Privacy Policy
We encourage You to read this Policy to understand Our policies and practices regarding your information and how We handle it. If You do not wish to accept this Policy, You may choose not to use Our Websites. By accessing or using Our Websites, You acknowledge and agree to this Policy and its terms. We may update this Policy from time to time (see the “ Changes to this Policy” section). Your continued use of Our Websites after updates indicates acceptance of the revised Policy, so please check back periodically for any changes.
PRIVACY POLICY
Last Modified: January 14, 2025
At Hatch Studios, LLC (“ We,” “ Us,” or “ Our”), your privacy and trust matters to Us. We appreciate that you (“ You”) are a part of Our community and We are dedicated to protecting your personal information.
1. This Privacy Policy (this “ Policy”) describes Our practices for collecting, using, maintaining, transmitting, protecting, and disclosing the types of information that We may collect from You or that You may provide when you interact with our Platforms and our practices for collecting, using, maintaining, transmitting, protecting, and disclosing that information.
a. This Policy applies to all information we collect :
(i) when You visit all websites that are owned or operated by Us including fundraising sites, promotional sites, research sites, microsites, and mobile sites, including but not limited to https://www.hatchcollection.com/ (collectively, the “ Websites”);
(ii) when You visit Our official pages on social media sites including but not limited to Facebook, X (formerly Twitter), Instagram, LinkedIn and others (collectively, the “ Social Media Pages”);
(iii) when You visit social media sites with which We interact;
(iv) in e-mail, text, and other electronic messages between You and the Company or through links to the Websites;
(v) through mobile and desktop applications You download from the Websites, which provide dedicated non-browser-based interaction between You and the Websites;
(vi) when You interact with Our advertising and applications, including sweepstakes, contests, or other online promotions on the Websites or on third-party websites and services if those applications or advertising include links to this Policy;
(vii) when You complete a survey or questionnaire; participate in a focus group or other consumer or market research project;
(viii) when You post a product review; send Us any feedback, questions, comments, suggestions, or ideas;
(ix) when You visit one of our brick-and-mortar stores; and
(x) when You shop online.
b. For purposes of this Policy, the term “Platforms” shall mean, collectively, the Websites, the Social Media Pages and all other means by which You may interact with Us pursuant through the actions set forth above.
c. This Policy shall not apply to information collected by any third party (including our affiliates and subsidiaries), including information collected through any application or content that may link to or be accessible from or on the Websites.
2. Websites Covered by This Policy . This Policy applies to the Websites, as well as any and all communications between You and Us via any of the other Platforms. If you have any questions about what is covered in this privacy policy, email us at help@hatchcollection.com.
3. Changes to this Policy.
a. We may update this Policy from time to time. When We make changes to this Policy, We will post the updated policy on this page and update the date at the top. If We make significant changes to how We use your personal information, We will let You know by sending an email to the email address You have provided and/or by posting a notice on Our Websites’ home pages. Please make sure We have your current email address so You can receive these updates. We encourage You to review this Policy regularly. By continuing to use the Websites after We post changes, You agree to the updated policy.
b. PLEASE NOTE THAT FOR CALIFORNIA RESIDENTS THE CALIFORNIA CONSUMER PRIVACY ACT OF 2018 (“ CCPA”) AS REVISED BY THE CALIFORNIA PRIVACY RIGHTS ACT (“ CPRA”), EFFECTIVE AS OF JANUARY 1, 2023, WILL GOVERN OUR USE AND YOUR RIGHTS WITH REGARD TO YOUR PERSONAL INFORMATION. THIS PRIVACY POLICY HAS BEEN UPDATED TO COMPLY WITH THE CPRA AND ITS ASSOCIATED REGULATIONS.
4. Contact Information. You have the right to ask Us about the types of personal information We have shared with other companies, as well as the names of those companies, during the past year. If You would like this information, please email Us at help@hatchcollection.com . Please allow up to thirty (30) day for a response. We value your feedback. If You have any questions, concerns, or suggestions, please email Us, or write to Us at the address below:
Hatch Studios, LLC
225 Bush Street, Ste 1300
San Francisco, California 94104
5. Types of Information We Collect .
a. When you use or interact with Us via the Websites or the other Platforms, We collect several types of information (“ Personal Information”) to help serve You better. The types of information We collect depend on how You interact with Us and the Platforms, and may include:
(i) Personal Details:
This includes information that can identify You, such as your name, e-mail address, phone number, gender, ZIP or postal code.We collect this information when You provide it to Us, and it may be used to contact You online or offline.
(ii)Payment Information:
If You make a purchase from Us, We collect payment details like your credit card number and security code. We use this information to process your order, returns, promotions, contests, or fundraising events. Payment data is securely stored after your account is tokenized, and We may also keep records related to your shopping history and the items You purchase.
(iii) Content You Share: If You submit photos, videos, reviews, or other content to our Platforms, We collect and store that information.
(iv) Aggregated Data: We gather general information about visitors and interactions on our Social Media Pages. This data is combined and does not personally identify You.
(v) Customer Service Records: If You contact Our customer service team by phone, email, text, or chat, We may keep records of those conversations to help resolve your questions and to improve Our services.
b. We collect this information:
(i) directly from You when You provide it to Us;
(ii) automatically as You navigate through or interact with the Platforms, use Our services, or visit a store. Information collected automatically may include usage details, IP addresses, information collected through cookies, and video footage or photographs captured when You are on Our premises.
6. Information You Provide to Us.
a. We collect information that You share with Us when You use or interact with Us via the Platforms. This may include:
(i) information You enter on the Websites, such as when You create an account, place or return an order, post content, request services, enter a contest or promotion, make a donation, or report a problem;
(ii) copies of your communications with Us, including emails and contact details, if You reach out for support or have questions;
(iii) your responses to surveys We may send for research or feedback purposes;
(iv) details about your transactions with Us, including order and payment information. You may need to provide financial details to complete a purchase on the Websites;
(v) your search activity on the Websites;
(vi) information needed to process credit card transactions; and/or
(vii) videos or photos of You if You visit one of Our stores.
b. We may combine information collected online with information We gather in Our stores or through other offline interactions.
c. We may remove details that identify You personally from the information We collect, making it non-personal. We may do this by combining your information with data from others or by using methods that make it impossible to link the information back to You. We treat de-identified information as non-personal to the fullest extent allowed by applicable law.
d. If You post information in public areas of the Websites or share it with other users or third parties (collectively, “ User Contributions”), please remember that We cannot control what other users do with this information. We cannot guarantee that your User Contributions will not be seen by people You did not intend to share them with. Please use caution when sharing information in public spaces.
7. Information We Collect from Other Sources. We receive information about You from other places to help Us provide better services and personalize your experience.
a. Our Family of Brands. Because We are part of the Matri Group, We may get additional information about You from the other brands in Our corporate family.
b. Partners and Services Providers. We may also receive information about You from our trusted partners, such as:
(i) marketing partners, including those We work with for joint promotions, co-branded offers, and data sharing;
(ii) companies that help Us with advertising, analytics, or data services; and
(iii) services providers who help Us with things like fraud preventions, mailing lists, order fulfillment, and shipping.
c. Social Media and Third-Party Platforms. If You interact with Us on social media, for example, by “liking” or “following” any one or more of the Social Media Pages, or if You use your social media or other third-party account to log in or connect with Us, We may receive certain information from those platforms. This can include your profile information, profile picture, user ID, and any other details the platform shares with Us, based on your settings and their policies.
d. We may also collect other personal information when You:
(i) Contact Our customer support team;
(ii) Take part in surveys, contests, or promotions; and
(iii) Interact with Us in person, online, by phone, or by mail to accept Our services or get help.
8. Information We Collect Through Automatic Data Collection Technologies.
a. When You visit and use the Websites, We automatically collect certain information about your device and how You interact with the Websites. This helps Us understand how the Websites are being used and allows Us to improve your experience. We may collect:
(i) Details about your Visits. This includes information like the pages You view, links You click, how long You stay on the given Website, and the resources You access.
(ii) Device and Connection Information. We collect data such as your IP address, browser type, operating system, and information about your internet connection.
b. The information We collect automatically is mainly used for statistical purposes and does not directly identify You. However, We may link this data to other information We have about You or receive from other sources. We use this information to:
(i) Understand how many people visit the Websites and how they use it;
(ii) Remember your preferences to personalize your experience;
(iii) Make your searches faster and easier;
(iv) Recognize You when You return to the Websites;
(v) Help keep the Websites safe and secure, including monitoring for fraud; and
(vi) Show You content and advertising that may be more relevant to You.
c. To make your experience on the Websites better, We use a variety of technologies to automatically collect the information about You, which may include:
(i) Cookies (or browser cookies) . Cookies are small files stored on your computer or device. They help Us remember your preferences, enable website features, and show You relevant ads. You can choose to block cookies by changing your browser settings, but some parts of the Websites may not work properly if You do. You can find more information about cookies and how they work at www.allaboutcookies.org.
(ii) Flash Cookies . features may use flash cookies to remember your preferences and how You navigate the Websites. Flash cookies are managed differently than regular browser cookies. For more information on how to control flash cookies, see the “ Your Privacy Rights” section of this Policy.
(iii) Web Beacons . Web beacons are tiny images or pieces of code on the Websites that help Us count visitors and see how people use the Websites. They help Us understand what content is popular and make sure the Websites are working properly.
(iv) Local Storage (Including HTML5 and Browser Storage) . Your browser may store information locally to help the Websites remember things like what is in your shopping cart or some of your shopping preferences. If You block cookies or local storage, some features may not work.
(v) Embedded Scripts . Embedded scripts are bits of code that run while You are on the Platforms to help Us understand how You interact with the Platforms, such as which links You click. They only work while You are on the Platforms and are removed when You leave.
(vi)JavaScripts . JavaScript helps the Websites work smoothly and quickly. It also helps Us understand how people use different parts of the Websites.
(vii) Entity Tags (ETags) . Entity Tags help your browser remember parts of the Websites, so pages load faster when You come back.
(viii) Resettable Device Identifiers . On mobile devices and tablets, We may use special identifiers (like Apple’s IDFA or Google’s Advertising ID) to show You more relevant ads. You can reset or limit these identifiers in your device settings.
These technologies help Us provide a better, more personalized experience for You. You can control many of these tools through your browser or device settings. For more details on how to manage your privacy choices, please see the “ Your Privacy Rights” section of this Policy.
d. Third-Party Use of Cookies and Other Tracking Technologies .
(i)Some features and content on the Websites are provided by third parties, such as advertisers, ad networks, content providers, and app providers (each, a “ Third-Party Data Collector”). The Third-Party Data Collector may use cookies, web beacons, or similar tracking tools to collect information about You when You use the Websites. This information may be linked to your personal details or your activity across different websites and other online services. A Third-Party Data Collector may use this data to show You ads or content that match your interests.
(ii) We do not control how any Third-Party Data Collector uses tracking technologies or what they do with the information they collect. If You have any questions about a specific ad or targeted content, please contact the Third-Party Data Collector directly.
(iii) We also work with third party companies to help Us with things like advertising, website analytics, order processing, payment services, customer support, and marketing. These companies may use cookies or similar technologies to collect information about how You interact with the Websites and other websites. They may use and share this information to show You ads that are more relevant to You.
(iv) We may share your information with these service providers so they can perform services for Us or for You. Some third parties, like payment providers, may collect and process your information independently according to their own privacy policies. Sometimes, others may share your information with Us, such as when a friend sends You an E-Gift Card or ships an order to your address. If We receive your information from someone else, We will only use it for the specific purpose(s) described in this Policy.
9. Information We Collect Through Video Footage .
a. When You visit a store of Ours, We may collect video recordings and photographs of You that We use:
(i) for security;
(ii) to detect and prevent fraud;
(iii) to prevent product loss or damage;
(iv) to report incidents, and
(v) for operational purposes.
10. Community Forums and User Submissions . We offer features on the Websites, like community forums, reviews, and interactive tools, where You can share information with Us and other users of the Websites.
a. User Submissions . When You post content (like photos, videos, reviews, messages, or other materials) in Our community forums or interactive features, We call these “User Submissions.” By submitting content, You agree to our Terms of Use, located at https://www.hatchcollection.com/pages/terms-of-use, which may include additional rules about what You can post. Some features, such as user reviews, may be managed by third parties, and their privacy policies and terms will also apply.
b. Public Information Please remember that anything You post in public areas of the Websites, such as your name, location, or other details, may be visible to others. Other users can see, use, or share your posts. We are not responsible for what others do with information You make public, and their actions are not covered by this Policy.
c. Social Media Connections The Websites may let You connect with social media platforms such as Facebook or Instagram. For example, You might “ Like ” or “Share” Our content, or display your social media posts on the Websites. If You interact with Us through these features, your information may be shared publicly and both We and the social media company may collect information about You. What the social media company does with your information is governed by their privacy policy and your settings with them.
d. Sharing with Friends We may offer features like “ Send-to-a-Friend,” “Refer a Friend,” or “Wish List” that let You share content with others. If You use these features, We will use your friend’s information only to send your message, unless We have their permission for other uses. If You share someone else’s personal information, You represent that You have the authority to do so and to permit Us to use the information in accordance with this Policy.
e. Accurate Information . All personal information that You provide to Us must be true, complete, and accurate, and You must notify Us of any changes to your personal information.
f. Employment Applications . If You apply for a job through the Websites, We or Our service provider(s) may ask for additional information such as your gender, ethnicity, or veteran status, as required by law. Your sharing of this information is voluntary. If You provide it, We and/or Our service provider may use it to meet legal reporting requirements or to respond to employment-related claims.
11. Do We Collect Information from Minors?
a. Our Platforms and services are not intended for children under thirteen (13) years of age. No one under thirteen (13) years of age should share any personal information with Us, including by creating an account or by making a purchase. The children’s clothing We offer for sale is intended for purchase by adults only. We do not knowingly collect, use, or share any personal information from children under thirteen (13) years of age. If You are between thirteen (13) and eighteen (18) years old, You may use or interact with the Platforms only with the involvement and permission of a parent or guardian. By using or interacting with the Platforms, You confirm that You are at least eighteen (18) years of age, or that You are a parent or guardian giving permission to someone between thirteen (13) and eighteen (18) years of age to use the Websites. If We learn that We have collected the personal information of a child under thirteen (13) years of age or from a minor under eighteen (18) years of age without proper consent, We will promptly delete that information from Our records. If You believe We may have collected information from a child or minor, please contact Us at help@hatchcollection.com so We can take appropriate action.
b. If You are a California resident under sixteen (16) years old, You may have extra rights regarding your personal information. Please see the “ Your State Privacy Rights” section of this Policy for more details.
12. What Categories of Personal Information Have We Collected?
a.We care about your privacy and want You to know what information We collect about You. In the past twelve (12) months, We may have collected the following types of personal information:
(i) Contact and Identifying Information . This includes your name, address, phone number, email address, date of birth, account name, and similar details that help Us identify You.
(ii) Personal information . We may collect information such as your signature, education and work history, Social Security number, driver’s license or passport number, financial account numbers, and health or insurance information, as required by law .
(iii) Financial Information . This includes payment details like your credit or debit card number and related information.
(iv) Protected Characteristics . We may collect information such as your age, gender, race, ethnicity, citizenship, marital status, disability status, veteran status, and similar details, as required by law.
(v) Purchase and Account Information . This covers your transaction history, items You have bought or returned, payment information, loyalty program participation, reviews You have written, and your interactions with Our customer service team .
(vi) Biometric Data . In some cases, We may collect biometric information like fingerprints, facial scans, voiceprints, or body measurements (for example, for advanced clothing fitting features) .
(vii) Online Activities . We collect information about how You use the Platforms, such as your browsing and search history, device information, IP address, and interactions with Our ads and content .
(viii) Geolocation Data . We may collect your device’s location or movements, for example, when You use Our store locator or App features .
(ix) Sensory Data . This includes things like call recordings, photos, or videos You share with Us or allow Us to use, and other sensory information .
(x) Professional or Work Information . If You apply for a job or interact with Us in a business context, We may collect your job title, work history, and professional qualifications.
(xi) Education Information . If relevant, We may collect education records, such as grades or transcripts, as permitted by law.
(xii) Profile Information . We may create a profile about You based on the information above, such as your preferences, interests, or shopping habits.
b. We do not consider publicly available information, deidentified or aggregated data, or information covered by certain privacy laws (like HIPAA or the Fair Credit Reporting Act) as personal information under this Policy.
13. How We Use Your Information . We collect information from You to help Us provide a better, more personalized experience.
a. General Use .
(i) We use your information to:
(A) Show You the Platforms and their content.
(B) Provide the products, services, or information You request.
(C) Send You important updates about your account, like expiration or renewal notices.
(D) Fulfill Our obligations and enforce Our rights under any contracts We have with You regarding any matter, including but not limited to billing and collections.
(E) Let You know about changes to the Platforms and Our products or services.
(F) Allow You to use interactive features on the Platforms.
(G) Share personalized offers, promotions, and content with You.
(H) Detect, prevent, and address fraud or other illegal activities.
(I) Use your information for any other purpose with your consent.
(ii) We may also contact You about our own or third-party products and services that might interest You. If You do not want to receive these messages, You can update your preferences in your account settings. For more details, see the “ Your Privacy Rights” section of this Policy.
b. SMS Marketing . If You provide your phone number (for example, during checkout or by signing up for messages), We may send You text messages with updates, special offers, discounts, and other information We think You will like. Standard message and data rates may apply. You can opt in to receive these messages, and You can opt out at any time.
c. We may use the information We collect for business purposes, including to:
(i) better understand your interests and how You interact with Us, including your activity on the Platforms or in Our stores.
(ii) personalize your experience, such as showing You customized content, recommendations, and ads.
(iii) post product reviews You submit.
(iv) communicate with You, respond to your questions, and ask for your feedback.
(v) run contests, sweepstakes, or other promotions.
(vi) manage event registrations, process donations, and improve fundraising experiences.
(vii) recruit and hire team members.
(viii) improve Our products, services, and your overall experience with Us.
d. Credit Cards and Electronic Payments . We use your credit card and electronic payment information only to process payments and prevent fraud. We do not use this information for any other purpose and We do not keep this information longer than necessary to provide Our services or to comply with applicable law.
14. How We Share Your Data and Why.
a. When We Share Your Information.
(i) Consent . We will process, disclose, or otherwise use your Personal Information for the specific purposes that You affirmatively authorize.
(ii) Legitimate Interests . We may process or disclose your data when doing so is reasonably necessary to pursue our legitimate business interests, which include, without limitation, (A) developing, enhancing, and personalizing Our products and services; (B) measuring the effectiveness of Our advertising; and (C) performing analytics to better understand how the Platforms are accessed and used.
(iii) Performance of a Contract . Where You purchase a product, or otherwise enter into a contract with Us, We will use, share, and otherwise process your information as necessary to perform, administer, and enforce that contract, including facilitating payments, fulfilling orders, and providing customer support.
(iv) Legal Obligations . We may disclose your information when we believe in good faith that such disclosure is required to comply with applicable law, regulation, legal process, or governmental request.
(v) Vital Interests . We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms, or as evidence in litigation in which we are involved.
b. Who We Share Your Information With .
(i) Business Transfers . We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, restructuring, acquisition, or in any other situation in which Personal Information may be transferred as part of our corporate assets.
(ii) Service Providers . We engage trusted third parties, including payment processors, fulfillment centers, hosting providers, analytics vendors, consultants, auditors, and attorneys, to perform services on our behalf. These entities are provided only the information reasonably necessary to perform their functions and are contractually obligated to protect Personal Information and to use it only for the purpose of providing services to Us.
(iii) Affiliates and Joint Marketing Providers . We may share information with our parent company, subsidiaries, affiliates, and selected joint marketing partners so that they can help Us advertise and market Our products.
(iv) Legal and Safety Reasons . We may share your information with law enforcement or other third parties if We believe it is necessary to comply with applicable law or protect Our customers, the Company, or the public.
15. Deidentified and Aggregated Data . We may take steps to remove details that can identify You from the information We collect. We may combine this deidentified or aggregated data with information from other uses. This helps Us understand trends, improve Our services, and support Our business. We may share this type of data with trusted partners, but We will never share it in a way that could identify You personally.
16. Third-Party Links & Content .
a. The Platforms may include links to other websites, ads, or content from companies We do not control, for Your convenience and to help You find more information. If You click on one of these links, You will leave our Platforms. We do not control these third-party sites or their privacy practices, which may be different from Our privacy practices and policies, including but not limited to this Policy. We encourage You to review the privacy policy of any website You visit before sharing any personal information. Please note, a link from the Platforms does not mean We endorse or are responsible for the content or services on those third-party websites.
b. We work with advertising networks, ad agencies, analytics providers, and other partners to show ads on the Platforms and elsewhere online, and to help Us understand how people use the Platforms. For example, if You click on an ad, Our partners may let Us know which ad You clicked and where You saw it. These ads may be shown by Us or third parties, who may use information about your visits to the Platforms and other sites, across different devices, to show You ads that are more relevant to You.
c. These third parties may use their own tracking tools, like cookies and web beacons, to collect information about You and your device. They may collect information such as your device ID, how You use Our Platforms, and other details. Some may collect personal information over time as You visit different websites and online services. These tools help with things like showing You targeted ads, making sure You do not see the same ad too often, and measuring how effective ads are. We may share certain information such as device identifiers, usage data, hashed information, and other de-identified transaction records with Our partners for advertising and analytics purposes. We and Our partners may also match this information with third-party cookies to help deliver targeted online marketing.
d. Some of Our advertising and analytics partners are members of industry groups such as the Network Advertising Initiative (“ NAI”) or Digital Advertising Alliance (“ DAA”). You can learn more about targeting advertising and how to opt out of it by visiting optout.networkadvertising.org for NAI members or optout.aboutads.info for DAA participants. If You are a California resident, please see Our California Privacy Rights Notice annexed hereto as Exhibit A , for more information about your rights and how to exercise them.
e. We use Google Analytics to help Us understand how people use the Websites. Google Analytics uses cookies and similar technologies to collect and analyze information about use of the Websites and may collect information about your use of other websites, apps, and online resources. To learn about how Google collects and uses data, visit Google’s privacy page at google.com/policies/privacy/partners.You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout .
f. PLEASE BE AWARE THAT IF YOU ELECT TO HAVE US SHARE YOUR INFORMATION WITH THIRD PARTIES, THOSE ELECTIONS TO HAVE YOUR INFORMATION SHARED WILL SUPERSEDE ANYTHING TO THE CONTRARY IN THIS PRIVACY POLICY.
17. Security and Data Location .
a. Security Measures . We take your privacy seriously and use a variety of security measures to help protect and secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information You provide to Us is stored on Our secure servers behind firewalls, and any payment information is encrypted using SSL technology. While We work hard to keep your information safe, no method of online transmission or electronic storage is completely secure. We cannot guarantee that unauthorized parties will never be able to defeat Our security measures. Please keep this in mind when sharing information online and always use the Platforms in a secure environment.
b. Ads and Similar Technologies . To make your experience better, We use cookies, a small text file that is stored on your device, to remember who You are, save You time, and personalize your visit. Cookies help Us understand which pages You visit and what You are interested in, so We can improve the Platforms and Our services. We may also work with third party companies who use separate cookies or similar tools to show ads that match your interests, both on the Websites and elsewhere online. These companies may collect information about your browsing activity and share it with Us in aggregated form to help Us measure Our advertising effectiveness. We do not control third-party cookies, and this Policy only covers Our use of our cookies. Most browsers automatically accept cookies by default, but You can change your browser settings to refuse or remove them. To learn more on how to opt-out of interest-based advertising visit http://www.aboutads.info/choices/ . Please note that disabling cookies may affect how the Websites work for You.
c. Analytics . We use tools like Google Analytics to help Us understand how visitors use the Platforms. This may include information such as your browser type, operating system, screen resolution, IP address, location, pages visited, and how long You spend on each page of the Platforms. We use this data to improve the Platforms and your experience.
d. Other Tracking Devices . We may use other industry standard technologies, such as pixel tags and web beacons, to see how You interact with the Platforms. These tiny graphic images help Us know if You visited certain pages or opened Our emails, so We can measure and improve Our services and promotions. Our partners may also use these tools for similar purposes.
e. Timing . We keep your personal information only as long as We need it, for the purposes set out in this Policy, or as required or permitted by law. We will not keep your personal information for longer than six (6) months after your account is closed, unless a longer period is required for legal or business reasons (such as tax, accounting, or other legal requirements). When We no longer need your information, We will delete or anonymize it. If immediate deletion is not possible (for example, if your information is stored in backup archives), We will securely store it and keep it separate from any further use until it can be deleted.
f. Upon your request to terminate your account, We will deactivate or delete your account and information from Our active databases. However, We may retain some information in Our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce Our Terms of Use and/or comply with applicable legal requirements.
18. Your Privacy Rights.
a. Your Privacy Choices .
(i) You can control the information We collect and use in the following ways:
(A) Location Information. You can disable location-based services at any time in your device or browser settings. If You do, some features, such as finding nearby store locations or using check-in, may not be available.
(B) Push Notifications. We only send push notifications to App users if You have agreed to receive them. To stop getting these messages, simply update your notification settings on your mobile device.
(C) Emails. You can unsubscribe from Our marketing emails at any time by clicking on the unsubscribe link in any email We send, or by contacting Us directly. Please note, You may still receive important service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.
(D) SMS Messages. We only send text messages if You have given Us permission to do so. To stop receiving texts, reply “ STOP ”, “ UNSUBSCRIBE ”, “ CANCEL ”, or “ QUIT ” to any message from Us. It may take up to ten (10) business days for your request to take effect. If You want to have your phone number removed from Our records, please email Us.
(E) Online Accounts. You can review and update your contact and payment information anytime by logging into your account on the Websites or App.
(F) Online Advertising. To opt out of third party advertising, You can visit the opt-out pages provided by NAI ( http://www.aboutads.info/choices/ ) or DAA ( http://optout.networkadvertising.org/?c=1 ). You may see the icon on some ads that permits You to set your preferences. If We use more than one advertising partner, You may need to opt out with each one.
(ii) Do-Not-Track Settings . Some browsers and devices let You send a Do-Not-Track (“ DNT”) signal. Right now, there is no standard way for websites to recognize and respond to these signals, so We do not currently act on them. If a standard for online tracking is adopted that We must follow in the future, We will inform You about that practice in a revised version of this Policy.
(iii) Based on the applicable laws of the United States, depending on where You live, You may have the right to review, update, or request the deletion of your personal information. To make a request, please email Us at help@hatchcollection.com.
b. Additional US State Privacy Rights .
(i) Some states in the US have passed state-specific privacy laws. This section supplements this Policy by explaining your privacy rights if You are a resident in one of these states. It provides certain mandated disclosures about Our treatment of personal information, and includes:
(A) Colorado, Connecticut, Utah and Virginia specific disclosures and rights;
(B) California specific disclosures and rights;
(C) Opt-outs for sale or sharing of personal information; and
(D) Metrics on consumers exercising their rights.
(ii) Colorado, Connecticut, Utah, and Virginia .
(A) If You are a resident of Colorado, Connecticut, Utah, or Virginia, We have certain obligations, and You have certain rights with respect to your personal information, including:
(1) Right to confirm whether the controller is processing your personal information and the right to access such information;
(2) Right to correct inaccuracies in personal information;
(3) Right to delete personal information;
(4) Right of data portability;
(5) Right to opt out from targeted advertising; and
(6) Right to opt out from the sale of personal information.
(B) In certain states, You also have the right to opt out from profiling in furtherance of decisions that produce legal or similarly significant effects on the consumer (such as Virginia, Colorado, and Connecticut) and appeal a decision regarding a request to exercise your rights.
(C) If You wish to exercise one or more of these rights, please review the “ Your Privacy Rights” section of this Policy, above. If You would like to opt out of targeted advertising or the selling or sharing of personal information, please see the instructions below.
(iii) California .
(A) The California Consumer Privacy Act of 2018 (“ CCPA”), as amended by the California Privacy Rights Act of 2021 (“ CPRA”) requires Us to provide California consumers with some additional information related to how We collect, use, retain, and disclose personal information as well as describe additional rights. If You are a resident of the State of California, please see Our California Privacy Rights Notice annexed hereto as Exhibit A , regarding additional rights You have, including how to exercise your rights.
c. What Are Your Other Privacy Rights if Located Outside the United States?
(i) If You are a resident of the European Union (“ EU”), United Kingdom, Lichtenstein, Norway or Iceland, You may have additional rights under the EU General Data Protection Regulation (the “ GDPR”) with respect to your personal information, as outlined below.
(A) Annexed hereto as Exhibit B is Our EU Privacy Rights Notice which summarizes the additional rights You have, including how to exercise such rights.
(B) If there are any conflicts between the attached EU Privacy Rights Notice and this Policy, the policy or portion thereof that is more protective of personal information shall control to the extent of such conflict. Note that We may also process personal information of Our customers’ end users or employees in connection with Our provision of certain services to customers, in which case We are the processor of personal information. If We are the processor of your personal information (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data.
(ii) If You are a resident of the EEA, the contact details for the data protection authorities are available here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html
(iii) If You are a resident of Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home/html .
(iv) If You are a resident of the UK, the contact details for the data protection authorities are available here: htttps://www.gov.uk/data-protection/find-out-what-data-an-organisation-has-about-you.
(v) If You have questions or comments about your privacy rights, You may email Us at help@hatchcollection.com.
EXHIBIT A
California Privacy Rights Notice
This Privacy Notice for California Residents (this “ Notice”) supplements the information contained in the Privacy Policy (the “ Privacy Policy”) of Hatch Studios, LLC, a Delaware limited liability company (the “ Company,” “ We” or “ Us”) and applies solely to all visitors, users, and others who reside in the State of California (“ Consumers” or “ You”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“ CCPA”) and the California Privacy Rights Act of 2021 (“ CPRA”), and any terms defined in the CCPA and CPRA have the same meaning when used in this Notice.
This Notice does not apply to workforce-related personal information collected from California-based employees, job applicants, contractors, or similar individuals.
Where noted in this Notice, the CCPA temporarily exempts personal information reflecting a written or verbal business-to-business communication (“ B2B personal information”) from some its requirements.
The CCPA permits Our users who are California residents to request and obtain from Us, once a year and free of charge, information about categories of personal information (if any) We disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which We shared personal information in the immediately preceding calendar year. If You are a California resident and would like to make such a request, please submit your request in writing to Us using the contact information provided below.
If You are under eighteen (18) years of age, reside in California, and have a registered account with the Website, you have the right to request removal of unwanted data that you publicly post on the Websites (as defined in the Privacy Policy). To request removal of such data, please contact Us using the contact information provided below, and include the email address associated with your account and a statement that You reside in California. We will make sure the data is not publicly displayed on the Websites, but please be aware that the data may not be completely or comprehensively removed from all Our systems (e.g., backups, etc.).
1. Definition of “Resident”
a. The California Code of Regulations defines a “ Resident ” as:
(i) every individual who is in the State of California for other than a temporary or transitory purpose; and
(ii) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.
b. All other individuals are defined as “ Non-Residents .”
c. If this definition of “ Resident ” applies to You, We must comply with certain rights and obligations regarding your personal information.
2. Sharing Personal Information .
a. We may disclose your personal information to a third party for a business purpose. When We disclose personal information for a business purpose, We require the recipient to both keep that personal information confidential and not use it for any purpose except for use in connection with performing the services on Our behalf. The CCPA prohibits third parties who obtain the personal information We hold from reselling it unless You have received explicit notice and an opportunity to opt-out of further sales. We may disclose your personal information with Our service providers pursuant to a written contract between Us and each service provider. Each service provider is a for-profit entity that processes the information on Our behalf.
b. We may use your personal information for our own business purposes. This is not considered to be “ Selling ” of your personal data.
c. We may use or disclose the personal information We collect for one or more of Our business purposes in this Notice or as otherwise set forth in the CCPA. We will not collect additional categories of personal information or use the personal information We collected for materially different, unrelated, or incompatible purposes without providing You notice.
d. The Company discloses the following categories of personal information for a business purpose:
(i) Identifiers.
(ii) California Customer Records
(iii) Personal Information Categories.
(iv) Commercial information.
(v) Internet or other Electronic Network Activity Information (i.e., browsing history and information regarding a consumer’s interaction with the Websites).
(vi) Geolocation data.
e. We disclose your personal information for a business purpose to the following categories of third parties:
(i) Our affiliates;
(ii) Service recipients; and
(iii) Third parties to whom You authorize Us to disclose your personal information in connection with the products or services We provide to You.
3. CCPA Rights . The CCPA provides consumers who are California residents with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights :
a. Access to Specific Information and Data Portability Rights . You have the right to request that We disclose certain information to You about Our collection and use of your personal information over the past twelve (12) months. Once We receive and confirm your verifiable consumer request (see the “ Exercising Access, Data Portability, and Deletion Rights” section of this Policy), We will disclose to You:
(i) The categories of personal information We collected about You;
(ii) The categories of sources for the personal information We collected about You;
(iii) Our business or commercial purpose for collecting or selling that personal information;
(iv) The categories of third parties with whom We share that personal information;
(v) The specific pieces of personal information We collected about you (also called a data portability request);
(vi) If We sold or disclosed your personal information for a business purpose, two separate lists disclosing:
(A) Sales . Identifying the personal information categories that each category of recipient purchased; and
(B) Disclosures for a business purpose . Identifying the personal information categories that each category of recipient obtained. We do not provide these access and data portability rights for B2B Personal Information.
b. Deletion Request Rights . You have the right to request that We delete any of your personal information that We collected from You and retained, subject to certain exceptions. Once We receive and confirm your verifiable consumer request (see the “ Exercising Access, Data Portability, and Deletion Rights” section of this Policy), We will delete (and direct Our service providers to delete) your personal information from Our records, unless an exception applies. We may deny your deletion request if retaining the information is necessary for Us or our service provider(s) to:
(i) Complete the transaction for which We collected the personal information, provide a good or service that You requested, take actions reasonably anticipated within the context of Our ongoing business relationship with You, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform Our contract with You;
(ii) Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
(iii) Debug products to identify and repair errors that impair existing intended functionality;
(iv) Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right permitted by law;
(v) Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.);
(vi) Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement if You previously provided informed consent;
(vii) Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with Us;
(viii) Comply with a legal obligation; and
(ix) Make other internal and lawful uses of that information that are compatible with the context in which You provided it.
4. Exercising Access, Data Portability, and Deletion Rights. <
a. To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to Us by emailing Us at help@hatchcollection.com.
b. Only You, or someone legally authorized to act for You, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access or data portability twice within a twelve (12) month period.
c. The verifiable consumer request must:
(i) Provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative.
(ii) Describe your request with sufficient detail that allows Us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide You with personal information if We cannot verify your identity or authority to make the request and confirm the personal information relates to You. You do not need to create an account with Us to submit a request to know about or delete personal information. However, We do consider requests made through your password protected account sufficiently verified when the request relates to personal information connected to that specific account. We will only use personal information provided in the request to verify the requestor’s identity or authority to make it. If, however, We cannot verify your identity from the information already maintained by Us, We may request that You provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as We finish verifying You. For instructions on exercising your sale opt-out or opt-in rights, see the “ Personal Information Sales Opt-Out and Opt-In Rights” section of this Policy.
d. Response Timing and Format . We try to respond to a verifiable consumer request within forty-five (45) days of its receipt. If We require more time (up to ninety (90) days), We will inform You of the reason and extension period in writing. If You have an account with Us, We will deliver Our written response to that account. If You do not have an account with Us, We will deliver Our written response by mail or electronically, at your option. Any disclosures We provide will only cover the twelve (12) month period preceding the verifiable consumer request’s receipt. If We cannot comply with a request, Our response will also explain the reasons We cannot comply with the request. For data portability requests, We will select a format to provide your personal information that is readily useable and should allow You to transmit the information from one entity to another entity without difficulty. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If We determine that the request warrants a fee, We will tell You why We made that decision and provide You with a cost estimate before completing your request.
e. Personal Information Sales Opt-Out and Opt-In Rights . If You are sixteen (16) years of age or older, You have the right to direct Us not to sell your personal information at any time (the “ Right to Opt-Out”). We do not sell the personal information of consumers We actually know are less than sixteen (16) years of age, unless We receive affirmative authorization (the “ Right to Opt-In”) from either the consumer who is at least thirteen (13) but not yet sixteen (16) years of age, or the parent or guardian of a consumer less than thirteen (13) years of age. Consumers who opt-in to personal information sales may opt-out of future sales at any time. To exercise the right to opt-out, You (or your authorized representative) may submit a request to Us by emailing Us at help@hatchcollection.com. Once You make an opt-out request, We will wait at least twelve (12) months before asking You to reauthorize personal information sales. However, You may change your mind and opt back into personal information sales at any time by amending your preferences here. You do not need to create an account with Us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.
f. In accordance with applicable law, We are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.
5. Right to Non-Discrimination for the Exercise of a Consumer's Privacy Rights . We will not discriminate against You for exercising any of your CCPA rights. Unless permitted by the CCPA, We will not:
i. Deny You goods or services;
ii. Charge You different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
iii. Provide You a different level or quality of goods or services;
iv. Suggest that You may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, We may offer You certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive We offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which You may revoke at any time.
6. CCPA Rights Request Metrics.
Metrics regarding the consumer rights requests We received from California residents from January 1, 2024 to December 31, 2024 appear in the following chart:
Request Type: [Right to Know]
[Right to Delete]
[Right to Opt-Out]
Received: [0]
Granted (in whole or in part) : [0]
Denied: [0]
Median Days to Respond: [0]
Requests to Know : [0]
Unverifiable : [0]
Not by a California resident : [0]
Called for information exempt
from disclosure : [0]
Denied on other grounds : [0]
Requests to Delete : [0]
Requests to Opt-Out
of Personal Information Sales : [0]
7. Other California Privacy Rights . California’s “ Shine the Light ” law (Civil Code Section § 1798.83) permits users of the Websites that are California residents to request certain information regarding Our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to help@hatchcollection.com or write Us at:
Hatch Studios, LLC
225 Bush Street, Ste 1300
San Francisco, California 94104
8. Changes to Our Privacy Notice . We reserve the right to amend this Notice at Our discretion and at any time. When We make changes to this Notice, We will post the updated notice on the Websites and update the notice’s effective date. Your continued use of the Websites following the posting of changes constitutes your acceptance of such changes.
EXHIBIT B
GDPR CONSUMER PRIVACY RIGHTS NOTICE
Additional Notice for European Union (EU) Residents
This GDPR Consumer Privacy Rights Notice (this “ Notice”) supplements the information contained in the Privacy Policy (the “ Privacy Policy”) of Hatch Studios, LLC, a Delaware limited liability company (“ Company”, “ We”, “ Us”, or “ Our”) and applies solely to all visitors, users, and others who reside in the European Union (“ EU”) (“ Consumers” or “ You”). We adopt this Notice to comply with the General Data Protection Regulation (“ GDPR”) and any terms defined in the GDPR have the same meaning when used in this Notice.
This Notice explains what information We collect about You, how that information is used, who receives this information, the circumstances in which such information is shared and the steps taken to maintain this information private and secure. If You are not resident of the EU, please refer to the Privacy Policy.
1. How We Collect and Use Personal Data .
a. We collect Personal Data from natural persons who are residents of the as described below.
(i) The types of Personal Data We collect:
(A) Identifiers: Includes your real name, postal address, email address, phone number, unique personal identifier, online identifier, token identifier, account name, social security number, driver’s license number, passport number, and/or other government issued number. All of these would be collected when and to the extent that You provide it to Us directly or through third parties.
(B) Personal Data in Customer Records : Includes any information that identifies, relates to, describes, or is capable of being associated with a particular consumer or household, including, the “identifiers” listed in (A), and the following: signature, physical characteristics or description, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, medical information or health insurance, or any other financial information, such as: income, account balance, transaction history, payment history, credit history information when and to the extent that You provide it to Us directly or through third parties.
(C) Legally Protected Characteristics : Includes date of birth/age, gender, race, color, national origin, citizenship, marital status, physical or mental disability, veteran or military status, religion or creed, medical condition, pregnancy or childbirth and related medical conditions, sexual orientation, genetic information (including familial genetic information)when and to the extent that You provide it to Us directly or through third parties.
(D) Internet or Network Activity : Includes, but is not limited to, browsing history on the Websites (as defined in the Privacy Policy), search history, information on a consumer’s interaction with Platforms (as defined in the Privacy Policy).
(E) Geolocation Data : Includes information such as physical location or movements.
(F) Information Typically Detected by the Senses : Includes audio information such as recordings of when You called into Our customer service line; visual recordings or images such as the ones obtained through Closed-Circuit Television (“ CCTV”) at Our local branches or other premises; and electronic information in the form of internet or other electronic network activity information, as described above.
(G) Employment Information : Includes current or past professional or employment-related information, including job history, performance evaluations, position details, or references.
(H) Education Information : Includes education information and qualifications that are not publicly available.
(I) Inferences from above used to Profile : Includes inferences drawn from other personal data, such as profiles reflecting a person’s preferences, behavior, attitudes, abilities, and aptitudes. The Company does not operate a website directed towards children or has actual knowledge that the bank is collecting or maintaining personal information from children online.
b. Sources from which We obtain your Personal Data:
(i) For each of these categories, [1] We obtain your personal data from a variety of sources, including from:
(A) Our customers and consumers, with respect to both online and offline interactions You may have with Us or Our service providers and other entities with whom You transact;
(B) others with whom You maintain relationships who may deal with Us on your behalf;
(C) the devices You use to access the Platforms;
(D) credit bureaus;
(E) identity verification and fraud prevention services;
(F) marketing and analytics providers;
(G) public databases;
(H) social media platforms; and
(I) other sources consistent with this Notice.
c. Legal basis for processing:
(i) Depending on the purpose of the processing activity ( see above), the legal basis for the processing of your personal data will be one of the following:
(A) necessary for taking steps to enter into or executing a contract with You for the services or products You request, or for carrying out Our obligations under such a contract, such as when We use your data for some of the purposes listed above (as well as certain of the data disclosures otherwise set forth in this Notice);
(B) required to meet Our legal or regulatory responsibilities, including when we conduct the client on-boarding processes and make the disclosures to authorities, regulators and government bodies;
(C) in some cases, necessary for the performance of a task carried out in the public interest;
(D) necessary in order to protect the vital interests of the data subject or of another natural person;
(E) in limited circumstances, processed with your consent which We obtain from You from time to time (for instance, where required by laws other than the GDPR), or processed with your explicit consent in the case of special categories of personal data such as your medical information; and
(F) necessary for the legitimate interests of the Company, without unduly affecting your interests or fundamental rights and freedoms.
(ii) Where the personal data We collect from You is needed to meet Our legal or regulatory obligations or enter into an agreement with You, if We cannot collect this personal data, there is a possibility We may be unable to on-board You as a client or provide products or services to You (in which case We will inform You accordingly).
2. How We Use Your Personal Data .
a. At the time You submit personal data or make a request, the intended use of the information You submit will be apparent in the context in which You submit it and/or because the Company states the intended purpose. The Company needs to collect, process and use personal data for a number of purposes. A primary purpose is to ensure We can provide customers with the products and services We offer and which they have requested. We also need to use personal data for purposes of carrying out Our business operations, including confirming a person’s authority as a representative or agent of a customer, maintaining business continuity plans and processes, undertaking internal investigations and audits, handling legal claims, responding to requests form supervisory authorities, and complying with applicable laws and regulations.
b. We use the personal data We collect, as identified in the categories listed above, for the business purposes listed below:
(i) Financial, Legal and Compliance Management : Audits, accounting, and supporting Our everyday operations, including to meet risk, legal, and compliance requirements;
(ii) Fraud Prevention : Reporting, evaluating and monitoring particular transactions and interactions, including online interactions, You may have with Us or others on Our behalf;
(iii) Security : Detecting and protecting against security incidents, and malicious, deceptive, fraudulent or illegal activity, and prosecuting the same;
(iv) IT Operations : Debugging to identify and repair errors in Our systems;
(v) Marketing/Prospecting : Short-term, transient use, including contextual customization of ads; conducting marketing and surveys associated with Our products and services;
(vi) Customer Services : Providing services on your or Our behalf, or on behalf of another, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processing payments, and other services;
(vii) Research : Conducting internal research to develop and improve technology;
(viii) Improving Products and Services : Conducting activity to verify, enhance, and maintain the quality or safety of services or devices which We may own, control, or provide;
(ix) Operation of our Sites : Preparing statistics, analyzing traffic patterns and performing analysis to support Our operations; and
(x) Legal Proceedings : : Receiving and responding to law enforcement requests, to prepare for or in support of ongoing litigation and as required by applicable law, court order, or governmental regulations.
c. We may also use the Personal Data We collect for:
(A) other operational processes,
(B) purposes for which We provide You additional notice, or
(C) purposes compatible with the context in which the personal data was collected.
3. Sharing of Personal Data .
a. When providing products or services to You, We will share personal data with other Company subsidiaries in order to ensure a consistently high service standard across Our group, and to provide services and products to You.
b. In some instances, We also share personal data with Our service providers, which provide services to Us, such as IT and hosting providers, marketing providers, appraisers, adjusters, debt collectors fraud prevention providers, credit reference agencies, and others. For more information on the service providers with whom We share information, please see the “ How We Collect and Use Personal Data” section of this Policy. Whenever We disclose personal data, We execute a contract that describes such purpose and require the recipient to keep the personal data confidential and prohibit its use for any purpose other than to perform the obligations under the contract. When We do so, the Company requires such recipients to comply with appropriate measures designed to protect your personal data, including through contractual arrangements.
c. If required from time to time, We disclose personal data to public authorities, regulators, or governmental bodies, including when required by law or regulation, under a code of practice or conduct, or when these authorities or bodies require Us to do so.
d. If Our business or assets were sold to another party, personal data will be transferred as part of the transaction. The Company may also share personal data with prospective purchasers during the due diligence process related to the prospects of selling or transferring part of, or an entire business. The Company requires such recipients to comply with confidentiality, privacy, and other legal requirements and in response, follow security measures designed to protect your personal data.
e. We will disclose personal data when legally required, to exercise or protect legal rights, including Ours and those of Our employees or other stakeholders; or in response to requests from you or your representatives.
4. Transfer of Personal Data to Different Countries . We do business with service providers around the world and, in some instances, may transfer personal data to such providers in the course of doing business with them. These providers assist Us with certain operations and activities. In those cases, the Company requires such recipients to comply with appropriate measures designed to protect your personal data, including through contractual arrangements.
5. How We Secure Personal Data . We implement appropriate technical and organizational measures to address the risks corresponding to Our use of your personal data, including loss, alteration, or unauthorized access to your personal data. We require Our service providers to do the same through contractual agreements.
6. How Long We Keep your Personal Data . We will retain your personal data for as long as it is needed or permitted in light of the purposes set forth above. The criteria used to determine Our retention periods include: (i) the length of time We have an ongoing relationship with You; (ii) whether there is a legal or regulatory obligation to which We are subject; and (iii) whether retention is advisable in light of Our legal or regulatory obligation (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
7. Your Data Protection Rights .
a. Laws in the EU enable individuals to have appropriate control and oversight over what organizations do with your personal data.
b. The following are your personal data rights:
(i) The right to be informed about Our processing of your personal data.
(ii) The right of erasure (right to be forgotten), which allows You to ask Us to destroy your personal data if You believe We no longer need it, or We are using it inappropriately. However, We may continue to retain your information if We are entitled or required to retain it.
(iii) The right to data portability, which includes the right to receive personal data You have provided to Us in a structured, commonly used, and machine-readable format.
(iv) The right of access to data that has been collected and that We process. You may ask Us for a description of the personal data We hold and the purposes for holding it. You may ask for a paper or electronic copy of this information.
(v) The right to rectify or correct data if it is inaccurate, or to have incomplete data completed.
(vi) The right to restrict processing when You contest data accuracy, when You believe Our use is unlawful, or when You wish for Us to keep but not use personal data beyond Our time limit for storage, for purposes as described above.
(vii) The right to lodge complaints with a data protection authority regarding any processing by Us or on Our behalf.
(viii) The right to object extends to direct marketing when personal data is processed for direct marketing purposes, including profiling to the extent it is related to such marketing. You may object to direct marketing by clicking the “unsubscribe” link in any of Our emails to You or by emailing Us at help@hatchcollection.com at any time. To object to SMS marketing, You may opt out by texting “ STOP ”, “ UNSUBSCRIBE ”, “ CANCEL ”, or “ QUIT ” to any SMS message received from Us.
c. The Company will seek to obtain your consent where required by applicable law. We may analyze users’ online activities, interests, and preferences in order to provide Our services, such as to configure Our online channels and apps for a better experience, and/or for marketing purposes. Where We process your personal data on the basis of your consent, You have the right to withdraw that consent at any time subject to applicable legal obligations. Please also note that the withdrawal of consent shall not affect the lawfulness of processing, based on consent before its withdrawal.
8. How to Revoke Your Consent to Our Use of Your Personal Data and Submit Privacy Related Inquiries .
a. You can direct all requests relating to access, correction, and other legal rights regarding personal data, or any questions regarding this Notice, by emailing Us at help@hatchcollection.com.
b. We try to respond to all authenticated requests in relation to your legal rights within one (1) month. Occasionally it may take Us longer than a month to respond, if your request is particularly complex or You have made a number of requests. In this case, We will notify You and keep You updated.
c. You may also submit a general privacy related inquiry in accordance with applicable laws and regulations. We will respond to such requests in accordance with applicable laws.
d. Please issue such requests by sending a completed inquiry to Us via email at help@hatchcollection.com. Please provide your name and contact information along with your inquiry.
9. Changes to Our Privacy Notice . We reserve the right to amend this Notice at Our discretion and at any time. When We make changes to this Notice, We will post the updated notice on the Websites and update the notice’s effective date. Your continued use of the Platforms following the posting of changes constitutes your acceptance of such changes.
[1] Please note that the categories of Personal Data we collect about consumers will vary based on our relationship or interaction with those individuals.



