Privacy Policy

Last Updated February 27, 2026

  
INTRODUCTION 
 
At Theisen’s we take customer privacy seriously. We believe that managing your privacy is important, and we want you to be informed. This privacy policy (this “Policy”) describes how we collect, process, use, retain, disclose, and otherwise interact with personal data about you when providing Services (as defined below) to you, and our practices for using, maintaining, protecting, and disclosing that information. We respect your privacy and are committed to managing it through our compliance with this Policy. 
 
This Policy applies to your interactions and transactions with Theisen’s, including when you visit our website (www.theisens.com) (the “Site”), when you visit our retail locations, when you purchase our products, and when you otherwise communicate or connect with us (online, by phone, in-person, or otherwise) (collectively, the “Services”). 
 
This policy applies only to information we collect: 
• Through the Services. 
• In communications, including email, text, chat, and other electronic messages, between you and the Services. 
• When you interact with our advertising and applications (including mobile apps) on third-party websites and services, if those applications or advertising include links to this policy. 
 
It does not apply to information collected by: 
• Us offline or through any other means, including on any other website operated by us or any third party (including our affiliates and subsidiaries) that does not link to this Policy; or  
• Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or through the Services. 
 
We may provide additional or different privacy policies that are specific to certain features, services, or activities. 
 
Please read this Policy carefully to understand our policies and practices regarding your information and how we treat it.  When you use the Services, you consent to our use of your personal information as described in this Policy. We may periodically revise this Policy, including when there are changes to the law, technology, or our business. Your continued use of the Services after any revisions means you consent to and acceptance of the revised Policy. Because we want you to be informed and privacy aware, we encourage you to review this Policy periodically to ensure you keep up to date with and understand our privacy practices. 
 
MORE INFORMATION SPECIFIC TO RESIDENTS OF CERTAIN STATES 
 
PLEASE SEE THE “YOUR STATE PRIVACY RIGHTS” SECTION OF THIS POLICY FOR ADDITIONAL TERMS THAT MAY APPLY TO YOU.

CHILDREN'S AND MINORS' DATA 
 
Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 18. If we learn we have collected or received personal data from a child under 18 years old without verification of parental consent, we will delete that information and otherwise comply with the requirements of any applicable law including the Children’s Online Privacy Protection Act (applicable to children under 13). If you believe that we might have any information from or about a child under the age of 18, please contact us at customerservice@theisens.com. 
 
PERSONAL DATA/PERSONAL INFORMATION 
 
"Personal Data" or “Personal Information” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information (for example, account information such as name, postal address, and email address or any other identifier we may use to contact you online or offline).    
 
THEISEN’S DATA COLLECTION 
 
Types of Information We Collect 
 
Theisen’s collects or processes the following categories and types of information, which may constitute personal information: 
• Account and contact information, including name, address (such as home address, work address, or other address), email address, phone number, username, and other contact information you provide us.
• Payment information, including credit card or debit card information and information about the payment methods and services (such as PayPal or Venmo) you use in connection with the Services.  
• Account history, including information about your subscription, account, transactions, purchases, order history, or discounts.  
• Demographic information, including your age, gender, income level, education, or family or marital status, if you have consented to such information collection. 
• Location information, including general geographic location such as country, state or province, or city and precise geolocation, if you have enabled and consented to location information collection.  
• Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information. 
• Content and information you elect to provide as part of your profile or in any reviews you make through the Services or emails, chats, or other communications sent to us.  
• Images, voice recordings, and videos collected or stored in connection with the Services.
• Identity document information, such as Social Security and driver's license numbers, if you have consented to such information collection.
• Biometric information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data, if you have consented to such information collection.

 
Definitions of the categories used in this Policy include: 
 
Identifying Information (or “Identifiers”) – your name, alias, postal address, billing or shipping address, email address, telephone or mobile number, account name, username, password, and any unique or similar identifiers. 
 
Payment and Credit Information – Your credit or debit card information, banking information, information about your payment transaction, gift card information, or other financial information you provide us. When you make credit and debit card payments, you are providing that information directly to our PCI-compliant third-party payment processors and not to us. Our third-party payment processor does provide us the last 4 digits of your credit or debit card to facilitate future orders. We do not directly access, handle, or store your credit or debit. 
 
Device Information – The operating system of your device, device identifier, the type of device you are using, and other mobile identifiers. 
 
Commercial Information – Products or services purchased, obtained, or considered. Information about your orders, shipping details, returns, product complaints, product reviews, and warranties. Content of texts or emails you send to us. Other purchasing or types of products and services you own and are interested in; and your consuming histories or tendencies. Information you provide when you create a wish list. Your feedback, comments, videos, photos, messages, social media, and other user generated content you post to the Site, our Social Media accounts, or send to us via email, text, live chat, or other methods of communication. We will only use that information in the context in which you provide it to us. 
 
Internet and Network Activity – Internet or other electronic network activity information, including browsing history, search history, time and date you visited the Site, information on or a recording of your interaction with the Site.  Information on your interactions with the Services, our advertisements, navigation, and activity in the Services, and how you use your account. Your keyboard strokes and mouse movements, scrolls, and clicks while visiting the Site, any forms displayed or populated, browser type, internet service provider, operating system information and the website or advertisement you visited or interacted with prior to visiting the Site.
 
Audio/Video/Sensory Information – CCTV video and images captured in and around our stores, audio recordings of customer calls, and images you share with Theisens.com.
 
Employment Information – Information such as work experience, education, skills, behaviors, motivations, licenses and certifications, and any other information you provide to us through our employment application or as part of your employment with us.

Geolocation Data – Imprecise location information, such as the zip code, country and city associated with your IP address. When you enable location services on our App, we will collect and use location data, including the real-time geographic location of your device.
 
Sensory Data – Recordings of customer service calls and security footage of our stores. 
 
Inferences – Information derived from your preferences, characteristics, predispositions, and behavior, as well as other information that helps us identify or predict which products you may be interested in. 
Sensitive Personal Information -- We do not collect Sensitive Personal Information as that term has been defined under applicable law. All information collected falls under the definition of Personal Information. Some of the information identified above may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive personal data only with your consent. If you choose not to provide or allow us to collect some information, we may not be able to provide you with requested features, services, or information. 

How We Collect Information From and About You 
 
Information You Voluntarily Provide to Us. We collect information about you when you interact with our Services. You may provide us information in interacting with our Services, when you: 
• Create or update an account with us 
• Purchase a product or a gift card, including when you submit your payment and credit information to Theisen’s or its payment processors 
• Sign up for emails, news updates, promotions, or our text messaging program 
• Participate in surveys, sweepstakes, focus groups, marketing initiatives, contests, events, or promotions 
• Make a return or exchange 
• Contact Customer Service, or request information about us or our Services – please note that we may record calls with you for training, customer service, fraud prevention, or quality purposes 
• Submit product reviews, surveys, and feedback, including photos of products 
• Track an online order 
• Communicate with us by e-mail, mail, texting, phone, filling out web forms, or requesting materials or through the Chat or Email function in the Services 
• Interact with us on our social media pages 
• Apply for a job (online or in-person) 
• Through the employment process 
• Create a wish list 
  
Information We Collect Through Other Means. We like to know who our customers are and how they are using our products, so we can market the right products to the right people. As a result, we may also collect, obtain, or supplement information about you (including personal information) from sources other than you, including publicly available sources and records, social media platforms, forums, blogs, other users of our products and services, our affiliates, our service providers, and third-party marketing partners. 
 
Information When You Shop at Our Stores. We may also collect information from you when you shop at our stores, including much of the same information we would collect if you shopped online (i.e., order information, payment information, etc.). If you pay by personal check, we may also collect your driver’s license number for verification and fraud prevention purposes. In addition, to keep our employees and our customers safe, we use CCTV cameras in our retail stores and other company locations. These cameras collect and store audio, video, images, and other associated information to help us with fraud prevention, security, and risk management. Our CCTV cameras are provided by trusted third-party vendors, so video and images, as well as other associated information, are shared with both Theisen’s and those trusted vendors. 
 
Information From Emails. We collect information about your interactions with emails sent by us or on our behalf, including whether you opened the email or clicked on any links. We may use this information to improve our marketing, to understand our audience, and to improve the Services. If you wish to opt out of receiving emails from us, please see the “Opt-Out” section, below.  
 
SMS Privacy Statement.  Theisen's will not sell or share any information collected via their SMS/MMS campaigns to any third parties for marketing purposes. Additionally, Theisen's automatically collects information when visiting our website, which may include cookies, third-party tracking technologies, and server logs. A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. Theisen's uses cookies to determine when a visitor's cart has been abandoned and to keep track of the items placed in the cart, as well as to perform other crucial ecommerce capabilities. 
 
Information From Business Partners and Service Providers. We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as email platform providers, content delivery services, payment processors, promotions services, gift card program providers, analytics, security and anti-fraud services, and data brokers. We also may receive personal data from business partners that we engage to share consumer information with us, including your personal preferences and demographic information such as age, gender, and income level so that we can better provide you with a personalized experience, including personalized content, offers, and services. See THIRD-PARTY DATA COLLECTION AND ADVERTISING for additional information.

Information We Collect Automatically When You Use the Services. When you use or interact with the Services, we may use a variety of technologies that collect information that may include personal data automatically, including cookies, third-party tracking technologies, and server logs. Those technologies may collect, among other things, usage details, your IP address, location, device type, date and time of visit, operating system, and browser type, information obtained through cookies, web beacons, and other tracking technologies, as well as your activities on the Site. We also use these technologies to monitor the performance of the Site, troubleshoot the Site, and optimize your experience. If you are interacting with the Services on a mobile device, additional information may be collected, including your mobile device’s unique device ID, its GPS signal, and information about how you use the Services. The information may also be collected by, received by, or shared with our service providers or third parties who assist us with these activities. We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services (behavioral tracking). We use these technologies to help us improve our Services, to deliver a better and more personalized experience, and to better understand our users.  The technologies we use for this automatic data collection may include: 
 
• Cookies. A cookie is a small file placed on your device when you interact with the Services. The website stores the cookie on a visitor's computer, and the visitor's browser provides it to the website each time the visitor returns. Theisen's uses cookies to determine when a visitor's cart has been abandoned and to keep track of the items placed in the cart, as well as to perform other crucial ecommerce capabilities. We, our service providers, and the third parties described below may use session cookies. A session cookie is available only during the course of the browser session. The information is not sent to or stored on a computer’s hard drive. Closing the browser or logging off will invalidate the session cookie. We and our service providers and other third parties described below may also use machine cookies, which do remain on a computer hard drive and gather information, sometimes over time and across sites. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services. You can find more information about your choices regarding cookies under the heading “YOUR CHOICES ABOUT OUR COLLECTION, USE, AND DISCLOSURE.” 
 
• Web Beacons. “Web beacons” or “tracking pixels” (also referred to as clear gifs, pixel tags, and single-pixel gifs) are small electronic files (in the form of an electronic image, tag, or script) that place a graphic on a web page or in an e-mail message that tracks pages viewed or e-mail messages opened.  They allow access to cookies, and, among other things, help track general usage patterns of visitors to online services. Web beacons can recognize certain types of information, such as cookies, time and date of a page view, and a description of the page where the web beacon is placed. They may also be used to track interactions with emails and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). We, our service providers, and the third parties described below may use web beacons to compile information regarding your use of the Services.
 
• Location Information: We may collect information about your location (via GPS or other technologies), including when you enable location-based features in the Services, such as allowing us to show you the nearest Theisen’s store.  
 
• Logs:  Logs are continuous digital records of events and interactions that occur on a Web site. 
 
To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses by contacting us. Please note that some Services features may be unavailable as a result. 
 
When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about your or your device. These third parties may include: 
• Advertisers, ad networks, and ad servers. 
• Analytics companies. 
• Your device manufacturer. 
• Your internet or mobile service provider. 
 
These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal data or they may collect information, including personal data, about your online activities over time and across different websites, apps, platforms, and other online services.  
 
If you use any third-party to opt-out from cookies, please note that Theisen’s has no affiliation with, and is not responsible for, these third party Web sites.  We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. 

THIRD-PARTY DATA COLLECTION AND ADVERTISING 
 
Like the internet itself, online marketing is a networked enterprise. Thus, we want to make it clear that we do use third parties, including Google, Facebook, Hubspot, and dotdigital, to assist us, including with marketing, analytics, social media, and data analysis. These third parties may use cookies, or other methods or technologies like scripts, pixels, or action tags, to collect information about you when you interact with the Services. We may also provide these third parties with information about you to assist us in our marketing efforts. We use the information we collect and receive for a variety of purposes, including to learn which online advertisements attracted you; to improve our content, products, and services; to inform groups of users about relevant products and services; to identify new customers; and to help us analyze and improve the Services and the effectiveness of our marketing. The use of your information may be governed by privacy policies maintained by those third parties. There is additional information about third-party data collection and targeted advertising in the section titled “Online Behavioral (Targeted) Advertising,” below.
 
Social Media Platforms. We use third parties to gather and analyze data from social media platforms, including, for example, Facebook®, Instagram®, Pinterest®, YouTube®, and Twitter®. We use these third parties to help us understand your interaction between social media and our Services, and to advertise to current and future customers based on interests and demographics. 
  
Online Behavioral (Targeted) Advertising. Online behavioral advertising is used to deliver advertisements that are catered to your interests (or “targeted” to you) based on your browsing history. We may engage third parties to display ads on our behalf on the Internet, including, for example, Google, and those third parties may use information about you to provide you with our ads. They may also track and report on the performance of our advertising and marketing campaigns and provide that information to us. Online behavioral advertising can use a variety of tracking technologies, including cookies, pixels, and scripts, and track you across websites. Certain state privacy laws allow residents of those states to opt out of this type of advertising. Customers in those states may fill out our webform to opt out.
 
 
USES OF PERSONAL INFORMATION 
 
How we use the information. 
  
We use information that we collect about you or that you provide to us, including any personal data, to: 
• Respond to any request you have made, including for information, for products, or about the Services. 
• To provide you with the Services and any contents, features, information, products, or services that we make available through the Services. 
• For our marketing efforts, including to keep you informed about existing and new products to determine how best to market to you, and to provide you with surveys, questionnaires, and other promotional or marketing inquiries. 
• We use location information we collect to find stores near you. 
• Promote our Services, business, and offerings by publishing advertising on our own Services and by placing ads on third parties' services. We may use your information to model, segment, target, offer, market, and advertise our Services. 
• Process, confirm, complete, and support any purchases, orders, deliveries, returns or exchanges with you, including any payments. 
• Provide you with customer support. 
• Communicate with you, including through email and SMS/text messages. 
• Resolve issues or concerns, including any returns and exchanges. 
• Improve the Services and our products, including by analyzing your information and creating aggregated data derived from your information) to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them. Our analysis may include the use of technology like machine learning and large language models, which may include training these models or sharing with third parties for model training. 
• Protect the safety, security, availability, and integrity of the Services, including to prevent fraud, theft, or other illegal activity. 
• Monitor compliance with and enforce this Policy and our Terms of Use and any other applicable agreements and policies. 
• Carry out our obligations and to comply with or enforce our legal obligations or rights, including for billing and collection. 
• Provide you notices about your account, including expiration and renewal notices, and any updates available, or changes to the Services and any products we offer or provide. 
• In any other way we may describe when you provide the information.  
• Fulfill any other purposes for which you provide it or offer your consent. 
 
The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to: 
• Estimate our audience sizes and usage patterns. 
• Store information about your preferences, allowing us to customize the Services according to your individual needs and interests. 
• Speed up your searches. 
• Recognize you when you return to our Services. 
 
We may also use your information to contact you about goods and services that may be of interest to you. If you do not want us to use your information in this way, please check the relevant box located on the form on which we collect your data (the order form/registration form) or adjust your user preferences in your account profile. For more information, see YOUR CHOICES ABOUT OUR COLLECTION, USE, AND DISCLOSURE. 
 
Aggregated, Anonymized, and De-Identified Information.  
 
We may use or share information we collect automatically from your use of the Services that is not personal information and any other information that is otherwise de-identified or anonymized for any purpose, including with third parties to improve the content and functionality of the Services, to better understand our customers and markets, and to improve our products and services. 
 
We may also use or share information we collect, including personal information, as follows:  
 
• Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Services feature.  
 
• Technical information. Technical information includes information about your internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.  
 
• Data integration.  Some of the information we collect or that we receive from our service providers and third parties may be maintained or associated with other personal information we have or collect about you. This helps us to, among other things: (a) estimate our audience size and usage patterns; (b) store information about your preferences, allowing us to customize our Services according to your individual interests; (c) speed up your searches; (d) recognize you when you return to the Services; (e) improve the Services and any products and services we offer; and (f) improve our marketing efforts.

DISCLOSURE OF YOUR INFORMATION 
 
We may share your information, including your personal information: 
• With service providers we use to provide or support our business and the Services, including payment processors, data analytics providers, technology providers (for example, providers that send emails on our behalf, host or monitor the Services and provide chat functionality), maintenance providers, fraud prevention providers, shipping providers, and marketing providers 
• With third parties for marketing purposes as described in the THIRD-PARTY DATA COLLECTION AND ADVERTISING section, above. 
• To our subsidiaries and affiliates. 
• To contractors, service providers, and other third parties we use to support our organization. 
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Theisens’ assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by • Theisens is among the assets transferred. 
• To third parties to market their products or services to you if you have not opted out of these disclosures. Where we provide personal information to our service providers, we strive to ensure that our service providers handle such personal information solely in the manner described in our agreement with them and in accordance with applicable laws. We contractually require these third parties to keep personal data confidential and use it only for the purposes for which we disclose it to them. For more information, see YOUR CHOICES ABOUT OUR COLLECTION, USE, AND DISCLOSURE. 
• To fulfill the purpose for which you provide it. For example, if you give us an email address to use the "email a friend" feature of our Services, we will transmit the contents of that email and your email address to the recipients. 
• To comply with any court order, law, or legal process, legal obligation, including to respond to any government or regulatory request, or if we believe disclosure is necessary to enforce or protect our rights, property, or safety, or that of our users or third parties.  
• To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes. 
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.  
• For any other purpose disclosed by us when you provide the information. 
• With your consent. 
 
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal information. 
 
The categories of personal data we may disclose include: 
• Account and contact information. 
• Payment information.   
• Account history, including information about your account, transactions, purchases, order history, or discounts. 
• Demographic information. 
• Location information, including general geographic location and precise geolocation. 
• Device information. 
• Content and information you elect to provide to us. 
• Images, voice recordings, and videos collected or stored in connection with the Services, if you have consented to such information collection. 
• Identity document information. 
• Biometric information.  
 

YOUR CHOICES ABOUT OUR COLLECTION, USE, AND DISCLOSURE 
 

This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live. Keep in mind that an opt-out is typically valid only for the device that you use to opt-out; so, if you use multiple devices, you may need to opt-out on each device. Also, some opt-outs require that you accept a cookie or install a plug-in to record and honor your request; if you delete the cookie, you may need to opt-out again. In addition to the methods below, you may be able to use the incognito or private function in your browser or other software and plug-ins to help manage your privacy preferences; make sure to review the privacy policy of any provider of such software or plug-in before installing it. 
 
Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. Your browser may also allow you to remove or delete cookies on your device. Some browsers include a "Do Not Track" (DNT) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our Services may not respond to all browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described in this policy. Review our Cookie Policy. Please note that opting out of cookies or similar tacking files could impact the Services, some of which may then be inaccessible or not function properly. 
 
Analytics. Some of the analytics providers we use allow you to opt-out of data collection, as described below. 
 
Location Information. You can choose whether or not to allow the Services to collect and use real-time information about your device's location through the device's privacy settings to turn off location sharing in your mobile device settings, or otherwise decline the option to allow your web browser to use your location for certain functionality such as finding the nearest Theisen’s store. If you block the use of location information, some Services features may become inaccessible or not function properly. 
 
E-mail Opt-Out. You may opt-out of receiving future communications from us by clicking on the “unsubscribe” link at the bottom of any email from us (or sent on our behalf). 
 
Accessing and Correcting Personal Information. If you have an account with us and wish to review and/or update your personal information, please log into the Services and visit your account profile page to make any desired changes. If you are a California resident, you may have other rights that are described below in  Appendix A (Privacy Information for Residents of Certain States). 
 
Google Ads. We use several Google services to assist us with advertising. Learn more about Google's practices about data collection and to manage Google Ads. 
 
Online Behavioral Advertising. You can opt-out of online behavioral advertising from members of the Digital Advertising Alliance and the National Advertising Initiative using the links below. For more information visit:
• https://youradchoices.com/ 
• https://thenai.org/about-online-advertising/faq/?tab=3

To learn more about opting out of receiving targeted ads from members of the Network Advertising Initiative ("NAI"), including how to add the NAI Global Privacy Control (GPC) extension to your Chrome web browser, see NAI: How to Opt Out. Our ads on third-party websites may also display an advertising options icon that you can click to learn about your privacy choices. This icon will only appear on certain platforms. 
• Opt-Out via the NAI - Network Advertising Initiative
• Opt-Out via the DAA - Digital Advertising Alliance Opt-Out Tool 
 
Social Media and Other Opt-Outs. You can also opt-out of some of our advertising and social media partners by visiting their opt-out pages: 
• Facebook Opt-Out page
• Twitter Opt-Out page
• Pinterest Opt-Out page
 
Mobile Device Options.  In some instances, mobile devices have settings that allow you to control or limit your cookies and similar technologies. For example, if you are an iOS user, you can enable “Limit Ad Tracking,” and for Android users, the “Opt-Out of Ads Personalization” or “Opt Out of Interest-Based Ads” settings are used for this purpose. 
 
Personal Information Opt-Out. We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. If you prefer not to have your personal information shared with carefully screened companies or organizations (third parties) whose products might be of interest to you, just let us know by sending us an email at customerservice@theisens.com, contacting us by mail at 6201 Chavenelle Road, Dubuque, IA 52002, or calling us at 1-866-245-6850. Please note that we may take reasonable steps to verify your identity and the authenticity of your request, including where permitted or required by law. 
 
Do Not Track. The Services respond to “do not track” requests, where legally required. All traffic is treated equally and processed the same. If you desire to have your browsing be private, we suggest that you use your web browser’s private, incognito, or similar function, or utilize third-party software or plug-ins that have such functionality. 

PRIVACY RIGHTS 
 
Depending on your state of residency, you may have certain rights related to your personal data, including:   
 
• To Know, Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information, and it will be included in the response to your access request.

• Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose. 

• Deletion. You may request that we delete personal data about you that we maintain, subject to certain exception under applicable law.  We may refuse your right to delete if it is reasonably necessary for us to provide a service requested by you; to perform a contract between us; to maintain functionality and ensure security of our systems; to enable solely expected internal uses of your personal information; to exercise a right provided by law; to comply with a legal obligation, or if there are compelling legitimate grounds for keeping your personal information.
  
•  Opt Out of Using Personal Data for Targeted Advertising and Profiling. You may have the right to opt-out of the disclosure of your personal information to third parties for behavioral or cross-contextual advertising purposes. Like many businesses, we use cookies, pixels, and similar technology on our Sites and Apps, and we disclose certain personal information (e.g., identifiers and service and platform usage) to advertising partners to provide you with personalized ads on third-party platforms, to improve your user experience and to optimize our marketing activities.

• Opt Out of Using Personal Data for Sales. You may request that we do not use your personal data for these purposes. Like many businesses, we use cookies, pixels, and similar technology on our Sites and Apps, and we share certain personal information (e.g., identifiers and service and platform usage) to advertising partners to provide you with personalized ads on third-party platforms, to improve your user experience and to optimize our marketing activities. Under the broad definition of “sell” contained in some jurisdictions’ privacy laws, this could be considered a sale.

• Opt Out of Automated Decision Making.  You may have the right not to be subject to a decision that is based solely on automated processing (where a decision is taken about you using an electronic system without human involvement) which significantly impacts your rights. No decision will be made by us about you solely on the basis of automated decision making which has a significant impact on you.

• No Discrimination. We do not discriminate against customers who exercise any of their rights described in this Privacy Policy.

• Appeal. You may have the right to appeal if we refuse to take action on your rights request. Instructions on how to appeal will be provided to you upon such a denial, but in any event, such instructions will be substantially similar to those provided below for submitting requests.

• Third Party List. You may have the right to request a list of specific third parties to which we have disclosed personal information. 
 
Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request. For individuals in the United States (except California), depending on applicable law where you reside or are located, you may be able to assert certain rights identified below with respect to your personal information. If you are a resident of California, please see Appendix A instead. If any of the rights listed below are not provided to you under the law that governs the processing of your personal information, we have sole discretion in providing you with those rights. Please refer to the “What Rights Apply” section below to determine the rights you have in the jurisdiction you reside. Your rights in relation to your personal information are not absolute. Depending upon the applicable law, access to your rights under the applicable law may be denied: (i) when denial of the request is required or authorized by law; (ii) when granting the request would have a negative impact on another’s privacy; (iii) to protect our rights and properties; (iv) where the request is frivolous or vexatious, or for other reasons. 

What Rights Apply 
 
To determine which rights you have, please refer to the table below that references the rights as described above. States not listed either do not have a law providing such rights or it does not apply to our operations. 

Submitting a Request to Exercise Your Privacy Rights 

If you are a resident in a state that provides the rights noted above, you can assert your privacy rights by contacting us at customerservice@theisens.com, contacting us by mail at 6201 Chavenelle Road, Dubuque, IA 52002, or calling us at 1-866-245-6850, and advising us which privacy rights you would like to exercise. 
 
Depending on your state of residence, applicable law may limit how many times per year you may submit a Right to Know/Access.  We may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law. 
 
To protect your privacy, we must be able to verify your identity to confirm that the rights request came from you. We may contact you by phone or e-mail to verify your request before we can process your request to exercise certain privacy rights. Depending on your request, we will ask for information such as your name, address, an e-mail address or a phone number you have used with us. For certain requests, we may also ask you to provide details about your most recent purchases. 

Opting-out of Sales and Targeted Advertising 
 
You can exercise your right to opt-out of sales and targeted advertising by clicking the "Your Privacy Choices" link in the website footer and following the directions in the Your Privacy Choices pop-up screen regarding how to opt-out of sales and targeted advertising. If you previously opted-out and wish to opt-in, you can use the options identified above to change your preferences. 
 
If you are a resident of Colorado, Connecticut, Delaware (as of 1.1.26), Maryland, Minnesota, Montana, New Hampshire, Oregon (as of 1.1.26) or Texas, you may also opt-out of sales and targeted advertising via cookies by using an opt-out preference signal. Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data "sales" as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law. You can visit the Global Privacy Control official site at https://globalprivacycontrol.org/#about to learn how to configure your device to send such signals. We will honor and process the opt-out preference signal accordingly.  
 
Please note that your opt-out choice will only apply to your use of our Sites through the current browser or device you are using and only so long as that browser’s cookies are not erased. You will need to submit a separate opt-out of targeted advertising request on each device and browser you use to visit our Sites to completely opt-out using this method.  Please note that you may still receive generalized ads after opting out. For information about the opt-out process on our App, please see our Cookie Policy. 
 
Authorized Agents  
 
In certain states you may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf. 
 
California   
 
Residents of the States of California may have additional rights under state laws with respect to their personal information. If you are a California resident, please review Appendix A (Privacy Information for California) to understand the rights you may have and how to exercise them. 

HOW WE PROTECT YOUR PERSONAL DATA 
 
We strive to use reasonable means to secure your personal information while you are using the Services. We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.  The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.   
 
 
 
 
EXTERNAL WEBSITES 
 
Third-Party Links. Our Services may contain links to websites operated and maintained by third parties. We have no control over and are not responsible for the privacy policies or content on those websites, and any links to third-party websites do not imply an affiliation between Theisen’s and the website owner, or any endorsement, approval, or verification of any content contained on those websites. Privacy policies on third-party websites and mobile applications may be different from our Policy. You access such links at your own risk. You should always read the privacy policy of a website or mobile application before disclosing any of your information. 
 
Social Media. If you use any functionality in the Services that allows you to interact with social media platforms (e.g., Facebook®, Instagram®, Twitter®, Pinterest®, and YouTube®) or otherwise interact with us on social media, generally, then please be aware that: (a) we may display your email address and/or social media handle (e.g., username) to other users; (b) we may use information you provide about yourself or other users to facilitate communications; and (c) we may collect information about interactions with us, including personal information and audio, video, and photos, and receive information from social media platforms about you, including as described in the section titled “Third-Party Data Collection and Advertising.” Please note that any content you post to social media platforms is public information and will not be treated confidentially and is further subject to the data-handling practices of each social media platform, as described in their respective terms of use and privacy policy, which we encourage you to read before posting content. 
 
RETENTION 
 
We retain personal data only as long as we reasonably need it to fulfill the purposes for which we collected or obtained it, or for as otherwise legally permitted or required, such as maintaining the Services operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or de-identified. We use reasonable business criteria to establish retention periods for personal information.  
 
If you are a California resident, See Appendix A for more information about the retention periods that apply to the personal data categories we collect. 
 
CHANGES TO THIS POLICY 
 
We may update this policy from time to time, and we will provide notice of any such changes to the policy as required by law. As we constantly evolve and improve how we do business online, from time to time this Policy may change. The effective date of this Policy is the date next to the words “Last Modified” at the top of this Policy. We may update this Policy at any time, at our sole discretion, if we make material changes to the way we handle your personal information, or if material changes are necessary due to law.  Any changes we make to this Policy will be effective immediately upon the posting of the updated Policy as of the “Last Modified” date. We may, but are not required to, email or otherwise communicate reminders about this Policy, but you should check our Services periodically to see the current policy and any changes we have made to it. As such, we encourage you to review this Policy regularly. Your continued use of the Services after we make changes will constitute your acceptance of any such changes. 
 
 
CONTACT US 
 
To exercise your rights or ask questions or comment about this privacy policy or our privacy practices, contact us using one of the options below:  
 
Send us an email at customerservice@theisens.com
Via telephone: 1-866-245-6850 
Via mail: Theisen’s, 6201 Chavenelle Road, Dubuque, IA 52002 

APPENDIX A (Privacy Information for California) 
  
This Appendix supplements the information contained in the Theisen’s Privacy Policy and applies solely to residents of the States of California (“consumers” or “you”). 
 
If you are a California resident, this section applies to you in addition to the rest of this Privacy Policy. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”) requires us to disclose the following additional information related to our privacy practices. 
 
When you use the Services, we may collect personal information. Personal information is defined under the applicable state privacy laws as information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked to, directly or indirectly, a particular consumer or device. 
 
Personal information does not include publicly available information from government records, de-identified or aggregated consumer information, or information excluded from state privacy laws’ scope, such as health or medical information subject to HIPAA, and financial information subject to GLBA or FCRA. 
 
We do not sell your personal information, and we do not share your personal information for cross-contextual advertising purposes. With your consent, we and other third-party marketing and social media partners may use cookies, pixels, or other tracking technologies on our Sites to collect information about your interaction with our Sites to deliver advertising to you on third-party websites and apps. If you have consented to this, you can withdraw your consent at any time by clicking on “Your Privacy Choices” in the website footer and switching off the toggle for “Sale and Sharing/Targeted Advertising Cookies” under Manage Cookie Preference in the pop-up window that appears. We do not sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age. 
 
To the extent we process any information about you that is considered sensitive personal information under the CCPA, we do not process it to infer characteristics about you. 
 
Categories of Personal Information Collected, Used, And Disclosed 
 
In the preceding 12 months, depending how you interact with our Services, the chart below describes the categories of personal information collected, the sources and purpose of such collection, and the parties to whom the information was disclosed for business purpose.  
 
Disclosures 
 
In the past twelve (12) months, we have collected the categories of personal information described in the Privacy Policy section titled “Types of Information We Collect” and we have used and shared personal information of consumers in those categories as follows: 

Sales and Sharing of Personal Information 
 
Theisen’s does not sell your personal information for monetary payment. However, to ensure we can share our products with you and tailor our advertisements, we do allow some of our advertising partners to use cookies, pixels, and other technologies to collect personal information when you use the Services, and we also share personal information with them directly, both of which practices may constitute a “sale” of personal information under privacy laws. We also utilize marketing partners and cooperatives, which allow us to send and receive personal information to enhance our marketing efforts and permit you to receive ads for products and services that might be of interest to you from carefully screened companies, and this too may constitute a “sale” of personal information under the law. 
 
We share your information with certain service providers and third parties for us to fulfill our obligations with you as our customer. For example, we share your information with our payment processors and shipping partners as well as our order tracking partner in order to provide you with visibility on the status of your order. In addition, we share your information with our CCTV provider and fraud prevention and detection partners in order to protect you and our employees. 
 
Given the foregoing, we have disclosed the following information in situations that might constitute a “sale” during the past twelve (12) months:  
 
Identifiers, Internet and Network Information, Device Information, 
Commercial Information, and Inferences. 
 
Theisen’s does not knowingly sell the personal information of minors under sixteen (16) years of age. 
 
Personal Information Sales and Sharing Opt-Out 
 
If you are 16 years of age or older, you have the right to direct us to not sell your personal information at any time (the “right to opt-out”). We do not sell the personal information of consumers we know are less than 16 years of age, unless we receive affirmative authorization (the “right to opt-in”) from either the consumer who is between 13 and 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-out of personal information sales may opt-in to future sales at any time. 
 
To exercise the right to opt-out, you (or your authorized representative) may submit a request via our webform. 
 
Please note that opting out of cookies could impact the Services, some of which may then be inaccessible or not function properly. Information on deleting or controlling cookies can be found at https://www.aboutcookies.org/. 
 
You do not need to create an account with us to exercise your opt-out rights. We will use the personal information provided in an opt-out request only to review and comply with the request. 
 
Shine the Light 
 
The California Shine the Light law permits California residents that have an established business relationship with us to request certain information regarding our disclosure of certain types of personal information to third parties for their direct marketing purposes during the immediately preceding calendar year. To make such as request, please contact us using the information below, and indicate in your message that you are a California resident making a “Shine the Light” inquiry. This request may be made no more than once per calendar year. 
 
Retention of Personal Information 
 
We retain your information for as long as your account is active, as needed to provide you Services or for other purposes stated in this Policy, or as required or permitted by applicable law. For more information about the criteria for retaining personal information listed above, please refer to RETENTION Section above. 
 
Do Not Track 
 
Your browser may allow you to adjust your browser settings so that “do not track” requests are sent to the websites that you visit. However, since uniform standards for “DNT” signals have not been adopted, we do not disable tracking technology that may be active on the Websites in response to any “do not track” requests that we receive from your browser. 

California Residents’ Rights and Choices 
 
The CCPA provides California residents with specific rights regarding their personal information, described below. Below are your rights and how to exercise those rights. 
 
1. Access to Specific Information   
 
You have the right to obtain a copy, or a list of categories of the personal information that we hold about you, as well as other supplementary information, such as the purposes of processing, and the entities to whom we disclose your personal information. Once we receive and confirm your verifiable consumer request, we will disclose to you: 
The categories of personal information we collected about you. 
The categories of sources of the personal information we collected about you. 
Our business or commercial purpose for collecting that personal information. 
The categories of third parties with whom we share that personal information. 
The specific pieces of personal information we collected about you. 
 
2.  Data Portability Rights 
 
In certain circumstances, you have the right to receive a copy of the personal information we have collected about you in a structured, commonly used and machine-readable format. 
 
3. Deletion Request Rights 
 
You have the right to request that we delete some or all of the personal information that we have collected from you and retained, subject to a number of exceptions. This right is not absolute. We (and our service providers) are not required to delete personal information where it is, for example: (a) necessary to complete a transaction with you or for warranty or product recalls; (b) used for security purposes, to prevent fraud, to fix errors, or to comply with law; (c) reasonable for us to use for internal purposes given our relationship with you; or (d) compatible with the context in which you provided the information. The list of exceptions above is not exhaustive, and we may also deny a deletion request as otherwise permitted by law. In addition, in the event your deletion request is honored, we may retain a record of your deletion request as required under applicable law. 
 
4.  Correction Request Rights  
 
You have the right to request us to correct inaccurate personal information that we maintain about you. You may request us to correct your personal information held by us that is inaccurate. In addition to the methods described below, you can correct your personal information through your account settings.  
 
5. Right to Opt-out of the Use of Automated Decision-Making Technology (ADMT)  
 
You have the right to opt-out of the use of ADMT to process your personal information to make a significant decision that concerns you. We do not process personal information using ADMT to make any significant decisions about you. Therefore, we do not offer the right to opt-out of ADMT. 
 
6.  Sensitive Personal Information 
 
As noted in section 7027, subsection(m) under the CCPA (California), our collection and use of Sensitive Personal Information for fraud prevention qualifies as an exempt use and thus does not require us to provide an opt-out process for consumers.   
 
7.  Right to Appeal 
 
Under certain state privacy laws, you have the right to appeal a refusal to take action on your request. To lodge an appeal, please use the webform to complete your request. Within 60 days of the filing of your appeal, we will provide you any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we reject your appeal, you may contact the Attorney General using the below methods to file a complaint. 
 
California Attorney General – https://oag.ca.gov/contact/consumer-complaint-against-business-or-company
 
6.  Exercising Your Rights 
 
To exercise your rights described above, please submit a verifiable consumer request to us by:  
 
Calling us at 1-866-245-6850, or 
Filling out our webform for access, deletion, and appeal requests
and advising us which privacy rights you would like to exercise. 
 
Only you, or a person that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must: (1) provide that authorized agent written and signed permission to submit such request; and (2) verify your own identity directly with us. Please note, we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf. You may also make a verifiable consumer request on behalf of your minor child. If you are making a request on behalf of another person, we may require that you prove you are authorized to act on behalf of that individual.  
 
You may make a verifiable consumer request for access or data portability only twice within a 12-month period. We may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law. The verifiable consumer request must: 
 
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and 
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. 
  
We may not be able to fulfill your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. To verify your identity, we may request certain pieces of personal information about you, and we reserve the right to take additional steps as necessary to verify your identity if we have reason to believe a request is fraudulent. We may contact you by phone or e-mail to verify your request before we can process your request to exercise certain privacy rights. Depending on your request, we will ask for information such as your name, address, an e-mail address or a phone number you have used with us. For certain requests, we may also ask you to provide details about your most recent purchases. 
 
We will use the personal information provided in a verifiable consumer request only to verify the requestor's identity or authority to make the request. 
 
7. Response Timing and Format 
 
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. If you appeal a rejected request, we will provide you with a written response within 60 days of your filing of the appeal. 
 
Any disclosures we provide will cover only the legally mandated period preceding the date we receive your verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance. 
 
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. 
 
8.  Non-Discrimination and Right Against Retaliation.  
 
You have the right to not be discriminated against for exercising any of your privacy rights. Unless permitted by state privacy laws, we will not:  
 
Deny you goods or services; 
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; 
Provide you a different level or quality of goods or services;  
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services; or   
Retaliate against you for exercising any of the rights described herein. 
 
These rights are not absolute and may be denied in certain situations such as: (a) when denial of access is required or authorized by law; (b) when granting access would have a negative impact on another's privacy; (c) to protect our rights and properties; or (d) where the request is frivolous or vexatious.