PRIVACY POLICY
Last Updated: 12/10/2024
Mestiere operates an online platform that enables manufacturers to connect with designers and architects for bespoke custom furniture projects. This Privacy Policy describes the privacy practices of Mestiere and how we handle personal information that we collect through our website, platform, and any other website or service that links to this Privacy Policy (collectively, the “Services”).
1. PERSONAL INFORMATION COLLECTION
We collect the following categories of personal information:
Information you provide to us:
- Contact information, such as your first and last name, email address, mailing address, phone number, professional title, and company name.
- Profile information, such as your professional biography, business type, description of services, social media account details, and portfolio.
- Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
- Payment information needed to complete your transactions with us, which may include payment card information, bank account and wire transfer information, and billing information. Payment card information may be processed by our payment service provider, which may handle your payment information in accordance with its own privacy policy.
- Usage information, such as information about how you use the Services and interact with us, including information you provide when you use any interactive features of the Services.
- Marketing information, such as your preferences for receiving communications about our Services, and details about how you engage with our communications.
Information we obtain from third parties:
- Social media pages. We may maintain pages on social media platforms, such as X, LinkedIn, Facebook, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
- Social media logins. When you access the Services using a third-party service such as Facebook, you may direct the service to send us personal information as controlled by that service or as authorized by you via your privacy settings at that service.
- Other sources. We may obtain your personal information from other third parties, such as publicly available sources and data providers.
Automatic data collection.
We, our advertising partners, and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our website and the Services, our communications, and other online services, such as:
- Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state, or geographic area.
- Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to our website, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access, and whether you have opened our marketing emails or clicked links within them.
We use the following tools for automatic data collection:
- Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
- Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
- Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
We use the following categories of cookies:
- Necessary. We use necessary cookies to help make our website usable by enabling basic functions like page navigation and access to secure areas of the website. Our website cannot function properly without these cookies.
- Functional. We use functional cookies to provide a personalized experience to visitors of our website, including your preferred language or the region that you are in.
- Analytics. We use analytics cookies to recognize and count the number of visitors to, and to see how visitors move around, our website. This helps us to improve the way our website works, for example by making sure users are finding what they need easily. For example, we use Google Analytics to collect information about how users use our Services, which we then use to compile reports that disclose trends without identifying individual visitors.
- Advertising. We, our service providers, and our third-party advertising partners use these cookies to collect information about how you use our website and use that information to serve online ads or other marketing and advertising that may be relevant to your interests.
2. PERSONAL INFORMATION USE
We use personal information for the following purposes:
Providing and supporting our Services. We use personal information to operate, maintain, and provide you with our Services. In particular, we will use personal information to perform our contractual obligation under our terms of use, such as to allow you to create an account and use the Services.
Communicating with you about our Services. It is in our legitimate business interests to use personal information to respond to your requests, provide customer support, and communicate with you about our Services, including by sending announcements, updates, security alerts and support and administrative messages.
Improving, monitoring, personalizing, and protecting our Services. It is in our legitimate business interests to improve and keep our Services safe for our users, which includes:
- understanding your needs and interests, and personalizing your experience with the Services and our communications;
- troubleshooting, testing and research, and to keep the Services secure; and
- investigating and protecting against fraudulent, harmful, unauthorized or illegal activity.
Research and development. We may use personal information for research and development purposes in our legitimate business interests, including to analyze and improve the Services and our business. As part of these activities, we may create aggregated, de-identified or other anonymous data from personal information we collect. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services, and promote our business.
Marketing and advertising. We, our service providers, and our third-party advertising partners may collect and use personal information for the following marketing and advertising purposes:
- Direct marketing. We may send you direct marketing communications as permitted by law, including by email. You may opt out of our marketing communications as described in the “Opt-out of marketing communications” section below.
- Interest-based advertising. We may engage advertising partners, including third party advertising companies and social media companies, to display ads on the Services and other online services. These companies may use cookies and similar technologies to collect information about your interaction over time across the Services and other online services, and use that information to serve online ads that they think will interest you. We may also share information about our users with these companies to facilitate interest-based advertising to our or similar users (known as a “lookalike audience”) on other online platforms.
Except where consent is required, we undertake such marketing and advertising on the basis of our legitimate business interest. Where we seek your consent, you may withdraw your consent at any time.
Compliance and protection. We may use personal information to comply with legal obligations, and to defend us against legal claims or disputes, including to:
- Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
- Protect our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims).
- Audit our internal processes for compliance with legal and contractual requirements and internal policies.
- Enforce the terms and conditions that govern our Services.
- Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.
3. PERSONAL INFORMATION DISCLOSURE
We may disclose personal information to:
- Service providers. Companies and individuals that provide services on our behalf or help us operate our Services or our business (such as hosting, information technology, customer support, email delivery, and website analytics services).
- Advertising partners. Third party advertising companies, including for the interest-based advertising purposes described above, which may collect information on the Services through cookies and other automated technologies.
- Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.
- Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
- Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in Mestiere (including, in connection with a bankruptcy or similar proceedings).
4. YOUR RIGHTS & CHOICES
Account choices. If you have an account with us, you can review and update certain account information by logging into your account. You may also contact us to request deletion of your account and certain personal information.
Opt out of marketing communications. You may opt out of marketing-related communications by following the opt-out or unsubscribe instructions in the marketing communications we send you. You may continue to receive service-related and other non-marketing emails or other communications.
Personal information requests. We also offer you choices that affect how we handle the personal information that we control. Depending on your location and the nature of your interactions with our services, you may request the following in relation to personal information:
- Information about how we have collected and used personal information. We have made this information available to you without having to request it by including it in this Privacy Policy.
- Access to a copy of the personal information that we have collected about you. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.
- Correction of personal information that is inaccurate or out of date.
- Deletion of personal information that we no longer need to provide the Services or for other lawful purposes.
- Additional rights, such as to object to and request that we restrict our use of personal information.
To make a request, please email us or write to us as provided in the "Contact Us" section below. We may ask for specific information from you to help us confirm your identity. Depending on your jurisdiction, you may empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.
Limits on your choices. In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are not satisfied with how we address your request, you may submit a complaint by contacting us as provided in the “Contact Us" section below.
Limit online tracking. Here are some of the ways you can limit online tracking:
- Block cookies. Most browsers let you remove or reject cookies, including cookies used for interest-based advertising. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings.
- Limit the use of advertising ID. You may be able to limit use of your mobile device’s advertising ID for interest-based advertising purposes through your device’s settings.
- Use privacy plug-ins or browsers. You can block our Services from setting cookies used for interest-based ads by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, DuckDuckGo, Ghostery or uBlock Origin, and configuring them to block third party cookies/trackers. You can also install a browser add-on to opt out of Google Analytics.
- Advertising industry opt-outs. You can also use these opt-out options to limit use of your information for interest-based advertising by participating companies: Digital Advertising Alliance, Network Advertising Initiative.
- Platform opt-outs. Certain advertising platforms offer opt-out features that let you opt out of use of your information for interest-based advertising, including: Google opt-out, Microsoft opt-out.
Note that the above opt-out mechanisms are specific to the device or browser on which they are exercised. You will need to opt out on every browser and device that you use.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
5. LINKS TO OTHER WEBSITES
The Services may contain links to other websites not operated or controlled by us. The information that you share with these third-party sites will be governed by the specific privacy policies and terms of service of the third-party sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the third-party sites directly for information on their privacy practices and policies.
6. RETENTION
Where required under applicable laws, we retain personal information only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations or until you withdraw your consent (where applicable).
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.
7. DATA SECURITY
We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. However, no security measures are failsafe, and we cannot guarantee the security of your personal information.
8. INTERNATIONAL DATA TRANSFERS
You will provide personal information directly to our website in the United States. We may also transfer personal information to our service providers in the United States and other jurisdictions. Please note that such jurisdictions may not provide the same protections as the data protection laws in your home country. When we engage in cross-border data transfers, we will ensure that relevant safeguards are in place to afford adequate protection for personal information and we will comply with applicable data protection laws, in particular by relying on an EU Commission or UK government adequacy decision or on contractual protections for the transfer of personal information. For more information, please contact us as set out in the “Contact Us” section below.
9. CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you.
10. CONTACT US
Mestiere Corp. is the entity responsible for the processing of personal information and is the data controller in respect of such processing. If you have any questions or comments about this Privacy Policy, our privacy practices, or if you would like to exercise your rights with respect to personal information, please contact us by email at: concierge@mestiere.io.