How Long Do We Retain Personal Information? 

We will retain personal information about you for so long as your account is active, you engage with us, as needed to provide your services, and as necessary to comply with our legal and/or regulatory obligations, to resolve disputes, to manage our rights, and to enforce our agreements. We do not control certain privacy settings and preferences maintained by our social media partners like Facebook, Instagram, and Twitter. If you wish to make changes to those settings and preferences, you may do so by visiting the settings page of the appropriate social media site.
 

How We Share the Information We Collect

Shaw-Bryant, LLC will not share your Personal Information with third parties, except as described below.
 

• Third-Party Service Providers and Vendors. Shaw-Bryant. LLC (DBA Bun-Mi my gift) may share your Personal Information with third-party service providers for business or commercial purposes. Your Personal Information may be shared so that they can provide us with services, including identity verification, fraud detection and prevention, security threat detection, payment processing, Customer support, data analytics, Information Technology, advertising, marketing, data processing, network infrastructure, storage, transaction monitoring, and tax reporting. Shaw-Bryant, LLC (DBA Bun-Mi my gift) shares your Personal Information with these service providers only so that they can provide us with their services, and we prohibit our service providers from using or disclosing your Personal Information for any other purpose. Our third-party service providers are subject to strict confidentiality obligations.

• Law Enforcement. Shaw-Bryant, LLC (DBA Bun-Mi my gift) may be compelled to share your Personal Information with law enforcement, government officials, and regulators.

• Corporate Transactions. Shaw-Bryant, LLC (DBA Bun-Mi my gift) may disclose Personal Information in the event of a proposed or consummated merger, acquisition, reorganization, asset sale, or similar corporate transaction, or in the event of a bankruptcy or dissolution.

• Professional Advisors. Shaw-Bryant, LLC (DBA Bun-Mi my gift) may share your Personal Information with our professional advisors, including legal, accounting, or other consulting services for purposes of audits or to comply with our legal obligations.

• Shaw-Bryant, LLC) DBA Bun-Mi my gift may share or disclose your information with your consent.

Third Parties Providing Services on Our Behalf:  

We rely on third parties to perform a range of business operations on Our behalf. Service providers may also use personal information for their own internal business purposes, such as process or product improvement.  For instance:
 

• Third parties that assist and help Us in providing digital and e-commerce services such as social listening, store locator services, loyalty programs, and product finders, name collection and lead generation, identity management, ratings and reviews, teleconsultations tools and services, product recommendations, predictive sort, product search, personalized services, coupons, loyalty, refer/invite-a-friend, customer relationship management, data management tools, provide subscription or recurring purchases, gift cards purchase and redemption, sampling and redemption services; web chat features, and user generated content curation tools; 

• Advertising, marketing, digital and social media agencies, analytics providers, and vendors to help Us to deliver advertising, marketing, and campaigns, to analyze their effectiveness, understand how consumers use the companies’ site, products and services, and retail locations, and manage your contact and questions.  Example, providers that:

• help Us send Our direct mail, email, and SMS marketing messages, personalize Our Sites, help Us manage Our events, 

• deliver Our ads (e.g., demand side platforms, ad servers, content optimization), and analyze Our customers.

• Third parties that assist and help Us in providing IT services, such as platform providers, hosting services, master data management, maintenance, and support on Our databases as well as on Our software and applications that may contain data about the consumer.

• Third parties that provide us with consulting services in the field of market research and analytics, and who help Us collect feedback on our products and services. 

• Third parties that assist Us with bot and fraud detection and prevention, legal, compliance, and risk management. 

• Third parties that provide order processing, fulfilment, shipping, and return management; provide delivery and shipment notifications, who process transactions and payments; provide customer service and support, and assess customer satisfaction.

• Third parties that assist Us for customer care and cosmetovigilance purposes.

Categories of personal information shared (depending on the specifics of the business transaction) with these third parties include identifiers, internet or network activity, geolocation data, purchasing information, protected classifications, professional or employment-related information, audio-visual information, other categories of personal information, biometric, geolocation information, payment information, other information, and inferences generated from the foregoing categories of information.
 

Transactions You Have Requested or to Which You Have Agreed

Personal information may also be shared to complete a transaction you requested.  Example, payments consumer makes to pay for goods and services through some of Our Site are completed using a third party’s online payment system (e.g., Apple Pay, PayPal, etc). Additionally, the consumer may elect to use buy now pay later services available on Our Site (e.g., Afterpay, Klarna, etc.) or receive free shipping through third party services. To facilitate your request, categories of personal information such as identifiers, internet or similar network activity, contact information, and purchasing information are shared to complete the transaction you requested.  
 

In addition, the companies’ site may provide the opportunity to post content in a public forum or provide user generated content.  Example, providing ratings & reviews about Our products and services, granting Us permission to host user-generated content; posting on Our social media pages or channels; or participating in contests, blogs, or videos.  This content is intended for public consumption, and we may display this content. Once displayed publicly that information can be collected and used by others. If the consumer decides to submit information or permit Us to post it in these public forums, the information will be publicly available. 

Other Third Parties (Ad Networks and Advertising Companies):

We share or make available personal information (such as identifiers, Internet or similar network activity, commercial information, inferences) with third party marketing and advertising networks and social media platforms to serve the consumer tailored and personalized advertisements on other websites and services and across other devices.  Example, when the consumer provides Us with personal information, we use that information to optimize our advertisements, serve you advertisements, and measure advertisement performance.  We do this generally by uploading an identifier the consumer provided Us or We obtained (email, phone number, cookie or device ID, other identifier, etc.) to a platform that is selling advertisements (such as Facebook, YouTube, Instagram, Pinterest, etc.). We can use that same data to serve the consumer with advertising on websites that participate in online auctions of their ad inventory.  
 

Additionally, when the consumer visits Our Site, the company use cookies (or other similar technologies) from third parties. Information collected by these companies is used to build a profile of the consumers interests to show relevant advertising on other websites or to other devices connected to you (cross-device advertising) by Us or other companies, and includes identifiers, internet or network activity, commercial information, and inferences generated from the foregoing.  In connection with advertising or Our Site, the consumer may be asked to receive information and/or marketing offers from someone else, or to otherwise agree to the sharing of your information with a third party.  
 

Our Site has features such as plugins, widgets, or other tools provided by third parties. These tools collect identifiers along with internet or similar network activity (e.g., IP address and what page the consumer is visiting).  If you engage with such plugins, widgets, or other tools, additional information may be shared.  Example, if you use Facebook’s “like” feature, Facebook may register the fact that you ‘liked’ a product and may post that information on Facebook.This use of information is not governed by Our privacy notice.  
 

These companies use personal information they receive to improve their own products and optimize their own ad targeting systems.  

Additional Information About Our Advertising (including Interest-Based Advertising):  

We provide tailored and personalized content, services, advertisements and offers, including based on personal information. When we send or display personalized communications or content, we use personal information to generate inferences about the consumer. We use these inferences to show advertisements or other content We believe you would like to see. This means We collect personal information about you as described above, and We centralize this personal information and analyze it to evaluate and attempt to determine your personal preferences, interests, or needs. Example, based on information We collect We may conclude that you are interested in certain products and services We provide and then We send or display communications or content tailored to those preferences, interests, or needs.  
 

We may recognize Your information across different devices that you use or log in from (i.e., computers or mobile devices.). We may recognize that one cookie or device ID (i.e., from a computer) may be connected to another device (i.e., smart phone) by the cookie or device ID or log in. This may result in you searching for one of Our products on one device but seeing an ad later for that product on another device. Knowing what devices are being used by a person or household helps Us limit the number of times you may see the same ad across different devices.  We may also combine information We collect from your devices with other information We have about you, such as your account information, services, transaction history, and interaction with Our Site.
 

We participate in interest-based advertising.  We use third party companies to serve advertisements tailored to each individual interests based on how they browse and shop online, as well as to provide advertising-related services such as measuring the performance and engagement with Our ads, provide analytics, preference, and interest information. In some instances, these ad network providers, social platforms, sponsors, and/or analytics providers may use their own tracking technology to capture information about your device, use, and engagement online for the purpose of tailoring advertising for Our products or for products or services of other companies based on preferences or interests known or inferred from the data collected. We use Google Analytics Advertising Features to share information with Google about your use of this site to allow Us to deliver relevant and personalized advertising or content to you on other websites.  We have enabled the following

Google Analytics Advertising Features: Remarketing with Google Analytics (which allows Us to create an audience of users based on user behavior on Our Sites, so We can use that audience to deliver Our advertisements (e.g., a user who viewed a product but did not add to cart may receive an advertisement for that item, while a user who added items to their cart but didn’t complete the purchase may receive an ad for the item left in the cart), Google Display Network Impression Reporting, Google Analytics Demographic and Interest Reporting, and integrated services that require Google Analytics to collect data for advertising purposes, including collecting data via marketing cookies and identifiers.  These companies will use personal information they receive to improve their own products and optimize their own ad targeting systems. 
 

Other Purposes. We collect and use any personal information We collect for other legitimate purposes, such as our day-to-day business operations, to analyze and improve our business, for corporate governance, and to comply with laws and regulations.  For these purposes, we may use any categories of personal information collected by Us.   
 

1. Day-to-Day Business Operations & Product Improvement.  We use personal information we have collected for other purposes reasonably required for day-to-day operations, such as accounting, collecting payments due and owing to Us, financial reporting, business analytics, operational and strategic business planning, and expense management.  

2. Corporate Governance. We use any personal information we collect for planning, managing, and carrying out restructuring, redundances, or other change programs, evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolving, or other sale or transfer of some or all Our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information by Us is among the assets transferred.  

3. Compliance with Laws & Regulations. We use personal information We collect to comply with local, state, and federal laws; enforce Our legal rights and obligations; and for any purpose in connection with legal claims, reports of violations, or allegations made by, against, or otherwise involving, and to the otherwise comply with lawful requests by public authorities, e-discovery requests or where otherwise required or permitted by applicable laws, court orders, government regulations, or regulatory authorities.  

​

Your Privacy Choices
              *Email:

You may change your preferences and unsubscribe from email services from Our brands by: (i) modifying your registered user information on the Sites; (ii) sending Us an e-mail to the address listed in Contact Us located at the end of this Notice; or (iii) following the unsubscribe instructions in the communications that you receive.  

              *SMS Text Messages:

We may send text messages if you have agreed to receive from one of Our companies. You may cancel text messages from our brand at any time by texting “STOP”. After you send “STOP” We may send you an additional text message to confirm that you have unsubscribed. Message and data rates may apply.

             * Push Notices; Uninstallation of Mobile Apps:  

You may at any time opt out from push notifications or allowing Us to access location data by adjusting the permissions in your mobile device. Some features on the Site may require access to the camera or other features of your device. You can adjust the settings or your device to control access to the camera or other features. You can stop all further collection of information by Our mobile applications by uninstalling the mobile application. Please note that if you uninstall the mobile application from your mobile device, the unique identifier associated with your mobile device will continue to be stored.  If you re-install the application on the same mobile device, We will be able to re-associate this identifier to your previous transactions and activities.

              *Geo-Location and In-Store Location:

You may prevent your mobile device from sharing your location data by adjusting the permissions on your mobile device or within the relevant app. 

              *Cookies, Tracking, and Interest-Based Advertising:

If you would prefer not to accept cookies, you can manage your cookie preferences by clicking on the “Cookie Settings” link located on the bottom of the website homepage. You cannot disable essential cookies. You can also change your browser settings to notify you when you receive a cookie, which lets you choose if to accept it; or set your browser to automatically reject any cookies. However, please be aware that some features and services on Our Site may not work properly because We may not be able to recognize and associate you with your account. In addition, the offers We provide when you visit the site may not be as relevant to you or tailored to your interests.

 
You can opt out of receiving targeted advertising through the Network Advertising Initiative Opt–Out Page or the Digital Advertising Alliance Opt-Out page. Options are Device-specific, so if you use multiple devices, you should opt out on each one. Even if You opt-out of targeted advertising, you may still see Our advertisements while you are browsing, but they may not be targeted to you based on your interests.
Some social networks (such as Facebook), allow You to exercise ad choices, limit data collection and clear Your history on that platform as well. 

              *Do Not Track Global Privacy Control:  

Under the laws of several states, Website and online service operators are required to disclose how they respond to web browser ‘do not track’ signals.  Shaw-Bryant, LLC (DBA Bun-Mi my gift) does not currently take actions to respond to Do Not Track signals as a uniform standard for such response has not yet been established.  However, where required by law, we will treat browser-based signals such as the Global Privacy Control as requests to opt-out of the sale/sharing of personal information.

Additional Information for California Residents

This subsection provides residents of California with additional information regarding Our collection, use, and disclosure of personal information. This Section supplements the information contained in Our Detailed Privacy Policy and applies solely to visitors, users, and other individuals who reside in California. This section does not address or apply to Our handling of publicly available information or other personal information that is exempt from California law.  

              Shine the Light Act

If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by Us to third parties for the third parties’ direct marketing purposes. You may send us requests for this information to info@bun-mi.com. In Your request, please include the statement “Shine the Light Request” and provide your first and last name and mailing address to certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency.

              Removal of Content

If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted.

To make such a request, please write to us at the address listed at the end of this Notice and provide as much details as possible (i.e., date and caption) as to the post(s) you would like removed. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

              California Privacy Rights Act 

Categories of Personal Information Collected. 

While Our processing of personal information varies based upon Our relationship and interactions with you, the information below identifies, generally, categories of personal information collected about California residents in the last 12 months: 
 

1. Identifiers — Personal unique identifiers, such as full name, address, telephone number, online identifiers, internet protocol address, email address, account name, social handle, or moniker.

2. Other Personal Information — Name, contact details such as telephone number and address, financial information such as account number and balance, payment card details including credit and debit card numbers, signature (including electronic signature), driver’s license or state ID number, education, and employment. This includes physical characteristics or descriptions, as well as medical and health information, which may be considered as ‘sensitive’ personal information.

3. Characteristics of Protected Classes — Characteristics of protected classes or groups under state or federal law, such as age (40+), race, ethnicity, national origin, sex, gender identity, gender expression or marital status.

4. Biometric Information – We may collect, capture, possess, store, or obtain the picture you provide through one of our online beauty tools, and data obtained or created from your picture (including the automated recognition of various facial landmarks), that might qualify as biometric data, biometric information, or a biometric identifier under various laws. 

5. Commercial or Purchasing Information — Purchase information, such as products and services purchased, obtained, and considered; other purchasing or consumer histories or tendencies (e.g., beauty routines or beauty concerns), loyalty activity and redemptions, account information, user-generated content, and transaction histories.

6. Internet or Online Information — Internet or online information such as browsing history, search history, smart device and sensor data, and information regarding interaction with Our Sites, or advertisements.

7. Geolocation Data — Geolocation data, such as device location.

8. Audio and Visual Information — Audio, electronic, visual, thermal, olfactory, or similar information, such as call and video recordings, photographs that you upload or share with Us, CCTV video recorded at Our facilities, call center recordings, and video images.

9. Employment Information — Professional or employment-related information, such as work history, career/profession, professional credentials (e.g., professional license status), and prior employer.

10. Inferences — Inferences based on personal information about an individual to create a summary about, for example, an individual’s preferences and characteristics, including beauty and related preferences, characteristics, behaviors on and off site, purchase patterns, demographics, household information.

​

The above categories include information identified as sensitive under California law, including government issued identifiers; account log-in and financial information; precise geolocation; racial or ethnic origin; information that may be biometric information, information collected and analyzed concerning health; and information collected and analyzed concerning sexual identity.

Sales/Sharing of Personal Information 

We do not ‘sell’ (as ‘sell’ is traditionally defined) personal information about Our consumers. We do not make available or provide consumer’s names, phone numbers, addresses, email addresses, or other personal information to third parties in exchange for money. However, like many companies, we do share personal information with third parties to provide you with personalized advertising from Us, or We make available personal information to third parties (including due to Our use of cookies (or similar technologies) provided by third parties on Our Sites). Example, we share personal information with third parties (such as social media platforms) to optimize our marketing campaigns, display ads for Us, and measure the effectiveness of those ads. These companies use personal information to improve their own products and optimize their own ad targeting systems.   

We do not knowingly sell/share personal information of consumers under 16 years of age.  
In the past 12 months we have disclosed the following categories of personal information that may be considered “sale”/ “sharing” under California law: Identifiers, Other Personal Information, Commercial or Purchasing Information, Internet or Online Information, Geolocation Data, Inferences, Professional or Employment-Related Information, and Inferences (inferred and derived data).  
 

Categories of third parties to whom personal information was disclosed that may be considered “sale”/ “sharing” under California law: publishers and marketing companies with whom We work to place Our advertisements (such as retailers who sell Our products or online companies who sell Us advertising space to deliver Our ads such as advertising networks or marketplace sellers), AdTech companies who help Us deliver Our advertisements, data analytics providers, and online platforms and social media networks such as Google, Amazon, and Meta etc.

• Privacy Rights Under State Law

Rights Available Under State Law

Residents of California, Virginia, Connecticut, and Colorado have certain rights under applicable privacy laws, subject to certain conditions.  Depending on your state of residency, you may be able to exercise the following rights in relation to personal information about you that we have collected (subject to certain limitations under state law).  These may include:  
 

• Right to Know: The right to request that We disclose information about our collection and use of Your personal information, including:

                     *Categories of personal information we collected. Categories of sources for the personal information we

                       collected. Our business or commercial purpose is for collecting personal information. The categories of third

                       parties with whom we share that personal information. The specific personal information we collected about

                       the consumer.

• Right to Access and Portability:  The right to confirm whether We are processing personal information about you and to obtain a copy of such personal information we have collected about you, and, where required by law, obtain a copy of such personal information in a portable and, to the extent technically feasible, readily usable format. 

• Right of Deletion: To delete personal information provided to or obtained by Us. The consumer has the right to request that we delete personal information about them, subject to certain exceptions and to the extent required by law. Once the company receives and confirms your verifiable consumer request, the company will delete personal information about you from our records, unless an exception applies.

​

For example, personal information may need to be kept to:

A. Complete a transaction for which We collected the personal information, provide a good or service requested (such as the sale of our beauty products to You), or reasonably anticipated within the context of a relationship with Us, 
B. Track consumer complaints or product issues
C. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity.
D. Comply with a legal obligation.
E. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
F. Other internal uses compatible with the context in which the consumer provided us with personal information.

​