Limit the Use of My Sensitive Personal Information

This notice supplements the DISEN Privacy Policy and describes the rights of residents of certain U.S. states — including California under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the "CPRA") — to limit the use and disclosure of their Sensitive Personal Information, and how to exercise those rights with DISEN ("DISEN," "we," "us," or "our"), the operator of shopdisen.com.

1. What Is Sensitive Personal Information?

Under the CPRA and similar state privacy laws, "Sensitive Personal Information" is a specific subset of personal information that includes, among other things: social security, driver's license, state identification card, or passport numbers; complete account log-in credentials (such as a username or account number in combination with a password or access code); financial account details in combination with any required access credentials; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; the contents of mail, email, and text messages (unless we are the intended recipient); genetic data; biometric information; and personal information collected and analyzed concerning a consumer's health, sex life, or sexual orientation.

2. What Sensitive Personal Information Does DISEN Collect?

DISEN collects only limited categories of Sensitive Personal Information in the ordinary course of operating our online store:

• Account credentials. If you create a customer account with us, we collect your account log-in information (email address in combination with a password) so that you can access and manage your account.
• Health-related information you voluntarily share. If you choose to tell us about a health condition, symptom, or goal — for example, in a message to our customer support team, a product review, or a voluntary survey — that information may constitute Sensitive Personal Information. Providing this information is always voluntary.

We do not collect social security numbers, driver's license numbers, precise geolocation, biometric or genetic data, or information concerning racial or ethnic origin, religious beliefs, union membership, or sexual orientation. Payment card details are collected and processed directly by our payment processors and are not stored by DISEN.

3. How We Use Sensitive Personal Information

We use and disclose Sensitive Personal Information only for the following purposes, which are permitted by applicable state privacy laws:

• To perform the services or provide the goods reasonably expected by an average consumer who requests them — for example, to log you into your account, process and fulfill your orders, and respond to your customer support inquiries;
• To detect security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information;
• To resist malicious, deceptive, fraudulent, or illegal actions directed at DISEN and to prosecute those responsible for such actions;
• To ensure the physical safety of natural persons;
• For short-term, transient use, provided the information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction;
• To perform services on our behalf, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, and processing payments; and
• To verify or maintain the quality or safety of our products and services, and to improve, upgrade, or enhance them.

4. Your Right to Limit

Residents of California and certain other U.S. states have the right to direct a business that collects Sensitive Personal Information to limit its use and disclosure to only those purposes necessary to perform the services or provide the goods reasonably expected by an average consumer, and other purposes permitted by law.

Even though DISEN's current practices already limit the use of Sensitive Personal Information to these permitted purposes, you may submit a request at any time, and we will honor it and confirm our practices to you.

5. How to Submit a Request

To exercise your right to limit the use of your Sensitive Personal Information, please email us at support@shopdisen.com with "Limit the Use of My Sensitive Personal Information" in the subject line, and include the following in the body of your email:

• Your first and last name;
• The email address associated with your DISEN account or orders; and
• Confirmation of the U.S. state in which you reside.

We will only use the information you provide in your request to verify your identity and process your request. We will respond to verifiable requests within 45 days of receipt. If we require additional time (up to 45 additional days), we will inform you of the reason and extension period in writing.

6. Authorized Agents

You may authorize an agent to submit a request on your behalf. We may ask your authorized agent to provide proof of your written authorization and to verify their own identity, and we may ask you to confirm directly with us that you have authorized the agent to act on your behalf.

7. Non-Discrimination

We will not discriminate against you for exercising your privacy rights. We will not deny you goods or services, charge you different prices, provide you a different level or quality of goods or services, or suggest that any of these may occur because you exercised your rights under applicable state privacy laws.

8. Changes to This Notice

We may update this notice from time to time. When we do, we will post the updated notice on this page and revise the effective date at the top. Your continued use of our website following the posting of changes constitutes your acceptance of those changes.