Last modified: 12/23/2022

Spacemilk, Inc. ("Company", "we", or "us") respects your privacy. We are committed to protecting it through our compliance with this policy ("Privacy Policy"). This Privacy Policy describes the types of information we may collect from you or that you may provide when you access our Website or purchase our Products, including any content, functionality, and services offered on the Website (collectively, the "Service"), our practices for collecting, using, maintaining, protecting, and disclosing that information, and the choices available to you regarding our use of your personal information and how you can access and update this information. 

By visiting or using our Service, you consent to the information handling practices described in this Privacy Policy. Your use of our Service and any information you provide on our Service are subject to this Privacy Policy, which is incorporated into and subject to our Terms of Service. Any capitalized terms used but not defined within this Privacy Policy have the meaning given to them in our Terms of Service.

If you do not agree with our policies and practices, your choice is not to use the Service. This Privacy Policy may change from time to time and your continued use of the Service after we make changes is deemed to be acceptance of those changes, so you should check the Privacy Policy periodically for updates.  

Information We Collect About You and How We Collect It

You can use many features of the Service without providing personal information. If you communicate with us through the Service or purchase our Products, you may provide to us what is generally deemed “Personal Information” or “Personal Data”, which includes information that can be used to identify you. Information which cannot be used to identify you as an individual is “de-identified” or non-personal information. 

Information you provide to us

We collect information in multiple ways including when you provide information directly to us, fill out forms through the Service, when you post information on or through the Service, when you purchase Products, when you permit third parties to provide information to us, and when we passively collect information from you, such as information collected from your browser or device. This information includes:

• The information provided at the time of creating an Account, purchasing a Subscription, paying for Products, or requesting further services. We may also ask you for information when you report a problem with our Service or enroll in electronic newsletters and promotional emails.
• Contact and personal information, including your name, email address, phone number, mailing address, and date of birth;
• Commercial information, such as records of products you have purchased or considered purchasing from us, and records of your purchase histories or tendencies;
• Demographic information (e.g., gender, age, race or ethnic origin);
• User Content, Feedback, information that you submit to us, including audio data, such as audio recordings if you call our customer service, or audio, electronic, visual, or similar information, including a picture or video you might post on our Website as part of a product review;
• Geolocation data, including location information of Your device (inferred from Your IP address, not precise GPS coordinate locations);
• Network information, including IP addresses, cookie IDs;
• Non-personal information which may be linked to your Personal Information;
• In certain circumstances, credit card or payment account information and/or identity verification information; and
• Professional or employment-related information, such as your current or past job history, if you are applying for a job with us.

This list is illustrative, not exhaustive; the Privacy Policy applies to all use of the Service. We may also ask you for information when you report a problem with the Service. We also collect information from records and copies of your correspondence (including email addresses) if you contact us. 

You also may provide or make available information to other users. Such information is transmitted to other users at your own risk. We cannot control the actions of other users with whom you may choose to share your information. Therefore, when you transmit information to other users, we cannot and do not guarantee that your information will not be viewed by unauthorized persons.

Information We Collect Through Automatic Data Collection Technologies  

As you navigate through and interact with the Service, we use or may use automatic data collection technologies to collect certain information about your equipment, usage details, browsing actions, and patterns, including details of your visits to the Service, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Service, and information about your computer and internet connection, including your IP address, operating system, and browser type. The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties.

The technologies we use for this automatic data collection may include:

• Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of the Service. 
• Flash Cookies. Certain features of the Service may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from, and on the Service. Flash cookies are not managed by the same browser settings as are used for browser cookies.
• Web Beacons. Pages of the Service may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity). 
• Usage Details. When you access and use our Website, we may automatically collect certain details of your access to and use of the Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on or through the Website.
• Device Information. We may collect information about your mobile device and internet connection, including the device's unique device identifier, IP address, operating system, browser type, mobile network information, and the device's telephone number.
• Location Information. The Website may collect information about the location of your device. 

For more information about how we use and disclose your information, see Section II-IV below.

Third-Party Use of Cookies and Other Tracking Technologies

Automatic data collection may be performed on our behalf by our services providers. If third parties provide such analytics services and software, the third parties may also receive the information collected and their use of such information is governed by their privacy policies. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. 

How We Use Your Information

We use the information that we collect in the following ways:

• To provide you with the Service, fulfill your orders for Products, and establish your Account.
• To provide you with information about our products and services, including order-tracking information and promotional information.
• To maintain subscription programs and giveaway, loyalty, and rewards programs.
• To answer your questions or requests for information, for customer support, or handle your complaints, and to provide you with information, products, or services that you request from us.
• To ensure that content provided by the Service is presented in the most effective manner for you and for your computer or other device.
• To provide you with promotional communications, such as email, to the extent that you have provided consent to receive such communications under applicable law, and to serve our advertisements to you through third party platforms, to the extent that you have provided consent for such uses under applicable law.
• To address fraud or safety concerns, to confirm your identity, or to investigate complaints or suspected fraud or wrongdoing.
• To allow you to participate in interactive features of the Service when you choose to do so.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• With your consent, to contact you by text message regarding certain services or information you have requested and with your consent, to contact you by telephone or text message regarding Service features, improvements, or other products and services that may interest you
• To notify you about changes to the Service or any products or services we offer or provide though it.
• In any other way we may describe when you provide the information and to fulfill any other purpose for which you provide it.
• For any other purpose with your consent.

We may also use your information to improve the Service, and we may use cookies and other information to enable us to customize your user experience.

How We Share, Transfer, or Disclosure Your Information

We may share information as discussed below, but we won’t sell it to advertisers or other third parties.

1. Others working for us or with us. We may disclose personal information that we collect or you provide as described in this Privacy Policy to third parties that we use to support our business and Service, such as to maintain databases, host services, process or collect payments, fulfill orders, market and advertise, fulfill services you request through our Service, provide our Services, verify identities, and administer the Service. These third parties are not authorized by us to use any of your personal information except as needed to perform the specific functions we engage them to perform. We may also share information with our employees and contractors; such parties are contractually obligated to maintain the security and confidentiality of that personal information.
2. Aggregated information. We may disclose aggregated information about users, and information that has been de-identified, without restriction. This may be for product development, research, analytics and other purposes, including for the purpose of analyzing, improving, or marketing the Service.
3. We may share data in the context of a change of business, including a merger or acquisition. We may disclose and transfer any information we collect about you to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, or to fulfill the purpose for which you provide it.
4. Other Instances. We may disclose and transfer any information we collect about you to comply with any court order, law, or legal process, including to respond to any government or regulatory request, to enforce or apply our Terms of Service and other agreements that you may enter with us, or if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our Company, our customers, others users of the Service, or anyone else that could be harmed by such activities. If you access the Service using a mobile device, your request will be transmitted via your mobile carrier’s network and your carrier may have access to it. Consult your carrier’s privacy policy for additional information.
5. Advertising. We may disclose information we collect about you with third parties in order to serve advertisements on such third party platforms, to the extent that you have consented to such practices under applicable law.

Some of our third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, which include Shopify, Recharge, PayPal, Google Pay, and Apple Pay, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. We are not responsible for any data breach or misuse of data by any of our third-party service providers.

Choices About How We Use and Disclose Your Information

We use personal information as needed for the purposes for which it was collected or where you have consented to our use of your personal information. If you discover that personal information or other data pertaining to you is inaccurate, incomplete, or out-of-date, please contact us as outlined below.

You may always decline to provide us with your personal information. The provision of personal information is not required to access all of our services, features, and content. However, we will not be able to provide you with certain services, features, and content without your provision of personal information. You can also set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Service may then be inaccessible or not function properly.

You may opt-out of having your personal information used for commercial purposes by the Company. If you wish to stop receiving promotional emails from us, you may do so by emailing contact@spacemilk.com. Please include the contact information that you want removed from our promotional contacts list. If you receive an online newsletter or similar promotional email communication from us, you will be given the option to “unsubscribe” from receiving further email communications from us by following the instructions in the bottom of the email. Your option not to receive promotional and marketing material from us will not preclude us from corresponding with you, by email or otherwise, regarding your existing or past business relationships with us, and will not preclude us from accessing and viewing your personal information in the course of maintaining and improving the Service.

Data Retention

To request deletion of your personal information, please send a deletion request to contact@spacemilk.com. However, we may not be able to delete data in all instances, such as information retained in technical support logs and other necessary business records. We will not be required to delete any information which has been de-identified or disassociated with personal identifiers such that it can no longer be used to reasonably identify a particular individual. Unless we receive a deletion request, we will retain your information for as long as is reasonably useful for operational purposes. For example, we may retain certain data as necessary to prevent fraud or future abuse, for recordkeeping or other legitimate business purposes, or if required by law. We may also retain information which has been de-identified or aggregated such that it can no longer reasonably identify a particular individual. All retained personal information will remain subject to the terms of this Privacy Policy.

Data Security

We try to ensure that our Service and information sent to us are safe, but no security measures are perfect. We have implemented reasonable measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your information, we cannot guarantee the security of your personal information transmitted to the Service. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Service. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of the Service, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. All direct payment gateways utilized by us adhere to the Payment Card Industry Data Security Standard (PCI-DSS). The PCI-DSS was created and is enforced by the Payment Card Industry Security Standards Council, which is a joint effort of payment card brands like Visa, MasterCard, American Express and Discover.

Children Under the Age of 16

The Service is not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Service. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on the Service or through any of its features, register on the Service, use any of the interactive features of the Service, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at contact@spacemilk.com.

Important Notice to Non-U.S. Residents

The Service is operated in the United States. If you choose to use our Service from the European Union or other regions of the world with laws governing data collection and use that differ from the United States, then you agree and acknowledge that any information you provide to us will be transferred to the United States for purposes of performing the Service according to our Terms of Service and for any other purpose for which you provide explicit, informed consent. By providing us with any information through the Service, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States in which the privacy laws may not be as comprehensive as or equivalent to those in the country where you reside or are a citizen.

Notice to Nevada, Colorado, Virginia, and Utah Residents

If you are Nevada, Colorado, Virginia, or Utah resident, your state's laws may provide you with additional rights regarding our use of your personal information.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to this designated address: contact@spacemilk.com. However, please know we do not currently sell data triggering that statute's opt-out requirements.

Colorado, Virginia, and Utah each provide their state residents with rights to:

• Confirm whether we process their personal information.
• Access and delete certain personal information.
• Data portability.
• Opt-out of personal data processing for targeted advertising and sales.

Colorado and Virginia also provide their state residents with rights to:

• Correct inaccuracies in their personal information, taking into account the information's nature processing purpose.
• Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

To exercise any of these rights, please send your request to this designated address: contact@spacemilk.com. To appeal a decision regarding a consumer rights request, please contact this designated address: contact@spacemilk.com.

Links to Other Sites

The Service may link to and may be linked by websites operated by other entities or individuals. Some of these websites may be co-branded with our name or logo. This Privacy Policy does not apply to, and we cannot always control the activities of, such other third-party websites. You should consult the respective privacy policies of those third-party websites.

Changes to Our Privacy Policy

We reserve the right to change or replace this Privacy Policy at our sole discretion at any time. Such changes, modifications, additions, or deletions shall be effective immediately upon posting unless otherwise indicated. Your continued use of the Service after changes are posted will be deemed to constitute your agreement to and acceptance of such changes, and we may treat information collected through the Service in accordance with the revised Privacy Policy, including information we have collected at a prior time when a previous version of this privacy policy was in effect. If you do not consent to our privacy practices as described in the revised version of the Privacy Policy, do not use the Service in any manner, and we will continue to treat previously collected information in accordance with the privacy practices described in the applicable, prior version of this Privacy Policy or as otherwise required by applicable law.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at: contact@spacemilk.com.

CCPA Addendum

Last modified: Dec 23, 2022

This California Consumer Privacy Act (“CCPA”) Addendum for California residents supplements the information contained in the above Privacy Policy and applies solely to all visitors, users and others who reside in the State of California. We adopt this CCPA Addendum to comply with the CCPA, and any terms defined in the CCPA have the same meaning when used in this Addendum. Capitalized terms not defined in this Policy will have the meaning set forth in our general Privacy Policy or Term of Use.

Information We Collect

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("Personal Information"). Personal Information does not include publicly available information from government records, or de-identified or aggregated consumer information that cannot be reasonably linked to you. 

To provide our Services, we must process information about you, including personal information, whether or not you are registered or logged in. Subject to the limitations we describe in our Privacy Policy, we may share your personal information for business purposes with strict restrictions on how our partners can use and disclose the data we provide, at your direction, or in ways otherwise in accordance with the CCPA. We don’t sell any of your Personal Information, and we never will.

The best way to learn about the kinds of information we collect and how we use it is to review our Privacy Policy. Here is a summary of the CCPA-related categories of Personal Information we may have collected over the past 12 months:

Category

Examples

Collected

Identifiers.

Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security, or other similar identifiers.

Yes

Protected classification characteristics under California or federal law.

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

Yes

Commercial information.

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Yes

Biometric information.

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

Yes

Internet or other similar network activity.

Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.

Yes

Geolocation data.

Physical location or movements. 

Yes

Sensory data.

Audio, electronic, visual, thermal, olfactory, or similar information.

Yes

Professional or employment-related information.

Current or past job history or performance evaluations.

Yes

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. 

No

Inferences drawn from other personal information.

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

No

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

Yes

Specific types of personal information we collect are described more fully in section 1 of the Privacy Policy. Personal information does not include: (1) deidentified or aggregated consumer information; (2) publicly available information from government records; or (3) information excluded from the CCPA’s scope.

Use of Personal Information

We obtain the categories of personal information listed above:

• Directly from you. For example, from forms you complete or when you contact us directly.
• Indirectly from you. For example, from observing your actions on the Service.
• From automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including details of your visits to the Service, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Service, and information about your computer and internet connection, including your IP address, operating system, and browser type

We may use or disclose the personal information we collect for the purposes described in Section 2 of the Privacy Policy. 

Sharing Personal Information

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We share your personal information with our service providers for business purposes that help us provide, improve, protect, and promote our Services. Specific examples of such sharing activities can be found in sections 2 and 3 of the Privacy Policy. In the preceding twelve (12) months, the Company has not sold personal information.

Your Rights and Choices 

The CCPA provides you (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
• sales, identifying the personal information categories that each category of recipient purchased; and 
• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained. 

Deletion Request Rights 

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. 

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to: 

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We do not provide these deletion rights for B2B personal information.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either: 

• Emailing us at contact@spacemilk.com.
• Visiting https://spacemilk-smk.myshopify.com/pages/contact-us 

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. 

Response Timing and Format

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. 

Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. 

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not deny you services or provide you a different level or quality of services. 

Other California Privacy Rights

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of the Service that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to contact@spacemilk.com, or write us at: Spacemilk, Inc. 8 The Green, Suite 5408, Dover DE 19901.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Service and update the notice's effective date. Your continued use of the Service following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which we collect and use your information described here and in the general Privacy Policy, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: contact@spacemilk.com

Postal Address: Spacemilk, Inc. 8 The Green, Suite 5408, Dover DE 19901.

Website: https://spacemilk-smk.myshopify.com/pages/contact-us