Privacy policy

Privacy Policy and Cookies Policy

Last modified October 12, 2026

At AHAFCD LLC (“L’il Critters,” “We,” “us,” or “our”), We care deeply about your privacy rights.  We are fully committed to being transparent about our privacy practices, including how We treat your Personal Information.  This Privacy Policy and Cookies Policy describes the information collected through your use of our websites, online store, blog, and electronic services (collectively, our “Service”), how We use it, how We share it, how We protect it, and the choices you can make about your information.

While our Services involve the promotion and sale of numerous wellness and health-related products, We do not use the fact that you have browsed or purchased a particular product to profile you based on any health conditions or to target ads to you specifically based on your individual health condition.

This does not apply to the Personal Information of our employees, independent contractors, and job applicants when such information is collected and used by us when they act in those capacities.  We make disclosures about their Personal Information in other documents.

ATTENTION:  PLEASE READ OUR PRIVACY POLICY AND COOKIES POLICY CAREFULLY BEFORE USING OUR SERVICE.  USING OUR SERVICE INDICATES THAT YOU ACCEPT AND AGREE TO BE BOUND BY THIS PRIVACY POLICY AND COOKIES POLICY IN FULL.  IF YOU DO NOT ACCEPT THIS PRIVACY POLICY AND COOKIES POLICY, DO NOT USE OUR SERVICE.  You acknowledge (a) that you have read and understood this Privacy Policy and Cookies Policy; and (b) this Privacy Policy and Cookies Policy will have the same force and effect as a signed agreement.

Table of Contents

We recommend that you read this Privacy Policy and Cookies Policy (this “Policy”) in full to ensure you are fully informed; however, if you only want to access a particular section of this Privacy Policy and Cookies Policy, then you can click on the relevant link below to jump to that section.

 

I.  Types of Personal Information We Receive or Collect

“Personal Information” (also called “personal data” or “personally identifiable information” under certain laws) is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your personal device.  Personal Information does not include aggregated or de-identified information that cannot be used directly or indirectly to personally identify you or your personal devices.

We receive or collect Personal Information from you when you use our Service, contact or interact with us, sign up for our newsletter or other mailing list, and voluntarily provide us with your feedback, comments, and other content in connection with using our Service.

In addition to the Personal Information you provide directly to us, we also may collect certain Personal Information about you from indirect sources.  These indirect sources may include third-parties and our partners.  For instance, we may receive information about you from a friend who refers you to our Service, from a partner company that helps us to provide our Service, or from a social media platform that you use to interact with our Service or content. We may combine the information we receive from these indirect sources with information you provide directly to us and use it for the purposes described in this Policy.

The following list describes the general categories of Personal Information We have collected or otherwise received in the past 12 months, along with examples of some of the types of information within these categories that may constitute Personal Information and which We may have collected or otherwise received.  

• Contact information and other identifiers, such as name, contact information, including email address, telephone number, shipping and billing address, payment information, account name and other similar identifiers.
• Unique device, internet/electronic network activity and online identifiers such as your IP address, your Internet service provider, your general location, your mobile device information (e.g., device model and operating system version, mobile advertising identifier), your browsing information, information about connections with social media pages you access from our Service (such as Facebook, X, and Pinterest), your social sharing activity and other similar identifiers. We also collect aggregated information that, on its own, cannot be used to specifically identify you.
• Audio information, such as voice call recordings from our call center.
• Commercial information, such as records of products purchased or considered.
• Inferred and behavioral information, such as browsing patterns, product interest profiles, session recordings, heatmap data, and advertising audience segments derived from your activity on our Service, collected through tools such as Microsoft Clarity and our advertising partners.
• Customer service communications, such as the content of chat conversations, support tickets, and phone call records collected through our customer support platform.

Additional Personal Information We collect is described in Section V (Cookies and Other Tracking Technologies).

II. How We Use Your Information

Depending on our relationship with you, We use the information that We collect for several purposes, including:

• The purposes for which you provided it;
• To provide information and services to you;
• To process and respond to your inquiries and comments;
• To send you information about your relationship with us or about new projects or other information that We think you may find interesting;
• To contact you for market research purposes and to use this information to customize our Service according to your interests;
• To administer, operate, and improve our Service, or to further the mission of L’il Critters;
• To send periodic emails.  If you choose, the email address you provide may be used to send you occasional news, updates, related product or service information, etc.  Note:  If, at any time, you would like to unsubscribe from receiving future emails,  We include detailed unsubscribe instructions at the bottom of each email;
• To deliver more personalized and relevant content and advertisements to you;
• To generate and review reports and data about our user base and Service usage patterns;
• To compile aggregate data and analytics for internal and external business purposes;
• To prevent fraud and abuse of our Service and to otherwise protect users and visitors and our business;
• To assist law enforcement and respond to subpoenas;
• To perform other business activities as needed, or as described elsewhere in this Policy; and
• As explained elsewhere in this Policy, Personal Information We collect may be processed by our partners in providing services related to our Service (such as administration, technical and maintenance services, customer service, payment processing services and analytical services, among others).

III.  Legal Bases for Using Personal Information

• Legitimate interests.  We may use your Personal Information for our legitimate interests.  For example, We rely on our legitimate interest to analyze and improve our Service and the content on our website, to send you notifications about our Service, or to use your Personal Information for administrative, fraud detection, or other legal purposes.
• Performance of a contract.  The use of your Personal Information may be necessary to perform the agreement you have with us to provide products and services.  For example, to complete your purchase, to register and maintain your account, to help with delivery issues, to handle returns, and to respond to your requests.
• Consent.  We may process your Personal Information when you have provided your informed consent to that processing. Where we rely on your consent to process your Personal Information, you are free to withdraw your consent at any time, subject to the “Your Choices Regarding Your Information” section below and the preceding Legal Bases for Using Personal Information in this Section.

IV.  How Your Information is Disclosed

Information may be disclosed to third parties in accordance with this  Policy.  Please note that a user may choose not to share certain information as described in Your Choices Regarding Your Information section below.

A.  Third Party Service Providers

We may use third-party service providers to perform functions in connection with our Service, such as payment processing, email marketing, site analytics, social sharing, relationship management, functions related to analyzing and improving our Service usefulness, reliability, user experience, operation,  data storage, and as otherwise described in this Policy.  Specifically, our service providers may be assisting us with verification of your shipping address, content delivery, monitoring inventory levels, product ratings and reviews, providing credit and debit card payment processing (such as PayPal) and order fulfillment and shipment processing, email marketing, fraud prevention and order placements, facilitating communications for order fulfillment, email transmission for multi-factor verification, creation of shopping feeds for our users, and communicate with users regarding orders and other customer service inquiries.  The identity of certain of these service providers includes the following:

Instagram.  By clicking on the Instagram button on our Service, you will automatically be transported to the official Instagram feed of L’il Critters, @lilcrittersgummies, https://www.instagram.com/lilcrittersgummies.

Facebook.  By clicking on the Facebook button on our Service, you will be automatically transported to the official Facebook Page for L’il Critters, https://www.facebook.com/gummybearvitamins/.  L’il Critters allows users to comment on blog posts using the Facebook Comments Plugin and in doing so, L’il Critters may have access to Personal Information about you.  For more information on the Facebook Comments Plugin, please visit https://developers.facebook.com/products/social-plugins/comments/

PayPal.  We use PayPal to process payments.  PayPal may collect information from users, including name, physical address, IP address, device information, phone number, financial account information, details including gender, and other demographic information.  For more information, please visit PayPal’s privacy policy.

TikTok.  By clicking on the TikTok button on our Service, you will be automatically transported to the official TikTok profile for L’il Critters, https://www.tiktok.com/@lilcrittersgummies.

 

B.  Business Changes

If We become involved in a merger, acquisition, sale of assets, joint venture, securities offering, bankruptcy, reorganization, liquidation, dissolution, or other transaction, or if the ownership of all or substantially all of our business otherwise changes, We may transfer your information to a third party or parties in connection therewith.

C. Affiliates

We may also share your information with our affiliates for operational purposes consistent with this Policy, but separate brands do not use the customer databases of other brands for marketing purposes.  Our affiliates will be required to maintain that information in accordance with this Policy.

D.  Investigations and Law

We may disclose information about you to third parties if We believe that such disclosure is necessary to:

• Comply with the law or guidance and cooperate with government, regulatory authorities or law enforcement officials or private parties;
• Investigate, prevent or take action regarding suspected illegal activities, suspected fraud, the rights, reputation, safety, and property of us, users or others, or violations of our policies or other agreements with us; or
• Respond to claims and legal process (for example, subpoenas), or protect against legal liability.

E. Aggregated Information

We may disclose aggregate, anonymous, and other non-identifiable data related to our business and our Services for quality control, analytics, research, development and other purposes.  This information does not contain Personal Information about any user. Where we use, disclose or process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person or personal device) we will maintain and use the information in deidentified form and not to attempt to reidentify the information, except as permitted by applicable privacy laws (such as to confirm whether our deidentification processes are reasonable and adequate).

V. Cookies and Other Tracking Technologies

We, along with third parties, use cookies, local shared objects, web beacons, pixels, scripts, and other technologies for tracking, analytics and personalization and optimization of our Service.  These technologies may collect information about you and your use of our Service, your preferences and activities, pages you visit before and after your use of our Service; pages browsed; items and content you view, search for, hover over, or click on; and information you type or enter into our Service. This information may be used to analyze and track data, determine the popularity of certain content, better understand your online activity and interests, save your preferences and interests so We can personalize your future visits and interactions with us, deliver more relevant and personalized advertising to you, compile aggregate data about Service traffic and interactions, and assist us in improving our Service, among other things. We are not recording all keystrokes, but analyzing anonymous heatmaps about how users use the Service. 

Cookies are small files that are transferred to and stored on your computer through your Web browser (if you allow it) that enable the website’s or service provider’s system to recognize your browser and capture and remember certain information.  You can instruct your browser to stop accepting cookies.  But if you do not accept cookies, you may not be able to use all portions of all functionalities of our Service.

• Persistent cookies remain on the visitor’s computer after the browser has been closed.
• Session cookies exist only during a visitor’s online session and disappear from the visitor’s computer when they close the browser software.

Web beacons are small strings of code that provide a method for delivering a graphic image on a Web page or in an email message for the purpose of transferring data.  You can disable the ability of Web beacons to capture information by blocking cookies.

Some of our service providers, such as our analytics providers, social sharing provider, and social media connections identified in this Privacy Policy, also use these and other tracking technologies on our website, some of which may track users across websites and over time.  If you have any questions concerning the use or policies of those third parties, We encourage you to consult their Privacy Policies and Terms of Use directly.

Targeted Advertising:

We may ourselves, or with third-party vendors, use your information to deliver targeted advertising to you when you visit our Services or other websites. Cookies, clickstream data, and other similar technologies described in this Policy may be used in this process. For example, if you are searching for information on a particular product, we or our vendor may cause an advertisement to appear on other websites you view with information on that product. This form of advertising, sometimes called “targeted advertising,” “behavioral advertising,” or “cross-context behavioral advertising,” enables us and our vendors to know about your interests in connection with the delivery of a specific ad. We believe that such advertising is helpful because it allows you to see advertisements that are relevant to your interests.

You may opt out of receiving targeted ads from certain data and advertising partners that participate in certain industry self-regulatory programs. The Digital Advertising Alliance (DAA) provides a website at www.aboutads.info/consumers with information about how to opt out of targeted advertising from some or all of the DAA’s participating companies. Additionally, the Network Advertising Initiative (“NAI”) offers a website at http://optout.networkadvertising.org/ where you can learn how to opt out of interest-based advertising. Please note that by opting out, you will continue to see generic advertising that is not tailored to your specific interests and activities.

For targeted advertisements delivered through mobile apps, users may opt out of certain ads or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on your iOS and Android device, visit the following links:

·       iOS - https://support.apple.com/en-us/HT202074

·       Android - https://support.google.com/ads/answer/2662922?hl=en

·       Information from the NAI - https://thenai.org/how-to-opt-out/advertising-privacy-settings-on-mobile-devices/

You can also install the DAA’s AppChoices app on your device to opt out of targeted advertising by certain providers, and to select system-level advertising preferences on your device (such as “Limit Ad Tracking” on Apple devices, or “Opt-out of Interest-based ads” on Android devices).

 

VI.  Data Retention Policy, Managing Your Information

We will retain your information for as long as you use our Service and for no longer than is necessary for the purposes for which the Personal Information is processed and to the extent permitted by laws.  L’il Critters is a regulated entity and must retain order records under United States Food and Drug Administration regulations.  We may maintain anonymized or aggregated data, including usage data, for analytics purposes.  We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, or for the period required by laws in applicable jurisdictions.  The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide our Services to you; (ii) whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); and (iii) whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation, or regulatory investigations).

Please note that all or some of the information We have collected may be required for our Service to function properly.  Our current policy is to maintain order records for two (2) years to allow us to protect and meet our legal and policy requirements, rights, and responsibilities.

VII.  Security

We implement and maintain reasonable technical and organizational security measures appropriate to the nature of the Personal Information that We collect, use, retain, transfer or otherwise process.  Our reasonable security program is implemented and maintained in accordance with law and relevant standards.  However, there is no perfect security, and reasonable security is a process that involves risk management rather than risk elimination.  While We are committed to developing, implementing, maintaining, monitoring and updating a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated.  Data security incidents and breaches can occur due to vulnerabilities, criminal exploits, and other factors that cannot reasonably be prevented.  Accordingly, while our reasonable security program is designed to manage data security risks and thus help prevent data security incidents and breaches, it cannot be assumed that the occurrence of any given incident or breach results from our failure to implement and maintain reasonable security.

TO THE EXTENT PERMISSIBLE UNDER LAW, WE ASSUME NO LIABILITY FOR DISCLOSURE OF YOUR INFORMATION DUE TO TRANSMISSION ERRORS, THIRD PARTY ACCESS, OR CAUSES BEYOND OUR CONTROL.

VIII. Cross Border Transfers

Any information collected through our Service is stored and processed in the U.S.  If you use our Service outside of the U.S., We will take steps that are reasonably necessary to ensure that your Personal Information is treated securely and appropriately safeguarded in accordance with this Policy and applicable data protection or privacy laws.  The laws of the U.S. may differ from those of your home jurisdiction.  Be advised that we may be required to disclose your Personal Information in response to lawful requests by public authorities in the United States, including to meet national security or law enforcement requirements.

IX. Links to Other Websites or Applications

This Policy applies only to our Service.  Our Service may contain links to other websites or apps or may forward users to other websites or apps that We may not own or operate and to which this Policy does not apply.  The links from our Service do not imply that We endorse or have reviewed these websites or apps.  The policies and procedures We describe here do not apply to these websites or apps.  We can neither control nor are responsible for the privacy practices or content of these websites or apps.  We suggest contacting these websites or app providers directly for information on their privacy policies.  Nonetheless, We seek to protect the integrity of our Service, and welcome any feedback about these linked websites and mobile applications.

X.  Your Choices Regarding Your Information

You have choices regarding the use of information by our Service.  We respect your privacy rights and provide you with reasonable access to the Personal Information that you may have provided through your use of our Services.  You may update, correct, or delete your account information and preferences at any time by accessing your account settings page on our Service.  Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, We may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where We otherwise reasonably believe that We have a legitimate reason to do so.

You may decline to share certain Personal Information with us, in which case We may not be able to provide to you some of the features and functionality of our Service.

L’il Critters offers you the opportunity to opt-out from marketing email communications from L’il Critters or manage your subscription preferences for emails from us at any time by using the “unsubscribe” mechanism within any marketing email we send to you. We will implement your opt-out request within ten (10) business days of receiving it. Even if you opt out, we may still send you non-commercial emails, such as transaction details and responses to direct requests.

Changing Your Information

To change your information, please contact us at customerservice@lilcritters.com.

XI.  Information Collected From Other Websites and Mobile Applications and Do Not Track Policy

Your browser or device may offer you a “Do Not Track” option, which allows you to signal to operators of websites, web applications, mobile applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time or across different websites or applications.  Except as required by applicable law, our Service does not support Do Not Track requests at this time.

XII. Aggregated Information

We may share aggregated information relating to users of the Service with affiliated or unaffiliated third parties.  This aggregated information does not contain Personal Information about any user.

XIII.  Children

Our Service is not intended for children under the legal age of majority in your jurisdiction.  We do not knowingly collect or sell Personal Information from individuals under the legal age of majority.  If you are under the legal age of majority in your jurisdiction, please do not submit any Personal Information through our Service.  If you have reason to believe that We may have accidentally received Personal Information from an individual under the legal age of majority, please contact us immediately at customerservice@lilcritters.com.

XIV. Accessibility

If you are having difficulty accessing the Service or this Policy, then you may make accessibility-related requests or report barriers by contacting us at 1888 334 5389 or customerservice@lilcritters.com.

XV. Changes to Policy

We reserve the right to update or modify this Policy at any time and from time to time without prior notice.  We will post those changes on the website or update this Policy modification date below.  In certain cases, and if the changes are material, you will be notified via email or a notice on our website.

 

XVI. How to Contact Us

Please feel free to contact us by email at customerservice@lilcritters.com, calling our toll-free number at 1888 334 5389, or by writing us at AHAFCD LLC, 3900 Veterans Memorial Highway, Suite 200, Bohemia, New York 11716, if you have any questions about this Policy.

APPENDIX 1: U.S. STATE CONSUMER PRIVACY SUPPLEMENT

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another U.S. state that has similar comprehensive privacy legislation (collectively, “Covered States”), you may have specific rights regarding your Personal Information under: the California Consumer Privacy Act (“CCPA”), Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, Montana Consumer Data Privacy Act, Iowa Consumer Data Protection Act, Delaware Personal Data Privacy Act, Nebraska Data Privacy Act, New Hampshire Data Privacy Act, New Jersey Data Privacy Act, Tennessee Information Protection Act, Minnesota Consumer Data Privacy Act, Maryland Online Data Privacy Act, Indiana Consumer Data Protection Act, Kentucky Consumer Data Protection Act, Rhode Island Data Transparency and Privacy Protection Act, and similar laws in other U.S. states (collectively, "State Privacy Laws"). This section describes the rights that consumers of Covered States have and explains how to exercise those rights. To be clear, these rights are granted only to the extent that you are considered a consumer of Covered State and we are acting as a “controller” or “business” (as applicable) under State Privacy Laws with respect to your personal information.

NOTICE AT COLLECTION

1. Collection, Processing, Disclosure, and Sharing of Personal Information

The following chart details which categories of Personal Information we have collected and disclosed for our operational business purposes, including within the 12 months preceding the date this Policy was last updated.  The chart also details the categories of Personal Information that we “share” for purposes of cross-context behavioral or targeted advertising, including within the 12 months preceding the date of this Policy was last updated. 

 

We do not knowingly collect Personal Information defined as “sensitive” under State Privacy Laws, and do not seek to collect such information.

 

Data Subject Access Rights:

 

Your Right To Request Disclosure of Information We Collect and Share About You

We are committed to ensuring that you know what Personal Information We collect.  To that end and to the extent that the right is provided to you under State Privacy Laws, you can request the following information from us, with respect to the Personal Information that We have collected about you in the 12 months prior to our receipt of your request:

• The categories of Personal Information We have collected about you.
• The categories of sources from which We collected your Personal Information
• The business or commercial purposes for which We collected the Personal Information
• The categories of third parties with which We shared the information
• The specific pieces of Personal Information We collected

You can also submit a request to us for the categories of Personal Information that We have disclosed for a business purpose.

Subject to exceptions under State Privacy Laws, residents of Minnesota or Oregon have the right to: (i) confirm additional information about the categories of personal information we have processed about them; and (ii) obtain a list of third parties to which we have disclosed the personal information of Minnesota or Oregon consumers. Residents of Delaware or Maryland have the right to obtain a list of the categories of third parties to which we have disclosed the personal information of Delaware or Maryland consumers.

Your Right To Request Correction or Deletion of Personal Information We Have Collected From You

Upon your request and to the extent the right is provided to you under State Privacy Laws, We will correct or delete the Personal Information We have collected about you, except for situations where we cannot verify your identity or State Privacy Laws authorize us to retain specific information, including when it is necessary for us to provide you with a product or service that you requested; perform a contract We entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law.  

Your Right to Withdraw Consent

To the extent the right is provided to you under applicable law, you can withdraw your consent to process your Personal Information.

Your Right to Data Portability

 

You may have the right to obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.

Your Right to Opt-Out of Selling, Sharing or using your Personal Information for Targeted Advertising

You have the right to opt out of the processing of your Personal Information for purposes of: (i) targeted advertising (also called “share” under the CCPA); (ii) the sale of personal information; or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As of the latest date of the Privacy Policy:

• We DO process Personal Information or share it with third parties for the purposes of targeted advertising;
• We DO NOT sell your personal information in exchange for monetary or other valuable consideration; and
• We DO NOT engage in profiling decisions based on your personal information that produce legal or similarly significant effects concerning you.

To the extent required by State Privacy Laws, We will also treat opt-out preference signals as valid opt-out requests.

We do not use the Personal Information of consumers we actually know are less than 18 years of age for purposes of targeted advertising.

California Shine the Light

California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits California residents to annually request, free of charge, information about the Personal Information (if any) disclosed to third parties for direct marketing purposes in the preceding calendar year.  We do not share Personal Information with third parties for their own marketing purposes. If you do not want your Personal Information shared with any third party who may use such information for direct marketing purposes, then you may opt out of any future disclosures by sending an email to us at customerservice@lilcritters.com.

Exercising Your Rights and How We Will Respond

To exercise any of the rights above, or to ask a question:

·       contact us by emailing us at customerservice@lilcritters.com and stating your request.

·       Visit our opt-out page at do not sell or share my personal information.

For requests for know, access, correction, or deletion, We will first acknowledge receipt of your request within 10 days of receipt of your request.  We provide a substantive response to your request as soon as We can, generally within 45 days from when We receive your request, although We may be allowed to take longer to process your request in certain jurisdictions or under certain circumstances.  If We expect your request is going to take us longer than normal to fulfill, We will let you know.

We usually act on requests and provide information free of charge, but We may charge a reasonable fee to cover our administrative costs of providing the information in certain situations.

In some cases, the law may allow us to refuse to act on certain requests.  When this is the case, We will endeavor to provide you with an explanation as to why.

Verification of Identity – Know, Access, Correction, or Deletion Requests

To submit a request, we may ask that you provide us with your name, email address, telephone number, and mailing address, such that we can verify your request. We will process your request based upon the Personal Information in our records that is linked or reasonably linkable to the information provided in your request. We will take steps to verify your request and will process your request by matching the information provided in your request with the information we have in our records. If we cannot verify your identity, we will be unable to process your request to know/access, correct or delete. We will respond to your request as required under the applicable privacy laws. There may also be certain Personal Information for which we will not be able to process your request. For example, if you request deletion, we may need to retain certain Personal Information to comply with our legal obligations or other permitted purposes.

If We are unable to verify your identity with the degree of certainty required based on the type of information or action you are requesting, We will not be able to fulfill your request.  We will notify you to explain the basis of the denial.

Authorized Agents

To the extent authorized in State Privacy Laws, you may designate an agent to submit requests on your behalf.   If you would like to designate an agent to act on your behalf, you and the agent will need to comply with our agent verification process.  You will be required to verify your identity by providing us with certain Personal Information as described above, depending on whether you hold an account with us or not and the nature of the information you require, which We will endeavor to match the information submitted to information We maintain about you.  Additionally, We will require that you provide us with written confirmation that you have authorized the agent to act on your behalf, and the scope of that authorization.  The agent will be required to provide us with proof of the agency relationship, which may be a declaration attesting to the agent’s identity and authorization by you to act on their behalf, signed under penalty of perjury.   Information to identify and verify your agent can be submitted through the same mechanism and at the same time that you submit information to verify your identity.

 

Requests for Household Information

There may be some types of Personal Information that can be associated with a household (a group of people living together in a single dwelling).  Requests for access or deletion of household Personal Information pursuant to the CCPA will be processed by us when we are able to verify the household.

 

Right to Appeal

Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 60 days (45 days for residents of Colorado and Minnesota) of our receipt of your appeal, We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If We deny your appeal, We will provide you with a method for contacting your state attorney general’s office to submit a complaint.

Our Commitment to Honoring Your Rights – Non-Discrimination

If you exercise any of the rights explained in this Privacy Policy and Cookies Policy, We will continue to treat you fairly.  If you exercise your rights under State Privacy Laws, you will not be denied or charged different prices or rates for goods or services, or provided with a different level or quality of goods or services than others.

6. Financial Incentives/Loyalty Programs

If We provide any programs or offerings that are considered “financial incentives” under State Privacy Laws, we will disclose the material details of such program to you so that you can choose whether to opt in. You also have the right to opt out of a financial incentive program at any time.

APPENDIX 2: CANADA SUPPLEMENT

This Appendix 2 (the “Canada Supplement”) supplements the provisions of the Policy if you are located in Canada.

Types of Personal Information We Receive or Collect

Section I of the Policy describes the general categories of Personal Information that We may have collected or otherwise received from you when you use our Service, contact or interact with us, sign up for our newsletter or other mailing list, and voluntarily provide us with your feedback, comments, and other content in connection with using our Service, at any time.

Targeted Advertising

You may opt out of receiving targeted ads from certain data and advertising partners that participate in certain industry self-regulatory programs as set out in Section V (Cookies and Other Tracking Technologies) in the Policy. The Digital Advertising Alliance of Canada (DAAC) provides a Website at https://optout.aboutads.info with information about how to opt out of targeted advertising from some or all of the DAAC’s participating companies. Additionally, as set out in Section V, the Network Advertising Initiative (“NAI”) offers a website at http://optout.networkadvertising.org/ where you can learn how to opt out of interest-based advertising.

For targeted advertisements delivered through mobile apps, users may opt out of certain ads or reset advertising identifiers via their device settings, as set out in Section V in the Policy.

You can also install the DAAC’s AppChoices app on your device to opt out of targeted advertising by certain providers, and to select system-level advertising preferences on your device.

Your Right of Access

At your written request We will inform you whether We hold personal information relating to you. If We do, you have the right to receive a general account of our processing of such personal information. If your request is made in writing, subject to applicable laws and the provisions of this Policy, We will also provide you with access to your personal information that is in our possession. We usually act on requests and provide information free of charge, but We may charge a reasonable fee to cover our administrative costs of providing the information in certain situations. We will inform you of the approximate cost before proceeding to respond to your request.

Your rights to access your personal information are not absolute. Access can be denied for several different reasons under applicable law. If We deny your request for access to your personal information, We will explain why.

Your Right To Correction

If We hold personal information about you and you believe that it is not accurate, complete and up-to-date, you can request to have it corrected. If We discover that information is not accurate, complete and up-to-date, We will take reasonable steps to correct it. We will also send any information that has been amended, where appropriate, to any third parties that have access to the information. If We refuse a request to correct information, We shall explain why and We will make a note of this in your file.

Your Right To Withdraw Consent or Request Deletion

You may at any time withdraw or change your consent to our use or disclosure of your Personal Information, or request us to delete it, subject to legal and contractual restrictions. However, if you do not provide personal information required to supply a product or service, or decide to withdraw your consent to our use and disclosure of such information, We may not be able to provide that product or service.

Your Right to Data Portability

You may have the right to obtain a copy of your Personal Information that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another business without hindrance, where the processing is carried out by automated means.

Verification of Identity – Access, Correction, or Deletion Requests

To submit a request, We may ask that you provide us with your name, email address, telephone number, and mailing address, such that We can verify your request. We will process your request based upon the Personal Information in our records that is linked or reasonably linkable to the information provided in your request. If We cannot verify your identity, We will be unable to process your request to access, correct or delete. There may also be certain Personal Information for which We will not be able to process your request. For example, if you request deletion, We may need to retain certain Personal Information to comply with our legal obligations or other permitted purposes.

Exercising Your Rights and Contact Information

To exercise any of your rights under this Policy, or If you have any questions or concerns regarding our policies and procedures or the way in which your personal data has been used, or if you wish to change your consent to our use and disclosure of your Personal Information, or if you wish to review, update, correct or have us delete your information, please contact us at customerservice@lilcritters.com and state your request.

APPENDIX 3: EEA/UK SUPPLEMENT

This Appendix 3 (the “EEA/UK Supplement”) supplements the provisions of the Policy if you are located in the European Economic Area (“EEA”) or the United Kingdom of Great Britain and Northern Ireland (the “UK”), and are subject to the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) or the UK General Data Protection Regulation, as defined in the Data Protection Act 2018 (“UK GDPR,” and collectively with the GDPR, the “European Privacy Laws”).

A. Definitions

With respect to EEA and UK data subjects, “Personal Data” has the same meaning given to it in the European Privacy Laws. References to “Personal Data” in this EEA/UK Supplement are equivalent to “Personal Information” as used in the Policy.

B. Purposes of Processing

Please refer to Section II (How We Use Your Information) in the Policy for information on the purposes We may use your Personal Data for.

C. Controller & Lawful Bases for Processing

AHAFCD LLC is the controller of the Personal Data We collect through the Service.

We collect and process Personal Data about you only where we have a legal basis for doing so under the European Privacy Laws.  Please refer to Section III (Legal Bases for Using Personal Information) in the Policy for more information on the types of legal bases that we may rely upon.  Note that We may process your Personal Data for more than one purpose, each of which will rely on an appropriate legal basis.

Where We process personal data to meet our legitimate interests, where necessary to meet our legal obligations, We put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms. 

Please reach out to us if you need further details about the legal basis We are relying on for a specific purpose to process your Personal Data.

D. Cookies Policy

You can find more information about the individual cookies we use, their purpose and their duration in the table below:

 

E. Recipients of Personal Data

Please refer to Section IV (How Your Information is Disclosed) in the Policy for information on the categories of recipients of your Personal Data.

F. Cross Border Transfers

As outlined in Section VIII (Cross Border Transfers) in the Privacy Policy and Cookies Policy, the Personal Data collected through our Service is stored and processed in the United States. When transferring your Personal Data out of the EEA/UK We will take steps that are reasonably necessary to ensure that your Personal Data is treated securely and appropriately safeguarded in accordance with European Privacy Laws, including by way of a valid transfer mechanism.

You may contact us at customerservice@lilcritters.com if you want further information on the specific mechanism used by us when transferring your Personal Data out of the EEA/UK.

G. Retention Periods

We will keep your personal data for no longer than is necessary for the purposes for which the Personal Data is processed and to the extent permitted by law.  Please refer to Section VI (Data Retention Policy, Managing Your Information) in the Policy for more information on how long We will store your Personal Data.

H.  EEA/UK Data Subjects Rights

EEA/UK data subjects have the right (subject to certain limitations) under European Privacy Laws to: 

• confirm that We are processing their Personal Data, and how; 
• access or rectify the Personal Data We keep about them; 
• restrict, object to, or erase the processing of your Personal Data, for example where there is no longer a legal ground for us to hold it;
• where We have relied on consent as the legal basis and they withdraw consent for the processing of their Personal Data at any time; and 
• in some circumstances, transfer or port any Personal Data We hold about them to a specified third party.

If you are an EEA/UK data subject and wish to access, transfer, or delete any Personal Data that We hold about you, withdraw your consent to collection or processing your data, or request that We delete any information about you that We have obtained, you can do so by emailing us at customerservice@lilcritters.com and stating your request.  With respect to requests to delete your Personal Data, We will delete or block any ability to access any reference to you in our database, except for information required to be retained as provided for in our Privacy Policy and Cookies Policy, and consistent with our legal requirements and internal data retention policies, as described above in Section VI (Data Retention Policy, Managing Your Information) in the Policy.  This deletion is permanent, and your account cannot be reinstated. 

EEA/UK data subjects also have the right to lodge a complaint with the appropriate supervisory authority in the country where the subject habitually resides, the subject’s place of work, or the place where an alleged infringement of the law occurred. Contact details are available for EEA data protection authorities here, and for the UK here.

I. Contact Information

If you have questions or concerns regarding the way in which your personal data has been used, please contact us at customerservice@lilcritters.com.