Privacy Policy

Thank you for visiting Rem Optical Company, Inc. d/b/a De Rigo Rem (“De Rigo Rem,” “we,” “us,” “our”). De Rigo Rem respects your privacy and values your trust. We are committed to ensuring that the personal information stored by our systems is suitably protected and used appropriately. The purpose of this Privacy Policy is to inform you of the treatment and handling of personal information that we may learn about you from visiting De Rigo Rem’s websites at derigo.us and derigoresources.us (the “Sites”), your engagement with our content, and/or by using or accessing any of our services (collectively, the “Service”). This Privacy Policy does not cover the practices of companies that we do not own or control or people that we do not manage. If you have questions regarding this information or our privacy practices, please see the section entitled Contact Information at the end of this Privacy Policy.

By using or accessing our Sites or Service in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and disclose your personal information as described in this Privacy Policy. Please remember that your use of De Rigo Rem’s Sites and Service are at all times subject to our Terms of Use, which incorporates this Privacy Policy. If you do not agree with the terms of this Privacy Policy or our Terms of Use, then you should immediately discontinue use of the Sites or Service without Providing us with any personal information.

The personal information we may collect from you depends on how you interact with us as detailed below. We may collect personal information (a) directly from you (such as when you create an account, submit an order, or send communications to us), (b) from the device and browser that you use to access the Sites or Service, or (c) from cookies and similar technologies.

Visitors to our Sites. For visitors to our Sites, we may collect the following categories of personal information.

• Identifiers. We provide functionality to message us through the Sites. If you message us through the Sites, we may collect your name, email address, and the content of the message you send to us.
• Device Information. This information may include your computer and mobile device type and browser type.
• Internet Activity Information. This information concerns your interaction with our Sites, including geolocation information based on your IP address, how you interact with our Sites, including when you access the Sites, and browsing activity on the Sites. This may include “traffic data” or tracking information provided by the Site’s host or similar provider of such information (e.g., Google Analytics) that may be helpful for improving the Service. For more information, please see the section entitled Cookies, below.

Our Customers’ Owners, Officers, and Employees. Our customers are primarily business entities, and as such, the personal information we collect is limited and primarily relates to the business contact information for our customers’ owners, officers and/or employees. In particular, this information may include:

• Identifiers. We may collect the name and signature of our customer’s official representative (e.g., owner, director, officer, partner, or shareholder). If the business is a sole proprietorship and does not have a federal employer ID number, we may collect the sole proprietor’s social security number. In addition, if a customer’s owner, officer, or employee applies for an account or contacts us in connection with a customer service call or payment collection, we may collect that individual’s name, business address, business email address, and account password.
• Business information. We may also collect business contact details for our customers’ official representatives and/or employees. This includes the business name, business address, business email address,business phone number, and business fax number.
• Payment information. In the event our customers make payment using a corporate credit card issued in the name of one of our customer’s owners, officers, and/or employees, we collect the name of the cardholder as well as the credit card number, expiration date, and CVV code.
• Sensitive Personal Information. Under California law, certain types of personal information are considered “sensitive personal information” and are subject to certain additional protections. As noted above, we may, in certain situations collect your social security number and credit card information.

You are not required to provide all personal information identified in this Privacy Policy to use our Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information such as your contact details, we may not be able to respond to your requests.

A cookie is a small string of information that a website that you visit transfers to your browser for identification purposes. Cookies can be used to follow your activity while using a website or across websites, and that information helps companies understand your preferences and tendencies, as well as improve and personalize your website experience.

We use the following types of Cookies:

• Strictly Necessary Cookies. These are required for the operation of our some of our Sites. They include, for example, cookies that enable you to log into password-protected portions of our Sites or our application. These cookies are session cookies that are erased when you close your browser
• Analytical/Performance Cookies. These allow us to recognize and count the number of users on our Sites and understand how such users navigate through the Sites (e.g., when and which pages are visited, in what order the pages are visited, and where a user is located). This helps improve how the Sites work, for example, by ensuring that users can find what they are looking for easily. We use Google Analytics and SquareSpace for part of this process. For more information about Google Analytics, please visit http://www.google.com/policies/privacy/partners/ and http://www.google.com/analytics/learn/privacy.html. You can opt-out of Google Analytics’ collection and use of data generated by your use of the Site by going to https://tools.google.com/dlpage/gaoptout. For more information about SquareSpace cookies, please visit https: //support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses.

We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own cookies on your browser or device. These third-party cookies include:

• Youtube. We use YouTube to store and show video content. YouTube uses cookies to track usage of its services and your preferences (such as your preferred language). For more information, visit https://www.google.com/policies/privacy/.

You can prevent the use of certain cookies by modifying your Internet browser settings, typically under the sections “Help” or “Internet Options” or “Settings.” If you disable or delete certain cookies in your Internet browser settings, you may still access our Sites, however, you might not be able to access or use important functions or features of our Sites, and you may, for example, be required to re-enter your login details.

Do-Not-Track Signals
At this time, De Rigo Rem does not recognize the “Do Not Track” browser-based standard signal.

The Service is not intended for use by people under 16 years of age. We do not knowingly or intentionally gather personal information about visitors who are under the age of 16. If you are aware of, or suspect that, someone under the age of 16 is using the Service without permission, please notify us immediately by contacting us as detailed in the Contact Information section below. If you have questions or concerns about the Internet and privacy for your child, we encourage you to check out the FTC Guidelines for protecting your child’s privacy online.

We collect and use your personal information for the following purposes:

• Providing the Service to you and providing products or services requested by, or reasonably anticipated within the context of our relationship with, you;
• Managing your relationship with us and responding to your inquiries or requests;
• Providing you with relevant promotional materials or information about the company and its products;
• Personalizing our Sites to your preferences;
• Analyzing use of our Sites;
• Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity or prosecuting those responsible; and
• Complying with legal and regulatory obligations.

De Rigo Rem may share your personal information to the following categories of third parties:

• Service providers. These are businesses that perform services on our behalf, such as companies that host our Sites, IT outsourcing, IT security providers. In some instances, service providers may be directly responsible to you for their use of your personal information. They may be obliged by law to provide you with additional information regarding the personal information that they hold about you and how and why they process that personal information. Further information may be provided to you in a separate notice or may be obtained from such service providers directly, for example, via their websites;
• Analytics providers. These are businesses that provide analytics on web traffic or usage of the Service;
• Advertising partners. These are businesses that help us market our services and provide you with other offers that may be of interest to you;
• Advisers and financial institutions,including auditors, notaries, business continuity support service providers, and legal, tax and risk and compliance advisors;
• With third parties in connection with a change to the control or financial status of the company, including a corporate restructuring, sale, acquisition, financing, reorganization, bankruptcy, receivership, transfer, assignment of assets or business merger, divestiture, or other changes to the company’s control or financial status. Personal information and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction;
• Government bodies, dispute resolution organizations, law enforcement agencies, or third parties in connection with (a) responding to a subpoena, search warrant, or other lawful request of information that we collect, receive, or otherwise possess (b) cooperating in a law enforcement or similar investigation; or (c) otherwise protecting our rights, as applicable.

If you no longer wish to receive email marketing communications, you may unsubscribe by clicking the “unsubscribe” link at the bottom of each marketing email or by contacting us at the information in the Contact Information section below. Please note that you may not be able to unsubscribe from certain correspondence from us, including messages relating directly to order processing.

We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. We have implemented various security measures to protect both the personal information and general information that we receive from you through the Service.

Whenever you give out personal information online there is a risk that third parties may intercept and use that information. Although we seek to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. To the extent permitted under applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized access by third parties, or other causes beyond our control.

You play an important role in keeping your personal information secure. You should not share your username or password with anyone. If you have reason to believe that your account is no longer secure, please contact us immediately at the contact information in the How to Contact Us section below.

We retain personal information about you for as long as necessary to provide you with our Service or to perform our business or commercial purposes for collecting your personal information. When establishing a retention period for specific categories of information, we consider who we collected the information from, our need for the personal information, why we collected the personal information, and the sensitivity of the personal information. In some cases, we retain personal information for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule, or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

For residents of California, this section describes how we collect, use, disclose and/or “sell” (as defined under California law) the personal information of California residents, and the rights you may have under California law. These disclosures are intended to supplement this Privacy Policy with information required by California law.

To understand what personal information we may have collected about you in the past 12 months, and from where we collected it, please see the section The Information We Collect above.

We collect this personal information, as further described in the How We Use Your Personal Information section above, to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives.

We may disclose personal information to the third parties listed above in the section How We Disclose Your Personal Information. Below, we have provided more detail regarding the disclosure of personal information for business purposes. We do not sell personal information.

Disclosures of Information for Business Purpose
To manage our business, we sometimes share personal information with third parties. These third parties cannot further collect, sell, or use the personal information we share with them except as necessary to perform our purposes, as instructed by us.

In the past 12 months, we may have disclosed the following categories of personal information to our Service providers and suppliers for our operational purposes:

Your Rights
Under California law, consumers have a right to notice, upon collection, of the categories of personal information collected and the purposes for which the information will be used. We provide this notice through this Privacy Policy.

If you are a California resident, you also have the following rights with respect to your personal information:

• Right to access/Right to Know: You have the right to know what personal information we collect about you and to access a copy of the categories and specific pieces of personal information about you that we collect, use, and/or disclose.
• Right to Deletion: You have the right to ask us to delete or anonymize personal information, subject to certain exceptions.
• Right to Correction: You have the right to request that we correct any inaccurate personal information we have collected about you, subject to certain exceptions.
• Right to Opt-Out of Sale of Personal Information: We will not sell your personal information and have not done so over the last 12 months. To our knowledge, we do not sell the personal information of minors under 16 years of age.
• Right to Opt-Out of Sharing of Personal Information: Under the CCPA, California residents have certain rights when a business “shares” personal information with third parties for purposes of cross-contextual behavioral advertising. We will not share your personal information for cross-contextual behavioral advertising and have not done so over the last 12 months. To our knowledge, we do not share the personal information of minors under 16 years of age for purposes of cross-contextual behavioral advertising.
• Right to be free from discrimination for exercising your rights: We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods or services if you exercise your rights under the CCPA. However, we may offer different tiers of our Service as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of personal information that we receive from you.

If you wish to exercise the rights described above, please contact us at privacystmt@derigo.us with the subject line “California Privacy” so that we can direct your email to the right team. We will respond to your request according to applicable law.

Please note that before we will be able to process your request, we will need to properly verify your identity for security purposes. If we possess appropriate information about you on file (e.g., name, email address, etc.), we will attempt to verify your identity using that information. If it is not reasonably possible to identify you, we may not be able to respond to your request.

To use an authorized agent to make a request on your behalf, we may need the authorized agent to provide proof that you gave the authorized agent signed permission to submit the request on your behalf. We may also require you to verify your identity directly with us.

If you are a resident of the European Union (“EU”) or the United Kingdom (“UK”), you may have additional rights under the EU or UK General Data Protection Regulation (the “GDPR”) with respect to your personal information, as outlined below.

Data Transfers
We take steps to ensure that we handle your personal information subject to appropriate safeguards. As a US company, most of our operations are conducted in the United States and in order to provide the Service, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. We provide appropriate protections for cross-border transfers as required by applicable law for international data transfers. With respect to transfers originating from the European Economic Area and the UK we implement the standard contractual clauses approved by the European Commission and the UK Secretary of State, respectively. Where required by such laws, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below.

Data Retention
The Data Retention section above details how we determine how long to retain your personal information.

Legal Basis for Processing Your Personal Information
Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the How We Use Your Personal Information, section above, including: (i) as may be necessary to perform a contract with you; (ii) as necessary to comply with a legal obligation; (iii) consent (where you have provided consent as appropriate under applicable law); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Service).

Automated Decision-making
We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or that otherwise significantly affects you.

Your Rights
As available and except as limited under applicable law, individuals in the EU and UK have the rights described below:

• Access. You have the right to request a copy of the personal information we are processing about you, which we will provide to you in electronic form.
• Rectification. You have the right to require that any incomplete or inaccurate personal information that we process about you is amended.
• Deletion. You have the right to request that we delete personal information that we process about you, unless, for example, we are required to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. You have the right to request that we restrict our processing of your personal information where: (i) you believe such data to be inaccurate; (ii) our processing is unlawful; or (iii) we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.
• Portability. You have the right to request that we transmit the personal information we hold with respect to you to another data controller.
• Objection. Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your situation (e.g., direct marketing). We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim.
• Withdrawing Consent. If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information on the basis of your consent before the point in time when you withdraw your consent.

Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us at privacystmt@derigo.us with the subject line “EU Privacy” so that we can direct your email to the right team. We will respond to your request in accordance with applicable law.

If you feel that your request or concern was not satisfactorily resolved by us, you have the right to lodge a complaint with your local data protection authority.

The Data Retention section above details how we determine how long to retain your personal information Please contact us at privacystmt@derigo.us:

• If you wish to access, update, and/or correct inaccuracies in your personal information or change your consent preferences (note: we may need to collect additional personal information for the purposes of verifying your identity before responding to your request);
• For information about how our foreign-based service providers process your personal information; or
• If you have any questions or complaints about the manner in which we treat your personal information.

For your convenience, we may link to third-party sites and services, or otherwise display third-party content through the Service to provide increased value to your visitors. We have no control over these linked sites, each of which has separate privacy and data collection policies and practices independent from us. As such we have no responsibility or liability for these independent policies or actions and are not responsible for the privacy practices or the content of any such websites. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information, and we encourage you to review their policies before engaging with these third-party sites.

This Privacy Policy is effective as of the date at the top of this Policy. De Rigo Rem has the discretion to update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage users to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect, especially before you provide information, and particularly personal information, directly to us through the Service.

In the event of a material change to this Privacy Policy, we will provide a message through our website or via email informing you of the change.

If you have any questions about this Privacy Policy or our Service, please contact us at privacystmt@derigo.us.