Privacy Policy

Last updated on September 14, 2024

DiginYall (“we”, “our”, “us”, or “DiginYall”) is committed to respecting your privacy and protecting your personal data in accordance with data privacy laws. This Privacy Policy outlines how we collect, use, and process any personal data that we collect from you—or you provide to us—in connection with your use of our website (www.diginyall.com) or our print-on-demand services (collectively, “Services”). By accessing or using our Services, you signify your understanding of the terms set out in this Privacy Policy.

If you are a resident of the United Kingdom or the European Economic Area, please see Additional Disclosure for European Residents below.

If you are a California resident, please see Additional Disclosures for California Residents below.

If you are a resident of Colorado, Connecticut, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, or any other state that enacts a materially similar privacy law, please see Additional Disclosures for Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents below.

We do not knowingly collect, maintain, disclose, or sell personal information about users under the age of eighteen (18). If you are under the age of 18, please do not use our Services. If you are under the age of 18 and have used our Services, please contact us at the email address below so that we may delete your personal information.

1. Background

DiginYall provides Services both directly to end users and through our print-on-demand services provider Printful..

• Users: If you use our Services for personal use, you are considered a “User” for the purpose of Data Protection Laws, and we are the data “controller” or covered “business” as such terms are defined in applicable Data Protection Laws.

The term “Data Protection Law(s)” includes any applicable data privacy or security law, including but not limited to the General Data Protection Regulation (“GDPR”), the UK General Data Protection Regulation, the California Consumer Protection Act, and other state-specific privacy laws.

2. Information Collected About Users and How We Use It

Identifiers: Includes your name, postal address, shipping address, email address, and telephone number.

Payment Information: Includes billing and payment details (including the first and last digits of your payment card).

Device and Unique Identifiers: Includes internet or electronic network activity information, such as IP addresses, the device and browser you use, referring pages, time stamps, and cookies.

Geolocation Data: Includes non-precise location information based on your IP address.

Audio Information: Includes recorded phone calls, as allowed under applicable law.

Government Issued Identification: Includes images and data on government-issued identity documents.

Content: Includes communications with us and any content you provide, such as social media profiles, images, videos, survey responses, comments, reviews, and testimonials.

3. How We Collect Your Data

Directly from You: We collect personal information you provide, such as when you make a purchase, register for an account, register for a giveaway, or engage in direct communication with us.

Using Online Tracking Technologies and Other Automatic Data Collection Technologies: We use cookies and similar technologies to collect certain information when you visit our website or interact with our advertisements.

From Social Media Platforms and Networks: We collect information from social media interactions and features.

From Other Sources: We may obtain information from data analytics providers, marketing services, and publicly available sources.

4. How We Use Your Data

Providing Our Services: We use your data to fulfill our contract with you, provide customer support, and operate your account.

Legal Obligations: We may request data to comply with legal requirements, sanctions, or to establish and exercise our rights.

Consent: We collect specific information based on your consent for purposes such as subscribing to our newsletter.

Conduct Analytics and Personalization: We use data to conduct research, improve our Services, and provide personalized recommendations.

Communications with You: We use your data to respond to requests, provide customer service, and monitor communication quality.

Security and Fraud Prevention: We use data to detect, investigate, and prevent malicious or fraudulent activities.

Improving the Services and Developing Other Products: We use technical information to improve our Services and develop new products.

Marketing and Advertising: We use your information to send marketing communications and show relevant advertisements.

5. Information Collected About Our Merchant’s Customers

In providing services on behalf of Merchants, we collect certain information about their customers, including personal data related to the use of our Services. Merchants are the data controllers for this data.

6. Sharing Personal Data With Third Parties

We share information with third parties who perform services on our behalf, including:

• Service Providers: Hosting, manufacturing, email service, and payment processors.
• Analytic and Digital Marketing Providers: For web analytics and online marketing.
• Legal Advisors and Business Transfers: To comply with legal requirements or in business transactions.

7. Retention Periods

We retain personal data as long as necessary to fulfill our contractual obligations, comply with legal requirements, and resolve disputes. We may store anonymized or aggregated data as permitted by law.

8. Information Security

We use reasonable organizational, technical, and administrative measures to protect personal data. We encourage you to safeguard your own personal data and use strong passwords.

9. Your Choices In Connection With Our Services

A. Account

You may access, update, or remove certain information that you have provided to us through your account or by sending an email to the address set out in the Contact Information below. We may require additional information from you to allow us to confirm your identity.

Please note that we will retain and use information about you as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

B. Communications

Emails. You can opt-out of receiving promotional emails from DiginYall at any time by following the instructions in the emails to click on the unsubscribe link or by emailing us at the email address set out in the Contact Information below with the word UNSUBSCRIBE in the subject field. Please note that you cannot opt-out of non-promotional emails, such as those about your account, transactions, servicing, or DiginYall’s ongoing business relations.

 

C. Analytics

We use Google Analytics to conduct analytics of our Service. We provide you with the ability to exercise certain controls and choices about how we collect, use, share, and store your information. Google also provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Please note that your opt-out will only apply to the specific browser or device from which you opt-out.

D. Legal Privacy Rights

You may have additional legal privacy rights under certain applicable laws, including but not limited to the California Consumer Privacy Act (CCPA) and other similar laws that may come into effect. For more information about your rights under these respective laws, please see the following sections where applicable:

• Additional Disclosures for European Residents
• Additional Disclosures for California Residents
• Additional Disclosures for Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents

For more information about how to exercise applicable legal rights, please see the section titled “How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws” below.

10. Additional Disclosure for European Residents

If you are a User or data subject related to a Merchant located in the European Economic Area or the United Kingdom, you have certain rights with respect to your personal data in accordance with Data Protection Laws in the European Union and the United Kingdom (collectively, the “GDPR”).

A. Roles

GDPR distinguishes between organizations that process personal data for their own purposes (known as “controllers”) and organizations that process personal data on behalf of other organizations (known as “processors”). As described in the section entitled “Background” above, DiginYall may either be a controller or a processor depending on the circumstances.

• DiginYall as a Controller: We are the data “controller” when we process information directly from Users to provide our Services, such as Users that purchase the respective Services.
• DiginYall as a Processor: We are a processor when we act on behalf of a Merchant to fulfill an order with regard to the Merchant’s customer. In this case, we process information in accordance with our Data Processing Terms on behalf of our customers.

B. Lawful Basis

The GDPR requires a “lawful basis” for processing personal data. Our lawful bases include:

1. You have given consent to the processing for one or more specific purposes, either to DiginYall or to our service providers, partners, or customers;
2. Processing is necessary for the performance of a contract with you;
3. Processing is necessary for compliance with a legal obligation;
4. Processing is necessary for the purposes of the legitimate interests pursued by DiginYall or a third party, provided that your interests and fundamental rights and freedoms do not override those interests.

C. Data Transfers

All the information you provide may be transferred or accessed by our parent company in the United States and our affiliate companies and subsidiaries in other countries for the provision of our Services as described in this Privacy Policy. When we transfer your information globally, we take necessary measures to ensure appropriate protection of your information, including, where applicable, entering into the European Commission’s Model Clauses for the transfer of personal data to third countries (i.e., the standard contractual clauses) and any equivalent clauses issued by the relevant competent authority of the UK.

D. Your Data Subject Rights

If you are a data subject under the GDPR, subject to certain conditions, you have the right to:

• Access, rectify, or erase any personal data we process about you;
• Data portability, meaning the ability to receive your personal data in a structured, commonly used machine-readable format and the ability to transfer such data to another third party of your choice;
• Restrict or object to our processing of personal data;
• Where applicable, withdraw your consent at any time for any data processing.

For more information about how to exercise your legal rights, see the section titled “How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws” below.

GDPR Complaints: If you have a complaint about our use of your personal data or our response to your requests regarding your personal data, please contact:

• DiginYall Data Protection Officer: [email protected]

11. Additional Disclosures for California Residents

All terms and phrases used under this section have the same meaning as those defined under the California Consumer Privacy Act (CCPA) and its implementing regulations.

A. Notice at Collection

To learn more about the categories of personal information we collect about California residents, please see “Information Collected About Users and Merchants” above.

For more information about how we use those categories of personal information, please see “How We Use Your Data” above.

For more information about how we collect categories of personal information, please see “How We Collect Your Data” and our cookies policy.

To learn more about how we disclose categories of personal information and the categories of third parties with whom we disclose such information, please see “Categories of Personal Information Disclosed and Categories of Recipients” below.

To learn more about how long we keep your information, please see “Retention Periods” above.

B. Categories of Personal Information Disclosed and Categories of Recipients

The following disclosure describes the categories of information that we disclose to the categories of recipients of such disclosure. For more information about the third parties we disclose information to, please see “Sharing Personal Data With Third Parties” above.

• Service Providers: The type of data we share depends on the type of service provider.
• Legal Advisors, Legal Process, and Protection: We may disclose any collected information that is required by law.
• Affiliates: We may disclose any of the information mentioned above with our affiliates when necessary.
• Business Customers (i.e., Merchants): We may disclose Identifiers and Commercial Information.

C. Your Legal Rights Under the CCPA

If you are a California resident, the processing of certain personal information may be subject to the CCPA. Where the CCPA applies, this section informs you of your rights as a California resident:

• Right to Know: You have the right to request information about our collection, use, and disclosure of your personal information.
• Right to Access: You have a right to access your personal information that we collected.
• Right to Delete: You have the right to request that we delete personal information, subject to certain exceptions.
• Right to Correct: You have the right to ask us to correct the personal information we have collected about you.
• Right to Opt-Out of Sale or Sharing of Personal Information: You can request that we not sell or share your Personal Information.

These rights may be limited in some circumstances. For more information on how to exercise your legal rights, please see “How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws” below.

D. Notice of Disclosure for a Business Purpose

To learn more about the categories of personal information we have disclosed for a business purpose, and the categories of third parties with whom we’ve disclosed such information, please see the section above titled “How Do We Disclose Your Information?”

E. Notice of Sale

We sell your personal information through the use of certain third-party advertising partners, as well as when we provide your personal information to Merchants. We do not share your personal information. We also do not knowingly sell or share the personal information of any California resident who is 16 years or younger.

F. Notice of Use of Sensitive Personal Information

We do not use sensitive personal information of California residents for any purpose other than as permissible under the California Consumer Privacy Act (CCPA). Specifically, we do not use sensitive personal information of California residents to derive characteristics about California residents.

G. Notice of Financial Incentives

We offer our Users and Merchants certain discount opportunities that may be considered a “financial incentive” or “bona fide loyalty program” under applicable Data Protection Laws (the “Program”). Such a Program may include discounts or coupons provided when you sign up to receive such discounts or coupons, which typically require you to provide your name and contact information (such as email address), or participation in a survey. We consider the value of your personal information to be related to the value of the discounted products or services, or other benefits that you obtain or that are provided in connection with the Program, less the expense we incur offering such opportunities.

You may withdraw from participating in a Program at any time by contacting us using the designated method set forth in the applicable Program rules. Please review any applicable terms and conditions provided in connection with such a Program.

12. Additional Disclosures for Colorado, Connecticut, Delaware, Nevada, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, and Virginia Residents

Under the state laws, including the Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Indiana Consumer Data Protection Act, Iowa Consumer Data Protection Act, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, Virginia Consumer Data Protection Act, and other similar laws that may be enacted in the future (each a “Heightened U.S. Privacy Law”), applicable residents are afforded certain rights regarding the data we have collected about them. This notice describes how we collect, use, and share your Personal Data in our capacity as a “Controller” under such respective Heightened U.S. Privacy Law, and the rights that you have with respect to your Personal Data, including sensitive personal data. For purposes of this section, “Personal Data” and “sensitive data” have the meanings given in the respective Heightened U.S. Privacy Laws and do not include information excluded from such laws.

A. Notice of Collection

To learn more about the categories of personal information we collect about you and how we use it, please see the section above titled “Information Collected About Users and Merchants and How We Use Your Data.” To learn more about the categories of third parties with whom we may share your personal information, please see the section titled “How We Share Personal Data With Third Parties.”

In addition, we may collect and/or use additional types of information after providing notice to you and obtaining your consent to the extent such notice and consent are required by Heightened U.S. Privacy Laws.

B. Your Rights Under Heightened U.S. Privacy Laws

If you are a resident of a state with a Heightened U.S. Privacy Law, the processing of certain personal information about you may be subject to the respective law. Where applicable, this section provides additional privacy disclosures and informs you of key additional rights as a resident of such a state. We will never discriminate against you for exercising your rights, including providing a different level or quality of services or denying goods or services to you when you exercise your rights.

• Right to Access Information/Correct Inaccurate Personal Data: You have the right to request access to Personal Data collected about you, information regarding the purposes for which we collect it, and the third parties and service providers with whom we share it. Additionally, you have the right to correct inaccurate or incomplete Personal Data. You may submit such a request as described below.
• Right to Deletion of Personal Data: You have the right to request that we delete any Personal Data that we have collected directly from you. We may have a reason under the law why we do not have to comply with your request, or why we may comply in a more limited way. If we do, we will explain this in our response.
• Right to Opt-Out of Sale of Personal Data to Third Parties: You have the right to opt out of any sale of your Personal Data by DiginYall to third parties.
• Right to Portability: You have the right to request a copy of the Personal Data that you previously provided to us in a portable format.
• Right to Opt-In to Processing of Sensitive Data: Before we collect and process sensitive personal information, we will obtain your opt-in consent as required under applicable law.
• Right to Opt-Out of Targeted Advertising: You have the right to opt out of Targeted Advertising based on your Personal Data.
• Right to Opt-Out of Profiling: You have the right to opt-out of having your Personal Data processed for the purpose of profiling that results in legal or similarly significant effects concerning you.
• Right to Appeal: If we decline to take action on any request that you submit, you may ask that we reconsider our response by contacting us within 45 days.

These rights may be limited in some circumstances. For more information, please see the section titled “How to Exercise Your Legal Rights Under GDPR, CCPA, or Heightened U.S. Privacy Laws.”

C. Nevada Opt-Out Rights

If you are a Nevada resident, you have the right to submit a request directing us not to sell your personal information. To request email confirmation that we do not sell your personal information, please contact us at [email protected] with “Nevada Opt-Out of Sale” in the subject line.

This policy ensures that DiginYall maintains transparency regarding the collection, use, and sharing of personal data, and complies with various data privacy laws.