the state in which you live, we give you the right to request that we delete Personal Information that we process about you, except we are not obligated to do so under certain circumstances, including if we need to retain such data in order to comply with our legal obligations or to establish, exercise or defend legal claims.  If you are a resident of California, please review your additional privacy rights below. To request such deletion, please contact us at any time by emailing [email protected] or by submitting an online request here.

Choice/Opt-Out  

If you sign up with MILLY to receive electronic newsletters or promotional emails, including new products, special offers and event information, or to otherwise receive communications about our products and services, you will have the right at any time to opt-out of receiving marketing emails or to specify which, if any, communications you would like to receive from us. You may contact us at any time by emailing [email protected]. You may also opt-out of receiving email marketing communications from us by using the “unsubscribe” link in our emails. There is no charge to unsubscribe. To opt-out of physical mailings and telephone communications, or to add your name to our do-not-share list, you may email us at the above address or by submitting an online request here. We will be sure your name is removed from our list (and the list we may share with third parties) as soon as possible after we receive your request. Please be aware, however, that even after your request is processed, we may, for a time, retain residual information about you in backup and/or archival copies of our database. 

 Information about opting-out from targeted advertising and disabling cookies is provided above in the Disabling Cookies and Tracking Technology paragraph. 

Personal Information Security 

MILLY has implemented physical, electronic and procedural safeguards to store and maintain your personal information in a secure environment. When you enter personal information or your credit card information online, that information is encrypted using security software called SSL (Secure Socket Layer). SSL encrypts all information entered on our site before it is sent over the Internet. We also use SSL to allow you to securely view your online account and registration information. While we and our service providers, including Shopify, have implemented safeguards, you should be aware that Internet security technology rapidly changes and is not perfect. We cannot guarantee that the safeguards we and our providers employ today can protect your personal information from the threats of tomorrow or every potential malicious cyber-attack. Despite MILLY’s reasonable efforts, factors beyond MILLY’s control may result in disclosure of personal information. Accordingly, MILLY is not in a position to guarantee that your information will be secure under all circumstances. In the unlikely event we believe or are advised that the security of your personal information that we possess or control may have been compromised, we will notify you of that development in accordance with applicable laws. 

Children Under 13 

The Sites are intended for general audiences. MILLY does not intend to, and does not knowingly, collect personal information from children who are under 13 years of age. Children under the age of 13 are not permitted to make purchases on the Sites. 

GDPR NOTICE FOR CONSUMERS BASED IN THE EUROPEAN UNION 

MILLY operates the Sites from the United States and the Sites are primarily directed at US persons. If you are located outside of the United States, please be advised that we process and store Personal Information in the United States. By using our Sites, you agree to the collection, use, transfer, and disclosure of your Personal Information, and that communications will be subject to the applicable laws in the United States. This Notice for consumers based in the EU provides additional information that supplements the information provided in this privacy policy.

We work with a third party, International Checkout, to fulfill orders placed by customers who require shipment outside of the United States. Information provided to International Checkout is subject to that service provider’s privacy policy at https://www.internationalcheckout.com/privacy-policy.php, as well as the terms of this Policy. All international online sales made through our Sites are processed by Shopify, including secure credit card payments. Shopify’s privacy policy is at https://www.shopify.com/legal/privacy. 

If you are a resident of the European Economic Area (EEA), please review Shopify’s and International Checkout’s privacy policies relating to EEA residents and their rights under EEA law, specifically the EU General Data Protection Regulation (GDPR). We use our reasonable commercial efforts to insure that all our service providers for our Sites have in place GDPR-compliant privacy policies, which may include the use of European Commission-approved Standard Contractual Clauses. 

MILLY complies with applicable laws governing the international transfer of Personal Data from any EU service providers to us (as defined in the GDPR), typically through the execution of legally required service provider agreements incorporating, where applicable, standard contractual clauses approved for use by the European Union or other instructions that may be specified, updated, amended, replaced or superseded from time to time by the applicable regulatory authority.   

We will retain your Personal Data for as long as needed to provide our services to you or as needed to fulfill our own business and legal obligations, including resolving disputes, improving our services, maintaining security, preventing fraud, and meeting applicable regulatory requirements, as consistent with applicable law. We may retain non-personal data that has been sufficiently aggregated or anonymized for a longer period. 

You have certain rights and options to protect and/or manage your own Personal Data under the GDPR. These privacy rights are summarized below and explained in this Policy: 

    - The right to be informed. We are required to tell you what Personal Data we collect, how we use that Personal Data, how long we keep your Personal Data, and with whom we share your Personal Data, including third-parties. 

     - The right to access. You can ask for a copy of the Personal Data and/or Personal information that we hold about you. 

     - The right to verify and rectification. You have the right to verify the accuracy of your Personal Data and Personal Information and ask us to update any incomplete information or correct any inaccuracies. 

     - The right to erasure (also known as the “right to be forgotten”). Under certain circumstances, you are entitled to have your Personal Data deleted or removed. 

     - The right to withdraw your consent at any time. You have the right to withdraw consent where you have previously given your consent to the processing of your Personal Data. 

     - The right to restrict and/or object to the processing of your Personal Data. Under certain circumstances, you have the right to restrict or limit the way in which we use or process your Personal Data and the way Personal Data is automatically processed. You also have the right to object to our use of your Persona Data, provided that we do not have a legal reason to continue to do so. When we do rely on our legitimate interest to use your Personal Data for direct marketing, we will comply with your right to object. 

     - The right to Personal Data portability. You have the right to receive your Personal Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another entity without hindrance. This provision applies provided that the data is processed by automated means and that the processing is based on your consent. 

     - The right to file a complaint. You have the right to bring a claim before your competent Personal Data protection authority. 

If you choose not to exercise your GDPR rights as summarized above or described elsewhere in the Policy and you continue to provide us with Personal Data through the Sites, you consent to our use of the Personal Data that you provide and you accept the terms of this Policy.  

Links to Other Sites 

The Sites may contain links that allow users to access the websites of third parties that provide useful information, or who have agreed to offer goods and services to MILLY members. Any personal information you provide on the linked pages is provided directly to such third-party and is subject to that third party's privacy policy. Except as described above, we are not responsible for the content or privacy practices of websites or applications to which we link. Links from our Sites to third parties’ or other sites are provided for your convenience. We encourage you to learn about the privacy practices of each website before providing them with your personal information.  

Changes to this Policy 

We reserve the right to change this Policy at any time and will alert you in accordance with applicable laws when material changes have been made by indicating at the top of this e Policy the date it was last updated. We encourage you to review our Policy to make sure you understand how your information and data will be used. Your continued use of the Sites following the posting of changes to this Policy will be considered your consent to those changes. 

Contact Us: Questions, Concerns About or Reviewing or Correcting Personal Information

If, for any reason, you have questions or concerns regarding any provisions of this Policy or the information that we have collected about you, please contact us by sending an e-mail to [email protected]. 


CALIFORNIA CONSUMERS ONLY:

YOUR CALIFORNIA PRIVACY RIGHTS

This Privacy Rights Act Notice (“Notice”) provides additional information to California residents whose Personal Information is collected by us pursuant to California law, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). Please visit our Privacy Policy (“Policy”) https://www.millyllc.com/pages/privacy-policy for more information. Any capitalized terms undefined in this Notice have the same definition as the Policy.

PERSONAL INFORMATION COLLECTED, DISCLOSED OR SOLD

Information Collected

Within the past 12 months, we have collected the following personal information about California consumers:

·        Device and browsing history information (including the pages you visit on our website and the type of browser); 

·        Purchase or other commercial information, including credit card information for payment processing and product return data; 

·        Demographic information; 

·        Identifiers and contact information, including names, email addresses, phone numbers, shipping/billing addresses, signatures, and online identifiers Internet Protocol (“IP”) addresses; 

·        Cookie information; 

·        Geolocation data (where you have permitted such access); 

·        Customer feedback; 

·        Information shared with Customer Service; 

·        Account number; 

·        Size, fit, and product preferences; and 

·        Inferences drawn from other personal information (including buying trends, personal preferences, and online behavior and attitudes). 

 

Business-to-Business ("B2B") Information
If you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship, you have the same rights as other consumers set forth in this Notice with respect to the information we collect from you in that role. We collect the contact information you provide to us, including name, phone number, address, email address and other contact and relationship information and communications consistent with your role in facilitating that business relationship. We use that information for internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship. We do not disclose that information outside our business relationship without your consent.

Information Sold or Shared
We do not sell your data in exchange for money.  We may, however, share your data with third-party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below.

We have sold or shared the following categories of personal information for a business or commercial purpose in the preceding 12 months.

  • Personal Identifiers
  • Commercial Information
  • Internet Activity

We have disclosed the following categories of personal information for a business or commercial purpose in the preceding 12 months:

  • Personal Identifiers
  • Commercial Information
  • Internet Activity

We do not knowingly sell the personal information of individuals under 16 years of age without affirmative authorization.

For details regarding the categories of third parties with whom we have shared, sold, or disclosed personal information, please see Annex 1.

How We Collect Information 

MILLY collects personal information that you voluntarily provide to us, both online and in-stores, such as when you:  

  • make a purchase; 
  • register with our Sites;
  • sign up for special offers or promotions; 
  • use a third-party connection or log-in to create a membership or profile on any of our Sites, access any content on our Sites or forward content from our Sites to another person (such as email, Facebook, Twitter, Pinterest, Instagram, Google Plus and YouTube); or 
  • contact us for any reason, reply to one of our inquiries by email, postal mail, online, or by telephone through customer service. 

In addition, we and our third-party providers automatically collect certain information when you visit the Sites, such as your computer’s IP address, operating system, the site from which you linked to us, and the time and date of your visit and purchases. 

From time to time, we work with third parties (such as e-commerce sales and payment providers, marketing firms, networks, analytics providers, search information providers, credit reference agencies) that provide us information about you, excluding your credit card information (which we do not receive or store). For example, we use Shopify, PayPal and Afterpay to administer payment processing. These and other third parties identified in this Policy may collect and store certain personal information about you, and you should carefully review those companies’ privacy policies to understand what information they obtain from you and how they use and secure it. We also use one or more fraud protection service providers that set cookies to protect both you as a consumer and us. 

USE OF PERSONAL INFORMATION
As you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. 

We may use your information according to this Policy and our Terms of Use in effect at the time of use. The provisions contained herein supersede all previous notices or statements regarding our privacy practices with respect to the Sites. We may use aggregated data (independent of any personal identifiers) for research and commercial purposes. This information includes what areas our users visit most frequently and what services they access most often. This information helps us develop better Site that are more useful and accessible to you. We may use your personally identifiable information:  

  • for the specific purpose for which it was voluntarily provided; 
  • to provide you with a personalized browsing experience when using the Sites; 
  • to fulfill any contractual agreements between you and us (for example when you place an order for products through the Sites); 
  • to send you details (including by mail, phone, e-mail or text) of other products that we think may interest you, where you have consented to this and share your information with third parties for this purpose, unless you inform us that you do not want to receive these details; 
  • to manage any account that you hold with us: 
  • to ensure that content from the Sites is presented in the most effective manner; 
  • to notify you about changes to the Sites or our services; 
  • to develop, market, sell or provide products and services of interest; 
  • to deliver communications or obtain feedback relevant to your use of the Sites; 
  • to evaluate the quality of the information, provide more relevant content, analyze Site usage, and improve the Sites and the services provided through them; 
  • for market research, project planning, troubleshooting problems, detecting and protecting against error, fraud or other criminal activity; 
  • to create anonymous data for market profiling purposes that may be used by us and shared with our group of companies or third party service providers; and 
  • as permitted by, and to comply with, any legal or regulatory requirements, process or provisions. 
  • To process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns. 
  • To create and secure your account with us. 
  • To process your requests, purchases, transactions, and payments, and prevent transactional fraud. 
  • To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. 
  • To send you newsletters, or to provide information on products or services to you. You can elect not to receive promotional emails from us either by “unsubscribing” to an email you receive or by contacting us as indicated below.  

If you prefer not to receive promotional information from us, we make it easy for you to let us know. You can contact us at any time to decline promotional information (see the Choice/Opt-Out paragraph below). 

 

DISCLOSURE AND RETENTION OF YOUR PERSONAL INFORMATION

Service Providers and Contractors
We may disclose your personal information with our vendors, subsidiaries, partners, and third-party independent contractors for purposes of: (1) performing functions on behalf of us, such as processing credit card transactions; (2) providing you with product offers, marketing or promotional materials through phone, text, or electronic and/or postal mail; and (3) tracking information generated through our Website or social media sites. Our vendors, partners and third-party independent contractors are obligated contractually not to use or share your personal information for unauthorized purposes.

Outside Parties
We disclose Personal Information to third parties we work with who help us gather information from you and communicate with you including entities that provide sweepstakes/contests sponsorship, social media companies, companies providing data analytics, targeted advertising, or online behavioral marketing services. We may share product reviews that you submit with our authorized dealers solely for informational and promotional purposes. If our information practices change at some time in the future we will post the policy changes to our Website. If you are concerned about how your information is used, you should check back at our Website periodically.

Legal Obligations
We may disclose personal information to outside parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; to enforce the Terms of Use of our Website; to prevent imminent physical harm; in the event that we find that your actions on our Website violate any laws, our Terms of Use, or any of our usage guidelines for specific products or services; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring
We may disclose Personal Information to third parties in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization or other transfer of our brand or company, provided that the third party agrees to adhere to the terms of this Policy.
Finally, we never use or share the personal information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

CPRA RIGHTS AND REQUESTS

  • Under the CPRA, you are entitled to certain rights, and you can make requests with regard to those rights as follows:
  • Right to Know about the Categories of Personal Information Collected (“Right to Know”)
  • Right to Request Deletion of Personal Information (“Right to Delete”)
  • Right to Correct or Rectify Inaccurate Information about you (“Right to Correct”)

HOW TO MAKE YOUR REQUESTS TO KNOW, DELETE, OR CORRECT.

You have the right make requests for the aforementioned rights (Request to Know; Request to Delete; or a Request to Correct (a “Request”)).

To make a Request for any of the information set forth above, please submit a verifiable consumer request pursuant to the instructions below. The Request must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold, shared, or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will not be able to respond to your request.  We will acknowledge your Request within 10 business days and will attempt to respond substantively within 45-90 days.

You may make a Request the following ways:

 

Once we receive your Request, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with two or three pieces of information that will help us to verify your identification.

We will review all information provided by you to us, to determine whether we can respond to your Request  We will inform you of our decision to deny or grant your Request.

For any Requests to Know, you may make such Requests twice within a 12-month period. 

For Requests to Correct, you will need to provide evidence supporting the inaccuracy of the current information, and we reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.

We will retain correspondence, documents and information related to any Request for 24 months as required by law.

ADDITIONAL CPRA RIGHTS

The following are additional rights afforded to you under the CPRA. 

Right to Know Sensitive Personal Information Collected

We do not collect or process sensitive personal information for the purpose of inferring characteristics or for any purposes other than those set forth in Regulations section 7027(m).

Right to Opt out of Sharing and Selling

To opt out of sharing of your personal information:

 

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act, including by exercising the rights specified herein.

OPT-OUT PREFERENCE SIGNALS

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information without first seeking your explicit consent.

NOTICE OF FINANCIAL INCENTIVE

From time to time, Milly may provide financial incentives to consumers who elect to participate in discount programs, sweepstakes, contests and other promotions, in exchange for allowing us to collect and retain certain personal information, such as Identifiers (e.g., your name, email address, or phone number), and Commercial Information (e.g., your purchase history). These incentives may result in differences in the prices of our products offered to consumers (e.g., discounts and other promotions). For example, the financial incentives we may provide include discounts based upon purchase activity, discounts in exchange for collection of your personal information, or other periodic discounts for promotional purposes. The material aspects of any financial incentive will be explained and described in its program terms or in the details of the incentive offer.

Participation in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, please fill out a Request to Opt-Out of Incentive request here or contact us at [email protected]. 

Please note that once you opt-out, you will not be permitted to use the same email to opt-in again for an additional discount.

The value of your personal information that allows us to make these offers and financial incentives is the value of the offer itself. Each financial incentive or price or service difference related to the collection and use of personal information is calculated based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself, the expense associated with the offer, and the anticipated revenue generation that may be realized by rewarding brand loyalty and repeat purchases.

COOKIES

As explained in our  “Cookies” section above, you can opt out of cookies using your browser.

Please Note:

  • Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
  • Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
  • We may still share your information with our service providers that help us perform functions that are necessary for our business such as vendors that host our website, credit card processors, analytics processors. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
  • You may still receive ads from us that are not tailored to your interests.

ADDITIONAL OPTIONS TO OPT OUT OF SALE OR SHARING

In addition to the above options to opt out of the sale or sharing of your information under the CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties. These are summarized for you below. We do not control or maintain opt-out mechanisms for third-party companies and are not responsible for their operation.

ADVERTISING OPT OUT

You can opt out of sharing your information with third-party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools:

GOOGLE OPT OUT

If you would like to opt out of Google Analytics and Ads, you can. If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on here, and you can opt out of interest-based Google ads using this link.

FACEBOOK AD PREFERENCES

To understand more about Facebook advertising and manage your preferences, please visit Facebook Ads. Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.

RIGHT TO ACCESS INFORMATION ABOUT AUTOMATED DECISION MAKING AND THE RIGHT TO OPT-OUT OF AUTOMATED DECISION MAKING

You can request access to information about automated decision making processes Milly uses and you may request to opt out of automated decision making. We engage in automated processing. For more information, please contact us at [email protected]

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for our business purposes and the purposes for which it was collected and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

OPT-OUT PREFERENCE SIGNALS

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information for targeted advertising purposes without first seeking your explicit consent.

 

AUTHORIZED AGENT INFORMATION

You may designate an authorized agent to make a request on your behalf under the California Consumer Privacy Act.

Authorized agents can make requests under the California Consumer Privacy Act by emailing us at email address: [email protected]. We will require authorized agents to provide proof of the consumer’s identity and proof of designation as an the authorized agent. We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request.

We reserve the right to deny requests in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

CALIFORNIA DO NOT TRACK NOTICE:

Because there are not yet common, industry accepted “do not track” standards and systems, our website does not respond to Do Not Track signals. In addition, we may allow non- parties to collect personal information from your activity on our website, as described in the “Information Collection and Use” section above.

CALIFORNIA SHINE THE LIGHT DISCLOSURE INFORMATION

Although we do not disclose to any non- parties for their marketing purposes any personal information, California residents are entitled to receive the following disclosure information under California law:
Under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, email address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties. We will respond to such written requests within 30 days following receipt at the email or mailing address specified above.  If we receive your request at a different email or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received. Please note that we are required to respond to each customer only once per calendar year.

CHANGES TO THIS PRIVACY POLICY

This Policy may be revised from time to time for any reason. If this Policy changes, the revised policy will include a new effective date, and we will notify you of such changes by posting the revised policy on this page. Be sure to check the Policy whenever you submit personal information to us.

CONTACT FOR MORE INFORMATION

For information and questions about the use of your personal information or this California Consumer Privacy Section or your rights under California law, you may contact us by sending an email to [email protected]  or by calling 1(800) 223-2664

 

NEBRASKA, TEXAS AND VIRGINIA:

MULTI-STATE CONSUMER DATA PROTECTION ACT NOTICE 

This Notice provides additional information to Nebraska, Texas, and Virginia residents whose Personal Information is collected pursuant to the Nebraska (“NDPA”), Texas, (“TDPSA”), and Virginia (“VCDPA”) privacy laws.

The Notice below applies only to residents of Nebraska, Texas, and Virginia.  Please visit our Privacy PolicyPrivacy Policy (“Policy”) for more information.  Any capitalized terms undefined in this Notice have the same definition as the Policy.

RIGHT TO CONFIRM, ACCESS, AND DATA PORTABILITY

You have the right to confirm whether or not we are processing your personal data and to access such personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means. 

We have collected the following categories of Personal Information about Nebraska, Texas, and Virginia consumers:

    - Device and browsing history information (including the pages you visit on our website and the type of browser); 

     - Purchase or other commercial information, including credit card information for payment processing and product return data; 

     - Demographic information; 

     - Identifiers and contact information, including names, email addresses, phone numbers, shipping/billing addresses, signatures, and online identifiers Internet Protocol (“IP”) addresses; 

  • Cookie information; 
  • Geolocation data (where you have permitted such access); 
  • Customer feedback; 
  • Information shared with Customer Service; 
  • Account number; 
  • Size, fit, and product preferences; and 
  • Inferences drawn from other personal information (including buying trends, personal preferences, and online behavior and attitudes). 

 

Information Sold or Used for Targeted Advertising

As explained in the Privacy Policy above, we and our third-party partners such as social networking sites and marketing companies, share your data in order to tailor to your preferences across various platforms.  This type of sharing may be considered a sale or sharing of information for targeted advertising purposes under certain state laws.  You can control the information shared about you and request an opt-out. 

We disclose the following categories of Personal Information for Targeted Advertising:

  • Personal Identifiers
  • Commercial Information
  • Internet/Network Activity

How We Share Your Personal Information

We share personal information with third party marketing partners and certain co-op database service providers for commercial purposes in connection with our business.  In order to complete a transaction it is necessary for us to provide your personal information to service providers performing services on our behalf pertaining to the Sites or your product orders.  We do not generally authorize these service providers to use or disclose your personal information except as necessary to perform services on our behalf or comply with legal requirements.  In some cases, however, we may be required by our marketing service providers to disclose to them some of your personal information that they are then permitted to also use for their own direct marketing purposes.  Currently, we disclose to Oracle our users’ names and postal mailing addresses along with transaction data for Oracle to use to provide us with catalogue marketing services and for Oracle’s own direct marketing purposes.    

We may share your personal information with selected third parties performing such services, including:  

  • business and marketing partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you; and 
  • analytics and search engine providers that assist us in the improvement and optimization of the Sites.  

We currently use Shopify for our online sales platform to receive and process all orders and credit card payments. We do not receive or store your credit card information. Shopify’s privacy policy is located at https://www.shopify.com/legal/privacy. 

We use Klaviyo for email marketing services. Klaviyo’s privacy policy is located at https://www.klaviyo.com/privacy/policy.

We also use Wunderkind (formerly BounceX) for marketing services, including behavioral emails and website personalization.   Wunderkind’s privacy policy is at  https://www.wunderkind.co/privacy.  

In addition, we use the services of third-party co-op database providers, including, for example, Oracle and Epsilon, for consumer marketing purposes and our catalogue mailings.

We use Cross Country Computer for address and zip code verification services for our catalogue mailings using US Postal Service data. 

We may also disclose or transfer your personal information in the event that MILLY were to sell or buy any business or assets, including a sale of our own company and its assets to another company. In those cases, we may disclose and transfer your personal information to the seller or buyer of such business or assets, and if MILLY or substantially all of its assets were to be acquired by a third party, the personal information of our customers would likely be one of the transferred assets. Additionally, MILLY may disclose personal information as may be permitted or required by law, regulation, rule or court order; pursuant to requests from governmental, regulatory or administrative agencies or law enforcement authorities; or to prevent, investigate, identify persons or organizations potentially involved in, or take any action regarding suspected fraud, violations of our Terms of Service, or activity that appears to us to be illegal or may expose MILLY to legal liability; and in situations that we believe to be emergencies involving potential threats to the physical safety of MILLY or to protect the rights, property, or safety of MILLY, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. 

RIGHT TO REQUEST DELETION OF PERSONAL DATA

You have the right to request the deletion of your personal data provided by or obtained about you (“Request to Delete”), subject to certain exceptions permitted by law.

RIGHT TO CORRECT

You have the right to request that we rectify inaccurate information about you.

RIGHT TO OPT OUT OF DATA PROCESSING FOR TARGETED ADVERTISING

You have the right to opt out of the processing of your personal data for purposes of targeted advertising (“Request to Opt Out”).

RIGHT TO OPT OUT OF PROFILING

You have the right to opt out of the processing of your personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects (“Request to Opt Out of Profiling”).  We do not process your personal data for profiling purposes.

HOW TO MAKE YOUR REQUESTS TO CONFIRM, ACCESS, DATA PORTABILITY, CORRECT, DELETE, AND OPT OUT OF TARGETED ADVERTISING

Submitting Requests/Verification   

To exercise your privacy rights, please submit a request using one of the methods described below, and provide the required information. Once we receive your request, we will validate the information that you provide and send a message to the email address you provide in the request, asking you to verify that it is your email address. Please follow the instructions in that email to verify your email address. We will begin processing your request once you verify your email address.  

  • Request Access to specific pieces of Personal Information about you that we have collected in the preceding 12 months. 
  • Request Deletion of Personal Information that we have collected from you. We may retain Personal Information as required or permitted by law, and will maintain a copy of your deletion request. We may use a two-step process for online requests to delete where you must, first, submit the request to delete and then, second, separately confirm that you want your personal information deleted. 

  • Request Disclosure of the categories or types of Personal Information we collect, the purposes for which we collect, sell or disclose that Personal Information, and the categories of third parties to whom we disclose Personal Information. 

  • Request to Opt-Out (“Do Not Sell My Personal Information”) of “selling” your Personal Information.   

We provide you with one or more free means to make the above requests or to opt-out of such Personal Information sharing.

You may make a Request the following ways:

We provide both email contact information and a toll-free telephone number. Consumers will be required to submit their name, email address, and telephone number, and may also be asked to provide their address, and a recent order number so that we can verify the request. Please provide as much of the requested information as possible to help us verify the request. We will only use the information received in a request for the purposes of responding to the request. A request to opt-out need not be a verifiable consumer request; however, if we have a good faith, reasonable, and documented belief that a request to opt-out is fraudulent, we may deny the request, in which case we shall inform the requestor that we will not comply with the request and shall provide an explanation why we believe the request is fraudulent.  

If you make a request to exercise your rights listed above, we may require that you provide information and follow procedures so that we can verify the request and your jurisdiction before responding to it. The verification steps we take may differ depending on the request you make. We will match the information that you provide in your request to information we already have on file to verify your identity. If we are able to verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us verify your request. 

You may also make a request by contacting us at [email protected].

OPT-OUT PREFERENCE SIGNALS

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information for targeted advertising purposes without first seeking your explicit consent.

COOKIES

As explained in our “Cookies” section above, you can opt out of cookies using your browser.  You may also exercise your right to opt-out of cookies using our Cookie Preference Center, available in the footer of our website.

Please Note:

  • Opt-outs are device and browser based.  You must opt out on each device and each browser where you want your choice to apply.
  • Opt-outs maybe stored via cookies.  If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
  • We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc.  These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
  • You may still receive ads from us that are not tailored to your interests.

ADDITIONAL OPTIONS TO OPT OUT OF SALE OR TARGETED ADVERTISING

In addition to the above options to opt out of the “sale” or processing of your personal data for targeted advertising as described above, you have controls and choices with respect to collection and use of your data by third parties.  These are summarized for you below.  We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your data with third-party companies engaged in targeted advertising including social networking sites such as Google and Facebook using the following tools:

 

Google Opt-Out

If you would like to opt out of Google Analytics and Ads, you can.  If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on here [https://tools.google.com/dlpage/gaoptout], and you can opt out of interest-based Google ads using this link [https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit Facebook Ads [https://www.facebook.com/about/ads].  Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.]

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights , including by exercising the rights specified herein.  As the Right to Non-Discrimination is effective across the board, there is no specific “request” that you need to make in order to exercise this right.

AUTHORIZED AGENT

You may designate an authorized agent to make a request on your behalf to opt out of the sale of personal information.

Authorized agents may make requests on behalf of consumers by emailing [email protected].  We will require authorized agents to provide proof of the consumer’s consent to and designation of the authorized agent for purpose of making the request, and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request.  We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request. 

RIGHT TO APPEAL

You have the right to appeal our decision to deny any of your privacy rights requests above.  Within 60 days of receipt of your appeal (45 days for Colorado residents), we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. 

Making an Appeal

You can make an appeal in the following ways:

Nebraska if your appeal is denied, you may submit a complaint to the Nebraska Attorney General at https://ago.nebraska.gov/contact-us 

Texas if your appeal is denied, you may submit a complaint to the Colorado Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint

Virginia residents, if your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.

 

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy above and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.