Privacy Policy

Young W - Last updated: October 21, 2022

Change log:

• October 21, 2022: included information about WooCommerce Payments

 

Young W operates according to the following privacy commitments:
  • We are thoughtful about the Personal Data we collect about you and only collect as much data as needed to perform our Services.
  • We store Personal Data only for as long as we have a reason to keep it and as it is needed to serve you.
  • You can contact us at any time to obtain the Personal Data we hold about you or to request for it to be permanently deleted.
  • We do not and never will sell any Data, Personal or otherwise, to third parties.
  • We aim for full transparency on how we gather, use, and share your Personal Data.
  • We make our best effort to comply with PIPEDA, CASL, GDPR and CCPA.

This Privacy Policy outlines which information we collect about you when you use our Services, how we use that information and our legal basis for doing so. It also covers whether and how that information may be shared, how long we retain that information, what your rights and choices are regarding the information you provide to us and how the law protects you.

By using our Services (including this Website, https://www.youngw.ca), you agree to the collection and use of Personal Data in accordance with this Privacy Policy and our Cookie Policy.

 

Who we are and what this policy covers

Young W (“YW”) operates the Website https://www.youngw.ca, which offers a variety of services, products, events and content (“Services”) related to the arts, culture and the humanities, with a focus on discovering a flourishing offline life. While YW does utilize technology as a tool, its mission is to showcase the best of offline life and the analog lifestyle. We therefore believe very strongly in protecting our visitors’, customers’, users’, readers’, vendors’, suppliers’, and stakeholders’ (“Visitors”) privacy and treat privacy as an important cornerstone of our company’s values.

This Privacy Policy applies to all of YW’s Services:

  • its Websites (https://www.youngw.ca, https://www.folliness.com, https://www.folliness.ca) and any products, content or services offered on it and
  • its events hosted digitally or in-person.

To the extent that YW does make use of digital event software (such as Crowdcast or Zoom, for example), has an affiliate bookstore presence on Bookshop.org US, Bookshop.org UK and IndieBound or uses social media platforms for certain marketing purposes (such as Twitter, Instagram, Pinterest or LinkedIn, for example), this policy does not apply to YW’s presence on these platforms, due to the fact that these platforms are governed by their own privacy policies.

 

What Personal Data we collect and how we collect it

We only collect information about you if we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better. Below we explain what type of information we collect about you, along with details about how we collect that information. We obtain personal information about you from the following categories of sources:

1)    if and when you provide information to us, and

2)    automatically through operating our Services.

We collect:

1)    information that you provide to us directly: for example,

  • the information you provide to YW as you place orders on our Website (email address, first name, last name, shipping address, billing address, phone number, payment card information, and notes or special instructions you want to share about your order);
  • the information you share with us by filling out a form on our Website; by participating in a YW survey, competition or promotion; by attending a YW event; by visiting a YW booth at a fair or show; by reporting a problem with our Website; or by communicating with us through email, phone or postal mail (first name, last name, email address, mailing address, phone number and any message you share with us).
  • the basic information (username, email address, password) you share with YW in order to set up an eCommerce Account on https://www.youngw.ca. You may provide us with more information, but we don’t require more information to create an Account on YW. You may also use the Website without creating Account, and may also complete purchases as a guest.

2)    information about you automatically when you are using our Services:

a.    through Cookies which our web analytics Service Provider Matomo sets on your Device as you navigate through our Website, if you have opted in to having your Website visit recorded:

We use third-party web analytics Service Provider Matomo to monitor and analyze our Website traffic. Although Matomo is a Service Provider with the purpose to track user activity, Matomo has a focus on respecting Visitors’ privacy – you can visit their privacy policy page here. For privacy reasons, Matomo does not use third-party Cookies by default (only first-party Cookies, which can be easily disabled).

YW operates with a model of consent with regards to Website traffic statistics and audience measurement. For a particular Visitor to be tracked by Matomo during their visit on our Website, they need to give explicit consent to statistics Cookies. If you have chosen to opt out of Website Visitor tracking by denying consent on our homepage, your visit to https://www.youngw.ca will not be recorded by Matomo. Website Visitors who have not given consent for statistics Cookies will not be tracked. Please note that when you opt out of having your visit to our Website analyzed, the Matomo will set an opt-out Cookie within your browser. This is to ensure that your Website visit will not be tracked by Matomo.

We only record your visit if you opt in. If you want opt-in to having your Website visit tracked for audience measurement purposes, please tick the checkbox on the Cookie consent banner when you first arrive at the YW homepage and click “SUBMIT”. Whether you have already opted in or opted out, you can change your statistics Cookie consent preferences at any time during your visit on this page.

Your consent is stored within your browser storage as a Cookie. The Cookies described above will eventually expire and be removed from your browser after a maximum of 13 months.

Please note that if you clear the Cookies in your web browser, if you delete the opt-out Cookie or if you change Devices or web browsers, you will need to perform the opt-out procedure again, since you will be asked for your consent again. You may also deactivate or restrict the transmission of Cookies by changing the settings of your web browser. Cookies that are already stored within your browser may be deleted at any time.

Matomo records the following Personal Data and Usage Data for any YW Website Visitor who has given consent to opt in to audience measurement tracking via the Cookie consent banner on YW’s homepage:

  • your approximate geographic location via the collection of the anonymized IP address of your Device:

Because Matomo does not record your full IP address, but rather an anonymized version of it (with the last components removed), Matomo will not record your precise location. Your continent will be shown accurately in most cases, but your country, and/or province, and/or city will be approximations based on the anonymized IP address.

  • the referral channel (e.g. search, direct entry, social channels, etc.),
  • the domain of the website from which you visited the Website from,
  • information from the Device (Device type, Device brand, operating system, screen resolution, language, and web browser type) you used during your visit
  • the number of visits per day (no tracking beyond 1 day),
  • the parts of our Website you visit,
  • the date, time and duration of your visit,
  • the links on https://www.youngw.ca, https://www.folliness.com, https://www.folliness.ca/ which you used to leave our Website, and
  • your YW eCommerce order ID, in the case that you make a purchase on the Website.

We process this Usage Data in Matomo for audience measurement and statistical purposes, to improve our site, to calculate how many people visit and use our Services from certain geographic regions, and to recognize and stop any misuse. Data collected by Matomo is stored within YW’s own MySQL database on servers of our hosting provider Infomaniak in Switzerland. Data logs or report data collected and processed by Matomo will never be sent to other servers by Matomo or Infomaniak.

Matomo also supports your browser’s DoNotTrack preference. If your browser has the “I do not want to be tracked” (DoNotTrack) feature enabled, YW will not track your Website visit.

If you are using an adblocker, Matomo will also not track your Website visit.

YW has no interest in following you across the internet. YW will never track your behaviour across multiple websites outside of the scope of https://www.youngw.ca. We do not receive, collect or buy information about you from other sources or have access to further Personal Data about you beyond what is stated within this Privacy Policy. YW does not receive Personal Data about Visitors from third parties (aside from Matomo, as described in this Privacy Policy).

We also do not show advertising on our Website. YW does not receive Personal Data about Visitors or potential Visitors from advertisers or share Personal Data about Visitors or potential Visitors with advertisers.

 

b.    through WooCommerce and WordPress.org about the actions our Visitors, Product Vendors and Drop-ship Suppliers perform on our Website, for example, when placing orders, paying for orders, reviewing a product, using online store coupons, cancelling orders, uploading product information, or marking orders as filled.

The following Usage Data will be collected, processed and may be shared with Service Providers (see section How and with whom we share the information we collect about you below) when you use our Website in order to:

•    complete a purchase on our Website: if you buy something from YW — a physical product, a piece of downloadable content, an electronic print-at-home ticket for an event, a service such as gift wrapping, local delivery or a customization of a product, we will collect your first name, last name, billing address, shipping address, email address, phone number, credit card/payment details and optional Account information (such as for example, custom gift messages or ticket preferences, etc.). This information is collected in order to process payments, to ship goods to you by postal or electronic mail, to contact you about the status of your order and to respond to your inquiries, including refunds and complaints. You can shop on YW either as a guest or by creating an Account. We will use Cookies to keep track of cart contents while you are browsing our Website.

•    leave a product review or a comment on a blog post: when you leave product reviews or blog comments on the Website, we collect the message submitted via comments form, the Visitor’s local date and time, their username, email address, website URL (if provided via the comment form) and IP address. This information, along with the browser user agent string of the submitter are used to help spam detection. The actual submission data is stored in the database of the YW Website and is emailed directly to YW Website owner. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service (please note: Gravatar is a public profile image service) to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in the context of your comment. If you leave a comment on our Website you may opt in to saving your name, email address and your personal website URL in Cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These Cookies will last for one year.

•    submit information via a contact form: when Visitors contact YW via a contact form on our Website, we collect the Visitor’s local date and time, their name, email address, IP address and any message shared by the Visitor as part of the contact form input fields. The actual submission data is stored in the database of the YW Website and is emailed directly to YW Website owner. We keep contact form submissions for 13 months and do not use the information submitted for marketing purposes, unless this is explicitly stated as the purpose on the contact form.

•    create an Account and log into your Account: if you create an Account, we will store at a minimum your username, email address and password. You also have the option to add you first name, last name, shipping address, billing address, and phone number, which will be used to populate the YW eCommerce checkout for future orders. If you visit our login page, we will set a temporary Cookie to determine if your browser accepts Cookies. This Cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several Cookies to save your login information. Login Cookies last for two days. If you select “Remember Me”, your login will persist for two weeks. If you log out of your Account, the login Cookies will be removed. In the case of a failed login attempt, the WordPress.com plugin JetPack (Protect) will also set a Cookie for one day to remember if/when a Visitor has successfully completed a math captcha to prove that they are a real human.

•    edit a blog article or product description: if you edit or publish a blog article or product description, an additional Cookie will be saved in your browser. This Cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.

•    view embedded content from other websites: blog articles or pages on YW may include embedded content (e.g. videos from Vimeo or Bandcamp, images, PDF articles, etc.). Embedded content from other websites behaves in the exact same way as if the Visitor has visited the other website. These websites may collect data about you, use Cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an Account and are logged in to that website. Wherever possible, YW will make efforts to embed content to other websites in “DoNotTrack”-mode.

•    reset your password: when you request a password reset, your IP address will be included in the reset email.

•    subscribe to YW’s weekly email newsletter (“Musings by YW”): we collect your email address to sign you up for our electronic newsletter. It will be stored at our newsletter provider, Infomaniak, where it will be kept on file for this purpose until you unsubscribe from the newsletter. Your email address is used solely to send you our electronic newsletter, which includes marketing and promotional messages about YW’s activities. You can unsubscribe at any time through the unsubscribe link included at the bottom of all our newsletter emails or by emailing us your request to unsubscribe at info@youngw.ca. You have the option to receive ‘Musings by YW’ also as physical letters via postal mail if you choose to provide us with your mailing address via email at info@youngw.ca. Your mailing address will solely be used to send you our newsletter in hardcopy, paper format and will be kept on file as long as you are subscribed to the electronic version of the newsletter. Should opt to unsubscribe from our electronic newsletter, we will also stop sending physical letters to your mailing address.

Once you have signed up to receive our email newsletter, Infomaniak’s newsletter tool will ask you to confirm your email address. Once you are subscribed, Infomaniak’s Cookies will be used to track the recipient’s geolocation, which recipients have received the newsletter, which recipients have opened it and at what date and time, which links in the newsletter each recipient has clicked, if a recipient marks the newsletter as spam or unsubscribes and what reasons they have given to unsubscribe. We will not automatically send you our email newsletter when you make a purchase on YW. You can sign up for our newsletter separately here. If you have given written consent to sign up for the newsletter in an offline setting (e.g. at a fair or in-person event), you will receive an automatic email request to confirm your email address after the event. You will only be subscribed once you have provided your electronic consent via the confirmation of your email address. If you have decided to unsubscribe from the newsletter, please allow 10 days for your email address to be removed from our database.

•    interact with YW as a Drop-ship Supplier or Product Vendor: if you are a Drop-ship Supplier or Product Vendor, you may also provide us with inventory information by SKU, with an email address for your PayPal account or with your bank account information.

•    upload media files: Some Visitors may be able to upload media files onto the YW Website. All uploaded files are usually publicly accessible. If you upload images to the Website, you should avoid uploading images with embedded location data (EXIF GPS) included. Otherwise Visitors to the Website can download and extract any location data from images on the Website.

 

c.    through third-party WordPress.org plugins:

YW uses a number of WordPress.org plugins and WooCommerce extensions in order to provide its Website experience to Visitors. By default, WordPress.org does not share any Personal Data with anyone. WooCommerce itself does not receive or store customer Usage Data. YW has also opted out of WooCommerce’s Usage Tracker, JetPack general analytics tracking and JetPack’s usage tracking of WooCommerce analytics. However, the WordPress.org plugins and WooCommerce extensions YW uses on its Website may collect, process and store certain Visitor data according to the plugin developers’ privacy policies. Please see the section How and with whom we share the information we collect about you for a list of plugins and extensions YW uses, along with links to their privacy policies.

 

How and with whom we share the information we collect about you

YW does not sell your Personal Data. We do not sell any information about our Visitors. We don’t sell, provide, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate orally, in writing, or by electronic or other means, a Visitor’s Personal Data or personal information to any third party for valuable consideration.

YW may share Personal Data in the following ways with third parties:

1.    through the use of WordPress.org plugins, WooCommerce, WooCommerce extensions and other IT Service Providers: we use the third-party Service Providers listed below for specific functionalities of our Website, such as for example, electronic payment processing, the estimation of shipping rates and postal delivery services, electronic newsletter delivery, and the web hosting of our Website.

The following Service Providers may have access to your Personal Data and may collect, store, use, process, and transfer information about your activity using our Services in accordance with their privacy policies. We don’t own or control these third parties, and they have their own rules about information collection, use, and sharing, which you should review before using the Services.

For all WooCommerce extensions, please refer both to the privacy policy of the specific WooCommerce extension (as listed below) as well as the privacy policy and the privacy notice of WooCommerce itself (also listed below).

Third-party Service Provider / Purpose / Data location / Personal Data collected by third party / Link to privacy policy

    • Infomaniak (web hosting) / To host the YW Website / Switzerland / All YW Website data and Website backups (i.e. any Personal Data mentioned in this Privacy Policy) / Data processing agreement, GDPR Policy
    • Infomaniak (newsletter) / To send electronic newsletters to subscribers / Switzerland / Email address. Infomaniak’s Cookies track the following newsletter action by newsletter recipient: geolocation, receipt of email, opening date and time, links clicked, unsubscribes, unsubscribe reason, marked as spam / Data processing agreement, GDPR Policy
    • Matomo / To conduct web traffic and audience measurement / France, Switzerland / See section What Personal Data we collect and how we collect it (point 2 a.) above / Privacy Policy
    • Vimeo / To view embedded video content / United States / IP address, technical information about your Device (e.g., browser type, operating system, basic Device information), and your activities on Vimeo, as collected by Vimeo’s Cookies / Privacy Policy
    • Bandcamp / To view embedded video content / United States / IP address, browser information, website activity metrics, as collected by Bandcamp’s Cookies / Privacy Policy
    • Egoditor GmbH / To provide links to online content via QR codes included in print products / Ireland, Germany, United States and other countries / Egoditor GmbH may have access to your IP address. Since YW uses static QR codes within its products as opposed to dynamic ones, YW will not have access to, collect, store or share your IP address, Personal Data or geolocation information / Privacy Policy
    • Moneris Gateway (WooCommerce extension by SkyVerge) / To process credit card payments for purchases on YW’s Website / Canada, United States, Philippines / IP address, technical information about your Device, email address, name, address, phone number, payment card details, transaction information, as collected by SkyVerge and Moneris Cookies / Moneris Privacy Policy, SkyVerge Privacy Policy
    • PayPal (WooCommerce extension) / To process PayPal payments for purchases on YW’s Website / Canada, United States / Device information, technical usage data, geolocation information, IP address, customer name, email, address, phone number, financial account information, transaction information, as collected by PayPal Cookies / Privacy Policy
    • WooCommerce (WordPress.org plugin) / To enable web shop management / USA, Ireland and other countries / WooCommerce may have access to any data shared with YW through a contact form, blog comment or product review, including your IP address / WordPress.org Privacy Policy, WooCommerce Privacy Policy, Privacy Notice for websites using WooCommerce
    • WooCommerce Payments (WooCommerce extension powered by Stripe) / To process credit card and debit card payments for purchases on YW’s Website / USA, Ireland, Canada, India and other countries / IP address, technical information about your Device and browser, email address, name, address, city, state, zip code, phone number, unique payment identifier, payment provider identifier, payment card details, date, information typed into a checkout form even when not completed, plug-ins, language used, web browsing information, usage data, referring URLs, location, cookies data, device data and identifiers, activity indicators, like mouse activity indicators, to detect fraud, transaction information, as collected by WooCommerce and Stripe / WordPress.org Privacy Policy, WooCommerce Privacy Policy, Privacy Notice for websites using WooCommerce, Stripe Privacy Policy and Privacy Center
    • WooCommerce Product Add-Ons and WooCommerce BoxOffice (WooCommerce extension) / To provide customization options for products and to offer event tickets / USA, Ireland and other countries / N/A  / WooCommerce Privacy Policy, Privacy Notice for websites using WooCommerce
    • Gift Wrapper for WooCommerce (WooCommerce extension by Fantastic Plugins) / To provide gift wrapping options for purchases on YW / Global / Fantastic Plugins may have access to your IP address, browser information, usage metrics, as collected by Fantastic Plugins’ Cookies / Privacy Policy
    • Gift Cards; Conditional Shipping and Payments (WooCommerce extension by SomewhereWarm) / To offer digital YW store gift cards; to create conditional shipping and payment rules / Global / SomewhereWarm may have access to your IP address, browser information, usage metrics, as collected by SomewhereWarm’s Cookies / Privacy Policy
    • Smart Coupons (WooCommerce extension by StoreApps) / To provide store credits and coupons / Germany / StoreApps may have access to your IP address, browser information, usage metrics, as collected by StoreApps’ Cookies / Privacy Policy
    • Canada Post Shipping Method (WooCommerce extension) / To obtain shipping rates and deliver purchases to customers / Canada / Recipient name and shipping address / Privacy Policy
    • JetPack (Protect) (WordPress.org plugin) / To track failed login activity and potentially block fraudulent login attempts / USA, Ireland and other countries / Attempting user’s IP address and user agent string, attempting user’s email address, all IP-related HTTP headers attached to the attempting user / Privacy Policy
    • JetPack (Contact Form) (WordPress.org plugin) / To allow Visitors to send messages to YW via contact forms / USA, Ireland and other countries / Visitor local date and time, their name, email address, IP address and any message shared by the Visitor in the contact form / Privacy Policy

 

 

2.    for the purposes of order fulfillment by Drop-ship Suppliers and Product Vendors (third-party sellers) on YW: some of the products sold on YW may be fulfilled by Drop-ship Suppliers or Product Vendors located in Canada, the USA or other countries.

  • Products sold by YW and fulfilled by a Drop-ship Supplier are labelled as “Sold by: Young W” and have the Drop-ship Supplier indicated on the individual product detail page as “Supplier: (Drop-ship Supplier name)”.
  • Products sold by third-party Product Vendors and fulfilled by a Product Vendor are labelled as “Sold by: (Product Vendor name)”.
  • Products sold by YW and fulfilled by YW itself are labelled as “Sold by: Young W”.

Should an order be fulfilled by a Drop-ship Supplier or Product Vendor, YW will share customer order information (first name, last name, phone number, shipping address, products ordered, the quantity ordered, their chosen shipping method) with Drop-ship Suppliers and Product Vendors as necessary for order fulfillment. Orders will then then be shipped out from the Drop-ship Supplier’s or Product Vendor’s warehouse directly to the customer.

Data disclosed to Drop-ship Suppliers and Product Vendors is strictly limited to the information necessary to fulfill a particular customer order placed on the Website. We require Drop-ship Suppliers and Product Vendors to agree to YW’s privacy commitments in order to share information with them. Drop-ship Suppliers and Product Vendors are required to adhere to YW’s Privacy Policy and to delete any customer Personal Data immediately upon fulfilling the order. Any data transferred out of Canada, Switzerland or the EU to a non-Canada/Switzerland/EU country in the course of the fulfillment process will be governed by a data processing agreement employing standard contractual clauses to safeguard the data transfer when fulfillment partners act as data processors. Drop-ship Suppliers and Product Vendors do not share customer Personal Data with third parties and do not sell customer Personal Data to third parties. They make every effort to keep customer data confidential and secure from cyber-security risks and data breaches.

3.    in the following specific circumstances:

  • when working with subsidiaries and independent contractors: we may disclose information about you to our subsidiaries and independent contractors who need the information to help us provide our Services or process the information on our behalf. We require our subsidiaries and independent contractors to follow this Privacy Policy and to conduct all work according to YW’s privacy commitments.
  • to comply with the law: under certain circumstances, YW may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency). We may disclose your Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, to protect and defend the rights or property of YW, to prevent or investigate possible wrongdoing in connection with our Services, to protect the personal safety of Visitors of our Services or the public or to protect against legal liability.

 

How and why we use information we collect about you

We collect Personal Data for the business and commercial purposes as described in the section What Personal Data we collect and how we collect it and we share this information with the categories of third parties described in the section How and with whom we share the information we collect about you. We may use or disclose personal information we collect for “business purposes” or “commercial purposes” (as defined under the CCPA), which may include the following examples:

a)    to provide our Services: for example, to send you either via postal or electronic mail the physical and digital products you have purchased from YW, to communicate with Visitors about their order, to respond to customer service inquiries, to process payments and orders, and to verify Visitor information.

b)    to protect the security of our Services and ensure fraud prevention: for example, by detecting security incidents; detecting and protecting against malicious, deceptive, fraudulent, or illegal activity; fighting spam; including, when necessary, to prosecute those responsible for such activities.

c)    to fix problems with our Services: for example, by monitoring, debugging, repairing, and preventing issues.

d)    to manage your Account: for example, to set up and maintain your Account and to manage your registration as a customer in YW’s eCommerce shop.

e)    to communicate with you: for example, by emailing Visitors who have subscribed to our weekly newsletter “Musings by YW”. If you don’t want to hear from us, you can opt out of marketing communications at any time by using the unsubscribe link at the bottom of newsletter emails or by emailing us at info@youngw.ca. (If you opt out, we will still send you important updates relating to your Account or your purchases). We may also contact you by email, telephone, or postal mail regarding your Account, your purchases, your payments, regarding updates to our Privacy Policy, Cookie Policy and Terms and Conditions and in order to respond to your inquiries.

f)    for internal administrative and auditing purposes.

g)    to recruit and hire new employees: for example, by evaluating job applicants and communicating with them.

h)    for business transfers: we may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Visitors is among the assets transferred.

i)    to complying with our legal obligations: to comply with the law, to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

j)    to improve our Services: we may use your information to obtain insights on how Visitors use our Services so we can improve them or for purpose such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns.

Please note that the examples provided above are illustrative and not intended to be exhaustive. For more details on how we collect this information, please refer to the What Personal Data we collect and how we collect it section. If we decide to collect additional categories of Personal Data or use the Personal Data we do collected for materially different, unrelated, or incompatible purposes, we will update this Privacy Policy.

YW does not engage in automated decision making and/or profiling of any Visitor data.

 

How long we keep your data

We generally discard information about you when it is no longer needed for the purposes for which we collect and use it — described in the section above on How and why we use information we collect about you — and we are not legally required to keep it. We will retain your Personal Data only for as long as it is necessary for the purposes set out in this Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws, resolve disputes, enforce our legal agreements and policies, and protect YW’s legal rights). We will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

We keep records of unpaid pending, unpaid failed or unpaid cancelled orders active for 14 days, after which we will delete them. Data for completed orders will be kept on file for 7 years, after which the Personal Data within the order will be anonymized. Accounts which are unused (no login and no purchase on YW’s Website for 7 years) will be automatically deleted.

We will retain your YW Account information as long as it is as necessary to provide you with Services or until you request from us that your Account be deleted. You can request the deletion of your Account at any time by emailing YW at info@youngw.ca. If you have a YW Account which you would like to have deleted, we will need you to contact us from the email address associated with your Account.

The Cookies for your consent to either opt in or opt out of website traffic and audience measurement through Matomo will be stored within your browser storage. Those Cookies set by Matomo as described above will eventually expire and be removed from your browsers after a maximum of 13 months. We keep Matomo Visitor logs that record details about a Visitor’s visit to YW’s Website (as described in the section What Personal Data we collect and how we collect it, point 2 a., above) for 3 months. Upon the expiry of these time frames, Website Visitor logs will automatically be deleted. Aggregated reports (without any identifiable Personal Data) of Website Visitor statistics are kept for 13 months within Matomo.

Your browser will keep Cookies used to keep track of cart contents while you are browsing our Website for a maximum of 2 days. The temporary Cookie set if you visit the YW Account login page is discarded when you close your browser. When you log in to your Account, Cookies will be set to save your login information, they will last for two days. If you select “Remember Me”, your login will persist for two weeks. If you log out of your Account, the login Cookies will be removed. In the case of a failed login attempt, the WordPress.com plugin JetPack (Protect) will also set a Cookie for one day to remember if/when a Visitor has successfully completed a math captcha to prove that they are a real human.

If you leave a blog comment or a product review on our Website and choose for the Website to save your name, email address and your personal website URL in Cookies, these Cookies will last for one year. If you edit or publish a blog article or product description, a Cookie with the post ID of the article will be set; it expires after one day.

We also maintain aggregated and anonymized information about orders and Website traffic, which we may retain for the duration of YW’s existence. This data is stored on ProtonDrive (ProtonDrive is a service of ProtonMail. Its servers are located in Switzerland; for ProtonMail’s privacy policy, please click here).

Visitors signed up for YW’s electronic newsletter will stay in our newsletter database until they unsubscribe from it. Newsletter Usage Data will be saved for 13 months and indefinitely in aggregate and anonymized format.

When you communicate with us via contact form, email, telephone, postal mail, online comments regarding your orders (which can be found within the ‘Past orders’ section in your YW Account) or through another method, we may keep a copy of our communications for a duration of 7 years. We will also store blog comments, product descriptions or product reviews, if you choose to leave them, for as long as the Website is active.

 

Security of your Personal Data

We work very hard to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so. Access to YW Website databases, including information about orders, Visitors’ Personal Data and Website traffic statistics, is restricted to YW personnel who are authorized to access such information, who are required to keep any information confidential and whose operating procedures adhere to YW’s Privacy Policy.

YW’s Website is secured by Secure Socket Layer (SSL) technology to make sure that any information transmitted from the browser to the server, including Personal Data, is encrypted and protected. Please note that YW does not store or collect your payment card details. That information is provided directly to our third-party payment processors, Moneris and PayPal, whose use of your Personal Data is governed by their own privacy policies. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

We monitor our Services for potential vulnerabilities and attacks. To enhance the security of your Account, we encourage you to use a strong password when creating your YW Account, not to share your Account or password with anyone else and to use a password manager. The security of your Personal Data is important to us. While we strive to make every acceptable effort to protect your Personal Data, we cannot guarantee its absolute security.

 

Children’s Privacy

YW’s Services are not intended for individuals under the age of 18. Our Services, including our Website, do not address anyone under the age of 18. We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 18 without verification of parental consent, we take steps to remove that information from our servers immediately.

 

Links to other websites

Our Services may contain links to other websites that are not operated by us. If you click on a link leading to a website other than a YW web page, you will be directed to a third-party website. We strongly advise you to review the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party websites, services or offers. Third party websites may utilize marketing and/or statistics Cookies.

Blog articles or web pages on YW may include embedded content (e.g. videos from Vimeo or Bandcamp, images, PDF articles, etc.). Embedded content from other websites behaves in the exact same way as if the Visitor has visited the other website. These websites may collect data about you, use Cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an Account and are logged into that website. Wherever possible, YW will make efforts to embed content to other websites in “DoNotTrack”-mode.

Our Services may link to third-party web pages with the use of printed QR codes. Some of these third-party web pages linked to via QR code may place marketing and/or statistics Cookies on your Device, even if the web page visited is a YW URL with embedded video content from third-party websites. By purchasing products from YW you acknowledge that the Company has no control over, and assumes no responsibility for, the content, privacy policies, or practices of any third-party websites or services linked to via QR code. You further acknowledge and agree that the Company shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any such third-party content, goods or services available on or through any such websites or services linked to via QR code.

 

Your choices

You have several choices available when it comes to information about you:

    Limit the information you provide: if you have an Account with us, you can choose not to provide the optional Account information within your YW Account. When you purchase from YW and have the option to provide further details about your order choices or preferences, you can choose to leave blank any fields which are marked ‘optional’.

•    Opt out of marketing communications: you may opt out of receiving our electronic newsletter from us. Just follow the unsubscribe instructions at the bottom of the newsletter email or contact us at info@youngw.ca to unsubscribe. If you opt out of these promotional communications, we may still send you other communications about your Account and your purchases as well as about updates to our Terms and Conditions, Cookies Policy and Privacy Policy.

•    Set your browser to reject Cookies: you can usually choose to set your browser to reject browser Cookies before using YW’s Website, with the drawback that certain features of YW’s Website may not function properly without the aid of Cookies.

•    Opt out of our statistics Cookies used for YW’s website traffic and audience measurement, as provided by Matomo: you can do this by leaving the opt-in box unchecked before clicking ‘SUBMIT’ on the Cookie consent banner (when you first visit our Website) or by changing your Cookie consent settings (at any point during your Website visit) on our Cookie Policy page. By opting out, your Website visit will not by tracked by our web analytics Service Provider Matomo. For more information, please see our Cookie Policy.

•    Close your Account: While we would be sad to see you go, you can close your YW Account at any time if you no longer want to keep it. In that case, you may still use our Services as a guest. You can email us with your Account deletion request at info@youngw.ca and we will make sure to delete it for you within 2 business days. We will also send you a confirmation once your Account has been deleted. If you have a YW Account which you would like to have deleted, we will need you to contact us from the email address associated with your Account. Please keep in mind that we may continue to retain your information after closing your Account, as described in How long we keep your data above — for example, when that information is reasonably needed to comply with (or demonstrate our compliance with) legal obligations such as law enforcement requests, or is reasonably needed for our legitimate business interests.

 

Your Rights under GDPR and CCPA

If you are located in certain parts of the world, including California and countries that fall under the scope of the European General Data Protection Regulation (aka the “GDPR”), you may have certain rights regarding your personal information, like the right to request access to or deletion of your data.

 

European General Data Protection Regulation (GDPR)

YW undertakes to respect the confidentiality of your Personal Data and to guarantee you can exercise your rights. You have the right under this Privacy Policy, and by law if you are within the EU, to:

–    Request access to your Personal Data: the right to access, update or delete the information we have on you. Whenever made possible, you can access or update your Personal Data directly within your Account settings section on the YW Website. We have also provided clear instructions within this Privacy Policy on how to request the deletion of your Personal Data. If you are unable to perform these actions yourself, please contact us to assist you. This also enables you to receive a copy of the Personal Data we hold about you.

–    Request correction of the Personal Data that we hold about you: you have the right to have any incomplete or inaccurate information we hold about you corrected.

–    Object to processing of your Personal Data: this right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation which makes you want to object to our processing of your Personal Data on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.

–    Request erasure of your Personal Data: you have the right to ask us to delete or remove Personal Data when there is no good reason for us to continue processing it.

–    Request the transfer of your Personal Data: we will provide to you, or to a third-party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

–    Withdraw your consent: you have the right to withdraw your consent on using your Personal Data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of our Services.

–    Make a complaint to a government supervisory authority.

 

Legal Basis for Processing Personal Data under GDPR

We may process Personal Data under the following conditions:

–    Consent: you have given your consent for processing Personal Data for one or more specific purposes.
–    Performance of a contract: provision of Personal Data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof.
–    Legal obligations: processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
–    Vital interests: processing Personal Data is necessary in order to protect your vital interests or of another natural person.
–    Legitimate interests: processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.

In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is requirement necessary to enter into a contract.

 

Transfer of your Personal Data

Your information, including Personal Data, is processed in the EU, in Canada, Switzerland, in the United States and in any other places where the Service Providers involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

When providing information about you to entities outside the EU, we will take appropriate measures to ensure that the recipient protects your Personal Data adequately in accordance with this Privacy Policy as required by applicable law. Additionally, if you are a EU resident we note that we are processing your information for which we have received your consent, in order to fulfill contracts we might have with you, or otherwise to pursue our legitimate business interests listed above. Please note that your information will be transferred outside of Europe, including to Switzerland, Canada, the United States and to any other places where the Service Providers involved in the processing are located.

 

Exercising of your GDPR Data Protection Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us by email at privacy@youngw.ca or by postal mail at Young W, PO Box 66 Stn C, Toronto, ON, M6J 3M7, Canada. You may exercise your rights of access, correction, erasure and objection by contacting us. Please note that we may ask you to verify your identity before responding to such requests. If you make a request, we will respond within 30 days. You have the right to complain to a data protection authority about our collection and use of your Personal Data. For more information, if you are in the European Economic Area (EEA), please contact your local data protection authority in the EEA.

 

California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (“CCPA”) requires us to provide California residents with some additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. This privacy notice section for California residents supplements the information contained in our Privacy Policy and it applies solely to all visitors, users, and others who reside in the State of California. If you are a California resident, you have additional rights under the CCPA, subject to any exemptions provided by the law, including the right to:

    • The right to notice: you have the right to be notified which categories of personal information are being collected and the purposes for which the personal information is being used.
    • The right to request: under CCPA, you have the right to request that we disclose information to you about our collection, use, sale, disclosure for business purposes and share of personal information. Once we receive and confirm your request, we will disclose to you:
      • The categories of personal information we collected about you
      • The categories of sources for the personal information we collected about you
      • Our business or commercial purpose for collecting or selling that personal information
      • The categories of third parties with whom we share that personal information
      • The specific pieces of personal information we collected about you
      • If we sold your personal information – which YW does not and will not do – or disclosed your personal information for a business purpose, we will disclose to you:
        • The categories of personal information categories sold
        • The categories of personal information categories disclosed
    • The right to say no to the sale of personal information (opt-out): you have the right to direct us to not sell your personal information. However, YW does not and will not sell your personal information.
    • The right to delete personal information: you have the right to request the deletion of your personal information, subject to certain exceptions. Once we receive and confirm your request, we will delete (and direct our Service Providers to delete) your personal information from our records.
    • The right not to be discriminated against: you have the right not to be discriminated against for exercising any of your consumer’s rights.

 

Categories of Personal Information Collected

The CCPA also requires us to provide a list of the “categories” of personal information we collect, as that term is defined in the law. We may use or disclose and may have used or disclosed in the last twelve (12) months the following categories of personal information for business or commercial purposes, depending on the Services used:

  • Category A: Identifiers (like your name, contact information, and device and online identifiers);
  • Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (for example, a name, address or telephone number)
  • Category C: Characteristics protected by law (for example, you might provide your gender as part of a research survey for us);
  • Category D: Commercial information (your billing information and purchase history, for example);
  • Category F: Internet or other electronic network activity information (such as your usage of our Services, like the actions you take on https://www.youngw.ca as you browse through our Website);
  • Category G: Geolocation data (such as your location or approximate location based on your IP address or anonymized IP address);
  • Category H: Audio, electronic, visual or similar information (such as your profile picture or product picture, if you have uploaded such pictures);
  • Category I: Professional or employment-related information (for example, information you provide in a job application); and
  • Category K: Inferences we make (such as likelihood of repeat purchases)
  • You can find more information about what specific personal information we collect and sources of that information in the section What Personal Data we collect and how we collect it above.

Please note that the categories listed above are those defined in the CCPA. This does not mean that all examples of that category of personal information were or will be in fact disclosed, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been disclosed.

Under CCPA, personal information does not include:

  • Publicly available information from government records
  • Deidentified or aggregated consumer information
  • Information excluded from the CCPA’s scope.

 

Exercising your CCPA Data Protection Rights

In order to exercise any of your rights under the CCPA, and if you are a California resident, you can contact us by email at privacy@youngw.ca or by postal mail at Young W, PO Box 66 Stn C, Toronto, ON, M6J 3M7, Canada. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable request related to your personal information. Your request to us must:

    • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative
    • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it
    • We cannot respond to your request or provide you with the required information if we cannot:
      • Verify your identity or authority to make the request
      • And confirm that the personal information relates to you

We will disclose and deliver the required information free of charge within 30 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 30 days when reasonable necessary and with prior notice. Any disclosures we provide will only cover the 12-month period preceding the verifiable request’s receipt. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Exercising your rights

YW will never discriminate against any Visitor for exercising their privacy rights.

If you have created an Account on YW, you can access and update the Personal Data related to your YW Account through your Account settings. In case you would like to delete your YW Account, you can email us (from the email address associated with your Account) at info@youngw.ca to request that your Account be deleted. We will complete your deletion request within 2 business day and provide you with a deletion confirmation email upon completion.

Any of YW’s Visitors can also have their Personal Data removed from our database by sending a personal data deletion request to privacy@youngw.ca. When you email us with your request, we can also share with you what Personal Data we have on file about you and subsequently delete it upon your request. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Since the data you request us to delete will still exist in a backup version of our Website, it could take up to 3 months for the backed up versions to be cleared from our servers at Infomaniak, our web hosting Service Provider.

In order to share with you, correct or delete any Personal Data we may have about you, you need to have made contact with us directly and/or need to have used our Website and/or Services in the past. When you contact us about one of your privacy rights, we may need to verify your identity (through your email address and/or your full name) before we disclose or delete any Personal Data. You can also designate an authorized agent to make a request on your behalf by giving us written authorization. We may still require you to verify your identity with us. We cannot provide, rectify or delete any data that we store on behalf of other Visitors or other customers. To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to our use of your Personal Data, you may contact us at privacy@youngw.ca.

 

Complaints

In case you have a concern about about YW’s privacy practices, you can direct your complaints to the Office of the Privacy Commissioner of Canada or the local data protection agency in your jurisdiction, should you reside outside of Canada.

 

Translation

Our Privacy Policy was originally written in English (CA). In the event of a conflict between a translated version of our Privacy Policy and the English version, the English version will take precedence.

 

Changes to this Privacy Policy

Although most changes are likely to be minor, YW may update its Privacy Policy from time to time in order to reflect, for example, changes to our privacy practices or for other operational, legal or regulatory reasons.

We will notify you of any changes by posting the new Privacy Policy on this page, by updating both the change log on top and the “Last updated” date at the top of this Privacy Policy page. In some cases, we may notify you about material changes via email if you are a Visitor who has purchased from YW in the past 12 months or if you have an Account on our Website.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page and your further use of our Services after a change to our Privacy Policy will be subject to the updated policy.

 

Interpretation and Definitions

 

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

 

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique eCommerce account created for you on the Company’s Website to access your past transactions, downloads, store credit and other parts of our Services.
  • Bookshop.org UK is a website which allows the Company to generate book recommendation affiliate links, so that Visitors can purchase books directly from the online book retailer Bookshop.org UK. If a Visitor purchases a book recommended by the Company through one of the Company’s Bookshop.org UK affiliate links, the Company makes a small commission from the sale of this book.
  • Bookshop.org US is a website which allows the Company to generate book recommendation affiliate links, so that Visitors can purchase books directly from the online book retailer Bookshop.org USA. If a Visitor purchases a book recommended by the Company through one of the Company’s Bookshop.org USA affiliate links, the Company makes a small commission from the sale of this book.
  • Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of the processing of Consumers’ personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of Consumers’ personal information, that does business in the State of California.
  • California Consumer Privacy Act (“CCPA”) refers to the California privacy law.
  • CASL refers to Canada’s Anti-Spam Legislation.
  • Company (referred to as either “the Company”, “Young W” or “YW” in this Agreement) refers to Young W, PO Box 66 Stn C, Toronto, ON, M6J 3M7, Canada. For the purposes of the GDPR, the Company is the Data Controller.
  • Consumer, for the purpose of the CCPA (California Consumer Privacy Act), means a natural person who is a California resident. A resident, as defined in the law, includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.
  • Cookies are small data files transferred onto your computer, mobile Device or any other device by websites for record-keeping purposes, to capture details of your browsing history on that website and to enhance the functionality of that website.
  • Country refers to: Ontario, Canada.
  • Data Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
  • Device means any device that can access the Services such as a computer, a cellphone or a digital tablet.
  • DoNotTrack (DNT) is a technology and policy proposal that allows internet users to control the tracking of their online activities across websites.
  • Drop-ship Supplier means a supplier from which the Company has sourced merchandise which is offered by the Company for sale to the Company’s Visitors on https://www.youngw.ca and which fulfills orders by shipping that merchandise directly to the customer.
  • GDPR (EU General Data Protection Regulation) refers to the European data privacy and security law.
  • IndieBound is a website which allows the Company to generate book recommendation affiliate links, so that Visitors can purchase books directly from independent retailers in the USA and Canada. If a Visitor purchases a book recommended by the Company through one of the Company’s IndieBound affiliate links, the Company makes a small commission from the sale of this book.
  • Instagram is a public profile named “Young W” specifically created by the Company on the Instagram social network, accessible from https://www.instagram.com/youngw_ca.
  • LinkedIn is a public profile named “Young W” specifically created by the Company on the LinkedIn social network, accessible from https://www.linkedin.com/company/youngw.
  • Personal Data is any information that relates to an identified or identifiable individual. For the purposes for GDPR, Personal Data means any information relating to you such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity. For the purposes of the CCPA, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with you.
  • Pinterest is a public profile named “Young W” specifically created by the Company on the Pinterest social network, accessible from https://www.pinterest.ca/youngw_ca.
  • PIPEDA refers to the Personal Information Protection and Electronic Documents Act, a Canadian privacy law.
  • Product Vendor means a third-party vendor of merchandise which offers products for sale to YW Visitors on https://www.youngw.ca and which fulfills orders by shipping such products directly to the customer.
  • Sale, for the purpose of the CCPA (California Consumer Privacy Act), means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s personal information to another business or a third party for monetary or other valuable consideration.
  • Services refers to our Website, products, events, content and other services offered for sale or for free by YW in its communication and distribution channels.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate its Services, to provide the Services on behalf of the Company, to perform services related to the Company’s Services or to assist the Company in analyzing how its Services are used. For the purpose of the GDPR, Service Providers are considered data processors.
  • Twitter is a public profile named “Young W” specifically created by the Company on the Twitter social network, accessible from https://www.twitter.com/youngw_ca.
  • Usage Data refers to data collected automatically, either generated by the use of the Company’s Services or from the Services infrastructure itself (for example, the duration of a page visit).
  • Website refers to the Company’s Websites, accessible from https://www.youngw.ca, https://www.folliness.com and https://www.folliness.ca.
  • Visitors (“you”) means the individual or company or other legal entity on behalf of which such individual is accessing or using the Company’s Services, as applicable. Under GDPR (General Data Protection Regulation), you can be referred to as the data subject or as the Visitor as you are the individual using the Services.

 

Contact us

For more information about this Privacy Policy, if you have any questions or concerns, or if you would like to make a complaint, please contact us

  • by email at privacy@youngw.ca or
  • by postal mail at Young W, PO Box 66 Stn C, Toronto, ON, M6J 3M7, Canada.

 

(This privacy policy includes material adapted from Automattic, published under Creative Commons ShareAlike, and Matomo, published under Creative Commons Attribution).