Privacy Policy

Last Updated: December 30, 2022

INTRODUCTION
This Privacy Policy (“Policy”) describes the policies and practices of Drip Drop Distro LLC, an Idaho limited liability company, (“Drip Drop Distro”, “we”, “us”, “our”) for handling personal information that we collect from or about your both online and offline. It applies to the websites, the software applications, the social media pages, email messages, and any other tools or locations that link to this Policy (collectively the “Services”). By continuing to use any of these Services, you consent to your personal information being collected, processed and/or shared in accordance with this Policy. This Policy does not apply to any website, application, product, or service that links to its own privacy statement or that is offered by third parties, in which clicking on third-party links or enabling those connections may allow the third party to collect, use, or share data about you.

We act as a controller of your personal information where we determine how and why personal information can be used, and we are the primary controller of your personal information.

NOTICE AT COLLECTION
We have collected the following categories of personal information in the past 12 months. For information about how to exercise the rights you may have under various state privacy laws, see Section 9 of this Policy.

Personal Information We Collect	How We Use Your Personal Information (Our Business Purpose)	How Long Do We Retain Your Personal Information?	To Whom Do We Share Your Information?
Personal Identifiers	To administer our Services, including troubleshooting To send you marketing materials and provide you with personalized content and experiences To administer contests, sweepstakes and promotions	Based on the statute of limitations for possible claims and as otherwise needed for use in potential or ongoing litigation	Professional services consultants Social Media Networks
Commercial Information	To provide goods and services purchased To comply with our legal obligations	Based on the statute of limitations for possible claims and as otherwise needed for use in potential or ongoing litigation	Fulfillment vendors Professional services consultants Government agencies
Internet Activity Information	To optimize or improve our products, services, operations and Services To detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity To improve our websites and services To perform research and business analytics, and identifying usage trends To monitor compliance with our policies, maintain network and information security	Based on the statute of limitations for possible claims and as otherwise needed for use in potential or ongoing litigation	Analytics services Security vendors Other information technology (“IT”) vendors Professional services consultants
Contest and Promotion Information	To administer contests, sweepstakes and promotions payments To comply with our legal obligations	Based on the statute of limitations for possible claims and as otherwise needed for use in potential or ongoing litigation	Fulfillment vendors Promotional Partners Professional services consultants
Profile Information	To send you marketing materials and provide you with personalized content and experiences	Based on the statute of limitations for possible claims and as otherwise needed for use in potential or ongoing litigation	Professional services consultants
Sensitive Information	To comply with our legal obligations To verify your eligibility to participate in activations, contests and promotions and/or issue related tax statements for winners To prevent fraud and abuse and to secure our systems, data, resources and facilities from unauthorized access or exploitation To monitor compliance with our IT policies, maintain network and information security To provide security and comply with health and safety obligations	Based on the statute of limitations for possible claims and as otherwise needed for use in potential or ongoing litigation	Professional services consultants Auditing and accounting firms

 

This is the Privacy Policy of Drip Drop Distro LLC in relation to data collected and processed by Drip Drop Distro LLC on its own behalf acting as a Business and Data Controller in the provision of its website and associated services.

This Privacy Policy applies to any information provided or collected through this Drip Drop Distro website and/or any application, including any social media account or other website which are provided by Drip Drop Distro LLC, a company registered in the State of Idaho within the United States of America, company number 429778.

This Privacy Policy sets out the basis on which we, gather, use, process and disclose any personally identifying data we collect from you, or that you provide to us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. We are committed to protecting the privacy and personal data of users.

We will use your personal data only for the purposes and in the manner set forth below which describes the steps we take to ensure our processing of your personal data is in compliance with:

• The California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA);
• The Colorado Privacy Act (CPA);
• The Connecticut Data Privacy Act (CTDPA);
• The Virginia Consumer Data Protection Act (VCDPA);
• The Utah Consumer Privacy Act (UCPA), and;
• Any related implementing legislation. 

Please read the following carefully to understand our use of your personal data.

THE TYPES OF PERSONAL DATA WE MAY COLLECT ABOUT YOU
When you visit or use our website and services in any way, we may collect and process different types of information about you.

Personally Identifiable Information (Personal Data) will be collected, stored, processed and transmitted in accordance with Drip Drop Distro LLC’s established policies and applicable local, state, federal and international laws, rules and regulations.

The principles of Drip Drop Distro LLC with respect to the processing of Personal Data are as follows:

• Personal data will be processed fairly, lawfully and transparently;
• Personal data will be collected for specified, explicit, and legitimate purposes and not further processed for incompatible purposes;
• Personal data collected by Drip Drop Distro LLC will be adequate, relevant, and not excessive in relation to the purposes for which it is collected;
• Personal data collected by Drip Drop Distro LLC will be accurate and, where necessary, kept up to date to the best of our ability;
• Personal data will be protected against unauthorized access and processing using appropriate technical and organizational security measures and controls, and;
• Personal data collected by Drip Drop Distro LLC will be retained as identifiable data for no longer than necessary to serve the purposes for which the Personal data was collected.

If Drip Drop Distro LLC engages in the processing of personal data for purposes other than those specified in this Privacy Policy, Drip Drop Distro LLC will provide notice of these changes, the purposes for which the personal data will be used, and the recipients of personal data.

Collection of Information

Drip Drop Distro LLC may collect personal data about you from a variety of sources, including, directly from you, from other Users, from resellers and distributors, from our vendors, from our service providers, from third-party information providers, from our affiliates, and through the operation of the Website.

“Personal data” collected by Drip Drop Distro LLC includes, without limitation:

• Company Name
• Account type (Wholesaler/Distributor/Consumer)
• Federal EIN
• Tobacco License Number
• Sales Tax ID # (Resellers Permit #)
• First Name
• Last Name
• Email Address
• Gender
• Account Password
• Business Phone Number
• Mobile Phone Number
• Date of Birth
• Company Website
• Company Address
• Company City 
• Company State / Region / Province
• Company Postal / Zip Code
• Company Country
• Shipping Address
• Shipping City
• Shipping State / Region / Province
• Shipping Postal / Zip Code
• Shipping Country
• Any stored additional notes from the customer
• For employment purposes, your resume or professional information; and a combination of your username and password used to access the Website.

Drip Drop Distro LLC collects your Personal Data as follows:

Information You Provide Voluntarily

We may collect personal data directly from you when you voluntarily provide it to us. For example, when you communicate with us over the telephone or through the Website by way of email, web form, or online account registration.

Information that We Collect Automatically

When you visit our Website, we may collect certain information automatically from your device, this information may be considered personal data under applicable data protection laws.

Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, your Media Access Control (MAC) Address, broad geographic location (e.g. country or city-level location) and other technical information.  

We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked. We may collect online behavioral data linked to online identifiers through tracking technology and this may be matched to personal data to improve our offerings to you. We will never process your personal data unlawfully and we will also ensure your rights and freedoms are protected.

We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors and for various marketing-related purposes. Some of this information may be collected using cookies and similar tracking technology.

From Other Users

We may receive Personal Data about you from other users of the Website when they provide information to us. For example, we may receive information when they communicate with you or with us through the Website.

From Resellers and Distributors

We may obtain Personal Data about you from the resellers and distributors or provide them to approved distributors for the purposes of any orders you may make.

From Our Vendors

We may obtain Personal Data about you from vendors.

From Third Party Information Providers

Drip Drop Distro, LLC may also obtain Personal Data from third parties that have obtained or collected information about you and that have the right to provide that Personal Data to us. 

Use of Information

Drip Drop Distro, LLC uses Personal Data we collect to operate our business and provide you with goods and services, which includes using this data to improve our offerings and personalize your experiences. We also may use the data to communicate with you, for example, informing you about your account and product information.

Drip Drop Distro, LLC may use your Personal Data for a variety of purposes (the “Purposes”), including to:

• Provide you with the products and services you purchase. We provide these in line with our contractual obligations to you, either directly through us or through our partners should you satisfy contractual requirements;
• Provide, maintain and improve the Website and our services, including to operate certain features and functionality of the Website;
• Understand user preferences to enhance users’ experience with Drip Drop Distro, LLC and its affiliates, contractors, and business partners;
• Research and analyze the effectiveness of the Website and the marketing, advertising and sales efforts of Drip Drop Distro, LLC, its affiliates, contractors, and business partners;
• Collect account receivables owed by customers of Drip Drop Distro, LLC;
• Process orders and payments made through the Website;
• Develop additional goods and services;
• Comply with a legal obligation or respond to lawful requests by public authorities (including national security or law enforcement requirements);
• Manage our everyday business needs;
• Enforce compliance with our Terms of Use and applicable law;
• Prosecute and/or defend a court, arbitration or similar legal proceedings;
• Communicate directly with you by sending you newsletters, promotions and special offers or information about new products and services on an ongoing basis in accordance with your marketing preferences. You can unsubscribe from our marketing communications by clicking “Unsubscribe” at the bottom of any communication we issue, or by contacting us;
• Communicate directly with you by phone to respond to customer service enquiries or comments through the Website, social media or otherwise, to discuss issues relating to your account or the Website, and to provide customer support;
• Deliver advertising to you, including to help advertisers and publishers serve and manage ads on the Website or on third party sites, and to tailor ads based on your interests and browsing histories;
• Compile aggregated statistics about the operation and use of our Website and to better understand the preferences of the visitors of our Website; and
• We may combine and enhance the Personal Data we collect about you with other information we receive from third parties to provide you with the best service possible.

We may also use the Personal Data we collect about you through the Website to generate anonymized, aggregated data. When we do so, we ensure that the anonymized, aggregated data is no longer personally identifiable and may not later be used to identify you.

Information Sharing

We share your Personal Data as necessary to complete any transaction or provide any goods or services that you have requested or authorized or with your consent where appropriate. We also share Personal Data with vendors, resellers and distributors, service providers, affiliates and business units when required by law and or for the fulfillment of any orders made.

We may share personal data internally with teams such as Sales, Customer Service, Finance, Marketing and Operations and Compliance to ensure your products and services are delivered in line with your purchasing agreement with us. 

You can contact us anytime around how we share your data internally.

We may disclose your Personal Data as follows:

• Vendors. Drip Drop Distro LLC may share personal data about you with the third-party vendors that make goods and services available through us. For example, we may share your personal data with a third-party vendor if you purchase or access a service or goods through us, or a Drip Drop Distro LLC reseller or distributor, and that vendor requires verification of purchase.
• Resellers and Distributors. Drip Drop Distro LLC may share your personal data with the resellers and distributors that we supply to when you purchase through the Website. For example, we may share your personal data if you purchase goods which we provide through an approved reseller or distributor, and that reseller or distributor utilized our reseller tools and services. Alternatively, we may provide your information to an external third party to facilitate a legitimate interest that we believe you may have pertaining to our goods.
• Affiliates and Business Units. Drip Drop Distro LLC may share your personal data with our partners regardless of whether these entities share the Drip Drop Distro brand. We may also share your personal data with other business units that also offer products or services under the Drip Drop Distro brand or one of our other brands. Our affiliates and business units will use your personal data we share with them in a manner consistent with this Privacy Policy.
• Law Enforcement and Safety. Drop Distro LLC may share your personal data with any competent law enforcement, regulatory, government agency, court, other governmental officials, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) in connection with actual or proposed litigation, (iii) to exercise, establish or defend our legal rights or interests or protect our property, security and people, or (iv) to protect your vital interests or those of any other person.
• Sale or Acquisition of Assets. If Drip Drop Distro LLC transfers ownership or control of any portion of Drip Drop Distro LLC or the Website to an actual or potential buyer, whether in the context of an acquisition, merger, reorganization, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), we may transfer your personal data to that actual or potential buyer, provided that the use of your personal data by that third party remains subject to applicable law.
• Other.  If you have asked us to share data with third party sites (such as social media sites), their servers may not be secure. Note also that, despite the measures taken by us and the third parties we engage, the internet is not secure. As a result, others may nevertheless unlawfully intercept or access private transmissions or data.

Children’s Privacy

Drip Drop Distro LLC is committed to protecting the privacy of children. As such, this site is not intended or designed to attract anyone younger than 21. We do not collect personally identifiable information from any person we know who is younger than 21.

Cookie Policy

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

A “cookie” is a piece of data stored by each user’s browser on your hard drive or device memory that contains information about the user of the computer or other internet-connected device. We use cookies to recognize return visitors and deliver web content in accordance with your interests. Cookies allow Drip Drop Distro LLC to track and target the interests of users. You may be able to adjust the settings on your internet browser to erase cookies from your hard drive, block cookies, or give you a warning before a cookie is stored. Please refer to your browser’s instructions for help with these options. It may be possible to refuse to accept mobile cookies by activating the appropriate setting on your mobile device. Please note the placement of cookies may be necessary in order to register for any of Drip Drop Distro LLC’s online products or services, so disabling cookies may affect your ability to access these products or services.

Our marketing team may use cookies to track analytics on our website traffic and visitors or for use in targeted advertising.

Within the website application, when users choose the “remember me” option during log in, we use cookies to keep them logged in. This cookie is not permanent, it will expire after a fixed period of time. Other cookies may be required for other similar functionality.

Social Media

If you make use of any Drip Drop Distro LLC social media features, we may access your personal data via that social media provider in accordance with their policies. When using a social media feature and if you have chosen to include it in your social media account, we may access personal data such as your name, profile picture, gender, birthday, email address, address and any other information you have chosen to make available. Depending on the privacy settings of you and your friends, we may access information that you provide to a social media provider regarding your respective locations (e.g. location data) to provide you with relevant content. We may also access information from social media providers about your use of our content that we run on their website.

Where We Store Personal Data

By submitting your personal data, you agree to the transfer, storing and processing that data. We will take reasonably necessary steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy. We will store your personal data only for as long as necessary for the purposes of providing access to our goods and services to you; as required by law, and for the exercise or defense of any legal claims.

Safeguarding Personal Data

The security and confidentiality of your personal data are extremely important to us. As no data transmission over the internet can be guaranteed as 100% secure, we cannot ensure or warrant the security of any information that you transmit to us and you transfer the personal data at your own risk. We endeavor to use appropriate technical and organizational measures (including staff training and awareness) in order to protect against unauthorized or unlawful processing of your personal data, including unauthorized destruction, alteration or disclosure or access.

Disclosure of Personal Data

We may disclose your personal data to third parties where a service provider provides a service or function on our behalf, including credit card processing, business analytics, customer service, marketing, distribution of surveys, and fraud prevention. We may also authorize third-party service providers to collect information on our behalf, including as necessary to operate features of the website or to facilitate the delivery of online advertising tailored to your interests.

International Data Transfers.

• Your personal data may be transferred to, and processed in, countries other than the country in which you are resident.  These countries may have data protection laws that are different to the laws of your country.
• Drip Drop Distro LLC currently or will in the future operate around the world.  This means that when we collect your personal data we may process it in countries outside of the United States. However, we have taken appropriate safeguards to require that your Personal Data will remain protected in accordance with this Privacy Policy.

What categories of personal information do you collect and who do you share it with or sell it to?

In general, the categories of personal information we collect, sources of that information, business and commercial purposes for why we collect and use it, and who we share it with, as well as our personal information retention practices, are as outlined in our Privacy Statement. 

California law, however, requires we restate some of this information for specific categories that are defined in CCPA/CPRA. The type of personal information we collect and how we handle that personal information, including if we share or sell that personal information, depends on how you are specifically interacting with us and which Services you are inquiring about. In general, we have collected, disclosed for a business purpose, and sold the following categories of personal information and sensitive personal information from California consumers within the last twelve (12) months:

Categories of Personal Information Collected

Category of Personal Information	Examples Defined in CCPA/CPRA	Collected
Identifiers	Real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	✔
Personal information categories listed in the California Customer Records statute, Cal. Civ. Code § 1798.80(e)	Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	✔
Protected classification characteristics under California or federal law	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	✔
Commercial Information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	✔
Biometric Information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	✘
Internet or other similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	✔
Geolocation data	Physical location or movements.	✔
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	✔
Professional or employment-related information	Current or past job history or performance evaluations.	✔
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	✘
Inferences drawn from other personal information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	✔
Sensitive personal information	Social security, driver’s license, state identification card, or passport number; user name, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; genetic data; contents of consumer’s mail, email, and text messages unless Thomson Reuters is the intended recipient of the communication; the processing of biometric information for the purpose of uniquely identifying a consumer; and personal information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation.	✔

 

Categories of Personal Information Disclosed for a Business Purpose

Category of Personal Information	Disclosed
Identifiers	✔
Personal information categories listed in the California Customer Records statute, Cal. Civ. Code § 1798.80(e)	✔
Protected classification characteristics under California or federal law	✔
Commercial information	✔
Biometric information	✘
Internet or other similar network activity	✔
Geolocation data	✔
Sensory data	✔
Professional or employment-related information	✔
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	✘
Inferences drawn from other personal information	✔
Sensitive personal information	✔

 

Categories of Personal Information Sold

Category of Personal Information	Sold
Identifiers	✔
Personal information categories listed in the California Customer Records statute, Cal. Civ. Code § 1798.80(e)	✔
Protected classification characteristics under California or federal law	✔
Commercial information	✔
Biometric information	✘
Internet or other similar network activity	✔
Geolocation data	✔
Sensory data	✔
Professional or employment-related information	✔
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	✘
Inferences drawn from other personal information	✔
Sensitive personal information	✔

 

YOUR RIGHTS
You have a right to know what personal data we hold about you and to request a copy of the personal data held by us about you by contacting us (see below).