PRIVACY POLICY

This website is operated by Sundercover LLC. Throughout the site, the terms “we”, “us” and “our”
refer to Sundercover. We respect your privacy and are committed to protecting your personal data.
This privacy policy will inform you as to how we look after your personal data and tell you about
your privacy rights, and how the law protects you. This privacy policy applies to information
obtained in connection with our operations at or through our website, our mobile/tablet site, our
social media presence, our applications (apps), our messaging platforms, and other owned or
controlled digital properties that link to this privacy policy (individually a “website” and
collectively, our “websites”).

This privacy policy and your use of our website is subject to our Terms of Service. If you have
questions about this privacy policy, please contact us info@sundercover.com.
It is important that you read this privacy policy, together with any other privacy notice we may
provide on specific occasions when we are collecting or processing personal information about
you, so that you are aware of how and why we are using such information. This privacy policy
supplements the other notices and is not intended to override them. We reserve the right to update
this privacy policy at any time.

THIRD-PARTY LINKS
Our website may include links to third-party websites, plug-ins and applications. Clicking on those
links or enabling those connections may allow third parties to collect or share data about you. We
do not control these third-party websites and are not responsible for their privacy statements. When
you leave our website, we encourage you to read the privacy policy of every website you visit.

INFORMATION WE COLLECT ABOUT YOU
Some of the information we collect is personal information, which generally means information
that identifies you as an individual, and other information we associate with it. This may include a
name, mailing address, e-mail address, driver's license number, date of birth, social security
number, credit/debit card information (and related payment information) and/or telephone number.
Information we may collect about you through your use of the site and purchase of our products are
as follows:

Identity Data includes first name, maiden name, last name, username or other identifier, birthday.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes information about the transaction or matter you instruct us on and/or other services we provide to you, details about payments to and from you.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile Data includes your preferences, feedback and survey responses.
Usage Data includes information about how you use our website and services.
Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.

We may also collect, use and share Aggregated Data such as statistical or demographic data for
any purpose. Aggregated Data may be derived from your personal data but is not considered
personal data because this data does not directly or indirectly reveal your identity. For example, we
may aggregate your Usage Data to calculate the percentage of users accessing a specific website
feature. However, if we combine or connect Aggregated Data with your personal data so that it can
directly or indirectly identify you, we treat the combined data as personal data which will be used
in accordance with this privacy policy.

Unless such information is required for the purposes of a particular transaction, we do not collect
any other information about you. Where we need to process any other information for the purposes
of a particular transaction or matter, we will only do so where we have obtained your prior explicit
consent to do so, or where we are otherwise legally permitted to do so.
Where we need to collect personal data by law, or under the terms of a contract we have with you,
and you fail to provide that data when requested, we may not be able to perform the contract we
have or are trying to enter into with you (for example, to provide you with services). In this case,
we may have to cancel a sales order you have with us, but we will notify you if this is the case at
the time.

The site does not respond to web browser “do not track” signals at this time. If we do so in the
future, we will describe how we do so in this privacy policy.

The site is not intended for use by children, and we do not sell products for purchase by children.
Any children’s products we may sell are intended for purchase by adults. We do not solicit or
knowingly collect personal information from children under the age of 16.

HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect data from and about you including through:
Data You Provide Directly. You may give us your Identity Data, Contact Data and
Financial Data by filling in forms or by corresponding with us by mail, phone, email or
otherwise. This includes personal data you provide when you:
o purchase products from us;
o subscribe to our service or publications;
o follow us on Twitter, Facebook or other social media;
o request marketing to be sent to you;
o provide us with feedback.

Automated technologies or interactions. As you interact with our website, we may
automatically collect Technical Data about your equipment, browsing actions and patterns.
We collect this personal data by using cookies, server logs and other similar technologies.
Cookies are small files that websites can send to your computer, which can enhance your
experience of a website by, for example, remembering who you are and what you are
interested in. Our website only uses cookies for statistical and analytical purposes, for
example to identify which pages and features of the website are the most popular. These
cookies do not collect any personal information about you such as your name or address
and are not stored on your hard drive once you leave our website. If you wish, you are able

to reject or disable cookies by adjusting your browser settings, however, this may adversely
affect your experience of using our website. If you are not sure how to do this, then the
Help Files on your browser should assist, or alternatively,
visit http://www.allaboutcookies.org for more information about cookies including
instructions on disabling cookies.

Third parties or publicly available sources. We may receive personal data about you
from various third parties and public sources as set out below:
o Technical Data from analytics providers.
o Contact, Financial and Transaction Data from providers of technical, payment and
delivery services.
o Identity and Contact Data from search information providers.
o Identity and Contact Data from publicly available sources.
o Identity and Contact Data from credit reference or crime and fraud prevention
agencies.

HOW WE USE YOUR PERSONAL DATA
We will only use your personal data as permitted under law. Most typically, we will use your
personal data in the following circumstances: (a) where we need to perform the contract we are
about to enter into or have entered into with you; (b) there it is necessary for our legitimate
interests (or those of a third party), by which we mean in the interest of our business in conducting
and managing our business to enable us to give you the best service and the best and most secure
experience; or (c) where we need to comply with a legal or regulatory obligation that we are
subject. We consider any potential impact on you and your rights before we process your personal
data for our legitimate interests. We do not use your personal data for activities where our interests
are overridden by the impact on you (unless we have your consent or are otherwise required or
permitted to by law). You can obtain further information about how we assess our legitimate
interests against any potential impact on you in respect of specific activities by contacting us.
Generally, we do not rely on consent as a legal basis for processing your personal data, except in
some instances, such as when you sign up for our email list without making a purchase on our site.
You have the right to withdraw consent (when consent is the lawful basis for processing your
personal data) and to opt out of marketing at any time by making use of the “unsubscribe” link in
emails or by contacting us via any of the methods referred to below.

WHY WE USE YOUR PERSONAL DATA
We have set out below, in a table format, a description of the ways we plan to use your personal
data, and why we use it. We have also identified our legitimate interests where appropriate. Please
note that we may process your personal data for more than one lawful ground depending on the
specific purpose for which we are using your data.

USE OF MARKETING WITH PERSONAL DATA

We have established the following personal data control mechanisms in connection with our marketing:

Promotions: We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. You will receive marketing communications from us if you have requested information from us or received services from us or if you provided us with your details when you registered to receive promotional event, and, in each case, you have not opted out of receiving that marketing.
Third-party marketing: We do not share your personal data with unaffiliated third parties for marketing purposes.
Opting out: You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data you have provided to us for the purposes of our providing services to you.
Cookies: You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.
Texting: You may elect to receive text messages from us. When you sign up to receive text messages, we will send you information about promotional offers and more. These messages may use information automatically collected based on your actions while on our sites and may prompt messaging such as cart abandon messages. To the extent you voluntarily opt to have Text notifications sent directly to your mobile phone, we receive and store the information you provide, including your telephone number or when you read a text message. You may opt-out of receiving text messages at any time by texting “STOP” to our text messages. For more information about text messages, see our Terms of Service.

CHANGING PURPOSE FOR USE OF PERSONAL DATA

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

DISCLOSURES OF YOUR PERSONAL DATA

We may have to share your personal data with the parties set out below for the purposes set out above.

Service providers who help us fulfil orders placed on our sites and promote our business, including payment processing, shipping, digital marketing and analytics companies.
Service providers acting as processors who provide IT, website hosting, security and system administration services.
Affiliated companies.
Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
US Federal Government, HM Revenue & Customs, regulators and other authorities.
Credit reference or fraud and crime prevention agencies.
Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

Personal data are shared with service providers (or data processors) subject to contracts prohibiting those service providers from selling personal data to other parties or using personal data for any purpose other than performing the services specified in the contract.

We do not sell your personal data to unaffiliated third parties.

INTERNATIONAL TRANSFERS

Your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country. In order to provide adequate protection for the transfer of your personal information, we rely on the EU Standard Contractual Clauses to facilitate the lawful transfer of content that contains personal information from the European Economic Arena (“EEA”), including the United Kingdom, to outside of the EEA, including the United States, where necessary and as required.

DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

YOUR LEGAL RIGHTS

You have the following rights with respect to your personal information:

Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in emails that you receive. If you decide not to receive promotional emails, we may still send you service related communications.
Promotional Mailings. If at any time you do not want to receive offers and/or circulars from us you can remove yourself from our mailing lists by emailing us (our contact information is below) with "UNSUBSCRIBE" in the subject line along with your name, address and zip code. Please note that our mailings are prepared in advance of their being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.
Changes To Your Personal Information. We rely on you to update and correct your personal information. Our website allows you to modify or delete your account profile. Note that we may keep historical information in our backup files as permitted by law. If our website does not permit you to update or correct certain information contact us at the address described below.
Deletion Of Your Personal Information. Typically we retain your personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may, however, request that we delete your personal information by contacting us at the address described below. If required by law, we will grant your request to delete information. However, when we delete personal information it will be removed from our active database, but it may remain in archives where it is not practical or possible to delete it. In addition, we may keep your personal information as needed to comply with our legal obligations, resolve disputes, and/or enforce any of our agreements.
Objection to Certain Processing. You may object to our use of your personal information by contacting us at the address described below.
Access To Your Personal Information. If required by law, upon request, we will grant you with reasonable access to the personal information that have about you. You may request access to your personal information by following the process described below. Where required by law, we may also transfer a machine-readable copy of your personal information to you or a third party of your choice.
California Residents. California Civil Code 1798.115(c), 1798.130(a)(5)(c), 1798.130(c), and 1798.140 indicate that organizations should disclose whether certain categories of information are “sold” or transferred for an organization’s “business purpose” as those terms are defined under California law. You can find a list of the categories of information that we share here. Please note that because this list is comprehensive it may refer to types of information that we share about people other than yourself. If you would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing please submit a written request to us using the information in the "Contact Information" section below. Please note, if you elect to exercise one of your choices listed above, you will not receive discriminatory treatment by us for exercising your privacy rights that are conferred upon you by law.

Please address written requests and questions about your rights as indicated below.

Note that, as required by law, we will require you to prove your identity. We may conduct identity verification by phone call or email. Depending on your request, we will ask for information such as your name, the last item you purchased from us, or the date of your last purchase from us. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.

Information for Authorized Agents (for California residents): If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:

A completed and notarized Authorized Agent Designation Form (We will reimburse reasonable and documented notarization fees) indicating that you have authorization to act on the consumer’s behalf.
If you are a business, proof that you are registered with appropriate government agencies.
If we do not receive both pieces of information within 45 days, the request will be denied.

We will not discriminate against you for exercising any of the rights described above. You may exercise any of these rights by contacting us as indicated below.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or as permitted by applicable law. Alternatively, we may refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within 30 days, unless applicable law sets forth a shorter or longer period. Occasionally it may take us longer than 30 days if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

CONTACT INFORMATION

Should you wish to exercise any of your legal rights, or if you have any questions or complaints in relation to how we use your personal information or this privacy policy, please write to us or e-mail us at the following addresses:

Sundercover LLC

858 Washington Street, Suite 300

Dedham, Massachusetts 02026

Email address: customerservice@sundercover.com

HOME

WEBSITE ACCESSIBILITY