Privacy Policy

Murphy’s Naturals, Inc. (“Company” “we” or “us”) offers natural products that help customers enjoy life outdoors. We operate websites including: themurphysnaturals.com, santanaturals.com, and amazonlights.com (each a “Website” and together “Websites”). This privacy policy aims to inform you about how we collect, use, disclose, store, secure and dispose information about you when you:

interact or use our Website including registering with us on the Website and
if you purchase any of our products (collectively the “Services”).

This policy covers any Services being provided by Company and interactions you may have with our Website.

Privacy Principles we follow:

Company will ensure that all personal data that it holds will be:

processed lawfully, fairly and in a transparent manner;
collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; adequate, relevant and limited to what is necessary;
accurate and kept up to date;
kept in a form which permits identification of data subjects for no longer than is necessary;
processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.

Types of information we collect

When you visit our Website, we may collect personal data from you for legitimate business purposes. We will use this data in connection with your visit to our Website and to fulfill any business interaction that you may enter into with us.

You may, for example, provide us with your personal data when you:

Purchase items listed for sale on our Website;
communicate with us through the "Contact" link on our Website; and
apply for a job or internship.

The personal data that we collect from you may include: your name; email address; telephone number; and your shipping and billing address.

We may also automatically collect data about you, such as technical information about your computer or internet browser. Data may also be collected about you indirectly through monitoring activities which will be conducted by or on our behalf in accordance with relevant legislation or regulatory requirements (for example, monitoring e-mails that we receive from you or recording telephone calls when you contact us).

We will process your personal data for the purposes listed above on the basis of one or more of the following:

the processing is necessary for the performance of a contract or for entering into a contract with you. Please note that where this is the case, we may not be able to perform or enter into a contract with you unless you provide your personal data;
the processing is necessary to comply with a legal obligation;
you have given your consent (where we rely on this legal basis, we will always seek to obtain your consent separately as and when necessary).

How we collect your information

Legitimate Business Purposes for the collection of personal data:

Improving and personalizing Services
Marketing activities
Market research

Company collects information in different ways. Directly from you; for example, when you:

Log into your Company account created by you.
Make a purchase on our Website.
Create a personalized Company shopping account.
Track an order online.
Sign up to receive promotional emails or text messages (including offers and sales alerts).
Participate in one of our promotional sweepstakes, contests, surveys or focus groups.
Use any ratings & reviews or related services and features on our Website.
Submit a request to our Customer Service team.
Visit and navigate Company's Website on any device.
Enable location-based features on our Website.
Interact with Company's social media pages, including but not limited to Facebook, Twitter, YouTube and Instagram.
Combine information we collect about you from the different devices you use to access our Platforms.

Collection of personal data by automated means:

Information that is passively collected:

Cookies and similar technologies:

When you visit the Website, we may use “cookies” which are small files stored as text on your computer or device. In some countries, we are not permitted to send cookies to the browser of a user without the prior consent of the affected user. In this case, we will seek such consent. The remainder of this section assumes that either the use of cookies is not restricted by applicable law, or if it is restricted that the individual has explicitly consented to the use of the cookies.
These “cookies” and other similar technologies like pixels, web beacons (also known as “clear GIFs”) and local storage may be used to collect information about how you use the Services and provide features to you.
If a visitor does not want information collected through the use of cookies, most browsers allow the visitor to reject cookies. Please note that if you use your browser settings to modify or block all cookies, you may not be able to access parts of the Services and your user experience may be severely degraded. We may share non-Personal data obtained via cookies with our advertisers and affiliates.
Information provided by these cookies are essential to help us provide the Services in a manner that is adapted to each user’s specific needs. We believe that such means are fair, lawful, and proportional to the legitimate interest and needs of our business, and that our methodology fairly addresses each user’s legitimate rights and expectations in view of the context and purpose for the collection and use of the information collected.

Mobile Device Unique Identifier

When you use a mobile device to connect to our Website via a service provider that uniquely identifies your mobile device, we may use this unique identifier to offer you extended services and/or functionality. Certain Services may require the collection of your mobile phone number. We may associate that mobile phone number with the mobile device unique identifier.

Log file information:

Log file information may be automatically reported by your browser each time you make a request to access (i.e., visit) your account on the Website. It can also be provided when the content of the Services is downloaded to your browser or device.
When you use the Services, our servers automatically record certain log file information, including your web request, Internet Protocol (“IP”) address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Services, domain names, landing pages, pages viewed, and other such information. We may also collect similar information from emails sent to our Users which then help us track which emails are opened and which links are clicked by recipients. The information allows for more accurate reporting and improvement of the Services.

Strictly Necessary Cookies:

Necessary cookies are used for the purpose of authentication and providing data security. These cookies are necessary for our Website to work and enable us to distinguish users and enable you to use its services and features. Disabling these cookies will encumber our Website’s performance and may make these services and features unavailable.

Functional Cookies:

These cookies enable the Website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.

Targeting or Advertising Cookies

These cookies are used to deliver content that is more relevant to your and your interests. They may be used to deliver targeted advertising or to limit the number of times that you see an advertisement. They also can help us measure the effectiveness of advertising campaigns on the Website. These cookies may be used to remember websites that you have visited.

Analytics or Performance Cookies:

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Website. They help us to know which pages are the most and least popular and see how visitors move around the Website. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our Website and will not be able to monitor its performance.

How we use your information:

The following are the examples of how we may use your information for the legitimate interest of our business which include:

To Understand Your Interests. For example, we may use your information to better understand what products interest you based on information we collect about you and your household.
To Communicate with You. We may communicate with you about your account or our relationship. We may also contact you about this Privacy Policy or the Services.
Our Products and Services. We may use your information to enhance our Website and Services to serve you better.
To Respond to Your Requests or Questions. This may include responding to your customer feedback.
For Security Purposes. This could include protecting our company and our customers. It may also include protecting our Website.
For Marketing Purposes. We may provide you with information about new products and special offers. We may use your information to serve you ads about products and offers. We may tell you about new features or updates. These might be third-party offers or products we think you might find interesting.
To Support Our Products and Services. This could include fulfilling your requests for products or Services. It could also include processing purchases or return transactions.
Law or regulatory obligations. Certain laws and regulations require us to maintain and disclose collected information.

If we use your personal data for any other purposes, we will provide you with a separate notice.

How we share your information:

We operate globally and from time to time, we may also need to transfer your personal data to third parties in other countries where we do business or have a service provider. Such countries may not have the same data protection laws as the USA or European Union or the country in which you reside.

When transferring your personal data, we will take all appropriate steps to provide an adequate level of protection for your personal data in accordance with relevant legislation. These steps may include exercising audit and inspection activities in respect of the actions of those third parties in connection with the use of your personal data.

If at any time you wish that we cease any activity that affects you, please contact us as indicated in the “How to Contact Us” Section below.

We may disclose/share your information in the following ways:

On our Website. For example, we may display information you post on our ratings & reviews feature.
With Our Business Partners. For example, this may include third parties that provide financial products and services related to our business. It may also include a third party that co-sponsors a contest or promotion.
With Our Service Providers. We may share your information with third parties who perform services on our behalf. For example, this may include vendors and payment processors. It may also include companies that send emails on our behalf. Please note that we utilize a third party payment processor to assist with all payments made on our Website. Should you have a question regarding the payment processor’s privacy policy, please check their website.
Government, courts, and Law enforcement. We will access, preserve, and share any information about you, without your consent, to government or law enforcement officials or private parties as we in good faith believe necessary or appropriate to respond to claims and legal process (including, but not limited to, subpoenas), to comply with applicable laws, to protect the property and rights of Company, you or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to pose a risk of being, or is illegal, unethical or legally actionable. This may include responding to legal requests from jurisdictions outside of the United States where we have a good faith belief that the response is required by law in that jurisdiction, affects users in that jurisdiction, and is consistent with internationally recognized standards.

We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; and to prevent death or imminent bodily harm. Information we receive about you may be accessed, processed and retained for an

extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

How we store your information:

By registering for and using the Services you consent to the transfer of information to anywhere in the U.S. where the Services or its Service Providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy.

Although we implement reasonable administrative, physical and electronic security measures designed to protect your Personal data from unauthorized access, we cannot ensure the security of any information you transmit to or guarantee that this information will not be accessed, disclosed, altered, or destroyed. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored Personal data. To the extent the law of your jurisdiction allows for notification of a breach via e-mail or conspicuous posting on the Services, you agree to accept notice in that form.

How long we hold your personal data for will vary. The retention period will be determined by various criteria including:

the purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose; and
legal obligations – laws or regulation may set a minimum period for which we have to keep your personal data.

How we protect your information:

While no data transmission over the internet is 100% secure, we are committed to protecting the information we receive from you. We take appropriate security measures to protect your information against unauthorized access to or unauthorized alteration, disclosure or destruction of data. To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we maintain appropriate physical, electronic, and managerial procedures to safeguard and secure the information and data stored on our system.

While no computer system is completely secure; we believe the measures, we have implemented reduce the likelihood of security problems to a level appropriate to the type of data involved.

The Website may contain links to other websites that we do not own or control. The Privacy Policy does not apply to these websites and we are not responsible for the privacy practices of such websites or other services operated by such websites. Once you leave the Website via such a link, we recommend your review the privacy policy applicable to such third-party websites to learn how they use and disclosure your personally identifiable information.

Our staff are trained in how to keep your information safe and secure. We use secure systems and buildings to hold your information. We aim to only keep your information for as long as we need it.

We will maintain data security by protecting the confidentiality, integrity and availability of the Personal data, defined as follows:

Confidentiality: only people who are authorized to use the data can access them;

Integrity: Personal data should be accurate and suitable for the purpose for which they are processed;

Availability: authorized users should be able to access the data if they need it for authorized purposes.

How we dispose your information:

Our goal is to dispose your information “no longer than necessary for the purposes that we collect and use data”; Upon the expiry of our data retention periods or when a data subject exercises their right to have their personal data erased, personal data shall be deleted, destroyed, or otherwise securely disposed of as follows:

Personal data stored electronically (including any and all backups thereof) shall be deleted.
Special category personal data stored electronically (including any and all backups thereof) shall be deleted.
Personal data stored in hardcopy form shall be shredded if not required
Special category personal data stored in hardcopy form shall be shredded straight away if no longer required.

Payment information

You may also make payments using the third-party payment services provider, such as Stripe or Shopify, made available through the Websites. In connection with making payments, you may be required to provide additional information to facilitate the transaction, such as your bank account or credit card information. Company does not store or use this payment information in any way other than to relay the information to the third-party payment services provider to facilitate the transfer of funds. After payment, Company does not have access to your bank account or credit card information. Company disclaims any liability for any loss or compromise of payment information. The third-party payment services provider’s use of such information shall be governed by its applicable terms of services and/or privacy policy.

Children’s Privacy

Company does not knowingly collect or solicit any information from anyone under the age of 18 or knowingly allow such persons to register for the Services. The Services and their content are not directed at children under the age of 18. In the event that we learn that we have collected personal data from a child under age 18 without parental consent, we will delete that data as quickly as possible. If you believe that we might have any information or data from or about a child under 18, please contact Company at [[email protected]].

If you are a California resident under the age of 16, we do not knowingly share any personal data without parental consent. Contact Company at [[email protected]] for assistance or any related questions.

Your choices about your information:

Text messaging

You may opt-out of receiving text messages by replying “STOP” to any text message received.

Emails

In all promotional emails, you will be given the opportunity to opt-out of receiving such messages in the future by clicking on the link at the bottom of the email that says “unsubscribe.”
Please note, we reserve the right to send you Services-related communications (e.g., account verification, payment confirmations, technical and security notices) for which you may not opt out.

Cookies

If a visitor does not want information collected through the use of cookies, most browsers allow the visitor to reject cookies.

Mobile device unique identifier

Unless you choose to opt out, we may also share your mobile phone number with certain select third parties. You can opt out by changing the privacy settings on your profiles/devices.

International Data Transfers

Personal data you submit on the Website or through the Services may be sent to the other countries, on our service providers’ cloud servers. We will always protect your information in accordance with this privacy policy wherever it is processed. We are a US based company and by accessing our Website, you grant us expressed consent to transfer your personal data to US servers. If you do not wish for us to transfer your personal data to the US, please contact us using the information in the “How to Contact Us” section below.

This section sets out the privacy principles we follow with respect to transfers of personal data from the European Economic Area (EEA) to the United States, including personal data we receive from individuals residing in the EEA who visits our Website and/or who may use our Services or otherwise interact with us.

Please note that for users located in the EEA, the term personal data used in this privacy is equivalent to the term “personal data” under applicable European data protection laws.

CAN-SPAM Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

To be in accordance with CAN-SPAM Act, we agree to the following:

Not use false or misleading subjects or email addresses.
Identify the message as an advertisement in some reasonable way.
Include the physical address of our business or site headquarters.
Monitor third-party email marketing services for compliance, if one is used.
Honor opt-out/unsubscribe requests quickly.
Allow users to unsubscribe by using the link at the bottom of each email.

California Residents

Some browsers give individuals the ability to communicate that they wish not to be tracked while browsing on the Internet. California law requires that we disclose to users how we treat do-not-track requests. The Internet industry has not yet agreed on a definition of what “Do Not Track” means, how compliance with “Do Not Track” would be measured or evaluated, or a common approach to responding to a “Do Not Track” signal. Due to the lack of guidance, we have not yet developed features that would recognize or respond to browser-initiated Do Not Track signals in response to California law.

California consumers have the right to request access to their personal data, additional details about our information practices and deletion of their personal data (subject to certain exceptions). California consumers also have the right to opt out of sales of personal data, if applicable. We describe how California consumers can exercise their rights under the CCPA below. Please note that you may designate an authorized agent to exercise these rights on your behalf by providing written materials demonstrating that you have granted the authorized agent power of attorney. Please note that if an authorized agent submits a request on your behalf, we may need to contact you to verify your identity and protect the security of your personal data. We will not fulfill your CCPA request unless you have provided sufficient information for us to reasonably verify you are the consumer about whom we collected personal data. We will not discriminate against you if you choose to exercise your rights under the CCPA.

RIGHTS TO KNOW

You may request, no more than twice in a 12-month period, access to the specific pieces of personal data we have collected about you in the last 12 months. You may also request additional details about our information practices, including the categories of personal data we have collected about you, the sources of such collection, the categories of personal data we share for a legitimate business or commercial purposes, and the categories of third parties with whom we share your personal data. You may make these requests by contacting using the contact information provided below in the “How to Contact Us” Section. After submitting your request, please monitor your email for a verification email. We are required by law to verify your identity prior to granting access to your data in order to protect your privacy and security.

COPIES OF PERSONAL DATA

You may request, no more than twice in a 12-month period, transportable copies of your personal data that we have collected about you in the last 12 months. You may make these requests by contacting using the contact information provided below in the “How to Contact Us” Section. After submitting your request, please monitor your email for a verification email. We are required by law to verify your identity prior to granting access to your data in order to protect your privacy and security.

DELETION

You may request that we delete the personal data we have collected about you. Please note that we may retain certain information as required or permitted by applicable law. You may make these requests by contacting us using the contact information provided below in the “How to Contact Us” Section. After submitting your request, please monitor your email for a verification email. We are required by law to verify your identity prior to granting access to your data in order to protect your privacy and security.

Changes to our privacy policy

Our privacy policy became effective in November 2020. From time to time, it may be necessary for Company to change its privacy policy and notice, so we suggest that you check here periodically. Changes to the privacy policy will be notated by updates to the “Last Revision Date”. Your continued use of the Website or Services constitutes your expressed agreement to any updates to this privacy policy.

Links to other sites

We may offer links to sites that are not operated by Company. If you visit one of these linked sites, you should review their privacy and other policies. We are not responsible for the policies and practices of other companies.

How to contact us

If you wish to contact us to update your information or complaints, please feel free to contact us:

by telephone at (888) 314-5109; or by email at [[email protected]]