• Service Providers. We share your information with agents, contractors, and other service providers in connection with their work on our behalf (collectively “Service Providers”). Our Service Providers only receive your information if such information is needed to perform their function(s), and they are not authorized to use such information for any other purpose(s) other than the purpose(s) set forth by Rose & Sparkle. We only provide Service Providers with the information necessary to complete the requested service, product or transaction and contractually prohibit them from retaining, using, or disclosing information about you for any purpose other than performing the services for us.
• Affiliates: We share your information with our related entities including our parent and sister companies. For example, we share your information with our affiliates for business purposes such as customer support, marketing, and technical operations.
• Business Partners: We share your information with our business partners in connection with offering you co-branded services, selling or distributing our products, or engaging in joint marketing activities. For example, we share information about you with a business partner for purposes of providing you with co-branded products or services that we may offer.
• Special Events: If you choose to participate in a special event (for example, a Promotion), Rose & Sparkle will share your information with those organizations participating in the applicable event. Typically, these other parties do not use your information for any other purpose other than to manage the event. In some cases, these promotional partners will send you promotional materials regarding their products and services.
• Feedback, Testimonials and User Provided Content. If you provide feedback or testimonials on the Service or on Rose & Sparkle products or services, or provide other user provided content (such as photos or videos), we will post and share this feedback, testimonial or other user provided content, including your information, on the Service, with partners, or in marketing and promotional materials.
• Facilitating Requests. We will share your information with other parties for purposes of facilitating your requests (such as when you choose to share information with a social network about your activities on the Service).
• Vendors and Other Parties. We share information with vendors and other parties for business and commercial purposes. For example, if we need to ship something to you, we must share your name and address with a shipping company. Vendors also include: web hosting companies, shipping and fulfillment companies (e.g., companies that ship or fulfill product orders), diamond or gemstone suppliers, jewelers, assemblers, insurance companies, data analysis firms, analytics and advertising technology companies, affiliates, customer service providers, consulting or marketing firms/providers, accounting, bookkeeping or legal firms, financial services firms, technology companies including, but not limited to, enterprise application firms, firms which provide technologies to enable electronic communications and data storage providers. Additionally, if you use a credit card or other financing alternative to place an order with Rose & Sparkle, we will use a payment processor to process your information in association with the transaction. We will also share information with other companies and organizations for credit fraud protection and risk reduction. Vendors and other parties may act as our service providers, or in certain contexts, independently decide how to process your information. Information will be disclosed to vendors and other parties in connection with tailoring advertisements, measuring and improving our Service and advertising effectiveness, and enabling other enhancements.
• Business Transfer. Your information will be disclosed as part of, or in connection with, any investment in the company, any merger, sale of company assets, or acquisition, as well as in the event of an insolvency, bankruptcy or receivership, in which information would be transferred as one of the business assets of Rose & Sparkle.
• Security, Compliance with Law, and Fraud Protection. We will disclose your information as we deem necessary, in our sole discretion, to comply with any applicable law, regulation, legal process or governmental request. We will also share your information in order to investigate, prevent or take action regarding illegal activities, including suspected fraud, or as otherwise required by law. We will also share your information to protect the rights, property, life, health, security and safety of us, the Service or any person or party.

Children

Rose & Sparkle does not knowingly collect personal information from children under the age of thirteen (13) – in the EU sixteen (16). In the event that Rose & Sparkle ever does so, we will strictly comply with the Children’s Online Privacy Protection Act (“COPPA”) or other legislation. If you are a parent or guardian and believe Rose & Sparkle has collected such information in a manner not permitted by COPPA or other relevant legislation, please contact us as set forth in the section entitled “Contact Us” below, and we will remove such data to the extent required by COPPA or other relevant legislation. In addition, we do not sell the personal information of minors under 16 years old who are California residents.

OTHER PARTIES

Other Party Websites And Services

Our Service provides links to websites, locations, platforms, and services operated and owned by other parties which are outside our control and not covered by this Privacy Policy. We encourage you to review the privacy policies posted on these (and all) websites and services. There may be Tracking Technologies on unaffiliated websites and services used to independently collect information about you and may solicit information from you. The information collected and stored by other parties, whether through our Service, or their services or Social Features (defined below), remains subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

YOUR RIGHTS AND CHOICES

Review And Update Of Account Information

You may access, update, or remove certain account information that you have voluntarily submitted to us through the Service. If you would like to update or revise information in your account, you may do so through your account or by contacting us as set forth in the section entitled “Contact Us” below. We may require additional information from you to allow us to confirm your identity. Please note that we will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. California residents and data subjects in EU have additional rights as set forth in the sections entitled “Additional Disclosures for California Residents” and “Additional Disclosures for Data Subjects in Europe” below.

Communications

To opt-out of receiving e-mail promotions from Rose & Sparkle, please follow the unsubscribe instructions in our promotional e-mail correspondence or contact us as set forth in the section entitled “Contact Us” below. Please note that opting out of promotional communication received from Rose & Sparkle does not affect our non-promotional communications with you, service messages, orders placed with Rose & Sparkle, or our ongoing business relations.

DATA SECURITY

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.

Despite the measures we take, transmission via the Internet is not completely secure and we cannot guarantee the security of your information.

International Transfer

Rose & Sparkle is based in the U.S. and the information we collect is governed by U.S. law. Your information will be stored and processed in the United States or any other country in which Rose & Sparkle or its partners, affiliates, service providers, subsidiaries or agents maintain facilities and by using this Website, you consent to any such transfer of information outside of your country – however not applicable to EU residents. Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the Service or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of your information in the U.S. and other jurisdictions as set forth in this Privacy Policy. If you are an EU resident and your data is collected in Europe, we will transfer your personal data subject to the section “Additional Disclosures for Residents of the EU”.

CHANGES TO THE PRIVACY POLICY

This is our entire and exclusive Privacy Policy and it supersedes any earlier version. We may occasionally update this Privacy Policy to reflect changes in our practices and services, and we reserve the right to do so at any time. When a revision is made, we will revise the “Effective Date” on this page and any changes will be effective immediately upon posting of the revised Privacy Policy. Rose & Sparkle encourages you to periodically review this Privacy Policy to learn how we are protecting your information. Your continued use of our Service indicates your consent to the Privacy Policy then posted – however not applicable to EU residents. If any changes are material, we may provide you additional notice to your e-mail address.

CONTACT US

If you have questions about this privacy policy, or the information practices, please contact us as follows:

By email: [email protected]

If you have a disability and would like to access this Privacy Policy in an alternative format, please email us at [email protected].

ADDITIONAL DISCLOSURES FOR CALIFORNIA RESIDENTS

These additional disclosures for California residents apply only to individuals who reside in California. The California Consumer Privacy Act of 2018 (“CCPA”) provides additional rights to know, delete and opt out, and requires businesses collecting or disclosing personal information to provide notices and means to exercise rights.

California Notice Of Collection

In the past 12 months, we have collected the following categories of personal information enumerated in the CCPA:

• Identifiers, such as name, email address, phone number account name, IP address, and an ID or number assigned to your account.
• Customer records, such as billing and shipping address.
• Demographics, such as your age or gender. This category includes data that may qualify as protected classifications under other California or federal laws.
• Commercial information, such as products or services history and purchases.
• Internet activity, such as your interactions with our Service.
• Audio or visual data, such as photos or videos you share with us or post on the Service.
• Geolocation data,
• Employment and education data, such as data you provide when you apply for a job with us.
• Inferences, such as information about your interests, ring size preferences and favorites.

For more information on information we collect, including the sources we receive information from, review the “Information We Collect” section. We collect and use these categories of personal information for the business purposes described in the “Use of Information” section, including to provide and manage our Service.

We use and partner with different types of entities to assist with our daily operations and manage our Service. Please review the “Sharing of Information” section for more detail about the parties we have shared information with.

Rose & Sparkle does not sell your personal information.

Right To Know And Delete

If you are a California resident, you have the rights to delete the personal information we have collected from you and know certain information about our data practices in the preceding 12 months. In particular, you have the right to request the following from us:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information was collected;
• The categories of personal information about you we disclosed for a business purpose or sold;
• The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
• The business or commercial purpose for collecting or selling the personal information; and
• The specific pieces of personal information we have collected about you.

To exercise any of these rights, please email a customer service representative at [email protected]. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your requests to know or delete.

Authorized Agent

You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and verify your identity directly.

Right To Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

Shine The Light

If you are a customer in California, in addition to the rights set forth above, you have the right to request information from Rose & Sparkle regarding the manner in which Rose & Sparkle shares certain categories of personal information as defined by California’s “Shine the Light” with third parties and/or affiliates for their own direct marketing purposes. To receive this information, send us a request at the address set forth in the section entitled “Contact Us” above. Requests must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that Rose & Sparkle may provide this information in a standardized format that is not specific to you and is not required to respond to requests made by means other than through the provided e-mail address or mail address.

Postings

Any California residents under the age of eighteen (18) who have registered to use the Service and posted content or information on the Service, can request that such information be removed from the Service by sending an e-mail to the e-mail address set forth in the section entitled “Contact Us” below. Requests must state that the user personally posted such content or information and detail where the content or information is posted. We will make reasonable good faith efforts to remove the post from prospective public view.

ADDITIONAL DISCLOSURES FOR NEVADA RESIDENTS

Nevada law (NRS 603A.340) requires each business to establish a designated request address where Nevada consumers may submit requests directing the business not to sell certain kinds of personal information that the business has collected or will collect about the consumer. If you are a Nevada consumer and wish to submit a request relating to our compliance with Nevada law, please contact us at [email protected].

Rose & Sparkle does not sell your personal information.

 ADDITIONAL DISCLOSURES FOR RESIDENTS OF THE EU

 Data Controller

Rose & Sparkle, located at the address in the section entitled “Contact Us” above, is the controller with respect to information you provide through the Service.

Lawful Basis

We use personal data collected through our Services only when we have a valid reason and the legal grounds to do so. We determine the legal grounds based on the purposes for which we have collected your personal data.

The legal ground may be one of the following:

Consent, GDPR art. 6 (1) (a): For example, where you have provided your consent to receive marketing emails from us. You can withdraw your consent at any time. In the case of marketing e-mails you can withdraw your consent by clicking on the “unsubscribe” link at the bottom of the email or by contacting us.

Performance of a contract with you (or in order to take steps prior to entering into a contract with you) GDPR art. 6 (1) (b): For example, where you have purchased products or services from us and we need to use your contact details and payment data in order to process your order and deliver your product or services.

Compliance with law GDPR art. 6 (1) (c): In some cases, we may have a legal obligation to use or keep your personal data. For example, where we need to keep payment information as tax documentation or when handling VAT issues.

Our legitimate interests GDPR 6 (1) (f): Where it is necessary for us to understand our customer, promote our product and operate our Services efficiently for the creation, publication and distribution of product and marketing content both online and offline, globally. Examples of when we rely on our legitimate interests to use your personal data include:

• when we analyse what content has been viewed on our Services, so that we can understand how they are used and improve our content.
• to carry out marketing analyses to better understand your interests and preferences so that we can make our marketing more relevant to your interests and preferences. This includes when we promote our own products and services. For example, we look at what you have viewed on our Services and what products and services you have bought (including what you have looked at and what products or services you have bought on Services, for example Rose & Sparkle Jobs).
• to show you personalised advertising by identifying your interests and to create “segments” of particular types of audiences so that we may show you advertisements that may be more relevant to your interests and the ‘’segments’’ you may be in. These ‘’segments’’ are also used to inform the building of custom audiences so that we can identify our audience across third party websites, such as social media platforms like Facebook.
• for internal administrative purposes related to when you use our Services – such as our accounting and records – and to make you aware of any changes to our Services.
• to collect and log IP addresses to improve the Services and monitor Service usage.
• to personalise our Services (for example, so you can sign in) by remembering your settings, and recognising you when you sign in on different devices.
• enabling you to share our content with others using social media or email.
• when responding to your queries and to resolve complaints.
• for security and fraud prevention, and to ensure that our Services are safe and secure and used in line with our terms of use.

Where we rely on cookies to collect any personal data please see our Section on Cookies policy for more information and how to manage your cookie choices.

Data Transfers

Whenever we transfer your personal data out of the EU, we ensure similar protection and put in place at least one of these safeguards:

• We will only transfer your personal data to countries that have been found by the EU Commission to provide an adequate level of protection for personal data.
• We may also use specific approved contracts that use Standard Contractual Clauses for the protection of personal data where appropriate, with our service providers that are based in countries outside the EU, including those based in the US and Australia. These contracts give your personal data the same protection it has in the EU.

If you are located in the EEA, you may contact us for a copy of the safeguards which we have put in place for the transfer of your personal data outside the EU.

Data Subject Rights

 If you are a data subject in the EU, you have the following rights:

• You are entitled to request access to, rectification or erasure of your personal data.
• You are also entitled to oppose the processing of your personal data and to request restriction of the processing of your personal data.
• You have in particular an unconditional right to oppose the processing of your personal data for direct marketing purposes.
• If the processing of your personal data is based on your consent, you are entitled to revoke such consent at any time. Revocation of your consent will not affect the lawfulness of the processing carried out prior to your revocation of consent.
• You are entitled to receive personal data which you have provided to us in a structured, commonly used and machine-readable format (data portability).
• You can always lodge a complaint with an EU data protection authority.

Your rights may be subject to conditions or restrictions. Accordingly, there is no certainty that you will be entitled to for example data portability in the specific situation; it will depend on the circumstances of the processing.

To exercise any of these rights, contact us as set forth in the section entitled “Contact Us” above and specify which right you intend to exercise.

We will respond to your request within 30 days and we may require additional information from you to allow us to confirm your identity.

Privacy Policy Effective Date: February 2, 2021