Privacy Policy


Customer Privacy and Cookies Notice

Date: 4th August 2021

  1. Introduction

    1. This is the Privacy and Cookies Notice (“Notice” or “Privacy Notice”) for the website hosted at www.laybuy.com (“Site”), the Laybuy app (“App”), and the Laybuy cloud-based services (“Services”) (together, the “Platform”). The Platform is operated by or on behalf of Laybuy Holdings USA Inc, a Delaware corporation (“Laybuy”, “we”, “us” and “our”).

    2. This Notice is a legal agreement between you or an entity that you are representing (“you” or “your”) and Laybuy and governs your use of the Platform. We and you have entered into a Terms and Conditions agreement (the “Agreement”), which governs your use of the Platform and receipt of related Services, and in connection with that Agreement and as a condition to using the Platform, you agree to accept this Notice. If you are accessing the Platform on behalf of an entity (for example, a company, non-profit entity, university, or other business or organization), you represent to us that you have authority to bind that entity to this Notice, and that entity accepts this Notice, and the term “you” or “your” will apply to such entity.

    3. We are committed to protecting and respecting your privacy. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

    4. This Notice sets out:
      •  What information do we collect about you?
      •  How do we use your information?
      •  Who do we share your information with?
      •  Where do we store your information?
      •  What about payment processing?
      •  How do we protect your information?
      •  How long we keep your information?
      •  What rights do you have?
      •  Changes to this Notice
      •  Contact Us
      •  Cookies and other technologies

    5. By using our Platform, you acknowledge you have read and understood this Privacy Notice. This Privacy Notice applies to our whole Platform and any other products, software or services that we may make available to you and that reference this Privacy Notice and/or that are governed by the Agreement. By using any aspect of our Platform, you agree to this Privacy Notice and to any other agreements or policies referenced within this Privacy Notice. If you do not agree to this Privacy Notice, then you are not allowed to use the Platform.

  2. What information do we collect about you?

    1. We will collect and use the following categories of personal data from you, from other organizations and automatically via our Platform -- for example, when you fill in any of the application forms on our Platform. We explain what we do with each of the categories in the next section.

    2. You provide us with the following categories of information about you. This is information about you that you give us, usually via our Platform, or by phone, e-mail or otherwise. It includes information you provide when you register to use our Platform, subscribe to our Services, search for a product, place an order, submit a query, and when you report a problem with our Platform.
      •  Contact: basic contact information, such as your first and last name, email address, home address, as well as billing and shipping details
      •  Identity: additional information you provide, including your photo, gender, date of birth, and personal data in or about the content you provide
      •  Log-in: information in connection with an account sign-in facility, your log-in and password details
      •  Communications: records of any correspondence and communications if you contact us, including information you supply if you report a problem with our Platform to us.    This covers information we learn about you from:
          ◦  Letters
          ◦  Emails
          ◦  Texts, in-app messaging & other digital messaging
          ◦  Calls
          ◦  Face-to-face conversations you have with us
          ◦  Faxes
          ◦  Using artificial or prerecorded messages
          ◦  Calls using an automatic telephone dialing system or any other type of telephone system capable of placing calls without human intervention
      •  Financial: Laybuy and/or our vendors may access, collect or store your payment information in accordance with applicable laws and regulations. For example, we may use a payment processor to manage some of your data for us, and the payment processor may use some of your data to process certain transactions that you authorize
      •  Marketing: you may also provide us with your personal direct marketing preferences, like whether you would like to receive email or text updates from us

      You must keep your personal data up to date -- please tell us promptly about any changes, for example if you have a new address.

    3. Information we receive from other sources. We work closely with third parties (including, for example, retailers, sports teams, ticketing partners, business partners, sub-contractors in technical, payment and delivery services, debt collection agencies, advertising networks, analytics providers, and search information providers). We will notify you when we receive information about you from them and the purposes for which we intend to use that information. We may receive information about from other organizations, including:
      •  Credit: credit score and insolvency information, from our third party credit score providers and identity verification providers (including Experian). Laybuy will assess and keep your Laybuy credit limit.
      •  Verification: We use third party services to verify who you are (including Experian and Onfido). You may be asked to provide an appropriate form of government ID (like scan of a passport of driver's license), a selfie (to match against your ID), and other identifying information (like your Social Security Number). We may receive an indicator, such as a 'Pass' or 'Consider' result, from our third-party verification services. Your use of this service is regulated by that organization’s own terms and privacy policy. If necessary, for example when we need to further investigate a 'Consider' or similar result, we can access and review the details of the result, along with the information and photos that you supplied to the third party.
      •  Advertising: Advertisers may share technical information and information about your visits with them, including your experiences or interactions with them (see the next section for more detail about what this means).

    4. Information we collect about you from your use of our Platform: We may automatically collect information from you each time you use our Platform, such as the following:
      •  Technical information: Technical information may include the Internet protocol (“IP”) address, login information, browser type and version and, browser plug-in types and versions, device settings (e.g. language, time zone), device or similar IDs, operating system and platform, hardware version, mobile operator or ISP.
      •  Information about your visit: Information about your visit may include the full Uniform Resource Locators, clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number or social media handle used to connect with our customer service team and our social media accounts.
      •  Location data: Location data includes specific geographic locations (such as through GPS, Bluetooth, or Wi-Fi signals) which we use to provide location-aware Services or other location-aware Platform functionality (if you ask or permit us to), so that we can deliver content, advertising or other services that are dependent on knowing where you are, like checking for fraudulent transactions. Location data may be collected in combination with device ID, so we can recognize your mobile browser or device when you return to the Platform. Delivery of location-aware Services or other location-aware Platform functionality may involve us checking any of the following:
          ◦  the coordinates (latitude/longitude) of your location;
          ◦  your current country or region, by referencing your current IP address against public sources; and/or
          ◦  your Identifier for Advertisers (IFA) code for your Apple device, or the Android ID for your Android device, or a similar device identifier.

             You can opt-out of location sharing.

      See below for more information on the use of cookies and device identifiers on the Platform.

  3. How do we use your information?
    We use information held about you in the following ways, and we explain the reason each use as well. For more information about what these reasons mean, please read the next section: Reasons explained'.

    1. If you browse our Platform, we use automatically collected information to:
      •  understand how individuals use our Platform, and how we can improve it.
      •  ensure content from our site is presented in the most effective manner for you and for your computer.
      •  provide you with the information, products and services that you request from us or we think you may be interested in.

      We do this with your consent, where required, or in our legitimate interests, where we have considered these are not overridden by your rights.

    2. If you create and use your account with us, we use your Contact, Identity, Log-in, Financial, Credit, Verification and Automatically Collected information to:
      •  create and administer your account with us.
      •  verify your identity (including appropriate screening processes).
      •  conduct credit checks and receive results from our third-party credit check providers.
      •  verify and carry out financial transactions in relation to payments you make online/through the Platform.
      •  provide aggregated reporting information to, and otherwise manage and fulfil our agreements with, our shareholders, investors and finance providers.
      •  identify you when you sign-in to your account and give you appropriate access to our Platform (in accordance with your agreement with us).
      •  enforce or apply our terms or other agreements with you.
      •  notify you about changes to our Platform.

      We may conduct some profiling and automated decision-making to help us determine whether to verify and approve your account, including based on your credit history. If you would like more information about our automated decision-making practices or would like to request a manual review of any decision, please contact us.
      We do this to take any steps to enter into any contract, or carry out our obligations under any contract, between you and us (including our Consumer Terms & Conditions and Website Terms & Conditions). We also do this to comply with our legal obligations.

    3. When you contact or engage with us, we use your Contact, Identity, Log-in, Financial, Credit Verification and Communications information to:
      •  provide you with customer support, including
      •  contacting you if you have asked us to do so, including troubleshooting problems, and helping with any issues concerning our Platform, and
      •  providing you with the information, products and services that you request from us.

      We do this to take any steps to enter into any contract, or carry out our obligations under any contract, between you and us (including our Consumer Terms & Conditions and Website Terms & Conditions). We may also do this with your consent or in our legitimate interests.

    4. If we share marketing or advertising with you, we may use your Contact, Marketing, Advertising and Automatically Collected information to:
      •  provide you with promotional update communications by email, SMS, in-App alerts, and phone about our Platform, or about other goods or services we feel may interest you.
      •  contact you for your opinions about our Platform, including through surveys and other market research.
      •  understand how you use and interact with our Platform and the things you're connected to and interested in, both on our Platform and on the basis of aggregated social media information across our social media profiles, and to undertake marketing analysis.
      •  provide you with personalized recommendations, promotional updates and marketing to improve your experience with our Platform (based on, for example what we know about what our United States customers like, or your own past orders).
      •  only if you opt in, we may use your location information to provide you with local offers and promotions. For example, if you are near a store we partner with, we may provide you with a specific promotional update. You can opt out again at any time.
      •  measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.

      We may conduct some profiling and automated decision-making to help us provide you with relevant information, suggestions and recommendations for products. If you would like more information about our automated decision-making practices or would like to request a manual review of any decision, please contact us.

      We do this if permitted in our legitimate interests (where we have considered these are not overridden by your rights) or with your prior consent (where required by law).

      You can opt-out of further marketing at any time by selecting the “unsubscribe” link at the end of all our promotional updates and marketing to you, by sending us an email at help@laybuy.com (or, if applicable, by changing your marketing preferences in your account). When we maintain and improve our Platform, we may use your Account, Marketing Advertising and Automatically Collected information (including Location data) to:
      •  administer our Platform (including our Services) and for internal operations, including audits, troubleshooting, data analysis, testing, research, statistical and survey purposes.
      •  evaluate and improve our Platform and other products and services, including developing and testing new features.
      •  to detect and protect against error, fraud or other criminal activity.
      •  improve our Platform to ensure that content is presented in the most effective manner for you and for your computer, and to alert you to any hardware or software incompatibility issues.
      •  allow you to participate in interactive features of our Platform when you choose to do so.

      We do this in our legitimate interests, where we have considered these are not overridden by your rights. We also do this to comply with our legal obligations.

    5. Information we receive from other sources. We may combine this information with information you give to us and information we collect about you in our legitimate interests (where we have considered that these are not overridden by your rights). We will use this information and the combined information for the purposes set out above (depending on the types of information we receive).

    6. Aggregated Data. We may pseudonymize and/or anonymize and aggregate any of the above categories of information.

      What does this mean?
      •  Pseudonymized means that you cannot be identified from the data unless it is combined with additional information hold.
      •  Anonymized means that you cannot be identified from the data -- for example, if we create aggregated statistics.

      We use aggregated information (such as statistical data or customer profile information) to help us analyze how visitors use our site (including behavior patterns and the tracking of visits across multiple devices) and interact with us on social media (for example, statistics about demographics or users per country), provide more useful information to our customers, and understand which of our services are of most interest.

      We may provide aggregated data (for example, demographic statistics about our customers) to our partners or other third parties in exchange for access to the products or services that they provide, or to promote our Platform.

      Where such aggregate information is derived from your personal data, we will take steps to pseudonymize or anonymize your personal data, so that you cannot be easily re-identified from aggregate information retained or used for these purposes.

      While our anonymization and aggregation of data is based on our legitimate interest in developing and improving our Platform, you may let us know if you would prefer we do not use your data for this purpose. This will not affect any data which has already been anonymized, but we can stop using your personal data for this purpose going forward. Please contact us at help@laybuy.com if you would like to ask about your data not being used to help us improve and develop our Platform.

    7. Reasons explained. The following are some of the reasons or grounds for our collection, use and/or processing of your data:
      •  Consent: We'll use your personal data to send you promotional or marketing content if you have given us consent to us doing so, where required by law. You can opt-out of further marketing at any time by selecting the “unsubscribe” link at the end of all our promotional updates and marketing to you, by sending us an email to help@laybuy.com (or, if applicable, by changing your marketing preferences in your account).
         We also rely on consent for some of the cookies we use (see our Cookies Notice in Section 12 for more detail).
      •  Contract: We collect, store and process your personal data where it is necessary for performing a contract you have with us (such as our Consumer Terms & Conditions), or where you have asked us to take specific steps before entering into that contract. This includes notifying you about changes to our Platform and organization.
      •  Legal Obligation: We may need to process your personal data to comply with our legal obligations, including under applicable Federal laws, State laws, and/or any court orders. This may include compliance with know-your-client and anti-money laundering rules.
      •  Legitimate interests: We may process your personal data if it is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests.
      Our legitimate interests include:
          ◦  Providing you with the information, products and services that you request from us.
          ◦  Providing you with our promotional updates and marketing if we reach out to you and/or you are interacting with us in a business-to-business context (or in certain cases if you have purchased a Service from us or subscribed to any other Platform functionality and have not opted-out at the time of purchase or any time since) (you are free to opt-out at any time).
          ◦  Providing you and our other customers with personalized recommendations, promotional updates and marketing to improve your experience with our Platform (based on, for example what we know about what our customers like, or your own past orders).
          ◦  Gaining insights into how customers use our Platform, delivering, developing and improving our Platform, and growing our business and informing our marketing strategy.
          ◦  Measuring and understanding the effectiveness of advertising we serve to you and others and delivering relevant advertising to you.
          ◦  Improving our Site to ensure that content is presented in the most effective manner for you and for your computer.
          ◦  Administering our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
          ◦  Carrying out our obligations in our agreements with our business partners (for example, providing high-level statistics and summaries about how Laybuy users engage with them).
      In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests. If you would like further information about how we assess our legitimate interests, please contact us at help@laybuy.com.
      *We also use different types of cookies (including automatically collected information) on our Platform with your consent -- we explain this in the Cookies section below (Section 12).

  4. Sharing your information?
    We may share your personal data:
    •  with any member of our group (which includes our subsidiaries and our ultimate holding company and its subsidiaries), who support our processing of personal data under this Notice, who we support in processing your personal data, or who we otherwise share your personal data with. If any of these parties are using your information for direct marketing purposes, we will only transfer the information to them for that purpose with your prior consent.
    •  with selected third parties, including the credit agencies we work with. Our selected third parties may include:
        ◦  Organizations that process your personal data on our behalf and in accordance with our instructions and applicable laws. This includes in supporting various functionalities of our Platform, in particular those providing website and data hosting services, providing fulfilment services, distributing any communications we send, supporting or updating marketing lists, facilitating feedback on our services and providing IT support services from time to time. These organizations (which may include third party suppliers, agents, sub-contractors and/or other companies in our group) will only use your information to the extent necessary to perform their support functions.
        ◦  Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we will provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target. We may make use of the personal data we have collected from you to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience and subject to the cookie section of this Notice.
        ◦  Analytics and search engine providers that assist us in the improvement and optimization of our site and subject to the cookie section of this Notice (this will not identify you as an individual).
        ◦  Merchants and business partners who provide Services or other Platform functionality to you, and with whom we have entered into agreements in relation to the processing of your personal data a list of whom can be provided upon request.
        ◦  Credit Agencies for the purpose of assessing your credit score whether when setting up an account with us or on an ongoing basis. We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity. We continue to exchange information about you, your settled accounts and debts not fully repaid on time with the Credit Agencies while you use our Platform. The Credit Agencies will share your information with other organizations. Your data will also be linked to the data of your spouse, any joint applicants or other financial associates.
    The identities of the Credit Agencies we use, and the ways in which they use and share personal data, are explained in more detail here.
        ◦  Payment processing providers who provide secure payment processing services.
        ◦  Debt collection agencies should your account fall into arrears, to collect the amount, you owe us from you.
    •  any person to whom disclosure is necessary to enable us to enforce our rights under this Privacy Notice or under any agreement we have with you, or to protect our rights or the rights of third parties. This includes exchanging information with law enforcement agencies (including regulators) or other similar government bodies
    •  where required to do so by court order or where we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation.
    •  if we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer.

    If we share your personal data with our group companies or other third parties, we will take steps to protect your personal data in our contractual agreements with these third parties, and to require that they have appropriate technical and organizational security measures in place, in compliance with applicable data protection laws.

  5. Where do we store your information?

    1. We may transfer your information outside the United States, including to the United Kingdom (“UK”), European Economic Area (“EEA”), and other countries. If we do, we will take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as handling your data securely and in accordance with this Privacy Notice.

    2. We may transfer your personal data outside the United States:
      •  to store it.
      •  to enable us to make the Platform available to you, deliver to you Services that you have requested, and fulfil our contractual obligations towards you. This may include order fulfilment, processing of payment details, and the provision of support services.
      •  where we are legally required to do so.
      •  to facilitate the operation of our group of businesses, where it is in our legitimate interests and we have concluded these are not overridden by your rights.

    3. We may transfer your personal data as detailed below.
      We aim to keep this table up to date. If you would like a current list of international transfers or more detail about how we protect your personal data when we transfer it outside of the United States, please contact us at help@laybuy.com.

  6. What about payment processing?

    1. Payment details you provide will be encrypted using secure sockets layer (“SSL”) technology before they are submitted to us over the internet.

    2. Payments made on the Platform are made through our payment gateway provider, Stripe. You will be providing credit or debit card information directly to Stripe which operates a secure server to process payment details, encrypting your credit/debit card information and authorizing payment. Information which you supply to Stripe is not within our control and is subject to Stripe's own Privacy Notice and terms and conditions.

  7. How do we protect your information?

    1. We take reasonable steps, including physical, technical and organizational measures, to protect your personal data from unauthorized access and against unlawful processing, accidental loss, destruction and damage.

    2. All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Platform, you are responsible for keeping this password confidential. Do not share your password with anyone.

    3. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Platform; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

    4. External links: Our site may, from time to time, contain links to external sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies. Please check these policies before you submit any personal data to these websites. We are not responsible for the privacy policies or the content of such sites.

    5. Child safety: Protecting the safety of children when they use the Internet is important to us. Our Platform is intended for use only by persons who are at least 18years of age. You may not use our Platform unless you are 18 or older.

  8. How long we keep your information?

    1. We will keep personal data for:
      •  as long as you have an account with us in order to meet our contractual obligations to you, and
      •  for a period of time as necessary for us to comply with applicable laws and regulations, depending on the specific type of data.

    2. If you opt-out from us sending you promotional updates and marketing, or object to any other processing of your personal data, we may keep a record of your opt-out or objection so we can ensure we respect your direct marketing preferences.

    3. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our Platform. You cannot be identified from aggregate information retained or used for these purposes.

  9. What rights do you have?

    1. You have the right under certain circumstances:
      •  to be provided with a copy of your personal data held by us;
      •  to request the correction or deletion of your personal data held by us;
      •  to request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);
      •  to object to the further processing of your personal data, including the right to object to marketing;
      •  to request that your provided personal data be moved to a third party, and
      •  to withdraw consent.
      Where the processing of your personal data by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us. You can also change your marketing preferences at any time.

    2. You can also exercise the rights listed above at any time by contacting us at help@laybuy.com. Please note that we may require you to verify your identity in order for us to help with your request. The information we require to verify your identity may depend on the nature of your request. We will keep this information for as long as required to respond to your request, to maintain records of our response (to demonstrate our compliance with applicable law), and in certain cases for six years after that to identify any issues and resolve any legal proceedings.

  10. Changes to this Notice
    This Notice was last updated on 18 January 2021. From time to time we may change or update our Privacy Notice. We reserve the right to make changes or updates to this Privacy Notice at any time. More information about how we will notify you is below.
    If we make material changes to the way we process your information, we will provide you notice via our Platform or by other communication channels, such as by email or community post. Please review any changes carefully. If you object to any of the changes and no longer wish to use our Platform, you may close your account(s). All changes are effective immediately upon posting and your use of our Platform after a notice of material change or posting of an updated Privacy Notice constitutes your consent to all changes.

  11. Contact Us
    Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to:
    •  help@laybuy.com; or
    •  Laybuy Holdings USA Inc at 1900 S. Norfolk Street, Suite 350, San Mateo, CA 94403.

  12. Cookies and other technologies

    1. Our Platform uses cookies and/or other similar technologies such as device-IDs, in-App codes, pixel tags and web beacons to collect and store certain information. These typically involve pieces of information or code that a website transfers to or accesses from your computer hard drive or mobile device to store and sometimes track information about you. Cookies and similar technologies enable you to be remembered when using that computer or device to interact with websites and online services and can be used to manage a range of features and content as well as storing searches and presenting personalized content.

    2. Our Platform uses cookies and similar technologies either alone or in combination with each other to create a unique device ID, and to distinguish you from other users of our Platform. This helps us to provide you with a good experience when you browse our site/use our App and also allows us to improve our Platform.

    3. Several cookies and similar technologies we use last only for the duration of your web or app session and expire when you close your browser or exit the App. Others are used to remember you when you return to the Platform and will last for longer.

    4. We use strictly necessary cookies if they are necessary for the performance of a contract with you, or because using them is in our legitimate interests (where we have considered that these are not overridden by your rights). We use all other cookies with your consent.

    5. We use cookies as part of your experience as detailed below.

    6. Disabling cookies: The effect of disabling cookies depends on which cookies you disable but, in general, the website may not operate properly if all cookies are switched off. If you want to disable cookies on our website, you need to change your website browser settings to reject cookies. How you can do this will depend on the browser you use.
      Microsoft Internet Explorer
      •  Select the Tools menu > Internet Options
      •  Click on the Privacy tab
      •  Click on Advanced within the Settings section and select the appropriate setting
      Google Chrome
      •  Select Settings > Advanced
      •  Under Privacy and Security > Content settings
      •  Click Cookies and select the relevant options
      Safari
      •  Select Preferences > Privacy
      •  Click on Remove all Website Data
      Mozilla Firefox
      •  Choose the Tools menu > Options
      •  Click on the Privacy icon
      •  Select the Cookie menu and select the relevant options
      Opera 6.0 and further
      •  Choose Files menu > Preferences
      •  Select Privacy
      We may also separately prompt you regarding our use of cookies on the Site.
      Please note that even if you opt-out of such cookies or otherwise opt-out of interest-based advertising, you may still receive advertisements, but they may not be tailored to your interests. Also, if you opt-out and later delete your cookies, use a different browser, or buy a new computer, you may need to renew your opt-out choices.
      Like many other companies, our Platform may not be configured to respond to browsers' “Do Not Track” signals because at this time no formal “Do Not Track” standard has been adopted.

  13. Children’s Personal Data
    We do not knowingly collect information from minors.
    Our Platform is intended for and directed to adults. Our Platform is not directed to minors and we do not knowingly collect personal data from minors.

  14. California residents
    This section provides additional details about the personal data we collect about California consumers as well as the rights of California consumers under the California Consumer Privacy Act (“CCPA”).

    1. How We Collect, Use, and Disclose your Personal Data. This section describes the personal data we may have collected over the last 12 months, including the categories of sources of that information. We collect this information for the purposes described above in this Notice. We share this information as described above in this Notice. We use cookies, including advertising cookies, as described above in this Notice.

    2. Your CCPA Rights and Choices. As a California consumer and subject to certain limitations under the CCPA, you have choices regarding our use and disclosure of your personal data:
      •  Exercising the right to know. You may request, up to twice in a 12-month period, the following information about the personal data we have collected about you during the past 12 months:
          ◦  the categories and specific pieces of personal data we have collected about you;
          ◦  the categories of sources from which we collected the personal data;
          ◦  the business or commercial purpose for which we collected the personal data;
          ◦  the categories of third parties with whom we shared the personal data; and
          ◦  the categories of personal data about you that we disclosed for a business purpose, and the categories of third parties to whom we disclosed that information for a business purpose.
      •  Exercising the right to delete. You may request that we delete the personal data we have collected from you, subject to certain limitations under applicable law.
      •  Exercising the right to opt-out from a sale. You may request to opt out of any “sale” of your personal data that may take place. As described in this Notice, we do not sell your data for any reason, including for interest-based advertising. Under CCPA, a “sale” of personal data means a disclosure of personal data for monetary or other valuable consideration. We have no actual knowledge that we have sold any personal data of California residents 15 years of age and younger.
      •  Non-discrimination. The CCPA provides that you may not be discriminated against for exercising these rights.

      To submit a request to exercise any of the rights described above, you may contact us at help@laybuy.com. We may need to verify your identity before responding to your request, such as verifying that the email address from which you send the request matches your email address that we have on file. Authentication based on a government-issued and valid identification document may be required. If you are an indirect customer of Laybuy, please direct your requests directly to the entity with which you shared your personal data.