Privacy Notice

What Personal Information About Customers Does ONE+ONLY collect?

We collect your personal information in order to provide and continually improve our products and services. Here are the types of information we gather:

Information You Give Us:

We receive and store any information you provide in relation to your order or any service you request. We collect contact information so that we can contact you for your service and delivery of your purchased products to you. You can choose not to provide certain information but then you might not be able to take advantage of many of our services.

Automatic Information:

We automatically receive and store certain types of information when you use ONE+ONLY, such as information about your use, including your interaction with products and services available. Like many websites, we use cookies and other unique identifiers and we obtain certain types of information when your web browser or device accesses ONE+ONLY websites (i.e. loveoneandonly.com, loveoneandonly.ca, etc.) and other content served by or on behalf of ONE+ONLY.

Information From Other Sources:

We might receive information about you from other sources. Examples of information we receive from other sources include updated delivery and address information from our carriers.

For What Purposes Does ONE+ONLY Process Your Personal Information?

We process your personal information to operate, provide, and improve ONE+ONLY offerings to our customers. These purposes include:

• Provide, Troubleshoot, and Improve

We use your personal information to provide functionality, analyze performance, fix errors, and improve the usability and effectiveness of our products and services.

• Recommendations and Personalization

We use your personal information to recommend features, products, and services that might be of interest to you, identify your preferences andpersonalized your experience with ONE+ONLY.

• Comply with Legal Obligations

In certain cases, we have a legal obligation to collect and process your personal information.

• Advertising

We use your personal information to display interest-based ads for features, products, and services that might be of interest to you. To serve you interest-based ads, we use information such as your interactions with ONE+ONLY sites, content, products or services. We do not use personally identifiable information such as name or email to serve interest-based ads. As is common in the advertising industry, we use cookies, pixels, and other technologies (collectively, "cookies"), which enable us to understand the effectiveness of the interest-based ads we show you by measuring what ads are clicked or viewed and to provide you with more useful and relevant ads. For example, if we know what ads are served to your browser we can be careful not to show the same ads repeatedly.

• Fraud Prevention and Credit Risks

We process personal information to prevent and detect fraud and abuse in order to protect the security of our customers, ONE+ONLY, and others. We may also use scoring methods to assess and manage credit risks.

• Purposes for Which We Seek Your Consent

We may also ask for your consent to process your personal information for a specific purpose that we communicate to you. When you consent to our processing of your personal information for a specified purpose, you may withdraw your consent at any time and we will stop the processing of your data for that purpose.

What About Cookies?

To enable our systems to recognize your browser or device and to provide services to you, we use cookies. Please read more about cookies in our Privacy Policy

Does ONE+ONLY Share Your Personal Information?

Information about our customers is an important part of our business and we are not in the business of selling personal information to others. ONE+ONLY shares information only as described below and with the subsidiaries that ONE+ONLY controls that are either subject to this Privacy Notice or follow practices at least as protective as those described in this Privacy Notice.

• Third-Party Service Providers

We employ other companies and individuals to perform functions on our behalf. Examples include fulfilling orders for products or services, delivering packages, sending postal mail and email, removing repetitive information from customer lists, analyzing data, providing marketing assistance, providing search results and links (including paid listings and links), processing payments, transmitting content, scoring credit risk, and providing customer service. These third-party service providers have access to personal information needed to perform their functions but may not use it for other purposes. Further, they must process the personal information in accordance with this Privacy Notice and as permitted by applicable data protection laws.

• Business Transfers

As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, customer information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Notice (unless, of course, the customer consents otherwise). Also, in the unlikely event that loveoneandonly.com or substantially all of its assets are acquired, customer information will of course be one of the transferred assets.

• Protection of ONE+ONLY and Others

We release account and other personal information when we believe release is appropriate to comply with the law; enforce or apply our Terms and Conditions. Other than as set out above, you will receive notice when personal information about you might be shared with third parties and you will have an opportunity to choose not to share the information.

• Transfers out of the European Economic Area

Whenever we transfer personal information to countries outside of the European Economic Area in the course of sharing information as set out above, we will ensure that the information is transferred in accordance with this Privacy Notice and as permitted by the applicable laws on data protection.

How Secure Is Information About Me?

We design our systems with your security and privacy in mind:

• We work to protect the security of your information during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input;

• We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling credit card data;

• We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you;

• Our devices offer security features to protect them again unauthorized access and loss of data. You can control these features and configure them based on your needs;

• It is important for you to protect agaiunauthorizedised access to your password and to your computers, devices, and applications. Be sure to sign off when you finish using a shared computer.

What About Third Party Advertisers and Links To Other Websites?

ONE+ONLY may include third-party advertising and links to other websites and apps. Third-party advertising partners may collect information about you when you interact with their content, advertising, and services.

What Information Can I Access?

You can access your purchase history in the "My Account" section of the website.

What Choices Do I Have?

If you have any questions or objections as to how we collect and process your personal information, please send an email to [email protected]:

• As described above, you can choose not to provide certain information but then you might not be able to take advantage of some of our offerings and services;

• You can add or update certain information on our self-service portal, on your account page or by contacting customer service. When you update information, we usually keep a copy of the previous version for our records;

• If you no longer want to receive email or other communications from us, you can opt out from any email you've received from us or you can contact customer service and request you be removed from that list;

• The Help feature on most browsers and devices will tell you how to prevent your browser or device from accepting new cookies, how to have the browser notify you when you receive a new cookie or how to disable cookies altogether. Because cookies allow you to take advantage of some essential information we recommend that you leave them turned on. For instance, if you block or otherwise reject our cookies, you will not be able to add items to your Cart, proceed to Checkout, or use your account page, self-serve portal or any page that requires you to sign in;

• If you want to browse our website anonymously, you may do so by disabling cookies on your browser.

In addition, subject to applicable law, you have the right to request access to, correct, and delete your personal data, and to ask for data portability. You may also object to our processing of your personal data or ask that we restrict the processing of your personal data in certain instances. If you wish to do any of these things, please email Customer Service at [email protected]}

How Long Do We Keep Your Personal Information?

We keep your personal information to enable your continued use of ONE+ONLY, for as long as it is required in order to fulfil the relevant purposes described in this Privacy Notice, as may be required by law such as for tax and accounting purposes, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevancy of products and content we recommend.

Contacts, Notices & Revisions

If you have any concerns about privacy at ONE+ONLY or want to contact one of our data controllers, please contact [email protected] with a thorough description and we will try to resolve the issue for you.

Our business changes constantly and our Privacy Notice will change also. You should check our website frequently to see recent changes. Unless stated otherwise, our current Privacy Notice applies to all information that we have about you and your account. We stand behind the promises we make, however, and will never materially change our policies and practices to make them less protective of customer information collected in the past without the consent of affected customers.

Examples of Information Collected

Information you give us when you use ONE+ONLY:

• Search for products or services;

• Place an order on ONE+ONLY;

• Download, stream, view, or use content on a device, or through a service or application on a device;

• Provide information in your account (and you might have more than one if you have used more than one email address or mobile number when shopping with us)

• Communicate with us by phone, email, or otherwise;

• Complete a questionnaire, a support ticket, or a contest entry form;

• Upload images, videos or other files;

• Participate in community features, provide and rate Customer Reviews;

• Employ product status alerts, such as Order Notifications or Shipping Notifications.

As a result of those actions, you might supply us with such information as your name; address and phone number; payment information; your location information; people to whom purchases have been dispatched (including addresses and phone numbers); email addresses of your friends and other people; content of reviews and emails to us; personal description and photograph; images and videos uploaded or emailed to us, information and documents regarding identity and standing; credit history information.

Automatic Information

Examples of the information we collect and analyze include:

• The Internet protocol (IP) address used to connect your computer to the Internet;

• Login email address and password;

• The location of your device or computer;

• Content interaction information, such as content downloads, streams, and playback details network details, including information about your internet service provider;

• ONE+ONLY metrics (e.g., the occurrences of technical errors, your interactions with service features and content, your settings preferences and backup information, location of your device running an application, information about uploaded images and files (e.g., file name, dates, times and location of your images));

• Purchase and content use history, which we sometimes aggregate with similar information from other customers to create features such as Best Sellers;

• The full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); cookie number; products and/ or content you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs);

• Phone numbers used to call our customer service number.

We may also use device identifiers, cookies, and other technologies on devices, applications and our web pages to collect browsing, usage or other technical information for fraud prevention purposes.

Information From Other Sources

Examples of information we receive from other sources include:

• Updated delivery and address information from our carriers or other third parties, which we use to correct our records and deliver your next purchase or communication more easily

Information You Can Access

Examples of information you can access through ONE+ONLY include:

• Status of recent orders;

• Your complete order history;

• Personally identifiable information (including name, email, address, phone);

• Wish lists and cart information.

Interest-Based Ads

To serve you interest-based ads, we use information such as your interactions with ONE+ONLY sites, content, products or services. We do not use personally identifiable information such as name or email to serve interest-based ads. As is common in the advertising industry, we use cookies, pixels, and other technologies (collectively, "cookies"), which enable us to understand the effectiveness of the interest-based ads we show you by measuring what ads are clicked or viewed and to provide you with more useful and relevant ads. For example, if we know what ads are served to your browser we can be careful not to show the same ads repeatedly.

California Consumer Privacy Act (CCPA)

This California Consumer Privacy Act disclosure section ("Disclosure") supplements the ONE+ONLY Privacy Policy and is effective as of July 1, 2020.

The ONE+ONLY Privacy Policy describes the personal information that we collect, the sources from which we collect it, the purposes for which we use it, the limited circumstances under which we share personal information, and with whom we share it. These additional disclosures are required by the California Consumer Privacy Act:

1. Categories of personal information collected
The personal information that ONE+ONLY collects, or has collected from consumers in the twelve months prior to the effective date of this Disclosure, falls into the following categories established by the California Consumer Privacy Act:

• Identifiers such as your name, alias, address, phone numbers, email, or IP address;

• Inference data, such as information about your purchase preferences;

• Geolocation data, such as the location of your device or computer;

• Purchase activity;

• Visual information such as photos uploaded for photo box or photo pendant;

• Information such as age, gender, or other protected classifications;

• Commercial information, such as purchase activity;

• Audio or visual information, such as images and videos.

2. Categories of personal information NOT collected by ONE+ONLY
ONE+ONLY does not collect your credit card number.

3. Categories of personal information disclosed for a business purpose
The personal information that ONE+ONLY disclosed about consumers for a business purpose in the twelve months prior to the effective date of this Disclosure falls into the following categories established by the California Consumer Privacy Act:

• Identifiers such as your name, address, phone numbers, or IP address, for example, if we use a third-party carrier to deliver your order;

• Your age, gender, or other protected classifications, for example, if you choose to participate in a survey;

• Commercial information, such as the details of a product or service you purchased if a third-party service provider is assisting to provide that product or service to you;

• Internet or other electronic network activity information, such as if we use a service provider to help us manage against fraud;

• Geolocation data, such as providing a delivery partner information;

• Audio or visual information, for example, if a service provider reviews recordings of customer service phone calls for quality assurance purposes.

4. Right to Request Access to or Deletion of Personal Information
California residents have a right under the California Consumer Privacy Act to request information about the collection of your personal information by ONE+ONLY, or access to or deletion of your personal information. If you wish to do any of these things, please contact [email protected] Depending on your data choices, certain services may be limited or unavailable. You can make a request one time each year, by emailing us. Please mention in your letter that you are making a "California Shine the Light" inquiry. We will respond within 30 days.

5. No sale of personal information
In the twelve months prior to the effective date of this Disclosure, ONE+ONLY has not sold any personal information of consumers, as those terms are defined under the California Consumer Privacy Act.

6. No Discrimination
ONE+ONLY will not discriminate against any consumer for exercising their rights under the California Consumer Privacy Act.