World of Good Brands Privacy Notice

We and our service providers use the personal information you provide, or that is collected through the Services, to operate, facilitate and fulfill transactions, authenticate you as a user of our Services, personalize your user experience on our websites, and improve our Services, other sites, applications, products and services, to contact you from time to time to provide you with important information and notices relating to the Services, and to carry out obligations arising from any agreements between you and us.

For EEA, UK and Swiss personal data – please refer to sub-section 10.2 below for the legal bases for processing.

We and our service providers use the personal information you provide or that is collected through the Services to provide you with updates, offers, and promotions, where you have chosen to receive these. We also use your information for marketing our own and our selected business partners’ products and services to you by email and, where required by Data Protection Laws, we will ask for your consent at the time we collect your personal information to conduct any of these types of marketing. If you wish to unsubscribe from receiving marketing communications from us by email, please follow the instructions contained in each email you receive from us describing how you can unsubscribe from receiving further marketing communications from us. If you are a registered user you may also be able to adjust your email settings by logging in to your account and adjusting your account settings.

For EEA, UK and Swiss personal data – please refer to sub-section 10.2 below for the legal bases for processing.

From time to time, we may host sweepstakes or a contest on our Services. You may be asked to provide personal information or permit its transfer to a third party in connection with such sweepstakes or contest. The parties whose privacy notice applies will be disclosed at the point of collection or transfer and you will have a choice of whether or not you wish to permit such transfer or collection of information to a third party.

For EEA, UK and Swiss personal data – please refer to sub-section 10.2 below for the legal bases for processing.

The Services are supported through advertising. From time to time we work with third-party companies, advertisers and advertising networks, to enable them to collect certain information regarding how you engage with our websites and to provide advertising through the Services.

We may allow third-party companies, including advertisers, ad networks, and advertising services providers, to serve advertisements, provide other advertising services, or collect personal information when you visit the Services. We provide these companies with the ability to collect personal information about how you interact with the Services and, if applicable, your mobile device.

This personal information includes the unique device or advertising ID associated with your device and imprecise location information (only the country, state and, on some of our websites, the city where you connect from), in order to help analyze and serve targeted advertising on the Services and elsewhere (including third-party sites and applications).

In addition, we share with these third-party providers personal information that is pseudonymized (information that only identifies you indirectly), which may consist of the following data:

all of which are collected during your visit to the Services in order to provide advertisements about goods and services likely to be of interest to you on our websites, but also on websites of third-party companies.

For EEA, UK and Swiss personal data – please refer to sub-section 10.3 below for the legal bases for processing.

As an example, we serve ads on and through third-party companies, such as Apple, Facebook and Google, that are targeted to reach people (or people who are similar to you as a customer or to our target audience) who have visited our Services or are identified in one or more of our databases. These ads are called “matched ads”. This is generally done by us uploading a customer list to a technology service or incorporating a pixel from a technology service on our Services, and the technology service matching common factors between our data and their data. For instance, we incorporate the Facebook pixel on our Services and may share your email address with Facebook as part of our use of Facebook Custom Audiences.

For EEA, UK and Swiss personal data – please refer to sub-section 10.3 below for the legal bases for processing.

To opt out of Matched Ads, please contact the applicable technology service listed below. California, Colorado, Connecticut, Utah, and Virginia residents may also opt out of the use of their personal information for interest-based advertising, including Matched Ads, by following the instructions in Sections 12 and 13, respectively.

To opt out of targeted advertising: for information about how tracking works for targeted advertising purposes, and to opt out of the collection of personal information for the purposes described above by companies participating in the Digital Advertising Alliance Self-Regulatory Program, you can visit:

To opt out of targeted advertising by third parties that are members of the Network Advertising Initiative (“NAI”), please visit:

We are not responsible for such technology service’s failure to comply with your opt-out instructions.

For EEA, UK and Swiss personal data – please refer to sub-section 10.3 below for the legal bases for processing.

We also work with third-party analytics companies to help us understand and analyze how you use our Services and assist us with delivering to you relevant marketing messages and advertisements.

These analytics companies (e.g., Google Analytics) collect information about the content you view and your system information as well as imprecise location information (only the country, state and, on some of our websites, the city where you connect from).

Neither they, nor we, do collect precise geolocation information about your visits from your devices, such as GPS coordinates, WiFi, radio frequency location and RFID, Bluetooth, or latitude and longitude information).

For EEA, UK and Swiss personal data – please refer to sub-section 10.3 below for the legal bases for processing.

We share your personal information with advertisers, third-party advertising networks and analytics companies who use it to deliver targeted advertisements to you on the Services or third-party websites or advertisers. Similarly, these advertisers share personal information with us about you that they have independently gathered or acquired. We also share the personal information we have collected in order to enable our advertising partners to perform data analysis or for advertising-related use. That personal information is always encrypted except cookie IDs.

These companies provide what is called a “cooperative database”, which is a type of database that holds information about customers and their transaction histories through which many companies, such as ours, will contribute information to the database in return for aggregate information on the customers other companies have provided. None of the companies that participate in these cooperative databases reveal which company has collected that data, so none of the participating companies are able to identify which company the data is associated with. Each email and mailing address is then associated with specific business categories (e.g., home decor, artwork, etc.) based on customers’ transaction histories. The participating companies, like ours, are then able to process, using data mining and other marketing targeting techniques, the email and mailing addresses in relation to the specific business categories they want to target in their direct mailing. Such databases are generally used for promotional mailings, credit card fraud detection, digital media targeting, business intelligence or fighting e-mail spam. In our case, these databases are used for promotional mailings and direct mail campaigns: this means that, from time to time, we share our customers’ email and mailing addresses and related transactional information, such as your purchase history, amounts paid and products ordered, with cooperative database and marketing companies for promotional mailings and direct mail campaigns. These types of marketing campaigns are mainly carried out in relation with our Saatchiart.com and Society6.com websites. Some of the third-party vendors who receive your personal information from us may resell it for their own direct marketing purposes, and the direct marketing purposes of other third-party marketing companies.

If you prefer to opt-out of the use of your email and mailing addresses for the above purposes, please let us know at [email protected].

We share your information with service providers and contractors who work on our behalf. For example, they may handle payment or credit card processing, data management, customer data pooling or aggregating, feature administration, email distribution, market research, information analysis, and promotions management. They also include accountants, auditors, lawyers, insurers or similar advisers when we ask for their professional advice. Service providers and contractors will only have access to the personal information needed to perform these limited functions on our behalf.

Our Services may use social networking or "share functionality" or contain links to third-party social media sites or applications that are not owned or controlled by us. We also may allow you to use social media sites or applications to leverage your existing social media site or application accounts to access features of the Services. Your use of these features may result in the collection or sharing of personal information about you by these sites or applications, depending on the feature.

If you are directed to the Services through a third party, we share certain information back with that third party, which may include personal information such as name, email and value of purchase depending on the type of relationship or Services utilized.

We have no control over, and assume no responsibility for any share functionality or the content, privacy policies, or practices of any third-party site or application. We encourage you to review the privacy policies and settings on the social media sites or applications with which you interact to make sure you understand the personal information that may be collected, used, and shared by those sites. You are subject to the policies of those third parties when and where applicable.

We share your personal information with members of the Leaf Group corporate family in order to provide joint content and services (like registration, transactions and customer support), or to improve your experience with the Services, products and other services.

We will disclose your personal information to other businesses in the event of a merger, acquisition, bankruptcy or other sale of all or a portion of our assets or any business, any user personal information owned or controlled by us may be one of the assets transferred to third parties in such transaction or event. We reserve the right, as part of this type of transaction or event, to transfer or assign your personal information and other personal information we have collected from users of the Services to third parties. Other than to the extent ordered by a bankruptcy or other court, the use and disclosure of all transferred user personal information will be subject to this Privacy Notice. However, any personal information you submit or that is collected after this type of transfer may be subject to a new privacy notice adopted by the successor entity or acquirer, as applicable.

We will disclose your personal information to these third parties:

You should be aware that, following disclosure to any third party, your personal information may be accessible by others to the extent permitted or required by applicable law.

If required by the European Privacy Laws, we will seek your consent to these activities and provide the ability for you to withdraw your consent via a cookie consent management platform or other appropriate means. Please see our Cookie Notice for further details.

For details please refer to section 6 of this Privacy Notice.

For details please refer to sub-section 7.2 of this Privacy Notice.

Where we disclose the personal data you provide, or that we collect, to cooperative database and marketing companies for promotional mailings and direct mail campaign purposes, we will seek your consent to these activities if it is required by the European Privacy Laws.

For general explanations, please refer to section 8 of this Privacy Notice.

If required by the European Privacy Laws, we will seek your consent to these activities and provide you with the ability to withdraw your consent via a cookie consent management platform or other appropriate means. Please see our Cookie Notice for further details.

We may transfer your personal data outside of the EEA, the United Kingdom or Switzerland, including to servers, databases or cloud storage facilities located in the United States. We put adequate safeguards in place when we transfer your personal data internationally. This includes only transferring personal data to countries that have been deemed to provide an adequate level of protection for personal data by the applicable regulatory authority, or by otherwise using an appropriate safeguard to ensure the ongoing protection of personal data, such as standard contractual clauses approved by the applicable regulatory authority. You may request further information on the safeguards we use by contacting us via the contact details in Section 1 of this Privacy Notice.

Leaf Group Ltd complies with the E.U.-U.S. Data Privacy Framework program (“E.U.-U.S. DPF”), the UK Extension to the E.U.-U.S. DPF, and the Swiss-U.S. Data Privacy Framework program (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce.

We have responsibility for the processing of the personal data we receive under the E.U.-U.S. DPF, the UK Extension to the E.U.-U.S. DPF and the Swiss-U.S. DPF, and subsequently transfer to a third party acting as an agent on our behalf. We shall remain liable under the E.U.-U.S. DPF, the UK Extension to the E.U.-U.S. DPF and the Swiss-U.S. DPF if our agent processes such information in a manner inconsistent with the E.U.-U.S. DPF Principles and the Swiss-U.S. DPF Principles, unless we are not responsible for the event giving rise to the damage.

In compliance with the E.U.-U.S. DPF Principles, Leaf Group Ltd commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. European Union, United Kingdom and Swiss individuals with DPF inquiries or complaints should first contact:

Leaf Group Ltd has further committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism located in the United States of America – “Data Privacy Framework Services” – operated by the Better Business Bureau National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2.

If you have a concern about our handling of your personal data, please get in contact with us first so we can try to resolve your query using our contact details in section 1 of this Privacy Notice.

If however you feel we have not dealt with your concern and that we are failing to meet our legal obligations, the GDPR gives you the right to lodge a complaint with a supervisory authority. You can do so with your local data protection authority: the Information Commissioner's Office in the United Kingdom or the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred.

If you are a California resident under the age of 18 and are a registered user of the Services, you may request that we remove content or information about you that you posted on the Services by: (a) submitting a request in writing to [email protected]; and (b) clearly identifying the content or information you wish to have removed and providing sufficient information to allow us to locate the content or information to be removed. However, please note that we are not required to, and may not be able to, erase or otherwise eliminate content or information if: (i) other state or federal laws require us or a third party to maintain the content or information; (ii) the content or information was posted, stored, or republished by another user; (iii) the content or information is anonymized so that you cannot be individually identified; (iv) you do not follow the instructions posted in this Privacy Notice on how to request removal of your content or information; or (v) you have received compensation or other consideration for providing the content. Further, nothing in this provision shall be construed to limit the authority of a law enforcement agency to obtain the applicable content or information.

This section contains disclosures required by the California Consumer Privacy Act of 2018 (“CCPA”) as amended by the California Privacy Rights Act of 2020 (“CPRA”) (cited together as the “CCPA”) and applies only to “personal information” that is subject to the CCPA. Consumers with disabilities may access this notice with a standard screen reader. If you are a California resident, this section applies to you. It describes how we collect, use, and share your personal information in our capacity as a “business” under the CCPA, and the rights that you have with respect to your personal information, including sensitive personal information. For purposes of this section, “personal information” and “sensitive personal information” have the meanings given in the CCPA and do not include information excluded from the CCPA’s scope.

A. Personal Information We Collect, Disclose for a Business Purpose, and Sell or Share

B. Sensitive Personal Information

C. Retention

D. Third Parties to Whom We Sell or Share Personal Information

E. Right to Know, Correct, and Delete

F. Right to Opt-Out of Sales and Sharing

G. Verification Process and Required Information

H. Authorized Agent

I. Minors' Right to Opt In

J. Right to Non-Discrimination

K. Financial Incentives

L. Shine the Light

13. Colorado, Connecticut, Utah, and Virginia Privacy Rights

These additional rights and disclosures apply to residents of Colorado, Connecticut, Utah, and Virginia. Terms have the meaning ascribed to them in the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”) and the Virginia Consumer Data Protection Act (“VCDPA”), as applicable.

You have the following rights under these laws:

You can visit the following page in order to exercise any of the above rights for some or all of our websites: USA Consumer Privacy Rights Web Form, or call our toll-free number from the United States at 1 (888) 622-0767.

You also have the right to opt out of the processing of personal data for purposes of targeted advertising or the sale of personal data. To opt-out, click on the “Do Not Sell or Share My Personal Information” link that appears at the footer of our website or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you submit an opt-out, we do not know who you are within our systems, and your opt-out will only apply to personal data collected from tracking technologies on the specific browser from which you opt-out. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings.

We will respond to your request within 45 days. If you have an account with us, we may require you to use the account to submit the request. We may require specific information from you to help us confirm your identity and process your request.

You can designate an authorized agent to submit requests on your behalf. Requests must be submitted through the designated methods listed above. Except for opt-out requests, we will require written proof of the agent’s permission to do so and may verify your identity directly.

If we refuse to take action on a request, you may appeal our decision within a reasonable period time by contacting us at [email protected] and specifying you wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint as follows:

14. Security Measures and Storage Limits

We provide industry-standard physical, electronic, and procedural safeguards to protect personal data we process and maintain. For example, we take reasonable measures to limit access to this data to authorized employees and contractors who need to know that information in order to operate, develop or improve our Services. Please be aware that, although we endeavor to provide reasonable security for data we process and maintain, no security system can prevent all potential security breaches. As a result, we cannot guarantee or warrant the security of any information you transmit on or through the Services and you do so at your own risk. We have also put in place procedures to deal with any personal data breaches and will notify you and any applicable regulator of a breach where we are legally required to do so.

Our retention periods for each category of personal information, including sensitive personal information, are based on our business needs and legal requirements. We retain personal information only for as long as is reasonably necessary for us to fulfill the purpose for which it was collected, and as otherwise to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. If we continue to retain your personal data in accordance with a legal obligation, any further processing of your data will be limited to compliance with such legal obligation.

Where required by Data Protection Laws, we shall delete your personal information when we are requested to do so. Even if we delete your personal information from our active databases, some or all of the personal information you provided may be required in order for the Services to function properly and it may remain in backup storage or records retention archival media (not to be used for any other purpose) until it is permanently deleted in accordance with our standard retention schedules.

To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal obligations.

15. Updates to this Privacy Notice

If you do not agree to such changes following such notice, you should discontinue your use of the Services prior to the time the modified Privacy Notice takes effect. If you continue using the Services after the modified Privacy Notice takes effect, the modified Privacy Notice will govern any further processing of your personal data.