This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered “personal information,” such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Inferences from Other Data, including inferences created from other personal information collected
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
We may collect personal information about you from third-party sources, including Other consumers (e.g., referrals).
We do not retain data for any longer than is necessary for the purposes described in this Policy.We generally retain data according to the guidelines below.
| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity | We delete or anonymize data concerning your use of our website within 15 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 15 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number | We keep customer feedback and correspondence with our customer service for up to 15 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Postal address, Telephone number, Purchases, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Postal address, Telephone number, Purchases, Age, Sex, gender, or gender identity, Inferences created from other personal information collected | We retain review, survey, and feedback data for up to 15 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests as long as necessary to comply with our legal obligations, and for a minimum of 24 months. |
| Data we collect for security purposes, including Name, Postal address, Online Identifiers, Purchases, Precise geolocation, Inferences created from other personal information collected | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
We process personal information for the following business and commercial purposes:
- Creating Customer Profiles
- Data Storage
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Improving our Products & Services
- Meeting Compliance & Legal Requirements
- Operating our Website or Mobile Apps
- Organizing & Managing Data
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Sending Promotional Communications
- Tracking Purchases & Customer Data
We may disclose personal information about you for business and commercial purposes when you Consumers:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Accounting Contractors, Business Operations Tool, Cloud Computing & Storage Providers, Commerce Software Tools, Fulfillment Warehouse, Governance, Risk & Compliance Software, IT Infrastructure Services, Marketing Agency, Sales & Marketing Tools, and Website Developers | Ad Networks, Commerce Software Tools, Data Analytics Providers, Data Cooperative, Fulfillment Warehouse, and Shipping Services |
| Internet Activity | Commerce Software Tools, Governance, Risk & Compliance Software, Marketing Agency, and Sales & Marketing Tools | Ad Networks, Data Analytics Providers, and Data Cooperative |
| Commercial Information | Business Operations Tool, Cloud Computing & Storage Providers, Commerce Software Tools, Fulfillment Warehouse, IT Infrastructure Services, Marketing Agency, Sales & Marketing Tools, and Website Developers | Ad Networks, Commerce Software Tools, Data Analytics Providers, Data Cooperative, Fulfillment Warehouse, Payment Processors, and Shipping Services |
| Financial Information | Commerce Software Tools | Payment Processors |
| Inferences from Other Data | Marketing Agency | None |
We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
We “sell” certain personal data to third parties, as that term is defined in the CCPA, including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Protected Classifications and Other Personal Characteristics, and Health Data.
You may opt-out of these data practices here.
We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at moc.raewtoofsoat@ycavirp.
You have the right to access the specific pieces of personal information we have collected about you.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.
If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
You have the right to opt-out of any selling and sharing of your personal information.
You may exercise your right to opt-out here.
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.
Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.
Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.
A California resident’s authorized agent may submit a rights request under the CCPA by emailing us at moc.raewtoofsoat@ycavirp. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.
If you have trouble accessing this notice, please contact us at moc.raewtoofsoat@ycavirp.
If you have any privacy-related questions or have trouble accessing this notice, please email moc.raewtoofsoat@ycavirp.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the California Attorney General’s Office or the California Privacy Protection Agency.
-Taos offers referral/loyalty programs with discount incentives. A consumer provides their personal information and consents to receive emails in exchange for a discount provided via coupon code, or the potential for a discount upon our weekly giveaway. To opt in, a consumer must enter their personal information into the form and submit it. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer at any time or reaching out to our customer service team. We calculate the value of the offer and financial incentive by using the expense related to the offer.
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the CPA.
We “sell” certain personal data to third parties, as that term is defined in the CPA, including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Protected Classifications and Other Personal Characteristics, and Health Data.
We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Your CPA rights are described below. Make a Privacy Request by clicking here.
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General’s Office.
This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the CTDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to moc.raewtoofsoat@ycavirp.
We “sell” certain personal data to third parties, as that term is defined in the CTDPA, including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Protected Classifications and Other Personal Characteristics, and Health Data.
We process personal data for purposes of targeted advertising (as defined in the CTDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
We process personal data for the purpose of training large language models.
Your CTDPA rights are described below. Make a Privacy Request by clicking here.
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.
This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the DPDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to moc.raewtoofsoat@ycavirp.
We “sell” certain personal data to third parties, as that term is defined in the DPDPA, including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Protected Classifications and Other Personal Characteristics, and Health Data.
We process personal data for purposes of targeted advertising (as defined in the DPDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Your DPDPA rights are described below. Make a Privacy Request by clicking here.
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. You can also find that information in our Privacy Policy.
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General’s Office.
This section provides additional information for Montana residents under the Montana Consumer Data Privacy Act (MCDPA). The terms used in this section have the same meaning as in the MCDPA. This section does not apply to information that is not considered “personal data,” such as deidentified or publicly available information as defined in the MCDPA.
We “sell” certain personal data to third parties, as that term is defined in the MCDPA, including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Protected Classifications and Other Personal Characteristics, and Health Data.
We process personal data for purposes of targeted advertising (as defined in the MCDPA), including Personal Identifiers, Internet Activity, and Commercial Information. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Your MCDPA rights are described below. Make a Privacy Request by clicking here.
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.