Last Updated: February 20th, 2021
1. INFORMATION COLLECTION
Information You Provide to Us
Payment Information: If you use the Site to make purchases, we will also collect certain payment information, such as payment card, Shopify, PayPal, Square, or other financial account information, and billing address. A third-party payment processor collects that information; we do not store your credit card information.
Non-Identifying Information: We also may collect other information, such as ZIP codes, and other information regarding your use of the Site (“Non-Identifying Information”) or from you in response to surveys. Certain Non-Identifying Information would be considered a part of your Personal Information if it were combined with other identifiers in a way that enables you to be identified (for example, combining information with your name). We may combine your Personal Information with Non-Identifying Information, but MOSAIC will treat the combined information as Personal Information.
General Audience Site: The Site is general audience and we do not knowingly collect Personal Information from children younger than age 13. If we become aware that a child younger than 13 has provided us with Personal Information, we will use commercially reasonable efforts to delete such information from our files.
Information Received from Third Parties
Information Collected from Users Automatically
We and our third party service providers, including advertisers, analytics, and third party content providers, may automatically collect certain information from you whenever you access or interact with the Site. This information may include, among other information, the browser and operating system you are using, the URL or advertisement that referred you to the Site, the search terms you entered into a search engine that led you to the Site, areas within the Site that you visited, and other information commonly shared when browsers communicate with websites.
The Technology Used to Collect Information Automatically from MOSAIC Users May Include the Following:
Cookies: Like many websites, we use “cookies” to collect information. A cookie is a small data file that we transfer to your computer’s hard disk for record-keeping purposes. We use both persistent cookies that remain on your computer or similar device (such as to save your registration ID and login password for future logins to the Site and to track your compliance with any of our policies) and session ID cookies, which expire at the end of your browser session (for example, to enable certain features of the Site, to better understand how MOSAIC users interact with the Site and to monitor aggregate usage by MOSAIC users and web traffic routing on the Site). You may be able to instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all functionality of the Site.
Web Beacons: We may also employ software technology known as “web beacons” or “tracking tags” to help us keep track of what content on our Site is effective and to serve relevant advertising or products to you. Web beacons are small graphics with a unique identifier that may be invisible to you, and which are used to track the online activity of Internet users. Web beacons are embedded in the web pages you review or email messages you receive. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to our Site, to monitor how MOSAIC users navigate the Site, to count how many emails that were sent were actually opened, or to count how many particular articles or links were actually viewed.
Embedded Scripts: An Embedded Script is programming code that is designed to collect information about your interactions with the Site, such as the links you click on. The code is temporarily downloaded onto your computer or other device and is deactivated or deleted when you disconnect from the Site. In addition, we may use a variety of other technologies that collect similar information for security and fraud detection purposes and we may use third parties to perform these services on our behalf
How We Respond To Do Not Track Signals
Please note that your browser setting may allow you to automatically transmit a “Do Not Track” signal to websites and online services you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, MOSAIC does not alter its practices when it receives a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com
The Site may provide you the opportunity to participate and post content publicly on blogs, as reviews, through interactive features and through other communication functionality ("Community Postings"). You may choose, through such features or otherwise, to submit or post questions, comments, or other content (collectively, "User Submitted Materials"). Such User Submitted Materials may be displayed publicly along with certain of your Personal Information, such as your name or a screen name. Please note that your use of Community Postings is subject to our Terms of Service.
You may register to join the Site directly via the Site or by logging into your account with a third party social media service via our Site (e.g., Facebook, Instagram, and other third party services that let you sign in using your existing credentials with those services). If you choose to register via a social media service, or to later link your account on our Site to your account with a social media service, we will use Personal Information you have provided to the social media service (such as your name, email address, gender and other information you make publicly available via the social media service) to create your account. Note that the information we collect from and through a social media service may depend on the privacy settings you have with the social media service, that site’s terms of service, and the permissions you grant to us in connection with linking your account with the Site to your account with a social media service. Other than what we may share with the social media service as described below, the Personal Information a social media service has about you is obtained by the social media service independent of our Site, and MOSAIC is not responsible for it.
The MOSAIC Site also may permit additional interactions between it and a third party website, service, or other content provider, such as enabling you to “like” or share content to a third party social media service, or to share content from a third party social media service to our Site. If you choose to “like” or share content, or to otherwise share information from or via our Site with a third party site or service, that information may be publicly displayed, and the third party may have access to information about you and your use of our Site (and we may have access to information about you from that third party). Please note that your relationship with any social media service is governed solely by your agreement(s) with such social media service and your interactions with third parties through social media or similar features are governed by the respective privacy policies of those third parties.
You represent that you are entitled to use your social media account for the purposes described herein without breach by you of any of the terms and conditions that govern the social media service, and without obligating MOSAIC to pay any fees or making MOSAIC subject to any usage limitations imposed by such social media service. If your social media account terminates, then functions enabled through the link between your MOSAIC account and your social media account will terminate as well.
2. USE AND RETENTION OF INFORMATION
3. INFORMATION SHARING AND DISCLOSURE
Service Providers: We may employ third party companies and individuals to perform services on our behalf, such as to host the Site, perform Site-related functions (e.g., without limitation, maintenance services, database management, web analytics and online advertising, payment processing, fraud detection and improvement of MOSAIC’ features) or to assist us in analyzing how our Site is used. These third parties may have access to your Personal Information in order to perform these tasks on our behalf subject to the privacy policies of those third parties.
Marketing By Business Partners or Other Third Parties: We may disclose Personal Information about you to selected business partners or other third parties who we believe may be of interest to you, and they may send you marketing offers or similar information directly. If you want to opt-out of such sharing with third parties for marketing purposes, you may notify us at firstname.lastname@example.org. If you later decide that you no longer want to receive communications from a third party, you will need to contact that third party directly. You also may request, sometimes through your use of a social media service or similar interactive feature or third party application, that we share information about you with a third party and we will typically do so under those circumstances.
Internal and Business Transfers: MOSAIC may share information, including Personal Information, with its parents, subsidiaries, and affiliates, primarily for business and operational purposes. We may sell, transfer or otherwise share some or all of our assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets (including, in each case, as part of the due diligence process with any potential acquiring entity) or in the event of bankruptcy.
Sweepstakes, Contests and Promotions: We may offer sweepstakes, contests, and other promotions (any, a "Promotion") that may require registration. By participating in a Promotion, you are agreeing to the official rules that govern that Promotion, which may contain specific requirements of you, including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, your Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion's official rules, such as on a winner’s list.
4. ANALYTICS PROVIDERS, AD SERVERS, AND SIMILAR THIRD PARTIES
MOSAIC works with (or may in the future work with) network advertisers, ad agencies, analytics service providers, and other vendors to provide us with information regarding traffic on the Site, including pages viewed and the actions taken when visiting the Site; to serve our advertisements on other websites, within mobile apps and elsewhere online; and to provide us with information regarding the use of the Site and the effectiveness of our advertisements. Our service providers may collect certain information about your visits to and activity on the Site as well as other web sites or services, they may set and access their own tracking technologies on your device (including cookies and web beacons), and may use that information to show you targeted advertisements. Some of these parties may collect Personal Information when you visit the Site or other online websites and services.
While we may use a variety of service providers to perform advertising services, some of these companies are members of the Network Advertising Initiative ("NAI”) or the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. You may want to visit http://www.networkadvertising.org/managing/opt_out.asp, which provides information regarding targeted advertising and the “opt-out” procedures of NAI members. You may also want to visit or http://www.aboutads.info/choices/, which provides information regarding targeted advertising and offers an “opt-out” by participating companies in the DAA Self-Regulatory Program. Please note that opting out through these mechanisms does not opt you out of being served advertising, and you will continue to receive generic ads while online.
5. OPTING OUT & MODIFYING YOUR ACCOUNT
MOSAIC users with an Account (as such term is defined in our Terms of Service) may update their choices regarding marketing communications you receive from us through your online Account. You also may opt-out of receiving marketing emails from us by following the opt-out instructions provided in those emails. Please note that we reserve the right to send you certain communications relating to your account or use of the Site (for example, administrative and service announcements) via email and other means and these transactional account messages may be unaffected if you opt-out from receiving marketing communications. If you choose to receive text messages from us, you may change your mind and opt-out of receiving future text messages by replying “STOP” to any text message received.
You are responsible for maintaining the accuracy of the information you submit to us, such as your contact information, and you must update any changes through your online Account. If you would like us to delete your Account in our system, you can do so by sending an email to us at: email@example.com. We will use commercially reasonable efforts to honor your request; however, certain information will actively persist on the Site even if you close your account, including messages you posted to the Site (e.g., product reviews). In addition, your Personal Information may remain in our archives and information you update or delete, or information within a closed account, such as your purchase history, may persist internally or for our administrative purposes. It is not always possible to completely remove or delete information from our databases. In addition, we typically will not remove information you posted publicly through or on the Site. Bear in mind that neither you nor MOSAIC can delete all copies of information that have been previously shared with others on the Site, as in many cases this information is stored or archived elsewhere on third-party servers, services or websites.
MOSAIC takes commercially reasonable steps to help protect and secure the information it collects and stores about our customers. The Site uses “https:” security on all pages. All Personal Information provided to the Site is encrypted using industry-standard technology when transmitted over the Internet. We comply with the Payment Card Industry’s Data Security Standards and, as noted above, credit card payment transactions are handled by third-party processors, not ourselves, and we do not store your credit card data. But no method of transmission over the Internet, or method of electronic storage, is 100% secure all of the time. Thus, while we strive to protect your personal data, MOSAIC cannot ensure and does not warrant the security of any information you transmit to us.
7. INTERNATIONAL TRANSFER OF PERSONAL INFORMATION
8. LINKS TO OTHER SITES
Our Site sometimes contains links to other websites. If you choose to click on a third party link, you will be directed to that third party’s website. The fact that we link to a website is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit Personal Information from you. We encourage you to read the privacy policies or statements of the other websites you visit.
9. CALIFORNIA RESIDENTS & CCPA
This Privacy Notice for California Residents applies solely to visitors, users, and others who reside in the State of California (”consumers”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this Notice. Our Site collects information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer household (“Personal Information”).
Personal information does not include: A) publicly available information from government records; B) deidentified or aggregated consumer information; C) information excluded from the CCPA’s scope, like: (i) health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; (ii) personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and (iii) the Driver’s Privacy Protection Act of 1994.
Notice of Collection of Information
In particular, we have collected the following categories of personal information from its consumers within the last twelve (12) months (as such terms may be defined in the CCPA): 1) Identifiers; 2) Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)); 3) Protected classification characteristics under California or federal law; 4) Commercial information; and 4) Internet or other similar network activity. MOSAIC obtains the categories of personal information listed above either directly from you (for example, from forms you complete or products and services you purchase) or indirectly from you (for example, from observing your actions on our Site).
Information Request and Deletion Request Rights
The CCPA provides consumers who are California residents with specific rights regarding their personal information. More information regarding these rights can be found at HTTPS://OAG.CA.GOV/PRIVACY/CCPA.
You have the right to request that we delete any of your personal information that we have collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to: 1) Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you; 2) Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities; 3) Debug products to identify and repair errors that impair existing intended functionality; 4) Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law; 5) Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.); 6) Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent; 7) Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us; 8) Comply with a legal obligation; or 9) Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by mailing us at firstname.lastname@example.org. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must: A) Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; B) Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it; and C) Provide sufficient information for us to be able to verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not: 1) Deny you goods or services; 2) Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; 3) Provide you a different level or quality of goods or services; or 4) Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
Pursuant to California Civil Code Section 1798.83, California residents who provide us with personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us, one time per calendar year, information about the customer information we shared, if any, with other businesses for their own direct marketing uses.
If you are a California resident and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please send your request to the following email address: email@example.com
You must put the statement "Your California Privacy Rights" in the subject field of your email. You must include your name, street address, city, state, and ZIP code. We will respond to you at your email address. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.
If you have any questions or comments about this notice, the ways in which MOSAIC collects and uses your information described here, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
10. WE DO NOT SELL YOUR PERSONAL INFORMATION
We do not collect and sell your information for commercial purposes. Instead, we may use or disclose the personal information we collect: A) to fulfill or meet the reason you provided the information (e.g., to fulfill an order for a product that you place on our Site); B) to provide, support, personalize, and develop our Site, products, and services; C) to create, maintain, customize, and secure your account with us; D) to process your requests, purchases, transactions, and payments and prevent transactional fraud; E) to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses; F) to personalize your Site experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Site, third-party sites, and via email or text message (with your consent, where required by law); G) to help maintain the safety, security, and integrity of our Site, products and services, databases and other technology assets, and business; H) for testing, research, analysis, and product development, including to develop and improve our Site, products, and services; I) to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations; J) as described to you when collecting your personal information or as otherwise set forth in the CCPA.
We may also disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We share your personal information with Service Providers and with third party advertisers, analytics, aggregators, and content providers.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
11. CHANGES TO THIS POLICY