We process your personal information to run our business and provide our users with the CrowdMall’s website and services. By accepting our Terms and Conditions (and in some jurisdictions, by acknowledging this policy), you confirm that you have read and understand this policy, including how and why we use your information. If you don’t want us to collect or process your personal information in the ways described in this policy, you shouldn’t use the services. We vet product creators but we are not ultimately responsible for the content, privacy policies, websites or practices of any of our vendors’
CrowdMall requires all account owners to be at least 18 years of age. Minors under 18 years of age and at least 13 years of age are permitted to use CrowdMall’s services only if they have permission and direct supervision by the owner of the account. Children under age 13 are not permitted to use the CrowdMall platform. You are responsible for any and all account activity conducted by a minor on your account. We do not knowingly “sell”, as that term is defined under applicable law, including the California Consumer Privacy Act, the personal information of minors.
By using the platform, you acknowledge that CrowdMall will use your information in the United States and any other country where CrowdMall operates. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal information, may differ from those that apply in the country in which you reside. We will transfer personal information only to those countries to which we are permitted by law to transfer personal information.
In our mission to make commerce better for everyone at CrowdMall, we collect and use information about you, our
Trust is the foundation of the CrowdMall platform and includes trusting us to do the right thing with your information. Three main values guide us as we develop our products and services. These values should help you better understand how we think about your information and privacy.
Your information belongs to you
We carefully analyze what types of information we need to provide our services, and we try to limit the information we collect to only what we really need. You are in control of the data you share in your profile, whether you are a product creator or a buyer. CrowdMall aggregates anonymized data into patterns that provide insights to vendors when developing their core customer profiles. No personal data is held by CrowdMall other than what users of the platform choose to share. When building and improving our products, our engineers work closely with our privacy and security teams to build with privacy in mind. In all of this work our guiding principle is that your information belongs to you, and we aim to only use your information to your benefit.
What personal information about buyers does CrowdMall collect?
We collect buyers’ personal information in order to provide and continually improve our products and services. Here are the types of personal information we collect:
• Information you give us: We receive and store any information you provide in relation to CrowdMall services. You can choose not to provide certain information, but then you might not be able to take advantage of many of the services CrowdMall provides.
• Information shared publicly. You may provide us with additional information through a web form or by updating or adding information to your CrowdMall account, by participating in community discussions, member chats, surveys, inquiries, dispute resolution, customer service calls recorded with your consent, or if you contact us for any other reason regarding our services.
The information shared publicly includes:
The information below is not shared publicly:
• Information from other sources: Product creators might receive information about you from other sources, such as updated delivery and address information from our carriers, which we may use to correct our records and deliver your next purchase more easily. Ideally, buyers will update their profiles to keep personal information up to date (e.g., postal address, email address, payment information)
We protect your information from others
If a third party requests your personal information, we will refuse to share it unless you give us permission or we are legally required. When we are legally required to share your personal information, we will tell you in advance, unless we are legally forbidden.
We host a community with a collaborative ethos
CrowdMall is a marketplace and a community. We offer several features that allow members to connect and communicate in public or semi-public spaces, such as Q&A forums and Comments functions on product campaign pages. You don't have to use these features, but if you do, please use common sense and good judgment when posting in these community spaces or sharing your personal information with others through the CrowdMall platform. Be aware that any personal information that you choose to submit there can be read, collected, or used by others, or could be used to send unsolicited messages to you.
We help merchants and partners meet their privacy obligations
Many of the merchants and partners using CrowdMall do not have the benefit of a dedicated privacy team, and it is important to us to help them meet their privacy obligations. To do this, we build our products and services so they can easily be used in a privacy-friendly way. We also provide detailed FAQs and documentation covering the most important privacy topics, and respond to privacy-related questions we receive.
Why we process your information
We generally process your information when we need to do so to fulfill a contractual obligation (e.g., to process vendor listing fees to use the CrowdMall platform), or where we need to use your personal information for a reason related to their business (e.g., to deliver products to buyers).
Laws in the European Economic Area (“EEA”) and in the United Kingdom (“UK”) call these reasons “legitimate interests.” These “legitimate interests” affect product creators in these territories and include:
We only process personal information for these “legitimate interests” after considering the potential risks to your privacy and balancing any risks with certain measures—for example, by providing clear transparency into our privacy practices, offering you control over your personal information where appropriate, limiting the information we keep, limiting what we do with your information, who we send your information to, how long we keep your information, or the technical measures we use to protect your information.
We may also process your personal information where you have provided your consent. In particular, where we cannot rely on an alternative legal basis for processing, where you direct us to transfer information to a third party, where we receive your data from a third party is sourced and it already comes with consent or where we are required by law to ask for your consent (including in the context of some of our sales and marketing activities). At any time, you have a right to withdraw your consent by changing your communication choices, opting out from our communications or by contacting us.
Depending on whether you are a product creator, buyer, partner, user or visitor, please refer to our supplemental FAQ and Help Center, as relevant, to understand our purposes for processing, categories of recipients and legal basis for processing for each type of personal data.
For what purposes does CrowdMall use your personal information?
We use your personal information to operate, provide, develop, and improve the products and services that we offer our customers. These purposes include:
Your rights over your information
You can access and control your personal information no matter where you live. Depending on how you use CrowdMall, you have the right to correct, amend, hide, or delete the personal information in your user account profile. We will not charge you more or provide you with a different level of service if you exercise any of these rights. Please note that a number of these rights apply only in certain circumstances, and all of these rights may be limited by law.
If you buy something from or otherwise provide your information to a CrowdMall-powered store and wish to exercise these rights over information about your purchase or interaction, you need to directly contact the creator from whom you pre-ordered a product. We are a processor and process information on their behalf. We will of course help our product creators to fulfill your requests to the extent required by law, such as by giving them the tools to do so and by answering their questions.
If you are a product creator, partner, Shopify user, CrowdMall employee, website visitor or other individual that CrowdMall has a direct relationship with, please submit your data subject request through customer support email firstname.lastname@example.org. Please note that if you send us a request relating to your personal information, we have to make sure that it is you before we can respond. In order to do so, we may use a third party to collect and verify identification documents. Further information about rights available to US residents can be found below under the header “United States Regional Privacy Notice”.
If you are not happy with our response to a request, you can contact us to resolve the issue.
As there is no common understanding about what a “Do Not Track” signal is supposed to mean, we don’t respond to those signals in any particular way.
General Data Protection Regulation (“GDPR”)
The following sections on GDPR apply to individuals (initially, product creators) in the European Economic Area and the U.K. If you are not sure whether the GDPR section applies to you, please refer to the text of the regulation here or consult with an attorney as CrowdMall is not able to give you legal advice.
Who is the data controller?
CrowdMall is the “data controller” of personal data collected by all of CrowdMall, and we are responsible for deciding how personal data is collected, used, and disclosed. Product creators who run campaigns may also be data controllers of certain data that you provide to campaigns when you pre-order a product.
If you are located in the E.E.A. or U.K., you also have the right to lodge a complaint with your local data protection or privacy authority at any time.
Legal bases for use of your information & controls and choices
The laws in the European Economic Area, the U.K. and some other jurisdictions require us to provide product creators and other users, to the extent those laws apply to such users, with the following information:
The legal grounds for use and disclosure of personal information include any of the reasons below:
Controls and choices:
How we protect your information and data retention
The security, integrity, and confidentiality of your information are extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect user information from unauthorized access, disclosure, use, and modification. We regularly review our security procedures to consider appropriate new technology and methods. However, please be aware that despite our best efforts, no security measures are perfect or impenetrable.
Data transfers, storage, and processing globally
Where we send your information
We are a U.S.-based company, but we work with and process data about individuals across the world. To operate our business, we may send your personal information outside of your state, province, or country. This data may be subject to the laws of the countries where we send it. We take steps to protect your information when we send your information across borders.
Depending on whether you are a product creator, customer, partner, user or visitor, please refer to our supplemental privacy policies, as relevant.
Does CrowdMall share your personal information?
Information about our product creators and buyers is an important part of our business, and we are not in the business of selling our users’ personal information to others. We share personal information only as described below:
Other than as set out above, you will receive notice when personal information about you might be shared with third parties, and you will have an opportunity to choose not to share the information.
How long do we retain your information
We will retain your personal data only for as long as necessary to fulfill the purposes for which we have collected it: i.e., as long as you maintain a user profile at CrowdMall. To determine the appropriate retention period, we consider the amount, nature and sensitivity of your personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. We will also retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies. If you stop using our services or if you delete your account with us, we will delete your information or store your information in an aggregated and anonymized format.
Depending on whether you are a product creator, customer, partner, user or visitor, please refer to our supplemental privacy policies, as relevant, for further details on the retention of your personal information.
Our use of Machine Learning
One of the ways in which we are able to help product creators using CrowdMall is by using techniques like “machine learning” (some laws, including certain EEA and UK laws, may refer to this as “automated decision-making”) to help us improve our services. When we use machine learning, we either:
2. use machine learning in ways that don’t have legal or similarly significant effects (for example, reordering how apps might appear when you visit the app store).
How we protect your information
Our team works tirelessly to protect your information, and to ensure the security and integrity of our platform. We also have independent auditors assess the security of our data storage and systems that process financial information. However, we all know that no method of transmission over the Internet, and method of electronic storage, can be 100% secure. This means we cannot guarantee the absolute security of your personal information. You can find more information about our security measures at our Trust and Safety policy page.
How secure is information about me?
We design our systems with your security and privacy in mind.
How we use “cookies”
How you can reach us
If you would like to ask about, make a request relating to, or complain about how we process your personal information, please contact CrowdMall Support, or mail us at the address below. If you would like to submit a legally binding request to demand someone else’s personal information (for example, if you have a subpoena or court order), please review our Terms and Conditions policy guidelines.
If you are a product creator, partner, Shopify user, CrowdMall employee, website visitor or other individual that CrowdMall has a direct relationship with and you are located in the EEA or UK, CrowdMall. LLC is the controller of your personal data. If you pre-order something from or otherwise provide your information to a CrowdMall campaign run by a product creator store, the vendor is your data controller and we are acting as a processor on their behalf.
If you have questions about how a product creator processes your personal information, you should contact the vendor.
CrowdMall’s contact address is below:
8 The Green
Dover, DE 19901
United States Regional Privacy Notice
This U.S. Notice is for individuals residing in certain U.S. states and is designed to help you better understand how we collect, use, and disclose your personal information and, depending on how you use CrowdMall and where you reside, how to exercise available rights under various applicable privacy laws in the U.S., specifically the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively, the “U.S. Privacy Laws”).
What information we collect and share about you
To provide our services to you, we must process information about you, including personal information.
We do not “sell” your personal information as that term is defined under U.S. Privacy Laws.
Here is a summary of the categories of personal information we may collect about you and with whom we may disclose that information, depending on how you use CrowdMall.
Categories of personal information collected
Recipients of personal information
Personal information categories listed in the California Customer Records statute, including name, mailing and billing address, phone number, credit or debit card information;
Commercial information, including products you purchase, place in your shopping cart, favorite or review (if you are a customer) and information you provide us about you and your business (if you are a merchant);
Photos and videos, which may include face imagery, if you choose to provide them.
Internet or other electronic network activity information, including information regarding the device and browser you use, network connection, IP address, and how you browse through our apps and sites;
Geolocation data, including your mailing and billing address;
Inferences, or information derived from other personal information about you, which could include your preferences, interests, and other information used to personalize your experience;
Other information you provide; and
Sensitive personal information, which may include:
Government-issued identifiers, including social security, driver’s license, state identification card, or passport number;
Your account access credentials (such as account log-in, financial account, debit or credit card number in combination with any required security access code, password, or credentials allowing access to an account);
Your device’s precise location;
Information you voluntarily disclose that may reveal certain characteristics about you such as your racial or ethnic origin or sexual orientation
The contents of email messages in the email inboxes that you connect to your Shopify account, and information from email messages you transfer to CrowdMall to be included in your order history.
Companies who help us provide you with our services, including cloud storage providers, payment processors, fulfillment partners, security vendors, email providers, marketplaces and data analytics vendors;
Advertisers and marketing vendors;
Merchants whose shops you visit or make purchases from;
Partners who provide a range of services to merchants, such as by developing apps or themes for use by merchants, serving as an affiliate that refers potential merchants to us, or helping merchants build or manage stores;
Law enforcement or other third parties in connection with legal requests, to comply with applicable law or to prevent harm.
Why we collect and share your personal information
We use and share your personal information for the purposes set out in the CrowdMall Privacy Policies. For categories of sensitive personal information that we collect, we only use or disclose such information either with your specific consent when required, or as otherwise permitted by law.
Sources of personal information
To make commerce better for everyone at CrowdMall, we collect and use personal information provided by:
How long we keep your information
Because we need your personal information to provide CrowdMall services, we generally keep your personal information, including sensitive personal information, while you use CrowdMall products or services or until you tell us to delete your information. We may also keep personal information to comply with legal obligations or protect our or other’s interests.
If you are a product creator operating a CrowdMall campaign, and you close the campaign, stop paying your listing fees, or we terminate your account, we retain vendor information for two years before we begin the deletion process.
When you visit or make a purchase from a product creator’s CrowdMall campaign, we act as a service provider or processor for the vendor.
Your rights over your information
Depending on where you live, how you use CrowdMall, and subject to certain exceptions, you may have some or all of the following rights:
To exercise your rights, including the “right to know” and “right to delete,” please submit a request through our customer services email: email@example.com. If you use Stripe or Shopify, please visit their sites for instructions on how to request deletion of your information.
If you have visited or made a pre-order purchase from a product creator’s campaign at CrowdMall, please contact the vendor directly. If you make a request to us, we will forward your request to the relevant vendor.
Please note that to protect your information and the integrity of our products and services, we may need to verify your identity before processing your request. In some cases we may need to collect additional information to verify your identity, such as your email address or a government issued ID.
Under US Privacy Laws, you may also designate an authorized agent to make these requests on your behalf. If you use an authorized agent to submit a request, we may need to collect additional information, such as a government issued ID, to verify your identity before processing your request to protect your information.
For information on the CCPA (California Consumer Privacy Act) requests we have received, please contact us. In certain states, you may have the right to appeal our decision regarding a request related to these rights. If you wish to appeal a decision, please contact CrowdMall Support at firstname.lastname@example.org.
We will not discriminate against you for exercising any of these rights.
How you can reach us
If you would like to ask about or have concerns about how we process your personal information, please contact CrowdMall Support via email at email@example.com.
If you want to make a request relating to your personal information, please contact us using the same email address.