Records By Mail, LLC (“RBM,” “we,” “us,” and “our”) respects your privacy and is committed to protecting it through compliance with this Privacy Notice (“Privacy Notice”). This Privacy Notice describes the types of Information we may collect from you when you visit the website at https://www.recordsbymail.com (the “Site”), and that you may provide through your communications with RBM. It also describes our practices for collecting, using, maintaining, protecting, and disclosing that Information.

Please read this Privacy Notice carefully to understand our policies and practices regarding your Information and how we will handle it. If you do not agree with our policies and practices, do not use the Site. By accessing or using the Site, you agree to this Privacy Notice.

RBM may change this Privacy Notice at any time, at its discretion. Your continued use of the Site after we make changes is deemed to be acceptance of those changes, so please check the Privacy Notice periodically for updates.

This Privacy Notice is subject to and governed by the RBM Website Terms of Use (“Terms of Use”) available at the Site here.

RBM may collect two types of Information from you when you visit the Site: Personal Information and Non-Personal Information (collectively “Information”).

• “Personal Information” refers to data by which you may be personally identified, such as name, postal address, e-mail address, and telephone number.
• “Non-Personal Information” means data that is about you, but does not identify you specifically. If you do nothing during your visit to our Site but browse, read pages, or view content, we will gather and store Information about your visit that does not identify you personally.

We collect Information:

• Directly from you when you provide it to us.
• Through our business-to-business communications with you.
• From other sources or third parties.
• Automatically as you navigate through the Site.
• Through third-party analytics.

Information You Provide Directly to RBM. The Information that you provide us directly through our Site may include:

• Information that you provide to RBM by registering for an account, filling in forms on our Site, or leaving comments on the Site. We may also ask you for Information when you report a problem with our Site. And it may be necessary for you to provide us with Information so we can communicate with you about an inquiry you have;
• Responses to questionnaires or surveys that we might ask you to voluntarily complete;
• Records and copies of your correspondence (including email addresses), if you contact us; and
• Details of transactions you carry out through our Site.

Information Automatically Collected from You. The Information that RBM may automatically collect and store about you when you visit the Site may include:

• The Internet Protocol Address and domain name used. The Internet Protocol address is a numerical identifier assigned either to your Internet service provider or directly to your computer. We use the Internet Protocol Address to direct Internet traffic to you.
• The type of browser and operating system you used;
• The date and time you visited the Site;
• The web pages or services you accessed at the Site;
• The length of time you spent on a web page at the Site;
• The website you visited prior to coming to the Site; and
• Cookies, which are small text files that a web server (such as RBM‘s or its chosen web hosting company server) places on a user's computer. When accessing a cookie, RBM’s server reads a number associated with a browser, but is unable to determine any data about a user. With that number, our web server can tailor its content to the needs of the specific browser, and we can optimize the Site for your use.

Google Analytics Advertising Features. We also may have the following Google Analytics Advertising Features Implemented: Demographics and Interest reporting, Remarketing, GDN Impression Reporting and Double Click Campaign Manager. These features collect data using Google advertising cookies and anonymous identifiers. RBM and third party vendors use these first-party cookies to access the success of online marketing campaigns, inform future campaigns and improve usability on the Site. To learn how to opt-out of the Google Analytics Advertising Features we use, please see Google Analytics’ currently available opt-outs for the web at https://tools.google.com/dlpage/gaoptout.

We use Information that we collect about you or that you provide to us, including any Personal Information, for the following purposes:

• To present our Site and the Site Content (as defined in the Terms of Use) to you.
• To operate, manage, and administer your account.
• To provide you with the information or services that you request from us. For example, when you provide your name and email address to contact us, we are able to use your email address to respond to your comment or question personally.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• To personalize our services and advertising to you.
• To create new services and to improve our business, services, and security.
• To notify you about changes to our Site or any services we offer or provide though it.
• To communicate with you regarding our services, including for marketing purposes.
• In any other way we may describe when you provide the Information.
• To fulfill any other purpose for which you provide it.
• For any other purpose with your consent.

Site statistics are compiled into traffic reports, which help RBM understand, anticipate, and respond to user needs. If we learn, for example, of heightened interest in certain aspects of the Site, we are likely to highlight that information on the Site home page. This Information helps us create a better overall experience for Site users.

RBM will retain your Information as long as RBM believes it is appropriate for the purposes of this Privacy Notice.

We have implemented measures designed to protect your Information from accidental loss and from unauthorized access, use, alteration, and disclosure. Unfortunately, the internet is not completely secure. Although we are working to protect your Information, we cannot guarantee the security of your Information either in transmission or when stored. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

We may use and disclose Non-Personal Information about our users without restriction. We may disclose Personal Information that we collect or you provide as described in this Privacy Notice:

• To our subsidiaries and affiliates, including third-party payment facilitators.
• To contractors, service providers, and other third parties we use to support our business, as described further below.
• To a buyer or other successor (potential or actual) in connection with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of RBM’s assets, including any related due diligence.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the Information.
• With your consent.
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms and Conditions.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of RBM or others.

Except as described above, RBM does not sell any of your Information.

We use third parties to host the Site, design and operate the Site features, and perform administrative, payment processing, analytics, and communication services. Services these third parties provide include enabling RBM to send you email newsletters and providing information to RBM about the use of the Site and viewing of our content. We may disclose your Information to these companies so they can carry out these services.

RBM complies with the requirements of the Children’s Online Privacy Protection Act and related regulations. The Site is not directed at children, and RBM does not knowingly collect any Information from children under 13 years of age. If RBM learns that a child under 13 years of age has provided Information, RBM will delete this Information from our databases. If you are under 13, do not use this Site or provide any Information about yourself to RBM, including your name, address, telephone number or email address. If you become aware that Information of a child under 13 years of age has been provided, please contact us at privacy@recordsbymail.com.

We are not responsible for the practices employed by websites or services linked to or from the Site, including the information or content contained therein. Our Privacy Notice does not apply to third party websites or services.

Some browsers incorporate a "Do Not Track" (“DNT”) feature that, when turned on, signals to websites and online services that you do not want to be tracked. At this time, the Site does not respond to DNT signals.

If you are located in the EEA, you may have certain rights under European law with respect to your Personal Information that are described below. The Site is not intended for users located in the EEA who are under the age of 16. If you are located in the EEA and are under the age of 16, do not use this Site.

Controller of Personal Information. RBM is the Controller of your Personal Information. RBM’s primary place of business is 2541 NW 30th Avenue, Portland, Oregon 97210.

Processing. RBM may process your Personal Information on one or more of the following legal bases:

• as necessary to enter into a contract with you or a legal entity you represent, to perform our contractual obligations, to provide services, to respond to requests from you, or to provide support;
• where we have a legitimate interest, as described in this Privacy Notice (see “How RBM Uses Information It Collects About You and the Purposes for Collection and Use”);
• as necessary to comply with relevant law and legal obligations, including to respond to lawful requests and orders; or
• with your consent.

Your Rights. Subject to applicable law, you may have the right to:

• ask whether we hold Personal Information about you and request copies of such Personal Information and information about how it is processed;
• request that inaccurate Personal Information is corrected;
• request deletion of Personal Information that is no longer necessary for the purposes underlying the processing, processed based on withdrawn consent, or processed in non-compliance with applicable legal requirements;
• request us to restrict the processing of Personal Information where the processing is inappropriate;
• object to the processing of Personal Information;
• request portability of Personal Information that you have provided to us (which does not include information derived from the collected information), where the processing of such Personal Information is based on consent or a contract with you and is carried out by automated means; and
• lodge a complaint with the appropriate data protection authorities.

You can exercise your rights of access, rectification, erasure, restriction, objection, and data portability by contacting us at the email address in section 13 below.

When you consent to our processing your Personal Information for a specified purpose, you may withdraw your consent at any time, and we will stop any further processing of your data for that purpose.

The categories of Personal Information that RBM collects are identified in section 2, “The Types of Information That RBM Collects about You and How RBM Collects Information About You.” Additional information about how long RBM will retain your Information and how it shares your Information is found in section 3, “How RBM Uses Information It Collects About You and the Purpose for the Collection and Use,” and section 5, “When RBM Shares Your Information” above.

European Representative

Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Records By Mail has appointed European Data Protection Office (EDPO) as its GDPR representative in the European Union. You can contact EDPO regarding matters pertaining to the GDPR by:

• using EDPO’s online request form: https://edpo.com/gdpr-data-request/; or
• writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

Your Choices About Information

We send promotional and marketing communications only with your consent. If you no longer wish to receive these or other communications, you can stop these communications by clicking on the “unsubscribe link” provided in such communications. Please report your concerns about collection or use of Personal Information on the Site to privacy@recordsbymail.com.

If you would like to correct your Information or register a complaint, please contact us at privacy@recordsbymail.com.

If you are a California resident, California law permits you to request information regarding the disclosure of your Personal Information by us to third parties for the third parties’ direct marketing purposes. Please direct your requests to the address below in Section 13 of this Privacy Notice.

To ask questions or comment about this Privacy Notice and our privacy practices, please contact us at privacy@recordsbymail.com or by mail at:

Records By Mail, LLC
ATTN: LEGAL DEPARTMENT
2541 NW 30th Ave.
Portland, OR 97210

EFFECTIVE DATE: December 22, 2020