If you are a California resident, this section of our Privacy Policy describes your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the “CCPA”). This section applies only to personal data about California residents and their households, including representatives of companies doing business with MANGO.
Categories, sources, purposes, and sharing of personal data. Please see the sections of our Privacy Policy listed below for a description, by categories, of the (1) sources of personal data collected by MANGO (2) types of personal data collected, (3) business or commercial purposes for collecting personal data, and (4) third parties to whom we disclosed personal data or shared it for purposes of personalized targeted advertising:
- What is personal data and how does MANGO collect it?
- What personal data does MANGO collect?
- How does MANGO use personal data?
- When and with whom does MANGO share personal data?
Your rights under California law. If you are a California resident, you can submit a request to MANGO to exercise your personal data rights under the CCPA (“consumer request”). The process for exercising your rights is described in the paragraph titled “How to submit a consumer request” and the methods we use to verify a consumer request are described in the paragraph titled “How we verify a consumer request” Your rights as provided in the CCPA are summarized below.
Right to know. You can request to know the following about your personal data we have collected about you, and we will provide the following with respect to the preceding 12 months:
- The categories of your personal data we collected;
- The categories of sources from which your personal data was collected;
- The business or commercial purpose for which personal data was collected;
- The categories of third parties with whom we shared personal data;
- If a business sells personal data, the business must identify the categories of personal data sold and the categories of third parties to whom each category of personal data was sold (MANGO does not sell personal data for monetary consideration and consumers can restrict the collection and use of personal data for targeted advertising as described in our Cookie Policy);
- The categories of personal data we disclosed for a business purpose, and for each category identified, the categories of third parties to whom we disclosed that particular category of personal data; and
- Specific pieces of personal data collected about you and that is reasonably searchable or accessible (except for sensitive personal data, which we will describe but not transmit).
Right to request changes or corrections. You can ask us to correct or update personal data we have about you, and we may consider relevant circumstances to confirm the accuracy of the changes you request such as:
- The nature of the personal data;
- How we obtained the information originally; and
- Appropriate documentation supporting the change.
If you have an account with us, you can directly update or correct some of the personal data in your account by logging onto your account. If you do not have an account with us, please see “How to submit a California consumer request” to learn how to submit a request to us to correct your inaccurate personal data.
Right to request deletion. You have the right to request that we delete personal data which we have about you, subject to specific exceptions permitted by law. We are not required to delete personal data if it is necessary to complete a transaction, we continue to use it for a business purpose compatible with the context in which you provided the information, or we are required by law to retain to retain the information.
If you submit a request to delete personal data, we will confirm receipt of your request within ten (10) days and follow appropriate procedures to verify the identity and authority of the person submitting the request. If your request is verified, we will delete or fully de-identify (and direct our service providers and contractors to delete or de-identify) all or part of the requested personal data from our (and their) records, unless an exclusion applies. If we are unable to fulfill all or part of your request, we will let you know why (for example, if we have a permitted reason to retain certain information or if the identity of the requesting person cannot be verified). For technical reasons and to maintain anonymous business statistics, we may anonymize or aggregate personal data rather than erase it completely from our systems.
Right of non-discrimination for the exercise of your privacy rights. You have the right not to receive discriminatory treatment or retaliation for the exercise of the privacy rights conferred by the CCPA. MANGO respects your privacy rights and will not discriminate against you if you exercise any of your rights.
Right to opt-out of sharing personal data for targeted advertising. You have the right to direct us (opt-out) not to collect or share your personal data with third parties for the purpose of showing you targeted advertising based on data collected from your browsing activity on our Sites and other websites as collected by digital advertising companies. At any time, you may opt-out of our targeted advertising program by using this link on our Sites:
"COOKIE AND PRIVACY PREFERENCES"
You can also direct us not to collect or share your personal data for targeted advertising by sending us an e-mail request at personaldata@mango.com or by submitting a request through our FORMS
Unless you direct us not to collect or share your personal data for targeting advertising through your cookies selection or contacting us by e-mail, we may share personal data collected from your activities on our Sites with our authorized advertising partners. They use the data collected from your activity on our Sites together with data about your activity on other websites to show you online advertisements that are intended to be relevant to your interests.
Notice of right to opt-out of the sale of personal data. MANGO does not sell personal data for monetary consideration, and we have no plans to do so. If applicable laws consider our targeted advertising program to involve a non-monetary “sale” of personal data, you can opt-out of targeted advertising at this link:
"COOKIE AND PRIVACY PREFERENCES"
You can also opt-out by sending us an e-mail request at personaldata@mango.com or by submitting a request through our FORMS
How to submit a California consumer request. You may submit a request to exercise your California consumer rights to request to know, correct, delete, or opt-out of sharing personal data for targeted advertising by contacting us in any of the following ways:
E-mail: personaldata@mango.com
Toll-free telephone: 1.866.666.4664
Note: To opt-out of sharing your personal information for targeted advertising purposes, you need to indicate your preference by turning off Advertising Cookies / Do Not Share My Personal Information at this link:
Online: COOKIE AND PRIVACY PREFERENCES
E-mail: personaldata@mango.com
How we verify a consumer request. We are required to verify the identity any person submitting a request to know, correct, or delete personal data. If you make a request on behalf of someone else, we will need to verify your authority to make that request and may require confirmation signed by the consumer. We use methods of verification specified in the CCPA regulations such as matching information we have on file for you, such as your full name, email and postal address, phone number, and transaction history. We reserve the right to deny a consumer request if the identity or authority of the requesting party cannot be confirmed.
How we respond to consumer requests. We will confirm receipt of your consumer request within ten (10) business days and may request additional information necessary to verify that you are authorized to make the request. We will respond to any verifiable consumer request within forty-five (45) calendar days of receiving it, subject to delays and exceptions permitted by law. If we require more time to respond, we will let you know the reason and the extension period in writing.
We will respond to your request by using the email address or U.S. Postal address you provided to us when making the request. If your request relates to personal data we have collected about you, we will provide information collected or Stored during the 12-month period before receiving your verifiable request. We do not accept or respond to requests to exercise rights sent by postal mail.
If we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal data that is readily useable and should allow you to transmit the information readily from one entity to another entity.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We will not discriminate against you if you make a request about your personal data.
Loyalty and Financial incentive programs. As explained in the section of our Privacy Policy titled “Loyalty programs,” customers who open an online account with MANGO are automatically enrolled in our MANGO Likes You loyalty program where available and no additional personal information is required. Customers may enroll in the program in-Store where available by providing their name, e-mail address, and mobile phone number. Additional incentives may be offered to customers who submit other personal data such as their birth date. By opening a MANGO online account or enrolling in-Store in the MANGO Likes You program, customers may receive a more favorable price or rate for products and services than is available to customers who do not participate in the programs. Please see the Terms and Conditions on our Sites for details about the current loyalty programs available where you reside.
Under the CCPA, differences in price or rate for loyalty program participants are not discriminatory and permitted if they are reasonably related to the value of the personal data collected by choosing to participate the loyalty program. We estimate that value or personal data collected via a loyalty program by taking into account the anticipated revenues from enhanced sales of products incentivized by the program and the expenses we incur in providing the program. Those expenses may include, for example, the cost of discounting purchases made by program participants, managing, and operating the program, and offering free shipping on some purchases. Based on that estimate, we believe in good faith that the price or rate differences offered through our programs are reasonably related to the value of the participants’ data.
California rights under “shine the light” law. California residents may request a list of the types of customer information we provided to third parties for their direct marketing purposes and the names and addresses of all third parties with which we have shared such information during the past calendar year. We will provide the information to you free of charge within 30 days of your request. You can request this information by emailing personaldata@mango.com. Within thirty (30) days of receiving your request, we will provide you with the information at the address you designate in your request, which may be an email address or postal address.