Privacy

Last updated and effective as of: October 23, 2024 

Cost n' Mayor  (“Company,” “we,” “us,” or “our”) respect your privacy and are committed to protecting it through our compliance with this policy (this “Privacy Policy”).  This Privacy Policy describes our practices regarding the use and disclosure of your personal information—information that identifies you or reasonably can be linked to information that identifies you, such as name, address, and debit or credit card information—that we obtain through the Cost n' Mayor website (our “Website”).

By visiting our Website, you are accepting the practices and policies described in this Privacy Policy.

What Personal Information Do We Collect and How Do We Collect It?

In general, we avoid collecting the personal information of users of our Website.  The following are some of the types of personal information we gather and some of the ways we collect this personal information:

  • Information You Give to Us. We receive and store information that you enter on our Website, or send to us by email. We use the information that you provide for such purposes as responding to your inquiries, customizing your shopping experience, improving our e-store, and communicating with you.  Further, if you register an account, make a purchase, join our newsletter, sign-up to receive emails, join our loyalty program, or interact in any way on our Website, we collect and store some of the information you may provide, such as your name, social media handle, email, telephone number, and address. You may also be asked for demographic information, such as your age, or other information, such as your product preferences, apparel needs, or location.  To learn more about how you can control the information that we receive from you, see the “What are Your Choices Regarding How We Collect and Use Your Information” section below. 
  • Information Other Users of Our Website, or Other Third-Parties Give Us. We collect information from emails, other users of our Website, and other third-parties. You may be able to register and log-in using a social media account, such as your Facebook account.  For example, if you log-in via Facebook, Facebook will ask your permission to share information from your account with our Website.  Such information may include your name, gender, profile picture, list of friends, a link to your Facebook profile, likes and other data that is part of your, or your friends’, Facebook profile(s).  This information is gathered by Facebook and is provided to our Website under Facebook’s privacy policy terms and conditions.  You may also be able to connect to a social media account through our Website, such as the Facebook icon, in order to share information from our Website through your social media account.  To learn more about how you can control the information that we receive from Facebook or other social media accounts, see the “What are Your Choices Regarding How We Collect and Use Your Information” section below. 
  • Information We Collect Electronically. We receive and store certain types of information when you interact with our Website.  Such information includes the following:
  • Browsing Information. Like many other sites, we use “cookies” and we obtain certain types of information when your web browser accesses our Website and other content served by us, or on our behalf, on other websites.  Cookies are data files placed on a web browser when you visit websites. They are sent to your device to personalize your experience on our Website as they enable us to recognize your device (i.e. mobile phone, laptop, etc.) and provide you personalized features on our Website and storage of items in places like your Shopping Cart between each visit.  Other browsing information that we may obtain include the address of websites that referred you to our Website, the path you take through our Website, and other information about your session on our Website.  To learn more about how you can control the browsing information that we collect electronically, see the “What are Your Choices Regarding How We Collect and Use Your Information” section below. 

On our Website we also use software tools for analytical and other purposes.  Such tools include: Google Analytics; Shopify Analytics; Klaviyo; third-party applications connected to our Shopify account; AdRoll Analytics; credit card processing analytics; fraud prevention filters; warehouse inventory, order, refund, return, exchange data; JavaScript to measure and collect session information including page response times, download errors, length of visits to certain pages; page interaction information; and methods used to browse away from the page. 

  • Device Information. We collect technical information when you visit our Website. This includes information such as Internet Protocol (IP) address, the type of device you use, your device operating system and browser type, and a unique device identifier.
  • Location Information. We may collect information about your location when your device is set to provide location information.  To learn more about how you can control the location information that we collect electronically, see the “What are Your Choices Regarding How We Collect and Use Your Information” section below.  

How Do We Use the Information We Collect? We generally use the information that we collect in the following ways:

  • To present our Website and its contents to you, or to improve our Website and its contents. 
  • To provide you with information, products, or services that you request from us. 
  • To provide you with information, products, or services offered to you by us, our affiliated companies, or other third-parties.
  • To allow you to participate in interactive features on our Website.
  • To process any sales or other transactions between you and us.
  • To share information in the ways described below in the section entitled: “Do We Share or Disclose the Information We Collect?”

Do We Share or Disclose the Information We Collect? We may share information as described below:

  • With Our Subsidiaries or Affiliated Businesses. We may disclose the information we collect with our subsidiaries or affiliated businesses.
  • With a Buyer or Other Successor. We may disclose the information we collect with a buyer or other successor in connection with an assignment.  We may assign our rights and duties under this Privacy Policy, including, without limitation, our rights in information collected through our Website, to any third-party at any time without notice to you, and such assignment rights include the ability to make an assignment in connection with: any sale, merger, acquisition, divestiture, or liquidation of all or part of our business or assets related to our Website; or a sale of all or substantially all of our business or assets; or as part of any reorganization or restructuring of our business. 
  • With Third-Party Service Providers. We employ other companies and individuals to perform functions on our behalf.  Examples include hosting our Website, management of our e-store, fulfilling orders, delivering packages, sending postal mail and email, removing repetitive information from customer lists, analyzing data, providing marketing assistance, providing search results and links (including paid listings and links), processing credit card payments, and providing customer service.  These third-parties may have access to personal information needed to perform these and other functions.  These third-parties may not use your personal information that we collect for unauthorized purposes. We may share information with third-parties to provide you with product information, promotions, and other offers; to help maintain and operate our Website; or for other reasons related to our business. We may also share with third-parties non-identifying information, such as aggregate statistics or usage information. This does not include selling, renting, sharing, or disclosing personal information from our customers for commercial purposes.
  • With Law Enforcement and Others. We may release account and other personal information to comply with any court order, law, or legal process, including responding to any government or regulatory request. We may also release such information to enforce or apply our Conditions of Use and other agreements; or to protect the rights, property, or safety of the Company, other users of our Website, or others.  This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. This does not include selling, renting, sharing, or disclosing personal information from our customers for commercial purposes. 
  • With Your Consent. You may receive notice when information about you may go to third-parties, and you will have an opportunity to opt-out of our sharing the information.

How Secure is Your Personal Information Collected by Us?

We have technical and organizational measures in place that we believe are reasonable and that are intended to safeguard and protect your personal information against unauthorized access, accidental loss, improper use, and disclosure. For example, we currently use Shopify to operate this website, and Shopify uses Secure Sockets Layer (SSL) software which encrypts information you input.  However, you should be aware that information transmitted over the internet is not completely secure because of the nature of the internet and that systems and measures used to secure information are not flawless. For these reasons, although we will use reasonable efforts to protect your personal information, including those mentioned above, we do not warrant the security of personal information transmitted to us or stored by us.  Personal information that is transmitted to us by you electronically is done at your own risk.

What are Your Choices Regarding How We Collect and Use Your Information? 

  • Can you choose not to provide your information on our website? You can choose not to provide your information to us, however, this information is generally required to make a purchase or to take advantage of certain features on our Website.
  • Can you control your information that we receive from Facebook or other social media accounts? In order to control the information that we receive about you from Facebook or other social media accounts, you must change your privacy settings within those accounts.
  • Can you control the information we collect electronically?
  • Browsing Information. If you want to control how cookies are added to your device, or remove them altogether, the “help” feature on most web browsers will tell you how to change your cookie settings and how to prevent your browser from accepting new cookies.  In some cases your browser will show you how to receive a notification you when you receive a new cookie. Additionally, you can disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on settings or visiting the website of your browser’s developer.  If you choose to disable your browser from accepting cookies, you may not be able to use all of the features of our Website.  For instance, if you block or otherwise reject our cookies, you will not be able to add items to your Shopping Cart, proceed to Checkout, or use any of our Website products that require you to Sign-in.
  • Location Information. If you want to control the location information we are able to collect, you may do so by the controls in your mobile device’s settings.
  • What information can you access that we collect about you? By logging-in to your account you can update your account details, such as your address, and view your order history.
  • Can you add, update, or delete certain information on your account, or opt out of receiving communications from us? If you do not want to receive email or other mail from us, you can adjust your communication preferences within your account, or simply click the unsubscribe link in the footer of any email we sent you. If you do not want to receive text messages from us, you can text STOP to the SMS number used by us to contact you.  For additional information regarding additions, updates, or deletions of certain information on your account for California residents and European Union residents and other GDPR data subjects see the sections entitled “Additional Notices to California Residents” and “Additional Notices to European Union Residents and Other GDPR Data Subjects” below. 

Are Children Allowed to Use Our Website?

Our Website is not intended for use by children under the age of 13, or to sell products to children under the age of 13.  We do not knowingly collect, use, or disclose personally identifiable information from anyone under the age of 13.  If we determine upon collection that a user is under this age, we will not use or maintain his/her personal information without the parent’s or guardian's consent. If we become aware that we have unknowingly collected personally identifiable information from a child under the age of 13, we will make reasonable efforts to remove this information from our database.  If you are a parent or guardian and believe that we might have any information from or about a child under age 13, please contact us by one of the following methods at the end of this notice, and we will review the request and respond promptly.

We strongly recommend that minors 13 years of age or older ask their parents for permission before sending any information about themselves to anyone over the Internet and we encourage parents to teach their children about safe internet use practices.

What is the Scope of this Privacy Policy? Please be aware that we do not control the policies or practices of third-parties to which we disclose information about users of our Website and that any use or disclosure of such information by third-parties is not governed by this Privacy Policy.  

Please also be aware that we have no control over the content, policies, or actions of third-party websites whose links may be found on our Website. The use of any information you may provide to third-parties on other websites, or which such parties may otherwise collect on other websites, is not governed by this Privacy Policy. You should carefully review the privacy policies of any third-party websites and contact the operators of those websites if you have any questions about their use of your information. We are not responsible for any third-party, or affiliates or agents of such third-party, failing to use your personal information in accordance with such third-party’s privacy policy, or any contractual or other legal obligations to which such third-party, its affiliates or agents, may be subject.

What are the Effects of Changes and Updates to this Privacy Policy? By using our Website, you consent to the collection, use and disclosure of information as described in this Privacy Policy. In the event of any change or update to this Privacy Policy, a revised policy will be posted online on our Website with the date this Privacy Policy was last updated, and this Privacy Policy’s effective date, posted at the top of this page.  Please check our Website periodically to remain informed of any changes or updates to this Privacy Policy. 

Law Governing this Privacy Policy

If you choose to visit our Website, your visit and any dispute over privacy is subject to this Privacy Policy and our Conditions of Use, including limitations on damages, resolution of disputes, and application of the law of the state of New York.

Consent to Processing of Information in the USA

Our website is governed by, and operated in, and in accordance with the laws of the United States, and is intended for the use of residents of the United States.  We make no representation that our Website is governed by or operated in accordance with the laws of any other country.  Given that we ship our products internationally, use of your information involves the transmission of some data on an international basis. If you are located outside of the United States, information we collect may be transferred to and processed in the United States (including, but not limited to, credit card processing, your billing and shipping address, email and phone number). By using our website, or providing us with any information, you: (i) acknowledge that Company is subject to the laws of the United States (ii) consent to the collection, processing, maintenance and transfer of such information in and to the United States, and (iii) waive any claims that may arise under those laws.

Additional Consent to Text/SMS Messaging

If you choose, you can provide your mobile phone number to receive text message alerts from us to receive product and/or event information, tips, or promotions. You agree that by providing your mobile phone number you expressly consent to receive automated marketing text messages from us to the mobile phone number provided. Consent is not required to purchase goods or services. Message and data rates will apply and you should check the rates of your mobile carrier. You can opt out from further text marketing communications by texting STOP to the SMS number used by us to contact you 

If you have any concern about your privacy and our Website, please contact us with a thorough description, and we will try to resolve it.

Additional Notices to California Residents

  • California Do-Not-Track Disclosure. At this time, our Website is not set up to honor web browser do-not-track settings.
  • Information on Marketing Disclosures. California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us once a year, free of charge, information about the personal data (if any) we disclosed to third-parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal data that was shared and the names and addresses of all third-parties with which we shared such information in the immediately preceding calendar year.  To do so, please submit your request by one of the following methods at the end of this notice, and we will review the request and respond promptly.
  • Content Removal Requests for Users Under 18 Years Old. If you are a user under 18 years of age and reside in California, you may request and obtain removal of content or information that you have posted on our Website. To do so, please contact us by one of the following methods at the end of this notice, and we will review the request and respond promptly.

You should be aware that a request to remove content or information posted by you on our Website does not ensure or require complete or comprehensive removal of such content or information from our databases.

Additional Notices to European Union Residents and Other GDPR Data Subjects

In addition to the information provided elsewhere in this Privacy Policy, persons who are residents of the member countries of the European Union (“EU”), or other data subjects covered by the EU’s General Data Protection Regulation, (EU) 2016/679 (the “GDPR”), have certain additional privacy rights under applicable law.  The following provisions of this Privacy Policy provide an overview of these additional rights and related information.

  • Our Commitment. We embrace the approach to privacy protection reflected in the GDPR, giving our customers, vendors, and users a greater say in what happens with their data. Please contact our data protection officer hello@costnmayorshop.com, and we will review the request and respond promptly if you have any questions about any matters related to our GDPR compliance.
  • Legal Bases for Processing Personal Data of European Union Citizens or Other GDPR Data Subjects. When processing your personal data, we may rely on one or more of the following legal bases (or other available legal grounds), depending on the circumstances:
  • Legitimate Interest.  We may process your personal data where we have a legitimate interest in such processing for managing, operating, or promoting our business, and where that legitimate interest is not overridden by your interests, fundamental rights, or freedoms.
  • We may process your personal data where we have obtained your consent to such processing.
  • Contractual Necessity. We may process your personal data where such processing is necessary in connection with any contract that we have with you.
  • Legal Requirements.  We may process your personal data where such processing is required by applicable law.
  • Disclosures to Third-Parties. Your personal data will not be disclosed to third-parties except where it is necessary for fulfillment of our obligations to you or where we are obliged or permitted to do so by law (including, without limitation, through the terms of any agreement we may have with you), or where we make disclosures that are otherwise consistent with the uses described in this Privacy Policy.

We may also disclose any information (including personal data) relating to you to law enforcement authorities or any regulatory or government authority in response to any request including requests in connection with the investigation of any suspected illegal activities. 

We reserve the right to transfer any personal data we have about you in the event we sell or transfer all or a portion of our business or assets, or merge with another organization. Should such a sale, transfer, or merger occur, we will use reasonable efforts seeking to require that the transferee uses personal data you have provided to us in a manner that is consistent with this Privacy Policy.

We will not sell, resell, or lease your personal data to any third-parties but we may, if required for the purpose(s) for which your personal data was collected and processed, share it with our partners and/or service providers to enable them to provide their services to us or to you, as applicable. The foregoing are in addition to the other uses described elsewhere in this Privacy Policy. 

  • Security of Personal Data of European Citizens or Other GDPR Data Subjects. We have technical and organizational measures in place that we believe are reasonable and that are intended to safeguard and protect your personal information against unauthorized access, accidental loss, improper use, and disclosure. For example, we currently use Shopify to operate this website, and Shopify uses Secure Sockets Layer (SSL) software which encrypts information you input.  

However, you should be aware that information transmitted over the internet is not completely secure because of the nature of the internet and that systems and measures used to secure information are not flawless.  For these reasons, although we will use reasonable efforts to protect your personal data, including those mentioned above, we do not warrant the security of personal data transmitted to us or stored by us, and personal data that is transmitted to us by you electronically is done at your own risk.

  • Retention of Personal Data of European Citizens or Other GDPR Data Subjects. Our policy is to retain your personal data only for as long as is necessary to fulfill the purposes for which we collected such personal data, including for the purposes of satisfying any professional, legal, accounting, or reporting requirements to which we are subject. To determine the appropriate retention period for personal data, we consider the scope, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, the purposes for which we collected and processed your personal data and whether we can achieve those purposes through other means, and any applicable legal and professional requirements.
  • Your Rights as a European Resident or Other GDPR Data Subject. You have a number of rights concerning your personal data that we hold and use, including the following:
  • Right of Access. You have the right to be informed about what personal data we hold about you and to a copy of this personal data.
  • Right to Rectification.  You have the right to have any inaccurate personal data which we hold about you updated or corrected.
  • Right to Erasure.  In certain circumstances, you may request that we delete the personal data that we hold about you.
  • Right to Complain.  You have the right to lodge a complaint regarding the processing of your personal data to an applicable governmental or supervisory authority in your country.
  • Right to Withdraw Consent.  Where processing of personal data is based on your consent, you have the right to withdraw such consent at any time.
  • Right to Object.  Where we rely on our legitimate interests to process your personal data, you have the right to object to such use and we are required to discontinue such processing unless we can demonstrate an overriding legitimate interest in such processing.
  • Right to Restriction.  You have the right to request that we stop using your personal data in certain circumstances including if you believe that the personal data we hold about you is inaccurate or that our use of your personal data is unlawful. If you validly exercise this right, we will store your personal data and will not carry out any other processing until the issue is resolved.

Contact: hello@costnmayorshop.com