Privacy Policy

April 9, 2025

Dear Me, a sole proprietorship based in Clovis, California, United States of America, e-mail hello@dearme.us (hereinafter, “Dear Me,” “we,” “us,” or “our”), respects your concerns about privacy. This Online Privacy Notice describes the types of personal information we obtain on this website, how we use the information, with whom we share it, and the rights and choices available to users of our Site regarding our use of the information. Dear Me is committed to the protection of your personal information — that is, information about you and that identifies you. This Privacy Policy (hereinafter, “Privacy Policy”) is provided in accordance with the California Consumer Privacy Act (hereinafter, “CCPA”) and concerns the processing of personal data performed by Dear Me.

This Privacy Policy explains how Dear Me collects and uses personal information about you as part of our business activities, including information we collect when you access or use our websites, mobile sites, and other digital services and products controlled by Dear Me that link to this Privacy Policy (collectively, our “Digital Services”).

This Privacy Policy describes what personal information we collect, how we use such personal information, who we may disclose it to, and your rights and choices in relation to your personal information. This Privacy Policy does not apply to third-party websites linked from our Digital Services.

1. Information We Collect and Personal Data Categories

For purposes of this Privacy Policy, “personal information” or “personal data” means information that identifies you or that could reasonably be used to identify you. While some of the information Dear Me collects is required for business engagement purposes, other information is voluntarily given by the individual.

The types of personal information that Dear Me may collect include, but are not limited to, the following:

Contact information such as your name, address, phone number, or email address
Registration information such as your username and password, date of birth, and gender
Account login credentials, such as usernames and passwords, password hints, and similar security information
Other account registration and profile information, such as photos or videos (if applicable)
Payment information (such as payment card number, expiration date, delivery address, and billing address)
Information about the electronic device you use to access our Digital Services
Details of products and services you have purchased from us or inquiries you have made
Preference information, such as communications you receive from us
Any other information relating to you (or other individuals) that you provide to us directly or indirectly through use of our Digital Services, by email, phone, surveys or questionnaires, form submissions, or customer service contact

We may use or disclose the personal data we collect for one or more of the following business purposes:

To fulfill or meet the reason for which the information is provided (for example, if you provide us with personal information to place an order, we will use that data to fulfill and deliver your order)
To provide you with information, products, or services that you request
To send you email alerts, event invitations, and other notices concerning our products, services, or updates (with your consent)
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including billing and collections
To respond to law enforcement requests or as required by applicable law, court order, or governmental regulations
As described to you when collecting your personal information or as otherwise permitted by applicable U.S. privacy laws, including the CCPA

We do not sell or disclose your personal information for unrelated commercial purposes. For more information, see our section titled “Do Not Sell My Personal Information.”

We will not collect additional categories of personal information or use previously collected personal information for materially different, unrelated, or incompatible purposes without providing you notice.

Dear Me has not disclosed personal information for a business purpose in the preceding 12 (twelve) months.

We collect this information:

Directly from you when you provide it to us
Automatically as you navigate through our Digital Services
From third parties, such as service providers or business partners

Information You Voluntarily Provide to Us

You do not have to register to browse most of our Digital Services. However, some services may require that you create an account or provide certain information in order to access features such as making a purchase or receiving communications from us. When you sign up or register, we may collect information such as your name, email address, password, date of birth, gender, and communication preferences.

We also collect information you provide when you:

Purchase a product
Subscribe to emails or promotions
Contact Dear Me customer service via email, phone, or mail
Respond to surveys, forms, or promotional offers

This information may include personal data such as your name, email address, and payment details, as well as any comments, questions, or concerns you choose to share about our products or services.

Information Collected Automatically

When you use our Digital Services, we may automatically collect certain information about your visit or device, such as:

IP Address

We may record the Internet Protocol (IP) address of your device when you access our Digital Services. This helps us maintain communication with your device and personalize your experience while using our site.

Cookies and Other Tracking Technologies

We use cookies and web beacons to enhance your experience.

A cookie is a small data file stored on your device that helps us remember preferences and recognize returning visitors.
A web beacon is a small graphic used to monitor website or email activity.

These technologies help us understand user behavior and tailor content based on your preferences or “clickstream” data. For more details, see our Cookie Policy.

Mobile Tracking

If you access our Digital Services via a mobile device, we may also collect:

Device or advertising ID
Device type and hardware details
MAC address or IMEI
Operating system and version
Platform used (e.g., Apple, Google)
Location data (if permitted)
Usage activity on your mobile device

Information We Obtain from Third Parties

To offer you better service, we may also collect personal information from trusted third-party sources, including:

Payment processors
Shipping carriers
Email and analytics platforms
Marketing and customer service platforms

We may also receive information from public sources or affiliated companies, when applicable.

Dear Me does not process employment applications through our Digital Services and therefore does not collect education, employment, or background information from job candidates through this platform.

2. Purposes and legal basis of the processing, consent and consequences of the lack of consent

Personal data will be processed for the following purposes:

For contractual purposes and, in particular, to allow the purchase of goods within the E-commerce. For instance, if you choose to purchase a product or receive our services, we use the information that you provide through our Digital Services to manage your orders and invoices, to process payments, to respond to your questions, provide you the service you request and offer an optimal customer experience. In this case, the obligation to fulfill the contractual purposes constitutes the basis for processing. The communication of the data constitutes an obligation; in the lack of such data, it will not be possible to proceed to perform the contract.
For direct marketing communications, newsletters, advertising material, market research, by means of traditional contact systems and automated computer systems, CRM, databases, including commercial or promotional communications by email, messaging systems, SMS, or telephone communications. In this case, your express consent constitutes the basis for processing. The communication of data, therefore, is entirely optional and does not constitute a contractual obligation for you. In the absence of such data, it will not be possible to send newsletters. You may opt-out of receiving marketing communications from Dear Me at any time by using the opt-out options specified in our marketing communications or by contacting us as described in Section 14 below.
To determine your habits and preferences through profiling, to provide you with a personalized service. For instance, the personal information that you provide may be used to create customized offers, information, or services tailored to your interests and preferences. Also, we may use your IP address and the data that we obtain automatically through the use of cookies or similar tracking technologies to make our Digital Services easier to use and navigate as well as to personalize the content provided on our Digital Services by anticipating the information and services that may be of interest to you. The basis for processing is your consent, expressed in accordance with the Privacy Policy. In relation to the personal data processed, the disclosure of personal data is not a contractual obligation. You have the option to provide personal data. If you fail to provide such data, Dear Me will not be able to provide you with a personalized service.
For purposes related to relevant legal obligations where processing is carried out for the purposes referred to in point a). In this case, the basis for processing is the legal obligation of Dear Me to process such personal data in accordance with applicable national legislation; in the absence of such data, it will not be possible to proceed with the conclusion of the contract.

3. Method of Consent Expression

The consent to the processing of personal data may be expressed by clicking a specific checkbox.

4. Methods of Processing Data, Logics and Safeguards

In relation to personal data processed and stored for the purposes under Section 3(a) of the Privacy Policy (contractual purposes)
and Section 3(d) (legal obligation), data processing will be carried out through automated decision-making logics and use of CRM
software that will enable better management of fulfillment of the contractual obligations.
In relation to personal data processed for the purposes under Section 3(b) of the Privacy Policy (marketing purposes),
data processing will be carried out by means of traditional contact systems and automated computer systems,
with the aim of offering direct marketing communications.
In relation to personal data processed for the purposes of Section 3(c) (profiling), the processing will take place by means of
CRM software that allows us to define tastes and preferences in order to offer you personalized services and communications.
For further details, see the next section of the Privacy Policy.

5. Automated Decision-Making Process and Profiling

If you consent to the processing of your personal data to benefit from personalized services through profiling,
your personal data may be subject to an automated decision-making process, with a specific algorithm that will decide
which communications are best suited to your profile or which may be of most interest to you.
The processing carried out in this way has, as expected consequences, by way of example, the sending of highly profiled
commercial communications, the sending of discounts, the sending of invitations to events deemed of interest, etc.

Dear Me does not use automated decision-making processes in a way that produces legal effects or significantly affects your rights.
If you wish, you may:

request a review by a person instead of an automated system,
express your opinion regarding the decision,
request an explanation of how the decision was made, or
contest or opt out of the automated decision-making process at any time.

You may do so by contacting us using the methods outlined in Section 14 of this Privacy Policy.

6. Source from Which Personal Data Originate

Only personal data provided in compliance with this Privacy Policy will be processed. In relation to the processing of personal data for the purposes of providing highly targeted services through profiling, such data may be correlated to derive further personalized information. Data collected from public sources will not be processed.

7. Recipients or Categories of Recipients of Your Personal Data

We only share your personal information with third parties as described below. We do not sell personal information to third parties.

The following may be recipients of the personal data:

Communication companies that provide commercial communication activities on behalf of Dear Me, which are responsible for processing if consent has been given for marketing purposes
Companies belonging to the information society, such as those providing web hosting services
Companies performing statistical and market inquiries, if consent has been given for marketing purposes
Companies that perform account and payment services
Partner companies of Dear Me
Companies offering shipping services of the products purchased through Dear Me’s E-commerce
All persons to whom the right of access to such data is recognized under applicable laws or regulations

Third-Party Sites and Social Media Plug-ins

This Privacy Policy does not apply to third-party websites that do not link to this Privacy Policy, or to third-party websites to which our Digital Services may link.

Our Digital Services may use social media plug-ins (e.g., the Facebook “Like” button, “Share to Twitter” button) to enable you to easily share information with others. When you visit our Digital Services, the operator of the social plug-in can place a cookie on your computer or other electronic device that enables that operator to recognize individuals who have previously visited our Digital Services.

If you are logged into the social media website (e.g., Facebook, Twitter) while browsing our Digital Services, the social media plug-in allows that platform to receive information that you have visited our site. It may also allow the platform to share your activity with other users of that site.

These sharing settings are managed by the respective social media platform and governed by its own privacy policy.

8. Categories of Personal Data

Dear Me will process only the personal data you provide directly. We do not collect or handle sensitive categories of personal data, such as health information, biometric data, or data related to race, religion, or sexual orientation.

9. Transfer of Personal Data

Dear Me may share personal data with service providers located in different regions,
including outside your state or jurisdiction, where necessary to fulfill services such as:

Communication and marketing activities
Web hosting and cloud storage services
Customer support or analytics tools

All such transfers will be made in accordance with applicable U.S. privacy laws and
with appropriate safeguards in place to protect your personal information.

Dear Me is based in the United States. If you are located in another country,
please be aware that your personal information may be transferred to, stored in,
or processed in the United States, where our servers and systems are located.

If you would like to know more about how and where your personal data may be transferred or stored,
you may contact us at:
hello@dearme.us

10. Data Security

Dear Me maintains reasonable technical, administrative, and physical safeguards to secure any personal information collected through our Digital Services. However, there is always some risk that an unauthorized third party could intercept an internet transmission or find a way to bypass our security systems.

We urge you to exercise caution when transmitting personal information over the internet, especially financial or sensitive information. Dear Me cannot guarantee that unauthorized third parties will never gain access to your personal information. Therefore, when submitting personal information through our Digital Services, you should carefully consider both the benefits and potential risks.

11. Children’s Privacy

Dear Me does not knowingly collect or use any personal information directly from children through our Digital Services (Dear Me defines “children” as minors under the age of 18). We do not knowingly allow children to order our products, to communicate with us, or to use any of our online services.

If you are a parent or legal guardian and become aware that your child has provided us with personal information, please contact us using one of the methods specified below, and we will take appropriate steps to address the issue.

12. Personal Data Retention Period

Personal data processed and stored for the purposes under Section 3(a) are retained for no longer than 10 years from the termination of the contractual relationship, unless otherwise required by law.

Personal data processed and stored for the purposes under Section 3(b) (marketing purposes) are retained until you request erasure and/or revoke your consent.

Personal data processed for the purposes set forth in Section 3(c) (preference determination purposes) are retained by Dear Me for a period not exceeding 12 months from the date of collection.

Personal data processed and stored for the purposes under Section 3(d) (fulfillment of legal obligations) are retained for a period not exceeding 10 years following the termination of the contractual relationship, or 10 years following the conclusion of negotiations, unless otherwise required by law.

Dear Me reserves the right, in any case, to request that you renew your consent to the processing and/or verify the consents already expressed.

13. Your Privacy Rights (CCPA)

As a U.S.-based customer of Dear Me, you may have the following rights regarding your personal information, as provided under applicable privacy laws:

Right to Know: You have the right to request that we disclose the personal data we collect, use, share, or sell about you.
Right to Access: You may request a copy of the personal information we have collected about you.
Right to Delete: You have the right to request that we delete your personal data, subject to legal or contractual obligations.
Right to Correct: You may ask us to correct inaccurate personal information we maintain about you.
Right to Opt Out of Marketing: You can opt out of receiving marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us.
Right to Limit Use of Sensitive Information: (If applicable) You may request we limit the use of any sensitive personal information we collect.
Right to Non-Discrimination: We will not deny you products, charge different prices, or provide different levels of service for exercising your rights.

Upon receiving a verifiable request, we will also disclose:

The categories of personal information we collected about you
The sources from which the personal information was collected
The business or commercial purposes for collecting or sharing your data
The categories of third parties with whom we share personal information
The specific pieces of personal information we collected about you (data portability)
Whether we disclosed your personal data and to whom

To exercise any of these rights, or to make a privacy-related request, please contact us using the information provided in Section 14 of this Privacy Policy. We may need to verify your identity before responding to certain requests.

We extend these rights, where technically feasible, to all users regardless of where they reside.

14. How to Contact Us with Privacy Concerns

If you would like to exercise any of the rights outlined in this Privacy Policy or have questions or concerns regarding the handling of your personal information, you may contact us at:

Email: hello@dearme.us

We may request verification of your identity before responding to certain requests. If you are unsatisfied with our response, you may also contact your local consumer protection authority.

15. Accessibility of Privacy Policy

This Privacy Policy is accessible at any time on our website. Upon request, we can also provide this information orally, as long as the identity of the requester can be verified — such as through a phone call or other reasonable method.

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on our website with a new effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Digital Services after any changes are posted constitutes your acceptance of those changes.

16. Non-Discrimination

We will not discriminate against you for exercising any of your rights under this Privacy Policy and applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA). Unless permitted by law, we will not:

Deny you goods or services, or provide you a different level or quality of goods or services
Suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services
Charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties