Privacy policy

HAPPY KOALA LLC DBA HAPPY MAMMOTH

Last Updated: 3 April 2025

Happy Koala LLC, doing business as Happy Mammoth, and its affiliates (“Happy Mammoth, we, us, or our”) respects your privacy and values the relationship we have with you. This Privacy Policy describes the types of personal information we collect, how we use the information, with whom we share it, and the choices available regarding our use of the information. We also describe how to contact us about our privacy practices.

This Privacy Policy (together with our Terms of Service and any other policies referenced in this Privacy Policy) applies to the personal information collected on happymammoth.com or on our other Internet-based offerings (collectively and individually, the “Site”), on online stores that sell Happy Mammoth beauty products, and from our personnel. Unless otherwise indicated at the time that you provide your personal information, any personal information collected at third-party retail locations is not provided to us and is not subject to this Privacy Policy.

By continuing to use our Site, you accept the terms of this Privacy Policy and our Terms of Service.

If you are a California resident, our privacy practices comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the “CCPA”). An explanation of your rights under the CCPA can be found in Section 11.

If you are a resident of the European Economic Area (“EEA”) or the United Kingdom (“UK”), this Privacy Policy also outlines additional policies applicable to our collection and processing of your Personal Information, which can be found in Section 12. Non-EEA countries do not have the same data protection laws as the United Kingdom, Switzerland and EEA. We will, however, take steps to ensure that any transfer of Personal Information will be secure and complies with applicable data protection laws.

As our services evolve and we determine to use your Personal Information collected in other ways, we may from time to time amend this Privacy Policy. The effective date appears at the end of this Privacy Policy. We encourage you to check our Site frequently to review the current Privacy Policy in effect and any changes that may have been made to it.

1. Information We Collect

We collect personal information that you enter on our Site or volunteer to us when you contact us. You can choose not to provide certain information, but then you might not be able to take advantage of some of our features.

For purposes of this Privacy Policy, “Personal Information” means information (whether stored electronically or in paper based filing systems) relating to a living individual who can be identified from that data (or from that data and other information in our possession). This can include your name, email address, phone number, birthdate, and other technical information which is described further in this Privacy Policy.

Happy Mammoth collects only that Personal Information that is relevant for the purposes for which the data is requested. You can visit our Site without telling us who you are or revealing any Personal Information.

If you visit the Site or are a Happy Mammoth customer, we may collect or may have collected the following categories of Personal Information about you. In some cases, the information we collect may fall within more than one category.

Contact information and personal identifiers, such as your name, address, email address, telephone number, and username or social media handle.
Device identifiers, such as information about your device like your MAC address, IP address, or other online identifiers.
Demographic information, such as your age, sex, and gender (some of which may be protected by applicable law).
Commercial information, such as the products or services you have purchased, returned or considered, and your product preferences.
Payment information, such as your method of payment and payment card information (including payment card number, expiration date, delivery address and billing address).
Online or network activity information, such as information about your visit to the Site, including the full Uniform Resource Locators (URL), clickstream to, through and from our Site (including date and time), pages on our Site you viewed; page response times, download errors, duration of page visits, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and log file information, which includes, but may not be limited to, your browser type and version, operating system and platform, webpages you visit, and other electronic network activity.
Geolocation information, such as information that can help identify your physical location (like your GPS coordinates or the approximate location of your mobile device).
Health and medical information, such as digestive, hormone, physiological, psychological, and sleep concerns, diagnoses, medical reports and history.
User Content, such as your communications with us and any other content you provide (including photographs and images, videos, reviews, articles, survey or quiz responses, and comments).
Inferences drawn from or created based on any of the information identified above.

We also collect Personal Information from contractors, and individuals working for our vendors and business partners. Happy Mammoth collects that Personal Information in the course of our business dealings from you or your employer in connection with the services you provide to Happy Mammoth, or when you apply to provide such services. When you or the company you work for interacts with Happy Mammoth, we collect the following types of Personal Information:

Contact information and personal identifiers, such as your name, address, email address, telephone number, driver’s license number, passport number, and any other information you provide relating to your work or to you personally.
Financial information, such as bank account information.
Professional information, such as your CV, resume, and employment history.
Education information, such as your educational background and grades.
Demographic information, such as your age, sex, gender, national origin, and citizenship status (some of which may be protected by applicable law).

2. How We Collect Information

If you visit the Site or are a Happy Mammoth customer, we may collect or may have collected Personal Information about you from various sources. The categories of sources from which we may collect Personal Information are:

Directly from you, such as when you make a purchase on our website, contact us with a question or complaint, create an account on our website, respond to a survey or quiz, or sign-up to receive marketing communications.
Cookies and automatic collection methods. When you visit our website or use one of our mobile applications, and when you open or click on emails we send you, we (and third parties we work with) may automatically collect information from your browser or device using technologies such as cookies, web beacons, pixel tags, and similar technologies. Cookies are small text files that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser. Web beacons or pixel tags are small images which are embedded into our website or emails that provide us with information about your browser or device, or whether you open or click on the emails we send you. These technologies enable us, or the third parties who place such technologies, to collect information such as device identifiers and online or other network activity information.
From social media platforms/networks, such as Facebook, TikTok, Instagram, YouTube, and Pinterest. For example, we may obtain your information from a social media platform or network if you interact with us on social media or choose to log-in to our website using your social media credentials.

If you are providing services to Happy Mammoth, or applying to provide such services, we may collect or may have collected Personal Information about you from various sources. The categories of sources from which we may collect Personal Information are:

Directly from you, such as when you apply to provide services, or when you otherwise communicate with us.

3. What Do We Do With Your Information?

If you visit the Site or are a Happy Mammoth customer, We may use or may have used the Personal Information we have about you:

To provide products and services to you, such as fulfilling orders and processing payments, creating, servicing and/or maintaining your account, assisting with product selection and replenishment, and managing current or past purchases.
To communicate with you, including to respond to your inquiries or complaints, and to help you place an order.
To administer your participation in special events, contests, sweepstakes, surveys, and promotions.
For marketing and advertising, such as to send you marketing and advertising materials via postal mail, text message or email, and to show you advertisements for products and/or services tailored to your interests on social media and other websites.
For analytics purposes, such as to: understand how you use our website and mobile applications; understand your preferred method of purchasing with us; determine what browser and devices you use to visit our website; and to evaluate and improve our products, services, advertisements, website and mobile applications.
To operate and improve our business, including to provide quality assurance, conduct research and development to develop new products and services, and perform accounting, auditing and other internal business functions.
For legal and security purposes, such as to detect, prevent, and prosecute harmful, fraudulent, or illegal activity, loss prevention, identify and repair bugs on our website or mobile applications, and to comply with applicable legal requirements, relevant industry standards and our policies.
We also may use or may have used the information in other ways for which we provide specific notice at the time of collection.

If you are providing services to Happy Mammoth, or applying to provide such services, we may use or may have used the Personal Information we have about you:

To communicate with you in connection with the services you or your company provide to us.
To operate and improve our business, including to respond to job applications.
To fulfill our contractual and business obligations, and ensure that you fulfill your obligations.
To confirm you have the ability and resources to provide services to us, which may include making inquiries about your financial status and business experience, as well as your past commercial practices.
For the purpose of determining whether you can carry out the essential job duties of your position and/or determining whether to hire an applicant or promote you.
For legal and security purposes, such as to detect, prevent, and prosecute harmful, fraudulent, or illegal activity, and to comply with applicable legal requirements, relevant industry standards and our policies.
To analyze and improve our business processes, including to assist us with improving our application and recruitment processes and other human resources-related objectives.
We also may use or may have used the information in other ways for which we provide specific notice at the time of collection.

4. Information we Disclose

We may disclose or may have disclosed your Personal Information to:

Service providers. We may transfer Personal Information to service providers who perform services on our behalf based on our instructions. We do not authorize these service providers to use or disclose Personal Information except as necessary to perform services on our behalf or comply with legal requirements. Examples of these service providers include entities that process credit card payments, fulfill orders, and that provide website and application functionality, hosting, analytics, advertising and marketing services.
Text Messaging Data. We do not sell or share your opt-in to receive SMS messages for purposes unrelated to providing our text messaging services. We may share your personal information, including your mobile phone number and SMS consent status, with third-party service providers (such as messaging platforms, telecommunications providers, and vendors) who assist us in delivering text messages on our behalf.
Parties to a corporate transaction. We also reserve the right to transfer Personal Information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation).
Advertising Companies. We work with third party advertising companies (such as advertising networks) to serve advertisements on our behalf. For additional information, see the Cookies, Targeted Advertising & Analytics section.
Other third parties. In addition, we may disclose personal information about you (i) if we are required to do so by law or legal process, (ii) to law enforcement authorities or other government officials, (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity, (iv) when disclosure of your personal information is otherwise required or permitted by law, or (v) with your consent.

5. Your Rights and Choices

ACCESSING, UPDATING, AND MODIFYING PERSONAL INFORMATION
Subject to applicable law, you may have the right to request access to and receive details about the personal information we maintain about you, update and correct inaccuracies in your personal information, and have the personal information deleted, as appropriate. These rights may be limited in some circumstances by local law. We may take reasonable steps to verify your identity before granting access or making corrections. You may request to access, change, or delete your personal information by emailing us at support@happymammoth.co.

EMAIL OPT-OUT
You can opt-out of receiving marketing communications by email by following the instructions within the emails you receive from us or by emailing us at support@happymammoth.co. Please note that if you opt-out from email communications, we may still send you transactional or operational emails. Examples of transactional or operational emails include, purchase or shipping confirmations, password resets, profile updates or other account related messages.

TEXT MESSAGE OPT-OUT
You can opt-out of receiving text messages from us by replying STOP to the text message you receive from us or making a request by emailing us at support@happymammoth.co. Please note that this will only opt you out of the specific text messaging program associated with that number.

6. Cookies, Targeted Advertising and Analytics

We use cookies and similar technologies to help track items you place in your shopping cart, including when you abandon a cart. This information may be used to determine when to send you reminder messages, including via SMS, where you have opted in to receive such messages.
Cookies are small text files that websites send to your computer or other Internet-connected device to uniquely identify your browser or to store information or settings in your browser. We use different types of cookies on our website, including performance cookies, functional cookies and targeting cookies.

We use the following types of cookies in our website:

Strictly Necessary Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Site. They help us to know which pages are the most and least popular and see how visitors move around the Site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Functional Cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

You can block our use of cookies through settings in your browser. Because these settings are different in different browsers, we recommend that you visit All About Cookies at https://allaboutcookies.org/, where you can find comprehensive information on cookie management and blocking for a wide variety of browsers.

TARGETED ADVERTISING
We may work with third party advertising companies (such as advertising networks) to serve advertisements for us. These advertising companies may use cookies and other technologies to collect device identifiers, online or network activity information, commercial information, or inferences, such as information about the websites you visit over time and the advertisements you click on, in order to deliver advertisements that are targeted to you. You can opt-out of this form of targeted advertising from the companies we work with by changing your cookie settings. Please note that even if you opt-out of this form of targeted advertising, you may still see ads from us, but the ads will not be targeted based on behavioral information about you. To learn more about this type of advertising in general, visit the Digital Advertising Alliance at https://youradchoices.com/ or the Network Advertising Initiative at https://optout.networkadvertising.org/.

We also work with third-party platforms, including platforms operated by social networks, such as Google, and Facebook, to show you advertisements or measure the effectiveness of our advertisements. We may convert your email address, telephone number, or other information into a unique value and have these third-party platforms match this unique value with a user on their platform or with other data they may have. This matching enables us to deliver advertisements to you and others on these platforms. You also can request that we refrain from using your personal information in this way by emailing us at support@happymammoth.co.

DO NOT TRACK AND ADVERTISING ACROSS DIFFERENT WEBSITES
We currently do not change our tracking practices in response to “do-not-track” signals or other similar mechanisms. Third parties that have content or services on our website, such as a social feature, an analytics service, or an advertising network partner, may obtain information about your browsing or usage habits. These third parties do not change their tracking practices in response to “do-not-track” signals from your web browser and we do not obligate these parties to honor “do-not-track” signals. To learn more about browser tracking signals and “Do Not Track,” please visit https://allaboutdnt.com/.

ANALYTICS SERVICES
We may use analytics services, such as Google Analytics, on our website, our social media pages, or our mobile applications to help us evaluate and analyze how visitors use these platforms. For specific details on how Google collects and uses information on our website, social media pages, or mobile applications, please visit: HOW GOOGLE USES DATA.

INTERNATIONAL TRANSFERS
We may transfer the personal information we have about you to countries other than the country in which the information was originally collected, and your personal information may be processed and stored outside of your country of residence. Those countries may not have the same data protection laws as your country of residence, and your personal information will be subject to applicable foreign laws. When we transfer your information to other countries, we will protect that information in the manner described in this Privacy Policy.

7. Children’s Privacy

Our Site is not intended for or directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen on the website. If we become aware that a child under the age of sixteen has provided us with Personal Information, we will delete the information from our records.

8. Our Storage of Your Personal Information

Happy Mammoth uses reasonable and appropriate measures to protect your Personal Information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into due account the risks involved in processing the Personal Information and the nature of the Personal Information we collect.

We will keep your Personal Information for as long as we need it, or as otherwise prescribed by law, for the purposes set out above. This period will vary depending on your interactions with us. We may also keep a record of correspondence with you (for example if you have made a complaint about our products or services) for as long as is necessary for us to defend a legal claim.

9. Links to Other Websites

Our website may provide links to other websites for your convenience and information. These websites may operate independently from us. Linked websites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or controlled by us, we are not responsible for the websites’ content, any use of the websites, or the privacy practices of the websites.

10. Updates to Our Privacy Policy

This Privacy Policy may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will post a prominent notice on our website to notify you of any significant changes to our privacy practices and indicate at the top of the Privacy Policy when it was most recently updated.

11. Additional Rights and Disclosures for California Residents

The CCPA affords California consumers the rights with respect to their Personal Information set forth in this section.

(A) Your Rights With Respect to Your Personal Information
Subject to certain exceptions, you have the following rights with respect to your Personal Information:

To request that Happy Mammoth disclose what Personal Information it has collected, used, or disclosed, over the 12-month period preceding Happy Mammoth's receipt of such a request;
To request that Happy Mammoth disclose whether any of your Personal Information was sold or shared with third parties, to whom such information was sold or shared, and the business purpose for selling or sharing the Personal Information;
To request to opt out of our sale or sharing of your Personal Information;
To request that any inaccurate or incomplete Personal Information maintained by Happy Mammoth be corrected or supplemented; and
To request deletion of your Personal Information maintained by Happy Mammoth.

All of these rights are subject to certain conditions and exemptions. For example, Happy Mammoth will not be obligated to delete your Personal Information if we need to retain it to protect ourselves in the event of a legal claim.

(B) Right to Non-Discrimination for the Exercise of a Consumer's Privacy Rights

We will not deny you any goods or services, or charge you a different price, level or quality of goods or services because you exercise any of your rights under the CCPA; however, we may not be able to provide the goods or services if you refuse to provide us the Personal Information that is necessary for us to provide the goods or services, or if you ask us to delete your Personal Information.

In some cases, you have the right to limit the use or disclosure of your health information, which constitutes sensitive personal information under the CCPA. We do not engage in uses or disclosures of “sensitive personal information” that would trigger the right to limit use or disclosure of sensitive personal information under applicable law.

(D) Right to Opt-Out from Sales or Sharing of Personal Information

From time to time, we may use or disclose your Personal Information in a way that is deemed a “sale” or “sharing” under the CCPA to provide relevant product recommendations and deliver marketing messages and personalized offers through select companies (e.g. analytics, advertising, and technology companies).

California residents have the right to opt out of sales and sharing of Personal Information. If you wish to opt out of our sharing of the limited data that is gathered when you visit our websites and other web-based services for purposes of targeted digital advertising, you may do so by submitting a request at Support or emailing us at support@happymammoth.co.

You may also opt-out of “sales” and “sharing” of your personal information through the use of an opt-out preference signal. If our website detects that your browser is transmitting an opt-out preference signal, such as the “global privacy control”—or GPC— signal, we will opt that browser out of cookies on our website that result in a “sale” or “sharing” of your personal information. Please note, if you come to our website from a different device or a different browser on the same device, you will need to opt out, or use an opt-out preference signal, for that browser and/or device as well.

In the past 12 months, we have sold or shared the following Personal Information to the following categories of third parties:

Personal Information Category	Categories of Third Parties
Personal and device identifiers	Adtech partners or vendors, social networks, technology vendors, analytics providers
Commercial information	Adtech partners or vendors, social networks, technology vendors, analytics providers
Online or network activity information	Adtech partners or vendors, social networks, technology vendors, analytics providers
Inferences	Adtech partners or vendors, social networks, technology vendors, analytics providers

(E) Financial Incentives
We provide discounts and financial incentives to individuals that enroll in our loyalty program or provide their contact information to us for marketing purposes.

For participants in our financial incentive programs, the value of the Personal Information you provide is reasonably related to the value of the financial rewards provided to you. The value of Personal Information will vary for each participant depending on several factors, including but not limited to your purchases from Happy Mammoth, the administrative and technical expenses associated with maintaining your participation in our financial incentive program, and the extent to which you take advantage of the program’s offerings and discounts.

Participation in our loyalty program is voluntary, as is providing us with your contact information in exchange for a discount or other incentive. After joining any of our financial incentive programs, including our loyalty program, if you wish to opt out of the program or wish to opt out of the sale of your personal information to support the program, you can contact our customer contact center by email at support@happymammoth.co for assistance. We will not discriminate against you for exercising your rights under the CCPA.

(F) Submitting a CCPA Data Request
To submit a request to Happy Mammoth regarding your Personal Information as described in this section, you may do so by submitting a request at Support or by emailing us at support@happymammoth.co.

Happy Mammoth is required to verify the identity of the individual requesting access to a consumer’s data or requesting deletion of a consumer’s data. To verify your identity, we will rely upon information we have previously collected about you, such as phone calls received from a known phone number or emails received from a known email. We will also rely upon our personal relationship with our clients to verify the identity of a requester.

If you submit a request and you are not a Happy Mammoth client (which may be the case if you requested information through our website to our “contact us” number but did not become a customer or employee), then we will verify your identity by confirmation using the information we collected, such as phone number of email address.

(G) Authorized Agent
You may designate an authorized agent to exercise a CCPA right on your behalf. If you use an authorized agent to exercise your rights under the CCPA, we will need the following proof that you have authorized the agent to act on your behalf:

Written proof that you have authorized the agent to act on your behalf, and separately verify your identity as described above; or
Proof that the authorized agent holds a power of attorney to act on your behalf pursuant to California Probate Code §§ 4000-4465.

(H) Do Not Track Disclosure
Privacy regulations in the United States, such as the laws of California and Delaware, require a company to indicate whether it honors your browser’s “Do Not Track” settings concerning targeted advertising. We adhere to the standards set out in this Privacy Policy and do not monitor or respond to Do Not Track browser requests.

12. Additional Policies and Disclosures for Residents of EEA, UK and Switzerland

In addition to the other policies described in this Privacy Policy, residents of the EEA, the UK and Switzerland have the following additional rights and protections as required by the European Union General Data Privacy Regulation (“GDPR”), and UK and Swiss data protection laws. The additional rights and protections set forth in this section of this Policy apply only to residents of the EEA, the UK and Switzerland. For ease of reference, when we refer to GDPR in this section, we are referring to the UK and Swiss data protection laws, as well as the GDPR. For the purposes of this the GDPR, Happy Mammoth is a “Controller” which means Happy Mammoth determines the purposes for which, and the manner in which, any Personal Information is Processed and used in its business.

(A) Definitions
The following additional definitions apply to this section of our Privacy Policy:

“Processor” means any Person Processing Personal Information.

“Person” means a natural person, corporation, association, organization, partnership, or other legal entity.

“Process” or “Processing” is any activity that involves use of the Personal Information. It includes, without limitation, obtaining, recording or holding the Personal Information, or carrying out any operation or set of operations on the Personal Information including organizing, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transferring Personal Information to third parties.

(B) The legal basis for Processing your Personal Information
In order to comply with the GDPR, we are required to set out the legal basis for the Processing of your Personal Information. The legal basis for Processing your Personal Information will be one of the following:

our own legitimate business interests, or the legitimate business interests of our third party partners, promoters, affiliates, distributors, suppliers, vendors, and subcontractors, such as, for example, providing direct marketing to our customers of our products and services that we think would be of interest, permitting prospective employees to search and apply for job opportunities, handling inquiries from our promoters, affiliates, distributors, vendors, and customers, or other instances where we have carried out a legitimate interests assessment and have established an existing legitimate interest;
the performance of a contract that we have in place with you;
your consent, where appropriate; or
compliance with our legal obligations, including to meet national security or law enforcement requirements.

(C) Where we store your Personal Information
The data that we collect from you is stored on our servers or on servers provided by cloud service providers. By submitting your Personal Information, you agree to this transfer, storing, and Processing. We will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

The transmission of information via the Internet is not completely secure. Although we take reasonable steps to protect your Personal Information, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

(D) Addendum to how long we store your Personal Information
In some cases, there is a legal requirement to keep Personal Information for a minimum period of time. Except in those circumstances, we do not keep your Personal Information for any longer than is necessary for the purposes for which the Personal Information was collected or for which it is to be further Processed.

(E) Your rights with respect to your Personal Information

Subject to certain exceptions, you have the following rights with respect to your Personal Information:
To receive or access a copy of the Personal Information that we hold about you;
To request that any inaccurate or incomplete Personal Information be corrected or supplemented;
To have your Personal Information erased, unless we have a legitimate reason to retain the Personal Information (such as if we are required to do so for legal reasons); and
To ask us not to Process your Personal Information for a particular purpose, including for marketing.

All of these rights are subject to certain conditions and exemptions. For example, Happy Mammoth will not be obligated to erase your Personal Information if we need to retain it to protect ourselves in the event of a legal claim.

To exercise any of these rights, please submit a written request to us using the contact information set forth in Section 13. Happy Mammoth reserves the right to charge a fee in dealing with such a request as permitted by applicable law and regulations. You may also opt out of receiving additional marketing information by using the unsubscribe feature in any marketing email we send you.

13. Contacting us

This Site is owned and operated by Happy Mammoth. If you have any questions or suggestions with respect to this Privacy Policy or our privacy practices, please e-mail us at support@happymammoth.co.

CCPA-Specific Requests
Please submit CCPA-specific data requests through the procedures set forth in Section 11.

GDPR/UK/Swiss-Specific Requests
For residents of the EEA, the UK or Switzerland, please e-mail us at support@happymammoth.com.

Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. Please review the sections below if you are a California, Colorado, Connecticut, Nevada, Utah or Virginia resident. For other state residents, your privacy rights may include (if applicable):

•The right to confirm whether or not we are processing your personal data and to access such personal data.

•The right to obtain a copy of your personal data that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means.

•The right to delete personal data that we collected from and/or about you, subject to certain exceptions.

•The right to correct inaccurate personal data that we maintain about you, subject to certain exceptions.

•The right, if applicable, to opt out of the processing of your personal data for purposes of (a) targeted advertising; (b) the “sale” of your personal data (as that term is defined by applicable law); and (c) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

•If we are required by applicable law to obtain your consent to process sensitive personal data, the right to withdraw your consent.

•The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

We use Cookies and other tracking technologies to display advertisements about our products to you on nonaffiliated websites, applications, and online services. This is “targeted advertising” under applicable privacy laws. When we engage in those activities, we sell personal data (i.e., information from Cookies) to third-party advertisers and analytics companies. We may transfer your personal data (e.g., name, email address, and year of birth) to joint marketing partners. Under applicable privacy laws this may be considered a “sale” of personal data to third parties. We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.

To exercise your rights, please submit a request by emailing us at support@happymammoth.co.

If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision by emailing us at support@happymammoth.co.

If you would like to opt out of targeted advertising, you may alter your Cookie preferences by toggling off the Cookie options in the Cookie Management Tool here.

If you enter into a Loyalty Program with us, we will collect your name, email address, and you may choose to provide us with your birth date and gender. We do not provide your personal data to data brokers. If you ask us to delete your personal data, we will not be able to provide you with the benefits of our Loyalty Program because we will delete your account.

INDIVIDUAL STATES

This section contains additional information relevant to residents of certain US states that have their own data privacy laws and regulations, and associated rights.

CALIFORNIA RESIDENTS

This notice to California residents is provided under California law. It provides our “Notice at Collection,” provides certain mandated disclosures about our treatment of California residents’ information, both online and offline, explains your privacy rights, and provides our “Notice of Financial Incentives.”

NOTICE AT COLLECTION

We may collect the following categories of personal information (as defined in the California Consumer Privacy Act (CCPA) and the California Customer Records statute), including sensitive personal information (as defined in the CCPA):

•Identifiers, such as name, email address, username and password, postal address, telephone number, signature, government-issued identifier, IP address, and other similar identifiers.

•Characteristics of protected classifications and demographic information, such as gender, age, race, disability status, sexual orientation, gender identity, military/veteran status, marital status, national origin, and medical information.

•Commercial information, including information about your interests and consuming history or tendencies, such as products or services considered; transaction information when you request information, contact customer service, or purchase, return, request or exchange a product or service, including payment card information or other financial information; information provided in response to surveys or other research conducted on our behalf; and information you provide in public forums.

•Internet or other electronic network activity information, including information regarding your interactions with us online and information we obtain from third parties about use of our applications on third-party platforms or devices.

•Geolocation data, including precise or approximate location information provided by a mobile device or other device or product interacting with or detected by our sites, applications, or physical properties, where we are permitted by law to process this information.

•Audio, electronic, visual, or similar information, including telephone call recordings, other voice recordings, and still or video images captured by cameras or readers on or around our physical properties.

•Inferences based on the above.

We collect this information so that we can best serve you, including to fulfill your requests and to share offers or information that we think you may be interested in. As further described in How We Use Your Information section in our Policy, we generally collect and use the above-listed categories of personal information to provide and manage our sites, applications, products, and services, and for other business or commercial purposes, such as advertising, marketing, and to improve our products and services.

Certain data collection on our sites and applications by third parties for purposes of interest-based advertising and social media tools may be a “sale” or “sharing” under California privacy law. As defined by California law, we “sold” or “shared” certain data elements within the following categories of personal information: identifiers, demographic information, commercial information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above.

If you would like to opt out of the sharing of your personal information, you may click the Cookie Preferences Link. Please note that your opt-out choice is specific to the digital property and to the device and browser you are using.

We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in our Policy, including to satisfy legal or reporting requirements. What this means in practice will vary for different types of information, but the criteria assessed in the data retention analysis take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.

More information, including a description of your legal rights, can be found in the “California Privacy Rights” section below.

ADDITIONAL PRIVACY MANDATORY DISCLOSURES

We also make the following disclosures for purposes of compliance with California privacy law:

•We collected the following categories of personal information in the last 12 months: identifiers, characteristics of protected classifications and demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.

•The sources of personal information from whom we collected are: directly from our guests, third-party sites or platforms that you link with your registration account, analytics tools, social networks, advertising networks, and third-party services that update or supplement information we hold about you.

•The business or commercial purposes of collecting personal information are as summarized in our “Notice at Collection” section, and as described in more detail in our Policy under How We Use Your Information.

•We disclosed certain data elements within the following categories of personal information for a business purpose in the last 12 months: identifiers, characteristics of protected classifications and demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. We disclosed each category to business partners, service providers, government entities, and other third parties as described in the Sharing Your Information With Third Parties section of the Policy.

•As defined by applicable law, we “sold” or “shared” certain data elements within the following categories of personal information in the last 12 months: identifiers, demographic information, commercial information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above. We “sold” or “shared” each category to or with entities who provide advertising, marketing, or audience measurement; other online third-party branded tools or functionality (such as maps or video players); and social networks.

•The business or commercial purposes of “selling” or “sharing” personal information is to assist us with advertising, marketing, audience measurement, and other functionality on our digital properties.

•We do not “sell” or “share” the personal information of known minors under 16 years of age.

•We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.

YOUR CALIFORNIA PRIVACY RIGHTS

Right to Know

You have the right to request that we disclose to you the categories of personal information we have collected about you, as well as the sources of such personal information, the purposes, and the categories of third parties with whom such personal information is shared.

Right to Access

You have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, sell, and share.

Right to Delete

You have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions.

Right to Opt Out of Sale or Sharing of Personal Information

You have the right to “opt out” of the “sale” or “sharing” of your “personal information” to or with “third parties” (as those terms are defined by applicable law).

Removal of Content

If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted.

Shine the Light

California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by certain members of Happy Mammoth to third parties for the third parties’ direct marketing purposes. Happy Mammoth does not share guests’ personal information with other member companies or others outside Happy Mammoth for those parties’ direct marketing use unless a guest elects that we do so.

Right Not to Receive Discriminatory Treatment

You have the right not to receive discriminatory treatment for the exercise of your privacy rights. If you choose to exercise any of these rights, you will not receive different prices or quality of services unless permitted by applicable law, including if those differences are reasonably related to your information. For example, if you exercise your right to opt out of “sale” or “sharing” of your ”personal information,” the ads you view may not be tailored to your interests.

EXERCISING YOUR CALIFORNIA PRIVACY RIGHTS

Making Requests to Know, Access, Delete, or Correct Your Personal Information

To make a request to know or to make an access, deletion, or correction request, please reach out to support@happymammoth.co. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of the Sale or Sharing of Personal Information

To submit a request to “opt out” of the “sale” or “sharing” of your “personal information,” you may click this Cookie Preferences Link.

Instructions for Using an Authorized Agent to Make Requests

You may use an authorized agent to submit a request to know or an access, deletion, correction, or opt-out request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity. Authorized agents may submit requests to support@happymammoth.co.

Making Requests for Removal of Content

California residents under the age of 18 may make requests to remove content by sending an email with a detailed description of the specific content or information to be removed to support@happymammoth.co. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

Making Shine the Light Request

To make a request for information under the Shine the Light Act, please send an email to support@happymammoth.co.

NOTICE OF FINANCIAL INCENTIVES

Members of Happy Mammoth may offer various and different loyalty or promotional programs that provide certain benefits to our guests. For example, we may provide special offers or discounts to our guests as part of certain programs, promotional campaigns, subscriptions, or other offerings. We may also provide discounts when guests sign up to receive marketing messages or when guests claim a specific offer. In this Notice of Financial Incentives, we refer to these various programs and offerings as the “Programs.”

In general, we collect personal information to support and fulfill the Programs, which could include identifiers, demographic information, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. For additional details on the types of information we may collect, please see The Information We Collect in our Policy. Because we collect personal information, the Programs may be considered to be “financial incentives” or “price or service differences” under California law.

To the extent the Programs are reasonably related to the value of guest personal information, the method for calculating this value would include the expenses related to our offer (such as the costs of providing discounts, free shipping, or other promotions, intellectual property or marketing costs, and other related expenses). The value of the guest personal information that we collect will vary depending on the engagement by each guest.

CONTACT INFORMATION

If you have a question about our privacy policies and information practices, please send an email to support@happymammoth.co.

COLORADO RESIDENTS

Colorado law provides Colorado residents with the rights listed below.

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Colorado law).

EXERCISING YOUR COLORADO PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests

To make an access, deletion, or correction request, please email support@happymammoth.co. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data

To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” you may click on the Cookie Preferences Link.

Instructions for Using an Authorized Agent to Make Requests

You may use an authorized agent to submit an access, deletion, correction, or opt-out request on your behalf. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity. Authorized agents may submit requests to support@happymammoth.co.

To appeal our decision regarding a request related to these rights, you may email us at support@happymammoth.co.

NOTICE ABOUT OUR LOYALTY PROGRAMS

CONTACT INFORMATION

If you have a question about our privacy policies, please send an email to support@happymammoth.co.

CONNECTICUT RESIDENTS

Connecticut law provides Connecticut residents with the rights listed below.

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising and Sale of Personal Data

You have the right to “opt out” of “targeted advertising” and the “sale” of your “personal data” (as defined under Connecticut law).

EXERCISING YOUR CONNECTICUT PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests

Making Requests to Opt Out of Targeted Advertising or the Sale of Personal Data

To submit a request to “opt out” of “targeted advertising” or the “sale” of your “personal data,” you may click on the Cookie Preferences Link.

Instructions for Using an Authorized Agent to Make Requests

You may use an authorized agent to submit a request to opt out of targeted advertising or the sale of personal data. Authorized agents may submit such requests to support@happymammoth.co. Authorized agents can make a request on your behalf if we are provided with verification of your identity and confirmation that you provided the agent authority to act on your behalf.

To appeal our decision regarding a request related to these rights, you may email us at support@happymammoth.co.

NEVADA RESIDENTS

Nevada law allows Nevada residents to opt out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We currently do not sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt out of sales and will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests to support@happymammoth.co.

UTAH RESIDENTS

Utah law provides Utah residents with the rights listed below.

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Opt Out of Targeted Advertising

You have the right to “opt out” of “targeted advertising” (as defined under Utah law). We do not “sell” personal data as defined under Utah law.

EXERCISING YOUR UTAH PRIVACY RIGHTS

Making Access and Deletion Requests

To make an access or deletion request, please email support@happymammoth.co. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to Opt Out of Targeted Advertising

To submit a request to “opt out” of “targeted advertising” you may click on the Cookie Preferences Link.

VIRGINIA RESIDENTS

Virginia law provides Virginia residents with the rights listed below.

Right to Access

You have the right to know and see what personal data we have collected about you in a usable format.

Right to Delete

You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.

Right to Correct

You have the right to request that we correct inaccurate personal data.

Right to Opt Out of Targeted Advertising

You have the right to “opt out” of “targeted advertising” (as defined under Virginia law). We do not “sell” personal data as defined under Virginia law.

EXERCISING YOUR VIRGINIA PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests

Making Requests to Opt Out of Targeted Advertising

To submit a request to “opt out” of “targeted advertising” you may click on the Cookie Preferences Link.

To appeal our decision regarding a request related to these rights, you may email us at support@happymammoth.co.

Subject to exceptions set out in privacy legislation, residents of Canada may request to view, update, or correct their personal information by contacting support@happymammoth.co. To protect your privacy, we will take steps to verify your identity before granting you access to the information or enabling you to make corrections. Please keep in mind that certain information may be subject to exceptions if, for example, the information is protected by solicitor-client privilege, part of a formal dispute resolution process, about another individual that would reveal their personal information or confidential commercial information or would be prohibitively expensive to provide. In some instances, you may have consented to the collection of your personal information. Subject to legal and contractual requirements and reasonable notice, you may withdraw your consent at any time; however, without your consent, we may not be able to provide you with our services or products if your personal information is necessary for us to be able to provide them.

Country/Region

Language

Privacy policy

1. Information We Collect

2. How We Collect Information

3. What Do We Do With Your Information?

4. Information we Disclose

5. Your Rights and Choices

6. Cookies, Targeted Advertising and Analytics

7. Children’s Privacy

8. Our Storage of Your Personal Information

9. Links to Other Websites

10. Updates to Our Privacy Policy

11. Additional Rights and Disclosures for California Residents

12. Additional Policies and Disclosures for Residents of EEA, UK and Switzerland

13. Contacting us

INDIVIDUAL STATES

CALIFORNIA RESIDENTS

NOTICE AT COLLECTION

ADDITIONAL PRIVACY MANDATORY DISCLOSURES

YOUR CALIFORNIA PRIVACY RIGHTS

EXERCISING YOUR CALIFORNIA PRIVACY RIGHTS

NOTICE OF FINANCIAL INCENTIVES

CONTACT INFORMATION

NOTICE ABOUT OUR LOYALTY PROGRAMS

CONTACT INFORMATION

CONNECTICUT RESIDENTS

NEVADA RESIDENTS

UTAH RESIDENTS

VIRGINIA RESIDENTS

Country/Region