Privacy Policy

This Privacy Policy (“Privacy Policy”) describes how Vellori of Paris, Inc., and its parent company Vellori International (“Vellori,” “we,” “us,” or “our”) collect, process, and retain Personal Information when you use our online websites, electronic forms, or mobile applications, and offline when you visit our stores or participate in our events (collectively, the “Site(s)” or “Services”), regardless of how you access and/or use our services, whether through personal computers, mobile devices, tablets, or other means.

Additionally, please note that Section 1 of this Privacy Policy, which describes our collection and use of Personal Information through our Services, also serves as our Notice at Collection for California residents for the purposes of the California Consumer Privacy Act (CCPA).

By using our Services, you acknowledge our Personal Information processing practices as described in this Privacy Policy. Any changes to this Privacy Policy will become effective upon the posting of the revised Privacy Policy on the Internet, accessible via our Site.

This Privacy Policy has been designed to be reasonably accessible to individuals with disabilities. If you encounter any difficulty accessing the information contained in this Privacy Policy, please click here.

You can print the full text of our Privacy Policy by clicking here.

Quick Links:

1. NOTICE AT COLLECTION; COLLECTION AND USE OF PERSONAL INFORMATION

2. SOURCES OF YOUR PERSONAL INFORMATION

3. DISCLOSURE OF PERSONAL INFORMATION TO OTHER ENTITIES

4. COOKIE NOTICE

5. YOUR CHOICES REGARDING YOUR PERSONAL INFORMATION

6. SECURITY OF YOUR PERSONAL INFORMATION

7. ADDITIONAL DISCLOSURES FOR RESIDENTS OF CERTAIN U.S. STATES

8. OTHER IMPORTANT INFORMATION

9. CONTACT US

1. NOTICE AT COLLECTION; COLLECTION AND USE OF PERSONAL INFORMATION

As used in this Privacy Policy, the term “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

The table below and the additional paragraphs following it summarize the categories of Personal Information we have collected over at least the past 12 months, the purposes for collecting and using such Personal Information, and how long we retain it.

Additional Uses for All Categories Listed Above

We may also use all Personal Information mentioned above in any manner we deem necessary:

• If we determine that a policy violation has occurred, to enforce our rights or to enforce agreements;

• If we believe such processing is necessary to identify, contact, or take legal action regarding the rights and property of ourselves or our affiliates;

• To enforce our rights or protect against unauthorized access to our systems or other improper use of our services, products, or other offerings;

• To comply with laws, regulations, court orders, and subpoenas or similar requests for information from authorities;

• To protect your safety and the safety of others;

• To conduct audits;

• To contact you regarding updates to the Site or policies;

• For research and analysis, including identifying usage trends, as well as improving and updating our products and services;

• To assist us in preventing or investigating fraud, all based on our legitimate interest in the continuity of our business activities and the protection of our rights.

We do not collect or use Sensitive Personal Information for any purpose other than that for which it was provided to us or as permitted by law, as described in the table above.

Retention

We will retain your Personal Information for as long as necessary to fulfill the purposes described or as required by law, in accordance with the following:

We may collect, use, and share publicly available, aggregated, or de-identified information that does not identify you (including information that has been aggregated or de-identified), except where prohibited by applicable law. We do not re-identify de-identified information.

2. SOURCES OF YOUR PERSONAL INFORMATION

We collect and obtain personal information from:

• Directly from you. We collect personal information when you provide it directly, offline or online, via a web form or direct communication with us by email, when you create an online or in-store account, subscribe to our newsletter, use our Sites or Services, purchase products or services on our Sites or in our stores, visit our stores, attend one of our events, or contact our customer service team.

• Service Providers and Contractors. We work with service providers and contractors who collect Personal Information on our behalf to provide services to us, such as supplying, offering, and improving products and services; IT development and support; hosting and conducting marketing and business studies and campaigns; verifying your Personal Information; authenticating payments and processing orders and payments; credit reporting; logistics services; and delivery services. We permit our service providers and contractors to collect and use your Personal Information only in connection with the services they provide to us and as permitted by law.

• Automatically via Cookies and Similar Technologies. We collect your Personal Identifiers, Internet or Other Electronic Network Activity Information, and General Location Information when you visit and browse our Services on any device. For more information regarding the use of Cookies and Similar Technologies, please see the "Cookie Notice" section below.

• Other Users. We also collect personal information about you from other users, such as a spouse who contacts us on your behalf or friends who provide us with your contact information to invite you to events that may be of interest to you.

3. DISCLOSURE OF PERSONAL INFORMATION TO OTHER ENTITIES

During at least the past 12 months, we have disclosed your Personal Information, as described in the table above, to the following categories of entities:

• Vellori Group Companies. We disclose all categories of Personal Information listed above to companies within the Vellori group: departments responsible for customer relations, retail, e-commerce, communications, legal affairs, finance, internal audit, IT management, and security, for the purposes set forth in our Privacy Policy and to provide you with a consistent level of service across all Vellori group companies. Visit [http://finance.Vellori.com](http://finance.Vellori.com) for more details about Vellori group companies.

• Service Providers and Contractors. We disclose all categories of Personal Information listed above to our service providers and contractors. These service providers and contractors may include agencies, advertising networks, website developers, and other vendors that provide us with technology, services, and/or content related to our operations, payment processing, data analytics, marketing and advertising, website hosting, ad auditing, Site security and integrity, Site quality and safety, debugging to identify and repair errors that impair intended Site functionality, internal research, and technical and customer support. These service providers and contractors use your Personal Information only under our direction and on our behalf.

• Fraud Prevention Vendors. When you purchase products on our Site, we disclose your transaction details to vendors who assist us in detecting and preventing fraud. This includes Riskified Ltd., located at 30 Kalisher St., Tel Aviv 6525724, Israel (“Riskified”), which conducts anti-fraud checks on transactions conducted on our Digital Platform. Disclosure is based on our legitimate interest in preventing online fraudulent transactions or the applicable legal basis in your country of residence. For more information on how Riskified processes Personal Information, please consult its Privacy Policy.

• Government Authorities, Legal Rights, and Actions. We disclose all categories of Personal Information listed above to various government authorities in response to subpoenas, court orders, or other legal processes; to establish or exercise our legal rights or protect our property; to defend against legal claims; or as required by law. In such cases, we reserve the right to raise or waive any available legal objection or right. We may also share your Personal Information when we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of Vellori, the Services, our users, customers, or third parties; and in connection with our General Terms and Conditions of Use and other contracts. We may also use IP addresses or other Device Identifiers to identify users and may do so in cooperation with copyright holders, Internet service providers, wireless service providers, or law enforcement agencies at our discretion. Such disclosures may be made without prior notice.

• Acquirers. We may disclose all categories of Personal Information listed above to an acquirer, assignee, or other successor entity in connection with, or during negotiations of, any merger, purchase, sale, or any other type of acquisition or business combination of all or part of our assets, or transfer of all or part of our business to another company.

• Third Parties. We may disclose Personal Identifiers, Internet and Electronic Network Activity Information, and General Location Information to a limited number of our advertising and marketing partners to customize advertising for you.

• Fulfilling Requests. We disclose all categories of Personal Information listed above upon your request or instruction.

• Consent. We disclose all categories of Personal Information listed above if we have informed you about what information will be shared, with whom, and if we have obtained your consent.

4. COOKIE NOTICE

Our website collects personal information about you through the use of cookies and similar technologies (collectively, “cookies”) set by Vellori and our partners. A “cookie” is a small file stored on your device (e.g., your computer or mobile device). It contains a unique identifier, as well as the address and other information about the website you are visiting. Some cookies are essential to allow you to navigate our website and use its features. Other cookies collect information about how visitors use the website (e.g., which pages visitors access most frequently and whether they receive error messages from web pages).

We and our partners may also use similar technologies, such as pixels (e.g., web beacons), Flash objects, APIs, Software Development Kits (SDKs), and mobile device tags. These are small snippets of code embedded in our Site, in emails we send you, or in our digital advertisements. When you access a page or platform containing one of these technologies, you establish communication with a web server, which collects certain information about your computer or device. These cookies and similar technologies allow us and our partners to collect personal information about you over time and across different websites, applications, and devices when you use our Services.

We and our partners use cookies to facilitate administration and navigation on the Site, to better understand and improve our Site and Services, to determine and improve the advertising displayed to you here or elsewhere (e.g., targeted ads), and to provide a comprehensive online experience. For example, we use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as the DoubleClick advertising cookie and the Meta Pixel) to inform, optimize, and serve ads based on your past visits to the Sites. Our first-party tracking technologies do not track our visitors outside of our Site. Tracking technologies, both first-party and third-party, are not used on every page of our Site, nor during every user visit.

We may also use analytics tools to help us better understand how our website is used by visitors. The information collected by these analytics tools tells us things such as which search engine directed you to our website, how you navigated through our website, and what you searched for and viewed. Information generated by our use of Google Analytics is subject to Google's privacy policies. To learn more about how Google Analytics uses data, visit [www.google.com/policies/privacy/partners/](https://www.google.com/policies/privacy/partners/). To opt out of Google Analytics, visit [https://tools.google.com/dlpage/gaoptout](https://tools.google.com/dlpage/gaoptout).

You can disable cookies and control data sharing. For more details on available options, please visit the Network Advertising Initiative's "Opt Out" page. Please note that if you choose to restrict cookies, some content and features of our websites may not function properly.

We are not responsible for the effectiveness of third-party opt-out tools.

5. YOUR CHOICES REGARDING YOUR PERSONAL INFORMATION

A. Promotional Communications

If you no longer wish to receive our marketing/promotional emails (e.g., newsletters, invitations, etc.), you may unsubscribe at any time directly using the unsubscribe link included in every promotional email we send. Please note that we may continue to contact you to the extent necessary for the purposes of any products or services you have requested and for our ongoing business relationship. Please also note that your unsubscribe option is limited to the email address used to unsubscribe.

B. Disabling Cookies

Privacy Preference Center. You may choose not to allow the use of cookies and similar technologies for analytics and targeted advertising. Click here.

C. Honoring Global Privacy Control (GPC) Signals

We recognize Global Privacy Control (GPC) as a valid opt-out preference signal under applicable U.S. state privacy laws. When we detect a GPC signal from your browser, we will: (a) treat the signal as a request to opt out of the sale or sharing of your personal information as defined by applicable state law; (b) disable all non-essential cookies and tracking technologies, keeping only those strictly necessary for Site functionality; and (c) refrain from using personal information collected during your visit for cross-context behavioral advertising.

Honoring GPC signals does not require you to create an account or verify your identity. The signal is processed automatically upon detection. If you subsequently wish to opt in to non-essential cookies or allow the sale or sharing of your personal information, you must turn off GPC in your browser's privacy settings and return to the Site, where you can select your preferences.

6. SECURITY OF YOUR PERSONAL INFORMATION

Vellori has implemented reasonable and appropriate security measures designed to protect your Personal Information from unauthorized access and use. However, the transmission of information over the Internet is not completely secure, and we cannot guarantee the security of your Personal Information transmitted over the Internet.

Please take steps to keep your account credentials secure and do not reuse passwords across multiple websites/accounts. You are solely responsible for the security of your account credentials and for activities occurring under your account.

7. ADDITIONAL DISCLOSURES FOR RESIDENTS OF CERTAIN U.S. STATES

This section supplements other parts of our Privacy Policy and provides additional information for residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (collectively, “Covered States”).

A. Sales, Sharing, and Targeted Advertising

We may use or disclose your Personal Information for targeted advertising in a manner that constitutes a “sale” or “sharing” under Covered State privacy laws. We may share your Personal Information, including Identifiers, Internet or Other Electronic Network Activity Information, and General Location Information with our analytics, advertising, and technology vendors to serve targeted advertising and marketing. We do not knowingly sell or share the Personal Information of minors under 16 years of age.

B. Your U.S. State Privacy Rights

If you reside in a Covered State, you may have the following rights regarding your Personal Information (subject to certain exemptions):

• Access and Disclosure. You have the right to request access to the categories of Personal Information we have collected about you, the categories of sources from which we collected your Personal Information, our business or commercial purposes for collecting, selling, or sharing your Personal Information, the categories of recipients to whom we disclose your Personal Information, the categories of Personal Information we sell, and the categories of third parties to whom we sell each category of Personal Information, as well as the specific personal data we collected about you. You also have the right to request a portable copy of your Personal Information.

  • If you reside in Minnesota or Oregon, you may request a list of third parties to whom we disclosed Personal Information.

  • If you reside in Delaware, you may request a list of the categories of third parties to whom we disclosed your Personal Information.

  • If you reside in Maryland, you may request a list of the categories of third parties to whom we disclosed Personal Information.

• Correction and Deletion. You have the right to submit a request to correct or delete Personal Information we maintain about you, subject to certain exceptions permitted by applicable law.

• Opt-Out. You have the right to opt out of targeted advertising, sales, and sharing of your personal information. To opt out, click here.

  • Residents of Rhode Island, please note that we do not sell your personally identifiable information.

• Sensitive Personal Information. We do not use or disclose Sensitive Personal Information for purposes to which the right to limit applies. Therefore, we do not offer this right.

• Appeals. You may have the right to appeal decisions regarding your ability to exercise your consumer rights. Send us an email to request an appeal regarding decisions on your request.

• Nondiscrimination. You have the right not to receive discriminatory treatment for exercising the rights mentioned above. Vellori will not discriminate against you for making any of these requests. We may deny certain requests or fulfill them only partially based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or recordkeeping purposes, to maintain an active account, and to process transactions and fulfill customer requests.

• No Financial Incentives. We do not offer programs that could be considered a "financial incentive" for sharing your personal information under U.S. state privacy laws.

How to Submit a Request

To submit an access, disclosure, deletion, or correction request, please email us or call 1-800-441-4488. To opt out of sales, sharing, and targeted advertising, click here or use an opt-out preference signal enabled on your browser, if available.

You can also obtain information on how to submit a request in person by asking a manager at any of our U.S. stores. Please note that opt-out choices offered through these tools are specific to the device and browser you are using; therefore, you must opt out on each browser and device you use. Your opt-out preferences will be deleted whenever you clear your browser's cookie cache. Please also note that we may deny certain requests or fulfill them only partially based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or recordkeeping purposes, to maintain an active account, and to process transactions and fulfill customer requests.

How We Verify Your Identity

Whether you submit the request directly or through an authorized agent, we will take reasonable steps to verify your identity before responding to your request. For example, we may use a verification provider to assist in verifying your identity. Verification steps may vary depending on the sensitivity of the personal information.

Authorized Agents

Applicable law may permit consumers to designate authorized agents to submit requests on their behalf. Under certain covered state privacy laws, an authorized agent is a natural person or legal entity authorized by a person to act on their behalf. If you wish to designate an authorized agent to submit an access, deletion, or correction request for Personal Information on your behalf, please send us an email. When submitting the request, ensure the authorized agent identifies themselves as such. You or your authorized agent may provide us with a written power of attorney signed by you confirming the authorized agent's authority regarding your consumer request(s). If we have not received a power of attorney, we may require you to verify your own identity and confirm directly with us that you granted permission to the authorized agent to submit the request.