Privacy Policy
Last Updated: June 12, 2023
1. OVERVIEW
We are The Head Shop Rapid City (collectively, “we,” “us,” or “our”). This “Privacy Policy” governs The Head Shop Rapid City online store, offline store, and any service provided thereby, regardless of how distributed, transmitted, published, or broadcast (each, a “Service”) provided by The Head Shop Rapid City with links to this “Privacy Policy”.
We have developed this Privacy Policy to inform you how we collect data through our Services, how we use the collected data, and a user’s rights with respect to the collected data. This Privacy Policy is binding on all those who access, visit and/or use our Services, whether acting as an individual or on behalf of an entity, including you and all persons, entities, or digital engines of any kind that harvest, crawl, index, scrape, spider, or mine digital content by an automated or manual process or otherwise (collectively, “user,” “you,” or “your”).
Please read this Privacy Policy carefully. If you do not agree to be bound by this Privacy Policy, then do not access or use any of our Services. By accessing and/or using a Service, you accept and agree to be bound by this Privacy Policy and our Terms of Use, which is hereby incorporated by reference.
2. INFORMATION WE COLLECT FROM YOU AND HOW WE COLLECT IT
Information We Collect. We collect information about your use of our Service, including but not limited to: your online behavior, your Internet connections, mobile, or other device computer equipment, along with your time of visits, content viewed, and other similar information about traffic and usage, as you navigate through our website. This is “Non-Personal Data,” which does not directly, personally identify you.
We also use “cookies” to enhance your use of our Services. A cookie is information either temporarily or permanently stored in a file on your computer. You can set your browser to reject cookies, but that may limit your use of some convenient features of our Service(s).
Information You Provide, Directly and Indirectly. You may register to use our Services, enter a contest, complete a survey, subscribe to our Services, or respond to communications (e.g., surveys, polls, requests for feedback). We will collect the information you provide to us. This may include your IP address, first and last name(s), demographic information, mailing address, e-mail address, phone number, credit card number, and any other information you provide to us. Such information may also include the geographic location of you and/or your computer, mobile or other device, as well as date/time stamp, IP address, your computer (e.g., the make, model, settings, and specifications, including but not limited to your CPU speed, connection speed, browser type, operating system, and device identifier). While using our Services, you may also transmit your physical location, your demographic information, and other information. All of this is “Personal Data,” which can be used to personally identify you.
Additionally, if you choose to access, visit, and/or use any third party social networking service(s) that may be integrated with our Service, we may receive your Personal Data and other information about you and your computer, mobile, or other device that you have made available to those social networking services, including information about your contacts on those services. For example, some social networking services allow you to push content from our Service to your contacts or to pull information about your contacts so you can connect with them on or through our Service. Some social networking services also will facilitate your registration for our Service or enhance or personalize your experience on our Service. Your decision to use a social networking service in connection with our Service is voluntary. However, you should make sure you are comfortable with the information your third-party social networking services may make available to our Service by visiting those services’ privacy policies and/or modifying your privacy settings directly with those services.
3. HOW WE USE INFORMATION ABOUT YOU
For Legitimate Interests. The Head Shop Rapid City uses information collected by clickstream data collection, web pixels, and cookies to store your preferences, improve website navigation, make other services available to you, compile and analyze aggregate statistics and trends, and otherwise help administer and improve the Services. We may identify you from your Personal Data and merge or co-mingle Personal Data and Non-Personal Data, for any lawful business purpose. Where you provide registration information, cookies can also be used to identify you when you log onto the Services or portions of the Services. Except as otherwise stated, we may use information we collect from you for the legitimate business purpose of providing our Services to you, including, but not limited to:
• To administer the Services
• To help diagnose problems with our servers
• To communicate information to you (e.g., new features, products, or services)
• To check on your account status
• To improve our Services
• To work with our service providers who perform certain business functions or services on our behalf and who are bound by contractual obligations consistent with this Privacy Policy
• To show you content and sponsored messaging based on geographic location information from you and/or your computer, mobile, or other device
• To prevent or investigate fraud (or for risk management purposes), or to comply with a legal obligation, court order, or in order to exercise our legal claims or to defend against legal claims
• To conduct aggregate analysis and develop business intelligence that helps us to enhance, operate, protect, make informed decisions and report on the performances of our Services
• For other purposes identified to you and as requested by you (please note that you have the right to withdraw your consent to such use at any time by contacting us via the information below)
Performance of a Contract. If you have agreed to our terms of use, or other terms of service, and you have purchased merchandise through our online store or at our offline store, or entered into a contest or sweepstakes, we may also use your information:
• To validate your username, e-mail, password, and/or other login credentials
• To respond to your requests
• To provide you with merchandise you have requested
• To notify you of your contest or sweepstakes results
• To send you e-mail supplying you with the most recent service information
• To notify you of any changes to relevant agreements or policies
In each case, we may use third‐party e‐mail providers to deliver these communications to you.
4. SHARING PERSONAL DATA WITH THIRD PARTIES
We may use, transfer, and share your Non-Personal Data, aggregated with other users’ Non-Personal Data, for any lawful business purpose, such as analyzing usage trends and seeking additional customers.
In addition, as our business changes, we may buy or sell various assets. In the event all or a portion of the assets owned or controlled by us are sold, assigned, transferred or acquired by another company, the information from and/or about our Service users may be among the transferred assets.
The Head Shop Rapid City may also share Personal Data it collects with any third party or outside mailing list, in the following circumstances: (a) to satisfy any applicable law, regulation, legal process, subpoena or governmental request; (b) to enforce this Privacy Policy and/or the Terms of Use, including investigation of potential violations thereof; (c) to detect, prevent, or otherwise address fraud, security or technical issues; (d) to respond to claims that contact information (e.g. name, e-mail address, etc.) of a third-party has been posted or transmitted without their consent or as a form of harassment; (e) to protect the rights, property, or personal safety of The Head Shop Rapid City, its users, or the general public; (f) for purposes of health, safety and other matters in the public interest; (g) by virtue of undergoing any change in control, including in connection with Company restructuring, sale or assignment of assets, merger, divestiture, and other changes of control or financial status, in which case we will require the recipient to use such information in accordance with this Privacy Policy; (h) to The Head Shop Rapid City’s affiliates, successors, and agents/representatives (for example, consultants), which are required to treat the information in accordance with this Privacy Policy; or (i) pursuant to your explicit approval prior to the disclosure.
Do not track signals. We honor do not track signals and do not track, or plant cookies, when a Do Not Track (DNT) browser mechanism is in place.
Sharing. At times, we partner with other parties to provide specific services. When the user signs up for these services, we will share names, or other contact information that is necessary for the third party to provide these services. These parties are not allowed to use personally identifiable information except for the purpose of providing these services.
Links. This online store may contain links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Surveys & Contests. From time-to-time our online and/or offline stores may request information via surveys or contests. Participation in these surveys or contests is completely voluntary and you may choose whether to participate and therefore disclose this information. Information requested may include contact information (such as name and email address), and demographic information (such as city and state). Contact information will be used to notify the winners and award prizes. Survey information will be used for the purpose of monitoring or improving the use and satisfaction of our Services.
5. THIRD-PARTY SERVICE PROVIDERS
We use third-party service providers to help us operate our Services, who may collect, store, and/or process the information detailed herein. We allow access to our database by third parties that provide us with services, such as technical maintenance and market research, but only for the purpose of and to the extent necessary to provide those services.
If you choose to purchase merchandise, products, and/or services on or through features on the Service, we may forward your information to third parties for services such as credit card or other payment processing, credit pre-authorization, and address verification. There are also times when you provide information about yourself to us in areas of the Service that may be managed or participated in by third parties. In such cases, the information may be used by us and by such third party(ies), each pursuant to its own policies.
The Head Shop Rapid City uses commercially reasonable efforts to engage with third parties that post a privacy policy governing their collection, processing, and use of Non-Personal Data and Personal Data. While we may seek to require such third parties to follow appropriate privacy policies and will not authorize them to use this information except for the express purpose for which it is provided, you agree that we do not bear any responsibility for any actions or policies of third parties.
Other Third-Party Services. In addition to the applications listed above, we use other third-party services to obtain, track, and store user information. By way of example, we use a third-party software to collect information from your browser and computer device to capture and analyze user behavior on our Service(s). The software allows us to track and monitor such actions as clicks, taps, and scrolling behavior. We will also use additional content or applications on our Service(s) that are served by third parties, including social media websites, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other Internet tracking technologies to collect information about you when you use our Site. We do not control these third parties’ tracking technologies or how they may be used. You can learn more about opting out of third-party vendors’ use(s) of cookies by visiting the “Network Advertising Initiative” website, http://www.networkadvertising.org/choices. You may also visit other websites, such as http://www.aboutads.info, for more information.
6. HOW PERSONAL DATA IS PROTECTED
The Head Shop Rapid City takes reasonable steps online and offline to safeguard the Personal Data that you provide to us, including Secure Sockets Layer (SSL) encrypted connections (HTTPS) to the web site(s) on our Service(s), secure multi-tiered firewalls, and portions of your data may also be encrypted on our storage server for additional security.
Nonetheless, it is common knowledge that transmission of information via the internet is not wholly secure, and we cannot guarantee the security of your Personal Data, or any other information, transmitted to or through any of our Service(s). Any transmission of Personal Data, or other information, is at your own risk. By using our Service(s), you acknowledge and accept these risks. As a result, we cannot guarantee or warrant the security of any information you disclose or transmit to us or that is otherwise provided to us, and we cannot be responsible for the theft, destruction, or inadvertent disclosure of information. Any transmission of information is at your own risk. By using our Service(s), you acknowledge and accept these risks.
Please notify us immediately at info@theheadshoprc.com if you become aware of any unauthorized use of your account or any other breach of Service security or of this Policy. If our security system is breached, we will notify you of the breach only if and to the extent required under applicable law.
7. YOUR CHOICES, ACCESS, AND RIGHTS TO YOUR PERSONAL DATA
You may change, edit, update, or delete the information you provided, when you set up your contact information through our Service(s). You may also request the deletion of this information by sending an e-mail to info@theheadshoprc.com.
In certain jurisdictions, you may also have the following rights and options with regard to accessing, reviewing, correcting, and updating your Personal Data, as well as how we use and disclose your Personal Data:
Right to Access. We respect your right to access and control your information, and we will respond to requests for information and, where applicable, will correct, amend, or delete your Personal Data.
Updating Communications Preferences (Opt-Out) and Unsubscribing. You may choose to receive promotional offers, newsletters, and similar communications from us regarding products and services of The Head Shop Rapid City. You may opt out of receiving such communications from us by communicating your preferences to us at info@theheadshoprc.com, or in the case of e-mails, by following the unsubscribe instructions contained in the applicable e-mail.
Right to Rectify — Correction and Deletion. You have the right to correct or amend your Personal Data if it is inaccurate or requires updating. You may also have the right to request deletion of your Personal Data; however, this is not always possible due to legal requirements and other obligations and factors. Remember that you can update your account information by contacting us at info@theheadshoprc.com.
Right to Erasure / Be Forgotten. You may request that we delete your Personal Data in certain circumstances, such as if holding the Personal Data is no longer necessary or if part of your Right to Object (below).
Fair Information Practices. The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practices Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
• We will notify the users via in site notification within 7 business days
• We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.
CAN SPAM Act. The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
• Provide updates on product transactions.
• Send information and updates pertaining to information requested.
• We may also send you additional information related to your current or past product and/or service.
• Market to our mailing list or continue to send emails to our clients after the original transaction has occurred.
To be in accordance with CANSPAM we agree to the following:
• Identify the message as an advertisement in some reasonable way.
• Include the physical address of our business or site headquarters.
• Monitor third party email marketing services for compliance, if one is used.
• Honor opt-out/unsubscribe requests quickly.
• Allow users to unsubscribe by using the link at the bottom of each email.
If you feel that we are not abiding by this privacy policy, you should contact us immediately via telephone at 605-877-2280 or via Email at info@theheadshoprc.com.
Right to Object. You have the right to object to the use of Personal Data for direct marketing uses, scientific uses, or historical research. If you do not wish to have your Personal Data shared with third parties, contact us as described at the end of this document. If you do not wish to receive future commercial messages from us, simply follow the unsubscribe instructions contained within the message you receive. (But note that you may continue to receive certain communications from us, such as transactional or relationship messages, and/or messages about your account/profile.)
Right to Restrict Processing. You have the right to request that we stop processing your Personal Data.
Right to Data Portability. You have the right to request that we provide your Personal Data for the purpose of sharing it with another service provider (through a secure process).
Filing a Complaint. If you are not satisfied with how we manage your Personal Data, you have the right to make a complaint to a data protection regulator.
8. RETENTION
We will retain Personal Data for the period necessary to fulfill the lawful purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.
9. ACCESS FROM OUTSIDE THE UNITED STATES
If you are visiting the Services from outside the United States, please be aware that Personal and Non-Personal Data is transferred to, stored in, and processed in the United States.
10. DATA PROTECTION
If you have an inquiry regarding your Personal Data, pursuant to the rights listed in the preceding sections (above), please send your message to the following:
The Head Shop Rapid City
1302 E. St. Patrick Street, Suite 104
Rapid City, SD 57701
E-mail: info@theheadshoprc.com
11. LINKS TO THIRD PARTY SITES
Our Service(s) may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. Such links do not constitute an endorsement by The Head Shop Rapid City of those other websites, their content or services, or the persons or entities associated with those websites. This Privacy Policy does not apply to third-party websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies and terms of all third-party websites or services that you may visit.
12. APPLICABILITY OF THE CHILDREN’S ONLINE PRIVACY PROTECTION ACT
We do not sell products or services for purchase by anyone under the age of twenty-one (21). In accordance with the Children’s Online Privacy Protection Act (“COPPA”), we will never knowingly request or solicit Personal Data from anyone under the age of twenty-one (21) without verifiable parental consent. In the event that we receive actual knowledge that we have collected such Personal Data without the requisite and verifiable parental consent, we will delete that information from our database as quickly as is practical. We reserve the right to request proof of age at any stage so that we can verify that minors are not using the Service(s).
13. CHANGES TO THE PRIVACY POLICY
As stated above, we will make changes to this Privacy Policy from time to time. It is our custom to provide notification on this page when we make material changes. The date that this Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring that you periodically visit our site(s) or Service(s) and this Privacy Policy to check for any changes.
14. CONTACT INFORMATION
If you have any questions or comments concerning this Privacy Policy, you may contact our representative(s) at:
The Head Shop Rapid City
1302 E. St. Patrick Street, Suite 104
Rapid City, SD 57701
E-mail: info@theheadshoprc.com