Narvar Data Privacy | Policy & Practices

Narvar, Inc. (“Narvar,” “we,” “us,” and “our”) offers a software as a service platform to merchant customers (“Merchants”) that have contracted with Narvar to help manage and improve their consumers’ pre- and post-purchase experience, including delivery expectations, order tracking, delivery notifications, product return management, and customer support.

Narvar may also offer (1) direct-to-consumer services meant to make it easier for consumers to interact with Merchants (the “Consumer Services”) and (2) fraud prevention services (the “Fraud Prevention Services”).

Our Privacy Policy is designed to help you understand how we collect, use and share your personal information and to assist you in exercising the privacy rights available to you.

‍Notice at Collection – Corporate Privacy Policy. At or before the time of collection, California residents may have a right to receive notice of our privacy practices applicable to our corporate website and related offerings (excluding the Consumer Services and the Fraud Prevention Services), including the categories of personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared and how to opt-out of such uses, and how long such information is retained. You can find those details by clicking on the above links.

‍Notice at Collection – Consumer Services Privacy Policy. At or before the time of collection, California residents may have a right to receive notice of our privacy practices applicable the Consumer Services, including the categories of personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared and how to opt-out of such uses, and how long such information is retained. You can find those details by clicking on the above links.

‍Notice at Collection – Fraud Prevention Services Privacy Policy. At or before the time of collection, California residents may have a right to receive notice of our privacy practices applicable to the Fraud Prevention Services, including the categories of personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared and how to opt-out of such uses, and how long such information is retained. You can find those details by clicking on the above links.

Scope

The body of this Privacy Policy applies to personal information processed by Narvar in the course of our direct business-to business relationship with our Merchants and other individuals we may directly interact with, including on our website (“Site”) and our related online and offline offerings.

The Consumer Services Privacy Policy Annex to this Privacy Policy describes Narvar’s processing of personal information in connection with the Consumer Services. The Consumer Services Privacy Policy Annex supplements, or applies in lieu of, the general disclosures Narvar makes in the body of its Privacy Policy regarding the collection, use, and disclosure of personal information.

The Fraud Prevention Services Privacy Policy Annex to this Privacy Policy describes Narvar’s processing of personal information in connection with the Fraud Prevention Services. The Fraud Prevention Services Privacy Policy Annex supplements, or applies in lieu of, the general disclosures Narvar makes in the body of its Privacy Policy regarding the collection, use, and disclosure of personal information.

To make this Privacy Policy easier to read, our Site, Consumer Services, Fraud Prevention Services, and our related offerings are collectively called the “Services.”

Please note that unless stated otherwise herein, this Privacy Policy does not apply to or govern the processing of personal information by Narvar solely on behalf of our Merchants via Narvar’s software as a service platform (the “Merchant Services”). Merchants operate independently from us, and your agreements with the relevant Merchants and their privacy policies govern how they use and share this personal information.

When Narvar processes personal information solely on behalf of Merchants via the Merchant Services, we act as a “processor” or “service provider” under applicable data protection laws and our processing is governed by agreements we have with our Merchants that require Narvar to only process personal information in accordance with our Merchant’s instructions.

If you have any questions about how your personal information is processed via the Merchant Services, please refer to the relevant Merchant’s privacy policy.

Narvar Corporate – Personal Information We Collect

The categories of personal information we collect depend on how you interact with our Services.

Information You Provide to Us‍

Account Creation. If you create an account with Narvar (e.g., as an authorized user of a Merchant), we will collect your name, email address, job title, company name, phone number, and address.

Your Communications with Us. We collect personal information from you such as email address, phone number, or mailing address when you use our products or Services, request information about our Services (including a demo), ask to download content (such as a whitepaper or an e-book), subscribe to our newsletter, or otherwise communicate with us.

Surveys. We may contact you to participate in surveys. If you decide to participate, you may be asked to provide certain information which may include personal information.

Interactive Features. We may offer interactive features such as review forums, blogs, chat and messaging services, and social media pages. We and others who use our Services may collect the information you submit or make available through these interactive features. Any content you provide on the public sections of these features will be considered “public” and is not subject to the privacy protections referenced herein. By using these interactive features, you assume the risk that the personal information provided by you may be viewed and used by third parties for their own purposes.

Customer Service and Support. If you call or otherwise interact with Narvar’s customer service and support, we may collect the information you provide to our representatives. In addition, we may record telephone calls between you and our representatives for training and quality assurance purposes.

Conferences, Trade Shows, and Other Events. We may attend conferences, trade shows, and other events where we collect personal information from individuals who interact with or express an interest in Narvar and/or the Services. If you provide us with any information at one of these events, we will use it for the purposes for which it was collected.

Business Development and Strategic Partnerships. We may collect personal information from individuals and third parties to assess and pursue potential business opportunities.

Job Applications. We may post job openings and opportunities. If you respond to one of these postings, we may collect your personal information, such as your application, CV, cover letter, and/or any other information you provide to us. In addition, if we interact with you in connection with an application you have submitted, we may collect additional personal information about you.

‍Information Collected Automatically‍

Automatic Data Collection. We may collect certain information automatically when you use the Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information (including inferred location based off of your IP address), Internet service provider, mobile carrier, pages that you visit before, during and after using the Services, actions that you take while using the Services, information about the links you click, information about how you interact with the Services, including the frequency and duration of your activities, and other information about how you use the Services. Information we collect may be associated with accounts and other devices.

Cookies, Pixel Tags/Web Beacons, and other Technologies. We, as well as third parties that provide content, analytics, advertising or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies (“Technologies”) to automatically collect information through the Services. Technologies are essentially small data files placed on your device that allow us and our partners to record certain pieces of information whenever you visit or interact with our Services.

For more information about the cookies and similar Technologies used on our Services, please refer to our Cookie Policy.

‍Information from Other Sources‍

Third Party Services and Organizations. We may supplement the information that we collect from you (such as your email address) with additional information about you and your company obtained from publicly available and third-party databases or services that provide information about business people and companies (including an individual’s name, job title, business contact information, and company information). This helps us update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you.

Information We Process via the Merchant Services
As stated above, this Privacy Policy does not apply to or govern Narvar’s processing of personal information via the Merchant Services. However, for purposes of transparency, we have provided several examples below that highlight how we may process personal information on behalf of Merchants via the Merchant Services.

Tracking and Order Status. When consumers make a purchase from one of our Merchants and are the recipient of a package, they may have been provided a link to a Narvar’s tracking page in order to check the status of an order. When Merchants use our shipping and order tracking, alert, or return Services, we receive name, order, and shipping information from a carrier or one of our Merchants. Unless you opt-in to our Consumer Services, or we are processing your personal information to provide the Fraud Prevention Services, this information is governed by our Merchant’s privacy policy, not ours.

SMS Alerts. The Merchant Services also allow Merchants to ensure that their consumers can obtain information about their orders via SMS. In this case, we will use phone number and other information submitted to us to provide the text messages associated with the SMS service. You may opt out of receiving text messages by replying “STOP” to a text message you have received from us or by otherwise contacting us.

Chatbot. The Merchant Services can also allow Merchants to ensure that their consumers can obtain information about their orders via social media platforms such as Facebook Messenger (“Social Media Sites”). When consumers elect to receive this information and interact with Narvar’s chatbot on Narvar’s or the Social Media Sites (for example, they inquiry about estimated delivery date), we receive from Facebook and process the consumer’s publicly available social media profile information (including name, “locale”, and gender) on behalf of Merchants. Unless you opt-in to our Consumer Services, or we are processing your personal information to provide the Fraud Prevention Services, information shared with Social Media Sites will be governed by the specific privacy policies and terms of service of the Social Media Sites and our Merchants, not by this Privacy Policy.

Narvar Corporate – How We Use Your Personal Information

We use your personal information for a variety of business purposes, including:
‍
To Provide the Services or Information Requested, such as:‍

Fulfilling our contract with you or the organization on whose behalf you use the Services;
Responding to questions, comments, and other requests;
Providing access to certain areas, functionalities, and features of our Services;
Answering requests for customer or technical support.

‍Administrative Purposes, such as:‍

Pursuing legitimate interests, such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
Measuring interest and engagement in our Services;
Improving the Services;
Developing new products and services;
Ensuring internal quality control and safety;
Authenticating and verifying individual identities;
Carrying out audits;
Communicating with you about your account, activities on our Services and Privacy Policy changes;
Preventing and prosecuting potentially prohibited or illegal activities;
Processing job applications;
Assessing and otherwise analyzing applicant candidacy for positions at Narvar;
Comparing, analyzing, and retaining applicant personal information (including job applications) for accuracy, consistency, trends, fraud prevention, insights, and other purposes;
Enforcing our agreements; and
Complying with our legal obligations.

‍Marketing Our Products and Services. We may use personal information to tailor and provide you with content and advertisements. We may provide you with these materials as permitted by applicable law.

If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may contact us at any time as set forth below.

Consent. We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

De-identified and Aggregated Information Use. We may use personal information and other data about you to create deidentified and/or aggregated information, such as de-identified demographic information, de-identified location information, information about the device from which you access our Services, or other analyses we create. If we create or receive de identified information, we will not attempt to reidentify such information, unless permitted by, or required to comply with, applicable laws. De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, and any other legally permissible purposes.

Narvar Corporate – Disclosing Your Personal Information to Third Parties

We may share your personal information with the following categories of third parties:‍‍

Merchants. In cases where you use our Services on behalf of our Merchants (e.g., your employer), our Merchants may access information associated with your use of the Services including usage and other data.

Please note that your information may also be subject to our Merchant’s privacy policy. We are not responsible for the privacy or security practices of our Merchants.

Service Providers. We may share any personal information we collect about you with our third-party service providers. The categories of service providers to whom we entrust personal information include service providers for: (i) the provision of the Services; (ii) the provision of information, products, and other services you have requested; (iii) marketing and advertising; (iv) payment and transaction processing; (v) customer service activities; and (vi) the provision of IT and related services.

Business Partners. We may provide personal information to business partners to provide you with a product or service you have requested. We may also provide personal information to business partners with whom we jointly offer products or services.

Affiliates. Narvar may share personal information with our affiliated entities, including members of our corporate family in Australia, France, India, Japan and the United Kingdom.

Advertising Partners. Through our Services, we may allow third party advertising partners to set Technologies and other tracking tools to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other websites) for purposes of delivering targeted advertisements to you when you visit third party services within their networks. This practice is commonly referred to as “interest-based advertising” or “personalized advertising.” If you would like to opt-out of receiving personalized advertisements from these advertising partners, you may follow the instructions in our Cookie Policy.

APIs and Software Development Kits. We may use third party APIs and software development kits (“SDKs”) as part of the functionality of our Services. APIs and SDKs may allow third parties including advertising partners to collect your personal information in order to provide content that is more relevant to you. For more information about our use of APIs and SDKs, please contact us as set forth below.

Disclosures to Protect Us or Others We may access, preserve, and disclose any information we store in association with you to external parties if we, in good faith, believe doing so is required or appropriate to: (i) comply with lawful requests of public authorities, including law enforcement or national security requests and legal process, such as a court order or subpoena; (ii) protect your, our, or others’ rights, property, or safety; (iii) enforce our policies or contracts; (iv) collect amounts owed to us; or (v) assist with an investigation and prosecution of suspected or actual illegal activity.

Disclosure in the Event of Merger, Sale, or Other Asset Transfer If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, then your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.

International Transfers of Personal Information

All personal information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to, the United States, India, or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your personal information consistent with the requirements of applicable laws.

If we transfer personal information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses.

For more information about the safeguards we use for international transfers of your personal information, please contact us as set forth below.

EU - U.S. Data Privacy Framework Principles and Swiss - U.S. Data Privacy Framework Principles

Narvar complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the SwissU.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Narvar has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Narvar has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Narvar is responsible for onward transfers to our agents under the DPF Frameworks described above. With respect to personal information received or transferred pursuant to the DPF Frameworks, Narvar is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission (“FTC”). If you have any questions or concerns related to our DPF Framework certification or to resolve any complaints about our collection or use of your personal information, you should first contact us using the information provided below.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Narvar commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.

Under certain conditions, more fully described on the DPF Framework Program website, you may be entitled to invoke binding arbitration when other dispute resolution options do not satisfactorily resolve your concerns.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Narvar commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Narvar at: Narvar, Inc Attn: Privacy, 3 E. 3^rd Ave, Suite 211, San Mateo, CA 94401.

Your Privacy Choices and Rights

Your Privacy Choices

The privacy choices you may have about your personal information are determined by applicable law and are described below.

Email Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to our Terms or this Privacy Policy).

“Do Not Track”. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

Your Privacy Rights

In accordance with applicable law, you may have the right to: (i) confirm whether we are processing your personal information (the right to know); (ii) request access to or a copy of your personal information; (iii) request an electronic copy of personal information that you have provided to us, or ask us to send that information to another company in a structured, commonly used, and machine readable format (the “right of data portability”); (iv) restrict or object to our processing of your personal information; (v) request correction or amendment of your personal information where it is inaccurate, untrue, incomplete, outdated or improperly processed personal information; (vi) withdraw your consent to our processing of your personal information (Note: if you withdraw your consent to processing, some features of the service may not be available); (vii) request erasure, anonymization, or blocking of your personal information; (viii) be informed about third parties with which your personal information has been shared; (ix) request the review of decisions taken exclusively based on automated processing if that could affect data subject rights, subject to certain exceptions prescribed by law; (x) request to opt-out of certain processing activities including, as applicable, if we process your personal information for “targeted advertising” (as “targeted advertising” is defined by applicable privacy laws), if we “sell” your personal information (as “sell” is defined by applicable privacy laws), or if we engage in “profiling” in furtherance of certain “decisions that produce legal or similarly significant effects” concerning you (as such terms are defined by applicable privacy laws); and (xi) limit our use and disclosure of your “sensitive personal information”.

If you would like to exercise any of these rights, please contact us by clicking on the link below and filling out the relevant information.

‍Privacy Rights Tool

‍We will process such requests in accordance with applicable laws. We may choose to delete personal information by de identifying and/or aggregating it.

To protect your privacy, we will take steps to reasonably verify your identity before fulfilling requests submitted under applicable privacy laws. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Examples of our verification process may include asking you to confirm the email address we have associated with you.

Only you, or someone legally authorized to act on your behalf in certain jurisdictions, may make a request to exercise the rights listed above regarding your personal information. If your personal information is subject to a law that allows an authorized agent to act on your behalf in exercising your privacy rights and you wish to designate an authorized agent, please contact us using our Privacy Rights Tool or using the information set forth in “Contact Us” below for further instructions.

Some laws may allow you to appeal our decision if we decline to process your request. If applicable laws grant you an appeal right and you would like to appeal our decision with respect to your request, you may do so by informing us of this and providing us with information supporting your appeal.

Please note that Narvar is not able to fulfill requests it receives from individuals about personal information that is processed via the Merchant Services. If you have a request related to personal information processed via the Merchant Services, please contact the relevant Merchant.

Retention of Personal Information

We store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

To determine the appropriate retention period for personal information, we may consider applicable legal requirements, the amount, nature, and sensitivity of the personal information, certain risk factors, the purposes for which we process your personal information, and whether we can achieve those purposes through other means.

For example, we may retain personal information of job applicants who are not hired for the purposes of considering such applicants for another similar position in the future. We may also retain applicant personal information (including job applications) to process, compare, and analyze this personal information for accuracy, consistency, trends, fraud prevention, insights, and other purposes.

Narvar Corporate - Supplemental Notice for California Residents

This Supplemental Notice for California Residents supplements our Privacy Policy and only applies to our processing of personal information that is subject to the California Consumer Privacy Act of 2018 (as amended from time to time) (“CCPA”). It does not apply to the Consumer Services or the Fraud Prevention Services. The Consumer Services Privacy Policy Annex contains a separate Supplemental Notice for California Residents that applies to the Consumer Services. Likewise, the Fraud Prevention Services Privacy Policy Annex contains a separate Supplemental Notice for California Residents that applies to the Fraud Prevention Services.

The CCPA provides California residents with the right to know what categories of personal information Narvar, in its capacity as a business, has collected about them, whether Narvar disclosed that personal information for a business purpose (e.g., to a service provider), whether Narvar “sold” that personal information, and whether Narvar “shared” that personal information for “cross-context behavioral advertising” in the preceding 12 months. California residents can find this information below:

Category of Personal Information Collected by Narvar

Category of Third Parties to Whom Personal Information Is Disclosed for a Business Purpose

Category of Third Parties to Whom Personal Information Is Sold and/or Shared

Identifiers

Service providers
Merchants

Advertising partners

Personal information categories listed in the California CustomerRecords statute (Cal. Civ. Code § 1798.80(e))

Service providers
Merchants

N/A

Protected classification characteristics under California or federal law

Service providers

N/A

Commercial information

Service providers

N/A

Internet or other electronic network activity

Service providers

Advertising partners

Professional or employment-related information

Service providers
Merchants

N/A

Inferences drawn from other personal information to create a profile about a consumer

Service providers

Advertising partners

Personal information that reveals a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account

Service providers

‍

N/A

The categories of sources from which we collect personal information and our business and commercial purposes for using and disclosing personal information are set forth in “Narvar Corporate – Personal Information We Collect,” “Narvar Corporate – How We Use Your Personal Information,” and “Narvar Corporate – Disclosing Your Personal Information to Third Parties” above, respectively. We will retain personal information in accordance with the time periods set forth in “Retention of Personal Information.”

We “sell” and “share” your personal information to provide you with “cross-context behavioral advertising” about Narvar’s products and services.

Additional Privacy Rights for California Residents

Opting Out of “Sales” of Personal Information and/or “Sharing” for Cross-Context Behavioral Advertising under the CCPA. California residents have the right to opt out of the “sale” of personal information and the “sharing” of personal information for “cross-context behavioral advertising.” California residents may exercise these rights by clicking on the following link and following the instructions on that page: Privacy Settings

Disclosure Regarding Individuals Under the Age of 16. Narvar does not have actual knowledge of any “sale” of personal information of minors under 16 years of age. Narvar does not have actual knowledge of any “sharing” of personal information of minors under 16 years of age for “cross-context behavioral advertising.”

Disclosure Regarding Opt-Out Preference Signals. California residents may opt out of “sales” of personal information and “sharing” of personal information for “cross-context behavioral advertising” that are carried out on https://corp.narvar.com/ by broadcasting the opt-out preference signal known as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, visit the Global Privacy Control website. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use to visit https://corp.narvar.com/.

‍Disclosure Regarding Sensitive Personal Information. Narvar only uses and discloses sensitive personal information for the following purposes:

To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, and or confidentiality of stored or transmitted personal information.
To resist malicious, deceptive, fraudulent, or illegal actions directed at Narvar and to prosecute those responsible for those actions.
To ensure the physical safety of natural persons.
To verify or maintain the quality or safety of a product, service, or device that is owned, manufactured, manufactured for, or controlled by Narvar, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by Narvar.
For purposes that do not infer characteristics about individuals.

Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

Our Lawful Basis for Processing

For purposes of the EU or UK General Data Protection Regulation, Narvar’s processing of your personal information may be supported by the following lawful bases:

Performance of a Contract: Narvar may need to process your personal information to perform our contract with you or our Merchant.
‍
Legitimate Interest: Narvar may process your personal information to further our legitimate interests but only where our interests are not overridden by your interests or fundamental rights and freedoms.

Consent: In some cases, Narvar may also rely on your consent to process your personal information.

Compliance with Legal Obligations: Narvar may process your personal information to comply with our legal obligations.

Supervisory Authority

If your personal information is subject to the applicable data protection laws of the European Economic Area, the United Kingdom, Switzerland, or Brazil you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your personal information violates applicable law.

Third Party Websites/Applications

The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.

Children's Information

The Services are not directed to children under 16 (or other age as required by local law outside of the United States), and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, you may contact us as set forth below. If we learn that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account, if applicable.

Changes to Our Privacy Policy

We may revise this Privacy Policy from time to time in our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use the Services after the new Privacy Policy takes effect.

Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at:

Narvar, Inc.
Office of the General Counsel
3 East Third Avenue, Suite 211
San Mateo, CA 94401
United States

Consumer Services Privacy Policy Annex

Scope

This Consumer Services Privacy Policy Annex supplements our general Privacy Policy and applies solely to the processing of personal information that we collect in connection with the Consumer Services.

For example, you may create a Narvar profile when you opt-in to Narvar’s Consumer Services on a Merchant website and provide information for delivery preferences, opt-in to SMS or email communications about all shipments from Merchants, or save or use your return preferences.

In addition, when you create a Narvar profile, we may collect any personal information about you that has been collected by a Merchant and add this to your Narvar profile.

Consumer Services - Personal Information We Collect

In connection with the Consumer Services, Narvar may collect the following personal information about you:

Personal Information You Provide to Us. We may collect personal information you provide about yourself like your name, address, email address, and phone number.

Personal Information Collected by Merchants. By signing up for a Narvar Profile, you expressly authorize us to collect, and the Merchant to provide, any personal information about you collected by the Merchant that is associated with your Narvar Profile.

Personal Information We Collect Automatically. We may collect personal information automatically in connection with your use of the Consumer Services. For example, this may include personal information about how you access and use the Consumer Services, including information about your transactions and other interactions with Merchants, the device and browser you use, your network connection, your IP address, and other details about how you use the Consumer Services. We may collect some of this personal information by using “cookies” or other similar technologies.

Personal Information We Collect from Other Third Parties. We may collect personal information from third parties. These third parties may include, but are not limited to, other Merchants that process personal information about you, data brokers and other commercially available sources.

Consumer Services - How We Use Your Personal Information

We use personal information for a variety of business purposes, including to provide the Consumers Services, for administrative purposes, and to provide you with marketing, as described below.

Provide the Consumer Services. We use personal information to fulfill our contract with you and provide the Consumer Services, such as:‍‍

Completing transactions;
Pre-filling delivery and return preferences and information;
Providing you with requested updates for shipments from Merchants;
Providing you with recommendations of other drop off locations near the addresses you provide;
Providing access to certain areas, functionalities, and features of the Consumer Services;
Answering requests for support;
Communicating with you; and
Allowing you to register for events.

Administrative Purposes. We use personal information for various administrative purposes, such as:‍‍

Pursuing our legitimate interests such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
Carrying out analytics;
Measuring interest and engagement in the Consumer Services;
Improving, upgrading, or enhancing the Consumer Services;
Developing new products and services;
Creating de-identified and/or aggregated information. If we create or receive de-identified information, we will not attempt to reidentify such information, unless permitted by, or required to comply with, applicable laws;
Ensuring internal quality control and safety;
Authenticating and verifying individual identities, including requests to exercise your rights under this Consumer Services Privacy Policy Annex;
Debugging to identify and repair errors with the Consumer Services;
Auditing relating to interactions, transactions, and other compliance activities;
Sharing personal information with third parties as needed to provide the Consumer Services or as otherwise permitted by applicable law;
Enforcing our agreements and policies; and
Carrying out activities that are required to comply with our legal obligations.

Marketing. We may use personal information to tailor and provide you with marketing and other content. We may provide you with these materials as permitted by applicable law.

With Your Consent. We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

Automated Decision-Making. We may engage in automated decision-making, including profiling.

If you have questions about our automated decision making, you may contact us as set forth in “Contact Us” above.

Other Purposes. We also use personal information for other purposes as requested by you or as permitted by applicable law.

Consumer Services - Disclosing Your Personal Information to Third Parties

We disclose personal information to third parties for a variety of business purposes, including Merchants you share or interact with, if we sell your personal information to other third parties, service providers, to protect us or others, or in the event of a corporate transaction such as a merger, sale, or asset transfer, as described below and as described in the general Privacy Policy.

Merchants You Share or Interact With. The Services may allow you to share personal information or interact with Merchants.

For example, when you use information saved to your Narvar profile to apply delivery or return preferences to a transaction with a Merchant, your personal information will be shared with the Merchant.

Once your personal information is shared with the Merchant, it will also be subject to the Merchant’s privacy policy. We are not responsible for the processing of your personal information by Merchants.

Third Parties We Sell or Disclose Personal Information To. We may sell or make available personal information to third parties as permitted by applicable law.

Once your personal information is shared with a third party, it will also be subject to the third party’s privacy policy.

We are not responsible for the processing of your personal information by these third parties.

Consumer Services - Supplemental Notice for California Residents

This Supplemental Notice for California Residents supplements the Consumer Services Privacy Policy Annex and only applies to our processing of personal information that is subject to the California Consumer Privacy Act of 2018 (as amended from time to time) (“CCPA”).

The CCPA provides California residents with the right to know what categories of personal information Narvar has collected about them, whether Narvar disclosed that personal information for a business purpose (e.g., to a service provider), whether Narvar “sold” that personal information, and whether Narvar “shared” that personal information for “cross-context behavioral advertising” in the preceding twelve months. California residents can find this information below:

Category of Personal Information Collected by Narvar

Category of Third Parties to Whom Personal Information Is Disclosed for a Business Purpose

Identifiers

Service providers
Merchants you share or interact with

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Service providers
Merchants you share or interact with

Commercial information

Service providers
Merchants you share or interact with

Internet or other electronic network activity

Service providers
Merchants you share or interact with

Geolocation data

Service providers
Merchants you share or interact with

Professional or employment-related information

Service providers

Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g, 34 C.F.R. Part 99))

N/A

Inferences drawn from other personal information to create a profile about a consumer

Service providers
Merchants you share or interact with

Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number

N/A

Service providers

Personal information that reveals a consumer’s precise geolocation

N/A

Personal information that reveals a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership

N/A

Personal information that reveals the contents of a consumer’s mail, email, and text messages unless Narvar is the intended recipient of the communication

Service providers

‍

Personal information collected and analyzed concerning a consumer’s health

Service providers
Merchants you share or interact with

Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation

Service providers
Merchants you share or interact with

The categories of sources from which we collect personal information and our business and commercial purposes for using and disclosing personal information are set forth in “Consumer Services – Personal Information We Collect”, “Consumer Services – How We Use Your Personal Information”, and “Consumer Services – Disclosing Your Personal Information to Third Parties” above, respectively. We will retain personal information in accordance with the time periods set forth in “Retention of Personal Information.”

We may “sell” and “share” your personal information to operate our business, to assist Merchants and businesses, and as otherwise permitted by applicable law.

‍Additional Privacy Rights for California Residents

Disclosure Regarding “Sales” of Personal Information under the CCPA. In the preceding twelve months from the effective date, Narvar has not “sold” any personal information (as defined by the CCPA), nor does Narvar have actual knowledge of any “sale” of personal information of minors under 16 years of age.

Disclosure Regarding Cross-Context Behavioral Advertising under the CCPA. In the preceding twelve months from the effective date, Narvar has not “shared” any personal information for “cross-context behavioral advertising” (as such terms are defined in the CCPA), nor does Narvar have actual knowledge of any “sharing” of personal information of minors under 16 years of age for “cross-context behavioral advertising”.

Opting Out of “Sales” of Personal Information and/or “Sharing” for “Cross-Context Behavioral Advertising” under the CCPA. California residents have the right to opt out of the “sale” of personal information and the “sharing” of personal information for “cross-context behavioral advertising.” California residents may exercise these rights clicking on the following link and following the instructions on that page: Privacy Settings

Disclosure Regarding Sensitive Personal Information under the CCPA. Narvar may use and disclose sensitive personal information in accordance with the Consumer Services Privacy Policy Annex and the applicable sections of the general Privacy Policy.

Right to Limit Use and Disclosure of Sensitive Personal Information under the CCPA. California residents have the right to limit certain uses and disclosures of “sensitive personal information” by Narvar in connection with the Consumer Services. California residents may exercise these rights clicking on the following link and following the instructions on that page: Privacy Settings

Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

Fraud Prevention Services Privacy Policy Annex

Scope

This Fraud Prevention Services Privacy Policy Annex supplements our general Privacy Policy and applies solely to the processing of personal information that we collect in connection with the Fraud Prevention Services.

The Fraud Prevention Services are offered by Narvar to help Merchants and other third parties detect and prevent fraud and abuse.

Fraud Prevention Services - Personal Information We Collect

In connection with the Fraud Prevention Services, Narvar may collect the following personal information about you:

Personal Information You Provide to Us. We may collect personal information you provide about yourself to Narvar like your name, address, email address, and phone number. For example, this includes personal information that you provide to us when you sign up for a Narvar Profile in connection with your use of the Consumer Services.

Personal Information We Collect Automatically. We may collect personal information automatically in connection with our provision of the Fraud Prevention Services. For example, this may include personal information about how you access and use the Consumer Services, including information about your transactions and other interactions with Merchants, the device and browser you use, your network connection, your IP address, and other details about how you use the Consumer Services. We may collect some of this personal information by using “cookies” or other similar technologies.

Personal Information We Collect from Other Third Parties. We may collect personal information from third parties. These third parties may include, but are not limited to, Merchants that process personal information about you, data brokers, and other commercially available sources.

Fraud Prevention Services - How We Use Your Personal Information

We use personal information for a variety of business purposes, including to provide the Fraud Prevention Services and for administrative purposes, as described below.

Provide the Fraud Prevention Services. We use personal information to fulfill our contracts and provide the Fraud Prevention Services to Merchants and other third parties.

‍Administrative Purposes. We use personal information for various administrative purposes, such as:‍‍

Pursuing our legitimate interests such as research and development, network and information security, and fraud prevention;
Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
Carrying out analytics;
Improving, upgrading, or enhancing the Fraud Prevention Services;
Developing new products and services;
Creating de-identified and/or aggregated information. If we create or receive de-identified information, we will not attempt to reidentify such information, unless permitted by, or required to comply with, applicable laws;
Ensuring internal quality control and safety;
Authenticating and verifying individual identities, including requests to exercise your rights under this Fraud Prevention Services Privacy Policy Annex;
Debugging to identify and repair errors with the Fraud Prevention Services;
Auditing relating to interactions, transactions, and other compliance activities;
Sharing personal information with third parties as needed to provide the Fraud Prevention Services or as otherwise permitted by applicable law;
Enforcing our agreements and policies; and
Carrying out activities that are required to comply with our legal obligations.

With Your Consent. We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

Automated Decision-Making. We may engage in automated decision-making, including profiling. Narvar analyzes personal information to detect and prevent fraud and abuse. Narvar provides related information to its customers. Narvar’s customers may use the information provided to them by Narvar in connection with their fraud and abuse prevention programs and as otherwise permitted by applicable law. Narvar may also use personal information as otherwise set forth above.

If you have questions about our automated decision-making, you may contact us as set forth in “Contact Us” above.

Colorado Privacy Act Disclosures. To the extent our automated decision-making is (1) profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer and (2) subject to the Colorado Privacy Act, then the information immediately below also applies to this processing:‍‍

What decisions are subject to profiling? Narvar analyzes personal information to detect and prevent fraud and abuse. Narvar provides related information to its customers. Narvar’s customers may use the information provided to them by Narvar in connection with their fraud and abuse prevention programs and as otherwise permitted by applicable law. Narvar may also use personal information as otherwise set forth above.
What are the categories of personal information to be processed as part of the profiling in furtherance of decisions that produce legal or other similarly significant effects? Narvar may use any personal information that it processes about you in connection with the profiling in furtherance of decisions that produce legal or other similarly significant effects. This may include, but is not limited to, information about the device you are using to interact with a Narvar customer, order details, and shipping address.
Explanation of the logic used in the profiling process: The logic used by Narvar is aimed at detecting and preventing fraud and abuse. For example, Narvar may assess whether or not a shipping address has previously been associated with fraudulent orders.
Explanation of how profiling is used in the decision-making process: Narvar analyzes personal information to detect and prevent fraud and abuse. Narvar provides related information to its customers. Narvar’s customers may use the information provided to them by Narvar in connection with their fraud and abuse prevention programs and as otherwise permitted by applicable law. Narvar may also use personal information as otherwise set forth above.
The benefits and potential consequences of the decision based on the profiling: The benefits and potential consequences of the decision based on the profiling are controlled by the Narvar customer that uses the information provided by Narvar. Narvar’s primary goal is to help companies detect and prevent fraud and abuse.
How can I opt out of Narvar’s profiling in furtherance of decisions that produce legal or other similarly significant effects? Please follow the instructions in the section titled “Your Privacy Rights” in the general Privacy Policy.

Other Purposes. We also use personal information for other purposes as requested by you or as permitted by applicable law.

‍

Fraud Prevention Services - Disclosing Your Personal Information to Third Parties

We disclose personal information to third parties for a variety of business purposes, including Merchants or other third parties you interact with, if we sell your personal information to other third parties, service providers, to protect us or others, or in the event of a corporate transaction such as a merger, sale, or asset transfer, as described below and as described in the general Privacy Policy.

Merchants or Other Third Parties You Interact With. If you attempt to interact or transact with a Merchant or other third party that uses the Fraud Prevention Services, we may provide them with your personal information as part of the standard functionality of the Fraud Prevention Services.

Once your personal information is shared with the Merchant or other third party, it will also be subject to such party’s privacy policy. We are not responsible for the processing of your personal information by Merchants or other third parties.

Third Parties We Sell or Disclose Personal Information To. We may sell or make available personal information to third parties as permitted by applicable law.

Once your personal information is shared with a third party, it will also be subject to the third party’s privacy policy.

We are not responsible for the processing of your personal information by these third parties.

Fraud Prevention Services - Supplemental Notice for California Residents

This Supplemental Notice for California Residents supplements the Fraud Prevention Services Privacy Policy Annex and only applies to our processing of personal information that is subject to the California Consumer Privacy Act of 2018 (as amended from time to time) (“CCPA”).

Category of Personal Information Collected by Narvar

Category of Third Parties to Whom Personal Information Is Disclosed for a Business Purpose

Identifiers

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Commercial information

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Internet or other electronic network activity

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Geolocation data

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Professional or employment-related information

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g, 34 C.F.R. Part 99))

N/A

Inferences drawn from other personal information to create a profile about a consumer

Service providers
Merchants or other third parties you interact with
Third parties we sell or disclose personal information to

Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number

N/A

Service providers

Personal information that reveals a consumer’s precise geolocation

N/A

Personal information that reveals a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership

N/A

Personal information that reveals the contents of a consumer’s mail, email, and text messages unless Narvar is the intended recipient of the communication

Service providers

‍

Personal information collected and analyzed concerning a consumer’s health

Service providers

Personal information collected and analyzed concerning a consumer’s sex life or sexual orientation

Service providers

The categories of sources from which we collect personal information and our business and commercial purposes for using and disclosing personal information are set forth in “Fraud Prevention Services - Personal Information We Collect”, “Fraud Prevention Services - How We Use Your Personal Information”, and “Fraud Prevention Services - Disclosing Your Personal Information to Third Parties” above, respectively. We will retain personal information in accordance with the time periods set forth in “Retention of Personal Information.”

We may “sell” and “share” your personal information to provide the Fraud Prevention Services, operate our business, to assist Merchants and businesses, and as otherwise permitted by applicable law.

Disclosure Regarding Sensitive Personal Information under the CCPA. Narvar may use and disclose sensitive personal information in accordance with the Fraud Prevention Services Privacy Policy Annex and the applicable sections of the general Privacy Policy.

Right to Limit Use and Disclosure of Sensitive Personal Information under the CCPA. California residents have the right to limit certain uses and disclosures of “sensitive personal information” by Narvar in connection with the Fraud Prevention Services. California residents may exercise these rights clicking on the following link and following the instructions on that page: Privacy Settings.

Non-Discrimination. California residents have the right not to receive discriminatory treatment by us for the exercise of their rights conferred by the CCPA.

California Consumer Privacy Act Data (2024)

Pursuant to The Delete Act of 2023, SB 362, below are the metrics related to the CCPA data subject requests we received for the 2024 calendar year:

Requests received during the previous calendar year: 4785
Deletion Requests: 4767
Access Requests: 18
Requests complied with in whole or in part during the previous calendar year: 4785
Requests denied during the previous calendar year: 0
Median time to respond to requests: 2 hours
Mean time to respond to requests: 4 hours
‍
Number of requests in which deletion was not required in whole, or in part: 0No request to delete was denied due to an exemption listed under CA Civ. Code Section 1798.145 or 1798.146.