Privacy policy

This Privacy Policy describes how "Yes I Need It" collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.


CONTACT

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at yesineedit2024@gmail.com

HOW DO WE USE YOUR DATA? 

By registering as a User, the User authorizes EXOTICGREEN to use the personally identifiable information provided to: 

  • Offer the features and functionality of the website; 
  • Satisfy the requests for products and services made by the User; 
  • Pay for income obtained with EXOTICGREEN (commissioning model); 
  • Communicate with the User about the status of their orders and other requests for information related to our products and services; 
  • Send the User information about our products and services; 
  • EXOTICGREEN's internal business purposes, such as data analysis, auditing, etc; 
  • Help EXOTICGREEN to create more relevant content for the User; 
  • Inform the User about the results of sweepstakes, contests and other promotions; 

EXOTICGREEN uses the email address provided by You to communicate with You about Your account and to send certain warning messages, as well as to send marketing messages and notifications from time to time. You can unsubscribe from the communications in your account by clicking on the unsubscribe link included in the footer of all EXOTICGREEN emails. 

By unsubscribing from EXOTICGREEN's communications, you will no longer receive all of our information about our products and services, the results of our sweepstakes, contests and promotions, but you may temporarily continue to receive emails regarding your customer account with EXOTICGREEN. This feature is being reviewed and soon, as soon as you unsubscribe you will no longer receive any communication from EXOTICGREEN. 

EXOTICGREEN users can refer friends/family to receive communications from EXOTICGREEN. EXOTICGREEN reserves the right to use the referenced data provided by the referrer for marketing purposes, unless otherwise authorized. 

We will use non-personally identifiable information to monitor the use and performance of the website in order to learn more about how people use the website and thereby improve our products and services and significantly improve the user experience on our website. 

PERSONAL DATA STORAGE AND PROCESSING 

Where and why do we store your personal data? 

EXOTICGREEN processes and stores data in Portugal for back-up and recovery purposes or to enable EXOTICGREEN to offer the User certain services. Depending on where the User is located, Portugal may not have data protection laws that provide an equivalent level of protection to the laws in your home country or jurisdiction. By using the website and providing EXOTICGREEN with its personal data, the User is consenting to the transfer and processing of its personal data in jurisdictions outside of its home country or jurisdiction. 

On what grounds can EXOTICGREEN treat your personal data? 

In general, the personal data collected is intended for the management of the contractual relationship, the provision of the contracted services, the adequacy of our services to your needs and interests, and so that we can inform you about our events and our services/products. 

The processing of personal data must have a basis that legitimises such processing, which may be, among others: 

  • Consent: when you have your express consent - in writing, orally or through the validation of an option - and prior consent and if that consent is free, informed, specific and unambiguous. Examples are your consent to send direct marketing messages; profiling; call recording; 
  • Contract performance and pre-contractual due diligence: where the processing of personal data is necessary for the conclusion, performance and management of the contract concluded with EXOTICGREEN, such as for the use of the website, requests for information, preparation of service proposals, provision of services, contact/replaints management, invoicing/ collection/payments; 
  • Compliance with legal obligations: where the processing of personal data is necessary to comply with a legal obligation to which the EXOTICGREEN is subject, such as the communication of data to law enforcement, judicial, fiscal or regulatory bodies; 
  • Legitimate interest: where the processing of personal data corresponds to a legitimate interest of the EXOTICGREEN or of third parties, such as improvement of quality of service, detection of fraud, where the reasons for its use must prevail over the rights of the data subject. 

How long do we store your personal data? 

We process and store your personal data to the extent necessary for the fulfilment of our contractual and legal obligations. We keep your data only for as long as is necessary for the purpose for which it was collected. 

But where there is no specific legal obligation, then the data will only be processed for the period necessary to fulfil the purposes for which they were collected and preserved and always in accordance with the law. 

EXOTICGREEN may keep other personal data for longer than the duration of the contractual relationship, either on the basis of your consent, or to secure rights or duties related to the contract, or because you have legitimate interests on which to base it, but always for the period strictly necessary for the fulfilment of the respective purposes and in accordance with the law.

 

SHARING OF PERSONAL DATA  

With whom do we share your personal information? 

As a rule, EXOTICGREEN does not share personal data about you with other persons or non-affiliated companies without your consent. However, EXOTICGREEN provides data to its agents and its service providers and other trusted service providers for limited purposes, such as: 

  • The fulfillment of customer orders and the processing of credit card transactions; 
  • The offer of certain products and services; 
  • The provision of customer support services; 
  • The management of information on our behalf; 
  • The improvement of the characteristics and functionalities of the website. 

In such cases, we require that these persons undertake to use the data solely for the purposes for which we provide it and in accordance with our privacy policy. Partners are legally and contractually bound to respect EXOTICGREEN's privacy policy. 

By registering on the Website, by registering for a promotion (e.g. a sweepstakes or contest) or a service that we provide together with a third party, You agree that we may provide data (such as Your name, email address and account activity) to such third parties, provided that it is duly authorised by You. 

EXOTICGREEN provides its vendors with the first name and city/district/country of residence of EXOTICGREEN customers who have purchased EXOTICGREEN products from that vendor. EXOTICGREEN may also disclose customer data (including the User's name, addresses, telephone number and account activity) whenever, in its sole discretion, it determines that such disclosure is necessary or appropriate for: 

  • Comply with the law; 
  • Comply with subpoenas, warrants, court orders, government inquiries or other judicial acts; 
  • Enforce or enforce the terms of any of our User or license agreements; 
  • Investigate or respond to allegations of fraud, intellectual property infringement or other illegal activities; 
  • Conduct investigations in cases of fraud or similar allegations; 
  • Protect the rights, property or safety of EXOTICGREEN and our Users, or third parties; 
  • Protect EXOTICGREEN operations; 
  • Allow EXOTICGREEN to trigger the available remedies or limit the damage it may incur; 

You can access third party websites directly from our website. However, this privacy policy does not apply when the User accesses third party websites. EXOTICGREEN cannot control how third parties use the personal data that you disclose to them, so you should carefully read the privacy policy of the third party website you visit before using it or disclosing your personal data to your service provider. 

Within EXOTICGREEN, employees who need their data to comply with contractual/pre-contractual and legal obligations have access to your data. 

EXOTICGREEN may also process data outside the U.S., where data protection laws may offer less protection than in the U.S.. However, you will use the security mechanisms described below. 

In addition, it is possible that in the future another company may acquire EXOTICGREEN or its assets or that EXOTICGREEN may partner with or purchase another company to continue to do business as a combined entity. In the event that any such transaction occurs, it is possible that the User information, including its personal data, may be transferred to the new business entity as one of EXOTICGREEN’s assets. In such an event, EXOTICGREEN will update this policy to reflect any change in ownership or control of your Personal Information. 

GDPR


If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information above. [OR INSERT ALTERNATIVE INSTRUCTIONS FOR SENDING ACCESS, ERASURE, CORRECTION, AND PORTABILITY REQUESTS]
Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.
[INCLUDE FOLLOWING SECTION IF YOUR BUSINESS IS SUBJECT TO THE CALIFORNIA CONSUMER PRIVACY ACT]

CCPA Personal Information Collection Disclosure Notice 


If you are a California resident, the CCPA requires us to notify you of the CCPA defined categories of personal information that we disclose to third parties for a variety of business purposes. In the preceding twelve (12) months, EXOTICGREEN has disclosed the following categories of personal information for a business purpose: 

  • Identifiers 
  • California Customer Records personal information categories 
  • Commercial information 
  • Internet or other similar network activity 
  • Geolocation data 

We disclose your personal information for a business purpose to third-party service providers. In the preceding twelve (12) months, EXOTICGREEN has not sold any personal information.

SAFETY

Every time you open an account on the EXOTICGREEN website, you are asked to choose a password to ensure the protection of your data as well as to enter an email address. A password is only as strong as the User makes it: the User should select a unique password and keep it safe. 

The User is responsible for preserving the confidentiality of his/her password and User account, and is also responsible for all acts performed through the use of his/her password or User account. The User may change his/her password as many times as he/she wishes by following the instructions presented for that purpose in his/her personal area. 

The User undertakes to: 

  1. Immediately notify EXOTICGREEN of any unauthorized use of the User account, or any other breach of security;
  2. Ensure the exit of your User account at the end of each session. 

EXOTICGREEN shall not be liable for any loss or damage arising from the User's failure to comply with this clause. 

How do we keep your personal data secure? 

When you order or access your account information, we use commercially appropriate and generally accepted technical and organisational security measures to protect all the information we collect about you. 

In addition and as mentioned above, the data in the User's EXOTICGREEN account is protected by a password in order to ensure the privacy and security of the User. The User must always take measures to protect the confidentiality of the password he chooses in order to prevent unauthorised access to his password and to his computer. 

The User may choose not to provide EXOTICGREEN with certain information, but this may result in the impossibility of using certain features of our website, as such information may be necessary for the User: 

  1. Register as a member; 
  2. Participate in a contest, promotion, survey or raffle; 
  3. Ask a question; 
  4. Or start other transactions on our website. 

In addition, EXOTICGREEN prevents unauthorized access or disclosure by using a variety of security measures, including encryption and authentication tools, to help protect and maintain the security, integrity and availability of your personal data. We highlight the following measures: 

Physical security measures: 

  • Facility Security: Entry to facilities (including subcontractors) is restricted to workers, and, in exceptional cases, to individuals who are duly authorised by EXOTICGREEN. 
  • Video surveillance cameras, to ensure the physical safety of workers and documents; 
  • There is a data protection policy, enshrined in the EXOTICGREEN Code of Conduct, which applies to all its employees. 
  • Logical safety measures: 
  • The access to computer systems is protected by login and password, with different security levels and that has to be periodically changed; 
  • EXOTICGREEN's entire computer network is protected by antivirus, firewalls and monitoring of installed software; 
  • Use of SSL in the domain; 
  • Use of encryption technology in the collection or transfer of confidential data. 

YOUR RIGHTS AND CHOICES

With respect to the collection of your information, if you do not want your information collected, please do not submit it to us. If you have already submitted information and would like to review, correct or remove it from our records, you can make these changes directly by editing your profile on our Site. If you have any questions or need our assistance to access, correct, or delete your information, please contact us. 

In addition to your other rights described above, you may have additional rights to access, correct or delete your personal information. These rights vary depending on where you reside. But we will make reasonable efforts to honor your request, even if your country or state does not require us to do so. 

Additional Rights for California Residents
If you are a California resident, the CCPA may provide you with additional rights regarding our use of your personal information. This section describes your CCPA rights and explains how to exercise those rights. If you are a resident of California, you have the following additional rights: 

  • Right to Know and Receive Copies of Your Personal Information - You have the right to know certain information about our collection and use of your personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you: 
  • The categories of personal information we collected about you 
  • The categories of sources for the personal information we collected about you 
  • Our business or commercial purpose for collecting or selling that personal information 
  • The categories of third parties with whom we share that personal information 
  • The specific pieces of personal information we collected about you (also called a data portability request) 
  • o If we sold or disclosed your personal information for a business purpose, two separate lists disclosing: 1) sales, identifying the personal information categories that each category of recipient purchased; and 2) disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained 
  • Right to Request We Delete Your Personal Information - You have the right to request that we delete any of your personal information that we collected from you and retained, unless retaining the information is necessary for us or our service provider(s) to: 
  • Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you 
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities 
  • Debug products to identify and repair errors that impair existing intended functionality 
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law 
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.) 
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent 
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us 
  • Comply with a legal obligation 
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it 

To exercise your CCPA rights described above, please submit a verifiable consumer request to us by: 

 

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a twelve (12) months period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative and escribe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. 

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. 

We endeavor to respond to a verifiable consumer request within forty-five (45) days of receiving the request. If we need more time (up to 90 days), we will tell you how much additional time we need and explain the reason in writing. 

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. 

Any disclosures we provide will only cover the twelve (12) months period preceding our receipt of the verifiable consumer request. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. 

We will not discriminate against you, deny you goods or services, charge you a different price, or provide you with a lesser quality of goods or services if you exercise any of your CCPA rights, unless permitted by the CCPA. 

  • Your consent;
  • The performance of the contract between you and the Site;
  • Compliance with our legal obligations;
  • To protect your vital interests;
  • To perform a task carried out in the public interest;
  • For our legitimate interests, which do not override your fundamental rights and freedoms.


PROBLEMS SIGNING IN

EXOTICGREEN’s sign-in process is designed to help protect the User privacy. If the User has trouble signing in to EXOTICGREEN website, it should ensure that it is using its registered e-mail address and/or correct password. If the User is using its registered e-mail address and correct password, and it continues to have trouble signing in to EXOTICGREEN website, it should contact Customer Service.


THIRD-PARTY SITES


Our Site may contain links to websites operated by other companies. We do not share your personal information with those websites and are not responsible for their privacy practices. Once you have left our website, you should check the applicable privacy policy of the third-party website to determine how they will handle any information they collect from you.


UPDATES AND CHANGES TO OUR PRIVACY POLICY

We reserve the right to change, modify, add or remove portions of our Privacy Statement at any time without prior notice. Where appropriate, we may provide advance notice to affected individuals. Please periodically review our Privacy Statement for changes. This version was updated as of the date identified at the top of this page. 

DOUBTS 

If you have any questions relating to this Privacy Policy, as well as about the exercise of the aforementioned rights (for example, about the type of data that is stored, or if you wish to obtain a copy, request the deletion or modification of such data), you should contact us at the email address yesineedit2014@gmail.com 

COOKIES

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

We use the following cookies to optimize your experience on our Site and to provide our services.

[Be sure to check this list against Shopify’s current list of cookies on the merchant storefront: https://www.shopify.com/legal/cookies ]



DO NOT TRACK


Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.