BYLT Privacy Policy

Last Updated: September 20, 2024

Introduction

This Privacy Notice describes the privacy practices of BYLT, LLC (“BYLT,” “we,” “our,” or “us”) in connection with the website https://byltbasics.com/ (the “Site”) and our mobile application (the “App”) (collectively the “Services”). Please read this Privacy Notice carefully to understand our policies and practices regarding your information. If you do not agree with our policies and practices, your choice is not to use the Site. By accessing or using the Site, you acknowledge this Privacy Notice.

Updates to This Notice

We may update this Privacy Notice based upon evolving laws, regulations and industry standards, or as we may make changes to our Site. We will post changes to our Privacy Notice on this page and encourage you to review our Privacy Notice when you use our Services to stay informed. We will take appropriate measures to inform you, consistent with the significance of the changes we make. If you disagree with the changes to this Privacy Notice, you should discontinue your use of our Services.

Children

You must be at least 13 years old to use the Services. The Services are not directed to or intended for use by minors. If you are under 13, do not use or provide any information through the Services. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at the information included below.

Personal Information We Collect

Information You Provide Us

We collect certain information from you by which you may be personally identified (“Personal Information”). The types of Personal Information we collect include your name, address, email address and phone number. You may provide use with this information when you make a purchase on our Site or App or when you choose to contact us. You may also provide us with your phone number when you sign up to receive marketing communications from us.

Information We May Automatically Collect

When you use our Services, we and third parties, including Facebook, Google, Microsoft, and others, may automatically collect certain information about your device, including information about your web browser, IP address, and time zone by using cookies and similar technologies. Additionally, as you use our Services, we may collect information about the individual web pages and services that you view, what websites or search terms referred you to our Services, and information about how you interact with the Services.

• “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

• “Log files” track actions occurring on our website and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

• “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site. We use the following advertising services: Google Analytics, Facebook/Meta Pixel, Snapchat Pixel, Triple Whale, TikTok Advertising Pixel, and the Pinterest Tag.

Cookies & Similar Technologies

We use cookies (small, often encrypted, text files that are stored on your computer or mobile device) and similar technologies (“Cookies”) to provide you with certain functions on our Services and help collect data. This section explains how we use Cookies to collect information about the way you use our Services and how you can control them.

How We Use Cookies

We use Cookies to track how you use our Services by providing usage statistics. Cookies are also used to deliver our information (including updates) and allow account authentication to you based upon your browsing history and previous visits to the Services. Information supplied to us using Cookies helps us to provide a better online experience to our visitors and users and send marketing communications to them, as the case may be. We may combine the information we collect from Cookies with Personal Information that we have collected from you to learn more about how you use our Services to improve it.

Types of Cookies

We use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your device until you delete them). To make it easier for you to understand why we need them, the Cookies we use on our Services can be grouped into the following categories:

• Strictly Necessary: These Cookies are necessary for the Services to work properly. They include any essential authentication and authorization Cookies for our Services.

• Functional: These Cookies enable technical performance and allow us to remember the choices you make while browsing our Services, including any preferences you set. They also include sign-in and authentication Cookies and IDs that enable you to return without additional sign-in.

• Performance/Analytics: These Cookies allow us to collect certain information about how you navigate the Site and mobile application and services running on your device. They help us understand which areas you use and what we can do to improve them.

• Targeting: These Cookies are used to deliver relevant information related to our Services to an identified machine or other device (not a named or otherwise identifiable person) which has previously been used to visit our Services. Some of these types of Cookies on our Services are operated by third parties with our permission and are used to identify advertising sources that are effectively driving customers to our Services.

How to Control and Delete Cookies

Cookies can be controlled, blocked or restricted through your web browser settings. Information on how to do this can be found within the Help section of your browser. All Cookies are browser specific. Therefore, if you use multiple browsers or devices to access websites, you will need to manage your Cookie preferences across these environments.

Find out how to manage Cookies on popular browsers:

• Google Chrome, available at https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en

• Microsoft Edge, available at https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

• Mozilla Firefox, available at https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

• Microsoft Internet Explorer, available at https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

• Opera, available at https://www.opera.com/help/tutorials/security/privacy/

• Apple Safari, available at https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

If you are using a mobile device to access the Services, you will need to refer to your instruction manual or other help/settings resource to find out how you can control Cookies on your device. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

Please note that if you restrict, disable or block any or all Cookies from your web browser or mobile or other device, the Services may not operate properly, and you may not have access to our services available through the Services. We are not responsible for your inability to use our Services or any degraded function you may experience that may be caused by your settings and choices regarding Cookies.

How We Use Personal Information

We use your Personal Information for the following purposes and as otherwise described in this Privacy Notice or at the time of collection:

• To fulfill your order;

• To operate, provide and improve the Services;

• To communicate with you about the Services, including by sending you announcements and administrative messages;

• To personalize your experience with the Services and communicate with you;

• To provide support and maintenance;

• To respond to your request and feedback;

• To provide you with marketing communications;

• To help us advertise the Services and display advertisements to you;

• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;

• To comply with legal obligations; and

• With your consent.

How We Share Personal Information

We may share your Personal Information with our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Notice.

We may share your Personal Information with third party companies and individuals that provide services on our behalf or help us operate the Services (such as professional advisors, customer support, hosting, analytics, email delivery, order fulfillment, marketing, and database management services). We may also share your Personal Information for compliance purposes.

We may sell, transfer or otherwise share some or all our business or assets, including your Personal Information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.

Payment Processing

Our store is hosted by Shopify, Inc. They provide us with the online e-commerce platform that allows us to sell our products to you. Your data is stored through Shopify’s data storage, databases, and general Shopify application. You may review Shopify’s Terms of Service here: https://www.shopify.com/legal/terms. We use Shopify Payments to process your payments. All direct payment gateways adhere to the standards set by PCI-DSS. Shopify Payments will collect, use, and process your information, including payment information, in accordance with their privacy policy. You can access Shopify Payment’s privacy policy here: https://pay.shopify.com/tos-privacy-policy.

Privacy Technology Practices

Do Not Track

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Links to Third-Party Sites

The Services may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites, mobile applications and services follow different rules regarding the collection, use and sharing of your Personal Information. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Data Security

We employ a number of administrative, technical, and physical safeguards designed to protect the Personal Information we collect. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Services.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Services. Any transmission of Personal Information is at your own risk.

Data Retention

BYLT strives to retain Personal Information for no longer than it is reasonably necessary for its processing purpose. The applicable retention period depends on the purpose for which Personal Information was obtained and on specific data retention obligations arising from applicable laws that may require the data to be held for a certain period of time. We may retain Personal Information for a longer period than is necessary if it is required by law.

Notice of Financial Incentive

We may offer programs and benefits to consumers related to the collection, retention, and use of personal information that may be deemed a financial incentive under applicable law. For example, you may provide us with your email address in exchange for a one-time coupon. Such offers may vary and may not be available at all times. The amount of and terms of such offers will be presented to you at the time of the offer. You can terminate participation at any time by contacting us or submitting a data request as detailed on the “Your Data Privacy Rights” section.

Your Data Privacy Rights

We offer you certain choices related to your personal data. The choices detailed in this section may not apply in every circumstance and are based on your state of residency. You may have one or more of the following privacy-related rights available to you:

• Right to Know – The right to request what Personal Information we have collected, used, and the categories of third parties with whom we have shared your Personal Information during the past 12 months. We have made this information available within this privacy notice.

• Right To Access – The right to request a copy of the specific pieces of Personal Information we maintain about you.

• Right to Delete – The right to request that their Personal Information be deleted, subject to some exceptions. Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies.

• Right to Correct – The right to correct Personal Information that has become outdated or is otherwise inaccurate.

• Right to Opt-Out – The right to opt-out of the sharing of Personal Information for targeted and cross-context behavioral advertising purposes. In some states, you may also have the right to limit the use of sensitive Personal Information.

• Right to Data Portability – The right to request that we provide you or another entity with your Personal Information in a readily usable format, as technically feasible.

DO NOT SHARE MY PERSONAL INFORMATION (RIGHT TO OPT-OUT)

To request that BYLT not “Sell or Share Your Personal Information,” please see the section below titled “Exercising Your Rights.” In this case “sharing” refers to a specific type of disclosure under certain privacy laws that relates to advertising activity including targeted advertising (also called “cross-context behavioral advertising”). An example of selling or sharing information is when we disclose information about you (like when you have visited our Site) tied to unique identifiers, like device IDs, with third parties for targeted or cross-context behavioral advertising. When you tell us not to sell or share your Personal Information, we will not disclose your personal data for these purposes. Please note that not all disclosures of your Personal Information constitute a “share” or “sale” of your data under applicable privacy laws.

Exercising Your Rights

To exercise the rights mentioned above, you generally must submit a request and verify your identity to a degree of certainty based on the sensitivity of your request. As required by applicable law, we will seek to verify your identity and state of residence for each request (a “Verifiable Consumer Request”). We will not fulfill your request unless you have provided sufficient information for us to reasonably verify your identity as the consumer about whom we collected Personal Information. To submit your request please visit our Privacy Webform.

Only you, or someone legally authorized to act on your behalf (an “Authorized Agent”), may make a request to know or delete related to your personal data. We require Authorized Agents to provide written authorization confirming they may submit a request on your behalf. You may only submit a request to know twice within a 12-month period. We endeavor to substantively respond to a Verifiable Consumer Request within forty-five (45) days of its receipt, unless we require an extension. If we reasonably require an extension, we will inform you of the reason and extension period.

Once we receive your request and confirm your identity, we will review your request. We may deny your request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies. If we deny your request, you may submit an appeal. Instructions for how to submit your appeal will be included in our response explaining why we denied your request.

Non-Discrimination

We will not discriminate against you for exercising any of your data subject rights. We do not charge a fee to process or respond to your Verifiable Consumer Request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Summary of Data Disclosed to Third Parties

In the preceding twelve months, we may have disclosed Personal Information for a business purpose to the categories of third parties indicated in the chart below:

Personal Information Category	Examples of Information Category	Is Category Collected?	Business Purpose Disclosures	Category of Third-Party Recipients
A: Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers	Yes	Account processing; invoice and payment processing; product and services recommendations	Data Analytics Providers; advertising networks; Operating Systems & Platforms; Social Networks; Billing and Payment Processors
B: California Customer Records Personal Information categories.	A name, signature, Social Security number, physical characteristics or description, address, telephone number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number. Some Personal Information included in this category may overlap with other categories	Yes	Account processing; invoice and payment processing; product and services recommendations	Data Analytics Providers; advertising networks; Operating Systems & Platforms; Social Networks; Billing and Payment Processors
C: Protected Classification Characteristics Under California Law	Age, citizenship, marital status and mental ability	Yes	Account processing	Billing and Payment Processors
D: Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Yes	Product and services recommendations	Data Analytics Providers; advertising networks
E: Biometric Information	Behavioral characteristics, including imagery of the face and voice recordings.	No	N/A	N/A
F: Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement	Yes	Product and services recommendations	Advertising Networks; Data Analytics Providers; Operating Systems & Platforms
G: Geolocation data.	IP address-based location information and GPS data	Yes	Product and services recommendations	Service providers; advertising partners; analytics partners and other parties you may authorize
H: Sensory Data	Audio, electronic, visual, thermal, olfactory or similar information	No	N/A	N/A
I: Professional or employment-related information	Current or past job history or performance evaluations.	No	N/A	N/A
J: Non-public education information	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial Information, or student disciplinary records	No	N/A	N/A
K: Inferences drawn from other Personal Information	Profiles reflecting on a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes	Yes	Product and services recommendations	Advertising Networks; Data Analytics Providers; Operating Systems & Platforms
L: Sensitive Personal Information	Information such as social security number, passport number, and precise geolocation data – specifically used for the purpose of inferring characteristics about a consumer	No	N/A	N/A

If you would like to: access, correct, amend or delete any Personal Information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at support@byltbasics.com or by mail at:

BYLT, LLC.

Attn: Privacy Compliance Officer

17421 Derian Ave., Irvine, CA 92614, United States

WEBSITE ACCESSIBILITY POLICY

BYLT, LLC (the “Company”) is committed to ensuring full and equal access to the goods, services, facilities, privileges, advantages, and accommodations provided by and through its websites (“Websites”) and digital/mobile applications (“Mobile Applications”) through effective communication based on the Web Content Accessibility Guidelines 2.1 Level A and AA Success Criteria (the “WCAG 2.1”) from the Web Accessibility Initiative of the World Wide Web Consortium for all customers, potential customers, guests and their companions (collectively, “Customers”) with disabilities.

Maintenance of Policy.  BYLT, LLC will review, update and maintain this Website Accessibility Policy on an annual basis or more frequently.

Version.  This Website Accessibility Policy is effective as of February, 2020 and supersedes all prior versions hereof.

Responsibility and Ownership of this Policy.  The responsibility and ownership of this Website Accessibility Policy will be assigned to the Web Accessibility Coordinator.

Distribution of Policy.  BYLT, LLC will, on an annual basis or more frequently, distribute this Website Accessibility Policy to all employees and contractors who have responsibilities for website content, mobile application content, technical support related to Company Websites or Mobile Applications.  This Website Accessibility Policy will be maintained and made available to affected Company employees and contractors in the same manner as similar policy documents affecting Company operations and Customer interaction.

Website and Mobile Application Accessibility Training. BYLT, LLC will, on an annual basis or more frequently, provide training to website content personnel on how to achieve effective communication and conform website content and mobile applications with the WCAG 2.1.  Website content personnel shall also receive this training when they are hired into a position that includes such a role.

Web Accessibility Coordinator.  BYLT, LLC will designate an employee as BYLT, LLC’s Web Accessibility Coordinator:

• The Web Accessibility Coordinator will be knowledgeable with the requirements of Title III of the ADA, the WCAG 2.1, and website accessibility generally;

• The Web Accessibility Coordinator will hold the ultimate responsibility for ensuring BYLT, LLC’s compliance with this Website Accessibility Policy;

• The Web Accessibility Coordinator will report directly to the Executive Owner;

• The Web Accessibility Coordinator will involve the appropriate Company departments in discussions and analyses regarding website and mobile content accessibility.

• The role, identity, existence and contact information for the Web Accessibility Coordinator will be publicized to employees, contractors and Customers in the ordinary channels relating to website access and use.

Automated Website and Mobile Application Accessibility Testing.  BYLT, LLC will perform automated accessibility tests of its Websites and Mobile Applications at least once annually to identify any instances where its Websites and Mobile Applications are not in conformity with WCAG 2.1.  The results of this testing will be provided to the Web Accessibility Coordinator to be evaluated and addressed.

User Accessibility Testing.  BYLT, LLC will perform, on an annual basis or more frequently, testing for usability of its Websites and Mobile Applications by individuals with different disabilities, including at a minimum individuals who are blind or have low vision, individuals who are deaf or hard of hearing and individuals who have physical disabilities affecting manual dexterity (such as those limiting the ability to use a mouse).  Testing shall include the use and access to the primary features of BYLT, LLC’s Websites and Mobile Applications, such as the creation of an account, logging-in to an existing account, viewing goods, selecting items and placing them in the virtual shopping cart, checking out and paying for items in the virtual shopping cart, and scheduling delivery or pick-up.  The results of this testing will be provided to the Web Accessibility Coordinator to be evaluated and addressed.

Website Accessibility Consultant.  BYLT, LLC shall retain an accessibility consultant which is knowledgeable about website and mobile content accessibility, development, structure and testing to serve as a resource for BYLT, LLC’s existing development infrastructure.  The Website Accessibility Consultant will provide BYLT, LLC advice on:

• Achieving WCAG 2.1 AA conformity for BYLT, LLC’s Websites and mobile apps;

• Testing protocols, methodologies and result analysis;

• Internal Development Guideline best practices for ensuring the development, maintenance and updating of Website and Mobile Application content which conforms with WCAG 2.1 AA standards and achieves effective communication; and

• Company development team training to achieve conformity with WCAG 2.1 AA standards and effective communication.

Development Guidelines.  BYLT, LLC shall create, maintain, and update Website and Mobile Application Development Guidelines that mandate effective communication through conformity with WCAG 2.1 AA standards where technically feasible.  The Development Guidelines shall treat the elimination of bugs that create accessibility barriers, including those that create nonconformance with WCAG 2.1 AA, with the same level of priority (e.g., speed, resources used to remediate) as any other equivalent loss of function for individuals without disabilities.

Complaint and Policy Modification Request Channel.  BYLT, LLC shall provide an email and telephonic communication channel for its Customers to make complaints regarding the accessible features of the Websites or Mobile Applications, or to make a request for BYLT, LLC to modify an existing policy.  This complaint/modification request channel shall be prominently displayed and directly linked from the Websites’ homepages, with a statement of BYLT, LLC’s policy to ensure that persons with disabilities have full and equal enjoyment of the goods, services, facilities, privileges, advantages, and accommodations of BYLT, LLC through its Websites and its Mobile Applications.  The Websites homepages shall include an email address and a telephone number that customers with disabilities who are experiencing technical difficulties with the Websites or Mobile Applications can request assistance.  BYLT, LLC will establish and maintain procedures to evaluate all disabled access-related requests for a new service or to modify an existing service to accommodate a Customer’s individual needs.  BYLT, LLC will evaluate such requests on the basis of the Customer’s needs and disability and take action to fulfill such requests, propose an alternative or, if appropriate, deny the request.  Company agents will promptly communicate all website and mobile content complaints and policy modification requests to the Web Accessibility Coordinator, who will maintain and keep records of such requests.  The Web Accessibility Coordinator will review such requests to ensure that they are reasonably, promptly and effectively responded to.

Third Party Content.  If BYLT, LLC uses or integrates third-party plug-ins or content in its Websites or Mobile Applications, then BYLT, LLC shall obtain reasonable representations, warranties and assurances from such third-parties that the provided content conforms to WCAG 2.1 AA standards, and/or BYLT, LLC shall undertake reasonable efforts to test and confirm that such content conforms to WCAG 2.1 AA standards.