HOW WE COLLECT AND USE PERSONAL DATA
How and Why We Collect Personal Data
When you visit and use the Website, we may ask for and collect certain Personal Data from you at certain points throughout the Website in order to provide and improve upon our products, our inventory and our services and for advertising and marketing purposes. Depending on the information and/or services you request through the Website, you may be asked to provide your name, email address, mailing address and other identifying information, all of which constitutes Personal Data. We do not ask you to provide any Personal Data to simply browse the Website. If you wish, however, to participate in some of the features and services the Website may offer, including features and services available to registered users, we may ask you to provide certain Personal Data and/or non-personally identifiable or demographic information. Users who affirmatively choose to receive communications from us via a wireless device may be asked to submit a cell phone number to receive text messages. Personal Data includes, but is not limited to, your name, home and/or business address, phone number, email address, date of birth, location data, or an online identifier. Your submission of demographic information, such as race, age, gender, occupation, income level, or marital status, is generally optional and rarely required. When non-personally identifiable information, such as demographic information, is tied to you personally (i.e., with other personally-identifiable information), it will be treated as Personal Data. In any instances in which we ask you to provide certain Personal Data, we will ask your permission to collect said Personal Data by asking you to affirmatively consent to our collection of your Personal Data. If you submit Personal Data to us to receive communications from us in relation to a particular product or service we offer, we will only use your Personal Data to communicate with you regarding those particular products or services. If you submit Personal Data to us to receive specific marketing or advertising communications from us, we will only use your Personal Data in relation to those specific marketing or advertising communications. If you submit Personal Data to us in order to create an account on the Website, we will only use your Personal Data in connection with that specific account. In sum, we will only use your Personal Data for the specific purpose or purposes for which you submitted it. If we desire to use your Personal Data for some other purpose, we will first request your explicit consent to do so, and only if that consent is given will we use your Personal Data for that other purpose. We do not collect Personal Data unless you voluntarily provide it to us, and for any Personal Data you submit to us through the Website, only after you affirmatively consent to our collection of your Personal Data. In some instances, if you choose not to provide the requested information, for example, in order to register with the Website or to participate in surveys, you may not be able to access all of the areas on the Website or participate in all of its features.
If at any time you provide a third party’s Personal Data to us, whether in the form of a name, shipping address, photo, email address or other information, you warrant that you have the permission of the person whose information you submit to share that information with us and you agree to indemnify, defend and hold harmless NCC and third-party service providers from and against any claims, liabilities, costs and expenses arising in connection with your sending or providing that information to us.
“Cookies” and other Tracking Technologies
As with many websites, we also may use other technology (e.g., web bugs, email bugs, clear GIFs, web beacons and tracker GIFs) in the Website and/or in our communications with you to enhance the functionality of the Website and to make your activities at the Website more convenient and efficient. These technologies may be used by us to store and collect information relating to your viewing and use of the Website and our correspondence with you. We also may collect your IP (Internet Protocol) address and other publicly available information, such as Internet browser information, operating system information, dates and times of a particular users visit and/or click path taken through the site, lookup information, and information that may be publicly available in connection with an IP address, such as general location of the user, business names and contact information, to help diagnose problems with our server, administer the Website and identify our users. This aggregate information provides statistics that we use to analyze, market and improve the Website and our business.
How We Use Personal Data
We may use Personal Data to communicate directly with users, such as to respond to inquiries, confirm registration information or your desire to opt-in to marketing communications from us, to inform users when they have won a sweepstakes or contest, to send you communications and offers by mail or email, or to fulfill a request for an online newsletter or other online subscription service, to keep you informed about the status of any transactions, to deliver gifts, prizes or rewards, to protect the security and integrity of the Website, to correct technical problems and malfunctions on the Website, to process your information, to take precautions against liability, to notify you of a recall or to provide other information concerning products or services, or to offer additional information about other products, programs, services, promotions or offers that may be of interest. We may also use Personal Data to identify your product and service preferences, to improve our promotional offers, customer service and overall user experience on the Website, and to research, develop, manage and improve the Website.
We may provide Personal Data to third parties who provide services on our behalf. These parties may use the Personal Data solely in conjunction with the specific services they provide for us (e.g., data processing, fulfillment of an order, managing and enhancing customer data, responding to your question or comment, providing a promotional prize, deployment of a consumer survey, investigation of a complaint, etc.). Our service providers are obligated to protect your Personal Data. We may also provide third parties with aggregate statistics about traffic patterns and related Website information. This data reflects Website usage patterns gathered during millions of customer visits to the Website each month, but it does not contain behavioral, profile, or identifying information about any individual user. We reserve the right to disclose any Personal Data as needed if such information is requested by law enforcement agencies or if we are required to do so by law, regulation, subpoena, court order or by a government entity. We also may disclose Personal Data to third parties in response to legal requests, such as court orders, subpoenas, and specific requests from law enforcement agencies, if we have reason to believe that disclosing such information is necessary to conduct investigations of possible breaches of law, to cooperate in any legal investigation, or to identify, contact, or bring legal action against someone who may be violating the Terms and Conditions.
WHERE WE PROCESS AND STORE YOUR PERSONAL DATA
Please note that all Personal Data we collect is stored on our servers in the United States. If you are located outside of the United States, any Personal Data we collect, including location data and online identifiers, will be processed and stored in the United States. The data protection and privacy laws and regulations in the United States may be different from those of the country, territory or region where you reside or are a citizen and may offer less protection than the laws and regulations in your country, territory or region. By using our online services, you consent to the transfer and processing of your Personal Data in the United States, and we use this consent as the legal basis for that transfer. As noted above, when we ask you to provide us with your Personal Data on the Website to receive services and/or communications from us, we will request your explicit consent to the transfer and processing of your Personal Data. For more information on transfers of your Personal Data to the United States, please see the “Transfer of Personal Data to the United States” section below.
LEGAL BASIS FOR PROCESSING
- To perform any contractual obligations to you in our Terms and Conditions and any contractual obligations arising under services we are providing to you;
- To comply with laws, regulations, court orders, or other legal obligations, to defend legal claims, or to assist in an investigation;
- To protect your vital interests or the vital interest of other persons, when necessary; and
We will not perform any automated processing, including profiling, to provide our services to you without first obtaining your explicit consent to do so.
Your General Data Protection Regulation Rights
Under the European Union’s General Data Protection Regulation (“GDPR”), persons whose Personal Data is collected while they are located in the EEA have certain rights that they may exercise in relation to the collection and processing of their Personal Data. If you are in this category of persons, you have the following rights:
- Right of access to your Personal Data (Art. 15 GDPR): You have the right to obtain from us confirmation as to whether or not Personal Data concerning you is being processed, and where that is the case, access to the Personal Data and certain information related to the processing, such as the purposes of the processing, the categories of Personal Data involved, and the recipients of the Personal Data.
- Right to rectification (Art. 16 GDPR): You have the right to obtain from us without undue delay the rectification of any inaccurate Personal Data.
- Right to erasure (‘right to be forgotten’) (Art. 17 GDPR): You have the right to request that we erase your Personal Data, and we must erase your Personal Data following your request, when: (a) the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) you withdraw the consent you gave to the processing of your Personal Data, including special categories of Personal Data, for one or more specific purposes (pursuant to Art. 6(1)(a) or Art. 9(2)(a)) and there is no other legal basis for the processing; (c) you object to processing necessary for the performance of a task carried out in the public interest or for purposes of carrying out our legitimate interests and there are no overriding legitimate reasons for the processing (pursuant to Art. 21(1)), or you object to the processing carried out for direct marketing purposes (pursuant to Art. 21(2)); or (d) your Personal Data have been unlawfully processed.
- Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing where: (a) the accuracy of your Personal Data is contested by you, for a period enabling us to verify the accuracy of your Personal Data; (b) the processing is unlawful and you oppose the erasure of your Personal Data and request the restriction of their use instead; (c) we no longer need your Personal Data for the purposes of the processing but your Personal Data are required by you for the establishment, exercise, or defense of legal claims; or (d) you have objected to processing pursuant to Art. 21(1) pending the verification of whether our legitimate interests override your interests, rights, and freedoms.
- Right to data portability (Art. 20 GDPR): You have the right to receive your Personal Data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, where technically feasible, without interference from us.
- Right to object (Art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of Personal Data concerning you which is based on processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of our legitimate interests or those of a third party (Art. 6(1)(e) and Art. 6(1)(f), respectively), including profiling based on those types of processing, as well as processing of Personal Data for direct marketing purposes and any profiling related to such direct marketing. Upon notice of your objection to processing of Personal Data which is based on Art. 6(1)(e) and Art. 6(1)(f), we will no longer process your Personal Data for such purposes, unless we are able to show compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims. Upon notice of your objection to processing of Personal Data for direct marketing purposes, we will no longer process your Personal Data for such purpose.
- Automated individual decision-making, including profiling (Art. 22 GDPR): You have the right to not be subject to a decision based solely on automated processing, including profiling, which significantly affects you, unless the decision is necessary for entering into, or performance of, a contract between you and us, or is based on your explicit consent.
- Right to withdraw consent (Art. 13 and Art. 14 GDPR): If our processing of your Personal Data is based on your consent, you have the right to withdraw this consent at any time.
- Right to lodge a complaint with the Data Protection Authority (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the EEA member country of your habitual residence, place of work, or place of the alleged infringement if you believe the processing of your Personal Data infringes the GDPR. A list of Data Protection Authorities and their contact information can be found here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.
For more information on the GDPR, you may follow this link: https://gdpr-info.eu/
Your California Privacy Rights
Under California Civil Code sections 1798.83-1798.84, California residents are entitled to ask us for a notice describing what categories of personal customer information we share with third parties for those third parties’ direct marketing purposes. That notice will identify the categories of information shared and will include a list of the third parties with which it was shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to the following address: National Cotton Council of America, 7193 Goodlett Farms Parkway, Cordova, Tennessee 38016. Please allow up to 30 days for a response.
HOW WE PROTECT YOUR PERSONAL DATA
NCC implements appropriate technical and organizational security precautions to maintain the security and accuracy of Personal Data we collect, including limiting the number of people who have physical access to our database servers, as well as employing electronic security systems and password protections that guard against unauthorized access, loss, misuse or alteration. Only authorized NCC personnel, including service providers, have access to the data. Notwithstanding the above, due to the open nature of the Internet, we cannot fully guarantee that any Personal Data stored on our servers, or transmitted to or from a user, will be free from unauthorized access. By using the Website and where applicable, explicitly consenting to our collection and use of your Personal Data, you acknowledge that you understand and agree to assume these risks. Please note that email is not encrypted and is not considered to be a secure means of sharing Personal Data with us.
HOW WE HANDLE LINKS
YOUR CHOICES REGARDING USE OF THE INFORMATION WE COLLECT
At any time after you have opted in and provided us with your Personal Data you may opt-out of having your Personal Data used for commercial purposes. If you would prefer to no longer be contacted about our special offers, products or services, or if your Personal Data changes (such as email address, phone number, or mailing address), you may correct, update or delete/deactivate your Personal Data at any time by notifying us via one of the “How to Contact Us” options provided below.
If you choose to write to us, please include your name, address and any contact information that you want removed from our promotional contacts list, including phone numbers, and email addresses, and state one of the following:
- “NO MAIL OFFERS” (if you do not want to receive offers by mail);
- “NO PHONE OFFERS” (if you do not want to receive offers by telephone, including cell); or
- “NO PHONE OR MAIL OFFERS” (if you do not want to be contacted by either method).
If you opted in to a mobile messaging (e.g., SMS and MMS) offer but later decide you no longer wish to receive the mobile messages, please follow the opt-out instructions included in the mobile message. If you receive any online newsletter or similar promotional email communication from us, and you wish to unsubscribe or change your preferences, you will always have the option of replying to the email communication and inserting “unsubscribe” in the subject line or emailing us your changed preferences by filling in the form in the “Contact Us” section of the Website. If you use more than one email address, then send your opt-out email from, or ask to unsubscribe for, each of your email addresses. Because customer lists generally are prepared well in advance of a communication, you may continue to receive some offers after you send us a request not to use your information for specified marketing purposes, but we will work to remove your information from that list as soon as possible. We appreciate your patience and understanding in giving us time to implement your request.
INTERNATIONAL USERS AND MINORS
THE WEBSITE IS ONLY INTENDED FOR VIEWING IN THE UNITED STATES IF YOU ARE EIGHTEEN (18) YEARS OR OLDER AND NOT A MINOR IN YOUR STATE OF RESIDENCE. IF YOU ARE NOT AN INTENDED USER, KINDLY DO NOT USE OR VIEW THE WEBSITE.
NCC does not knowingly collect Personal Data from children under 13. If we learn that we have collected the Personal Data of a child under 13, we will take steps to delete the information as soon as possible.
We control and operate the Website from our offices in the United States of America. NCC makes no representation that materials on the Website are appropriate or available for use in other countries, and access to them from countries, territories or regions where the Website content is illegal is prohibited. Those who choose to access the Website from locations outside the United States do so on their own initiative and are responsible for compliance with applicable local laws and regulations. You may not use or export the materials in violation of United States or any other jurisdiction’s export, re-export or import laws and regulations.
Transfer of Personal Data to the United States
The Website is designed and targeted to users who reside in the United States and are governed by and operated in accordance with the laws of the United States. By participating in the Website activities, you certify that you meet the age and other eligibility requirements for the Website as set forth herein and in our Terms and Conditions. If you are located outside of the United States, please be advised that any information you provide to us will be transferred to the United States. As necessary, we will ask for your explicit consent to the transfer of your Personal Data to the United States as outlined herein. Children under the age of majority in any jurisdiction outside of the United States should not provide Personal Data without their parent’s or legal guardian’s consent.
NOTIFICATION OF CHANGES
HOW TO CONTACT US
Write to us at the following address:
National Cotton Council of America
7193 Goodlett Farms Parkway
Cordova, Tennessee 38016
Email us by filling in the form in the “Contact Us” section of the Website.