Privacy policy

WILLYGOAT’S PRIVACY NOTICE

Last Updated: February 16, 2024

This Privacy Notice applies to personal information collected online by WillyGoat, LLC, its parents, affiliates, and subsidiaries (collectively referred to as “WillyGoat”) in connection with its U.S.-based website available at https://willygoat.com/ (our “Website” or our “Site”). It also applies to personal information WillyGoat collects in connection with its pages on social media sites, such as Facebook®, Twitter®, or others. Our Site is not directed at children under the age of 13, and no one under the age of 13 should provide personal information on our Site.

THIS PRIVACY NOTICE

Why we Have this Privacy Notice and What it Covers

This Privacy Notice covers WillyGoat’s collection, use, disclosure, transfer of, and protection of your personal and personally identifiable information. WillyGoat is located in the United States of America and may store and process your personal and personally identifiable information in the United States of America. When you agree to this Privacy Notice and use our Website, you agree to the collection and processing of your personal and personally identifiable information in the United States of America and subject to the terms of this Privacy Notice.

Our Site includes links to third-party websites and uses analytics tools that are owned, operated, and maintained by third parties. WillyGoat does not exercise control over the privacy practices of such third-party websites or analytics tools, and you are encouraged to review the privacy practices of all such third-party websites or analytics tools disclosed within this Privacy Notice.

Before using the Site or providing information to us, please carefully review this Privacy Notice. By using or accessing our Site, you agree that we may collect and use your personal and personally identifiable information in accordance with this Privacy Notice, as revised from time to time. WillyGoat may modify, amend, replace, or suspend this Privacy Notice at any time.

If you have any questions or suggestions regarding our Privacy Notice, or if your personal information is not accurate or complete, please email us at privacy@willygoat.com, or mail us at:

Privacy Officer
WillyGoat, LLC
PO Box 59278
Birmingham, AL 35259

By providing WillyGoat with your personal or personally identifiable data and using the Site, you warrant that you are over the age of eighteen (18) or otherwise above the age of majority within your jurisdiction. If you are younger than eighteen (18) or the age of majority within your jurisdiction, please do not use the Site and please do not provide personal information to us.Whenever WillyGoat changes its Privacy Notice, we will post those changes to this Privacy Notice on the Site and other places that we deem appropriate. Your use of the Site following these changes indicates your consent to the practices described in the revised Privacy Notice.

OUR DATA PRACTICES

What Data we Collect, How and Why we Collect it, and How we Use and Secure it

What information do we collect?

When you use our Site, we may collect personal or personally identifiable information from you (“PII”). PII may include any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or another individual. It does not include anonymized data.

We may collect and process the following categories of PII about you:

Identification and Contact Data. Identification and contact data includes data that you submit to us or authorize to be submitted to us through our Site, e-mail, or through our chat feature such as your name, address, country, phone number, and email address, data that you voluntarily provide when submitting customer support requests or other communications to WillyGoat, and identification data that is collected automatically when you use our Website, such as data stored in persistent cookies when you login to our Site or analytics data that is collected from you when you use our Site. We collect and process identification and contact data to respond to your requests for products, services, or customer support, to operate our Site, to authenticate you as a user of our Site, to ensure that timely and relevant content is provided to you, to secure our Site, to ensure that our Site operate in a fast and efficient manner, and to maintain backups of our Site and any submissions that you may have made to them. WillyGoat’s lawful grounds for processing this data are:

its legitimate business interests in administering and offering its Site and products,
to comply with legal obligations to which WillyGoat is subject,
to utilize user data as necessary for the performance or administration of a contract, such as a contract related to the sale of WillyGoat’s products, and
your explicit consent. Where our collection and processing of your identification and contact data is based on your explicit consent, you have the right to revoke your consent at any time.

Communication Data. Communication data includes any communication that you may send to us through the Site, email, or social media. We process this data to communicate with you by email, direct message through a social media platform, or other means, to provide you with customer support, to record logs of our communication, and to store information to respond to legal claims. WillyGoat’s lawful ground for collecting and processing communication data is to respond to communications sent by you to us, to keep records of our communication, and to pursue or defend against legal claims.
User Data. User data includes data that you voluntarily submit to WillyGoat when you create a user account and data about how you use our Site, such as your name, address, country, phone number, and email address. This includes data stored in persistent cookies when you login to the Site and analytics data that is collected when you use the Site. We collect and process this data to operate the Site, to authenticate you as a user of the Site, to ensure that timely and relevant content is provided to you, to secure the Site, to ensure that the Site operate in a fast and efficient manner, and to maintain backups of the Site. WillyGoat’s lawful ground for processing this user data is its legitimate business interests in administering and offering the Site and to fulfill your orders for products through the Site.
Technical Data. Technical data includes data about your use of the Site, such as your IP address, your login data, your phone number, your mobile device model, your operating system, your geolocation, and your time zone. We may collect this data from your use of the Site and from advertising IDs, including from Google Analytics and other analytics providers. A full list of our analytics providers and links to their respective privacy policies are provided below in this Privacy Notice. WillyGoat processes this data to analyze your use of the Site, to route web traffic, to administer and secure the Site, to provide location-relevant content, and to troubleshoot problems with the Site. WillyGoat’s lawful ground for collecting and processing this technical data is its legitimate interests in administering and offering the Site and to grow its business and marketing strategy.
Marketing Data. Marketing data includes data about your preferences in receiving and interacting with WillyGoat’s advertisements on third party platforms or content on our Site. We collect this data from your use of the Site and from advertising IDs created through advertising programs, such as Google Advertising IDs and Klaviyo. WillyGoat does not connect advertising identifiers to persistent device identifiers, such as MAC addresses or mobile device IDs. WillyGoat’s lawful ground for collecting and processing this marketing data is its legitimate interests in administering and offering the Site and to grow its business and marketing strategy by providing advertisements, including remarketing advertisements, to you.
WillyGoat will only use your PII for the purpose for which it was collected. If WillyGoat needs to use your PII for an unrelated new purpose, WillyGoat will provide you with notice of this new use and will explain the lawful ground for such processing. WillyGoat may process your PII without your knowledge or consent where required or permitted by law.

How do we collect this information?

WillyGoat collects PII from you through a variety of different means:

Direct Collection. WillyGoat may collect PII from you when you make a purchase, register for a user account on the Site, contact us, respond to a survey, participate in a contest, or when you opt-in to receive marketing emails, text messages, or mailings from us.
Third Party Tracking Tools. WillyGoat uses third party tracking tools, such as pixels, web beacons, and cookies, to automatically collect PII from you when you open, view, or click pages or links on the Site, or in emails or advertisements. WillyGoat discloses these third-party tracking tools below in this Privacy Notice in its disclosure of PII that it collects from third parties.
Business Partners and Service Providers. WillyGoat may, from time to time, obtain PII from its business partners or service providers. When WillyGoat obtains PII from its business partners and service providers, it ensures that all such business partners and service providers have obtained consent from you to transfer all such PII to WillyGoat for its intended uses.
Social Media Networks and Other Platforms. WillyGoat may obtain PII from you when you interact with our social media accounts or content or accounts or content posted on other third-party platforms, such as Facebook. For more information on how your PII may be disclosed by a particular social media network or platform, you are encouraged to review the privacy notices and policies of those platforms.
Analytics Providers. WillyGoat may also obtain PII from you through its use of third-party analytics providers, such as Klaviyo or Google Analytics. WillyGoat may create user profiles based on PII obtained through its use of PII from third-party analytics providers to better understand your wants and needs as a customer.

What information do we collect from third parties and how do we use it?

WillyGoat may collect PII about you through cookies, web beacons, analytics trackers, and other technologies. This helps WillyGoat understand how you use our Site, interact with our content and advertisements, and to understand any patterns that may be associated with your use of the Site. This aids WillyGoat in developing or improving its Site, advertising, and marketing communications in response to your needs or wants.

WillyGoat may use session or persistent cookies. Session cookies are only stored on your computer or mobile device during your use of the Site and are automatically deleted when you close your web browser. Session cookies may be used to direct internet traffic to a server that is closer to you or to allow us to identify you as you move between pages of the Site.

Persistent cookies are stored as a file on your computer or mobile device that remains on your computer or mobile device even after you close your web browser. Persistent cookies can be read by the website that created the cookie when you revisit it again. WillyGoat may use persistent cookies to authenticate you when you return to the Site so that you do not have to login again or when it utilizes Google Analytics or other analytics providers, which is intended to track the origin and behavior of traffic to the Site.

WillyGoat may use the following analytics providers, and you are directed to review their respective cookie policies and privacy notices:

Convert: https://www.convert.com/privacy-notice/
Elevar: https://www.getelevar.com/legal/privacy/
Google Analytics: https://policies.google.com/technologies/partner-sites
Klaviyo: https://www.klaviyo.com/legal/privacy/privacy-notice
Microsoft Clarity and Bing: https://privacy.microsoft.com/en-us/privacystatement

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our Site through behavioral metrics, heatmaps, and session replay Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. We use this information to improve and market our products/services, for site optimization, fraud/security purposes, and to help us advertise. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

How can you opt out of third-party data collection?

You may opt-out of the use of these online tracking technologies by discontinuing your use of the Site or by downloading a browser addon, such as the Google Analytics Opt-Out Browser Add-on, to block their collection and use of PII. In addition, when you visit our Site, log in, register, or open an email, cookies, ad beacons, and similar technologies may be used by our online data partners or vendors to associate these activities with the information they or others have about you, including your email address. We (or service providers on our behalf) may then send communications and marketing to these email addresses.

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

You may also request that WillyGoat delete any PII collected from you by contacting WillyGoat’s Privacy Officer through the contact information contained within this Privacy Notice.How do we use your information for marketing communications? WillyGoat’s lawful ground for sending you marketing communications is either consent or its legitimate business interests, such as to expand its business by advertising products. WillyGoat may send you marketing communications if you have asked for information concerning its goods or services or if you have agreed to, and have not opted out from, receiving marketing communications. You may ask WillyGoat to stop sending you marketing messages at any time by logging into the Site to adjust your marketing preferences within your user account (when available) or by following the opt-out link in any marketing message sent to you. If you opt out of receiving marketing communications, your opt-out does not extend to PII provided for other purposes.

Responding to Do Not Track Signals

You can generally opt-out of receiving personalized ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt-out pages on the NAI website and DAA website. Our Site is not currently set up to respond to browser do-not-track signals because there is no consensus within the advertising industry as to what “do not track” means in this context, but you can configure your browser settings to reject all cookies or prompt you before a cookie is set.

When do we disclose your information?

WillyGoat may share your PII with the following parties:

Service providers that provide WillyGoat with information technology, software as a service, cloud storage, advertising, marketing, or other administrative services;
Service providers, such as distributors, wholesalers, or 3PLs that provide WillyGoat with products for sale to you in order to fulfill your product orders;
WillyGoat’s accountants, auditors, insurers, or attorneys;
Law enforcement agencies upon the receipt of a subpoena or court order or where necessary to protect WillyGoat’s personnel or property; and
Government bodies that require WillyGoat to report its processing activities.

WillyGoat may also transfer PII to third parties when it sells, transfers, or merges any part of its business or assets.

WillyGoat requires all third parties that receive a transfer of PII from WillyGoat to maintain the same level of respect for the protection of PII as WillyGoat and we only allow third parties to process your personal data for the specific purposes listed in this Privacy Notice.

How do we protect your information?  We use industry standard encryption to protect your information, including when you place an order. In addition, we allow access to your PII only by employees and service providers who have a need to know or access your PII on our instructions.

However, no security measures are impenetrable and there are always security risks. WillyGoat will notify you and any regulatory body of any breach of your PII or WillyGoat security measures if we are legally required to do so.

For how long do we retain your data?

We will only retain your PII for so long as necessary to fulfill the purposes for which it is collected under this Privacy Notice or for the purposes of satisfying any legal, accounting, or reporting requirements. With respect to user data and communications data, we may maintain that information for as long as you maintain a user account with WillyGoat, and we may retain this data for longer periods where there is a need to retain it to comply with WillyGoat’s legal obligations, such as the preservation of electronic evidence or compliance with a preservation order.

Third Party Links

Our Site includes links to third party websites and applications. By clicking on third party links, you may allow third parties to collect or share data about you. WillyGoat does not control these third-party links and you are advised to review their respective privacy policies and notices.

Chat Feature

You may elect to use the chat feature available on our Website. By using the chat feature, you expressly acknowledge your understanding of our Privacy Notice. Our chat feature is powered by Gorgias. More information about how Gorgias handles your data can be found at https://www.gorgias.com/legal/privacy.

Childrens’ Online Privacy Protection Act Compliance WillyGoat complies with the requirements of COPPA (Childrens’ Online Privacy Protection Act). We do not knowingly collect any information from anyone under 13 years of age, and while some of our products are meant to be used by individuals under 13 years of age, our Website is not meant to be used by individuals under 13 years of age. If you believe that WillyGoat has collected PII from someone under the age of 13, you are directed to notify us immediately at privacy@willygoat.com.

YOUR PRIVACY CHOICES

Right of Access, Rectification, Correction, Erasure, Transfer, and Withdrawal

Under the law, you may have a right to request access to your PII for rectification, correction, erasure, transfer, or restriction, or to object to its processing or withdraw your consent. If you wish to exercise any of these rights, please contact WillyGoat’s Privacy Officer as disclosed in this Privacy Notice.

You do not need to pay a fee to access your PII or to exercise your rights. However, we may charge a reasonable fee if your request is unreasonable or excessive.

To confirm your request, we may need to request specific information from you as a security measure to ensure that PII is not disclosed to an unauthorized third party. We will attempt to respond to all legitimate requests within thirty (30) days.

Rights of European Citizens

WillyGoat observes the EU-U.S. Data Privacy Framework (“DPF”) Principles, including the DPF’s Supplemental Principles, and uses the Principles as a guide in handling data from EU-citizens. While WillyGoat is not certified by the United States Federal Trade Commission under the DPF, it adheres to the Principles and honors the requests of EU citizens seeking to protect their privacy rights under the DPF.

If you are a European citizen, you are entitled to certain rights regarding the protection of your Personally Identifiable Information and Personal Data, which are subject to limitations set forth in the EU GDPR and its applicable case law. These rights are:

The right to access and correct the information that WillyGoat processes about you;
The right to transfer all or a part of the information collected about you to another data controller, where it is technically feasible;
The right to the erasure of data concerning you, subject to WillyGoat’s rights of retention under the law;
The right to object to the processing of Personally Identifiable Information and Personal Data where you dispute the accuracy of the data, the processing is not lawful, WillyGoat no longer needs the information for the purposes of processing, or you have raised an objection for personal reasons;
The right to revoke your consent to data processing;
The right to object to the processing of your Personally Identifiable Information and Personal Data for marketing purposes;
The right to object to the processing of Personally Identifiable Information and Personal Data for direct marketing or for personal reasons that arise from your particular situation; and
The right to file a complaint with a data protection authority.

To exercise these rights, you may either opt out of receiving communications from WillyGoat by unsubscribing to its e-mails or by sending an e-mail to privacy@willygoat.com. You do not need to pay a fee to exercise these rights, however, we reserve the right to charge a reasonable fee if your request is unreasonable or excessive. To confirm your request, we may need to request specific information from you as a security measure to ensure that personal data is not disclosed to an unauthorized third party. We will attempt to respond to all legitimate requests within thirty (30) days.

For further information regarding your privacy rights as a citizen of the EU, please visit the U.S. Department of Commerce’s Services at https://www.commerce.gov/ and the DPF overview webpage at https://www.dataprivacyframework.gov/s/program-overview.

Your California Privacy Rights

The following rules apply solely to visitors, users, and others who are residents of the State of California. California residents have the right to be notified which categories of PII are being collected and the purposes for which the PII is being used. In particular, we collected the following categories of PII (A, B, D, F, and G) as defined in the California Consumer Privacy Act within the last twelve months. Our uses of this PII are detailed above in this Privacy Notice:

Category	Examples	Collected
A. Identifiers	Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.	YES
B. Personal information categories listed in the California Consumer Records statute (Cal. Civ. Code § 1798.80(e))	Name, signature, address, telephone number, bank account number, credit card number, debit card number, or any other financial information.	YES
C. Characteristics of protected classifications under State or federal law	Religious affiliation, ethnicity, etc.	NO
D. Commercial	Records of products or services purchased.	YES
E. Biometric Data	Fingerprints or footprints.	NO
F. Internet or other similar network activity	Browsing history, search history, information on a consumer’s interaction with a Services, application, or advertisement.	YES
G. Geolocation data	Physical location or movements.	YES
H. Audio, electronic, visual, thermal, olfactory, or similar information	N/A	NO
I. Professional or employment-related information	N/A	NO
J. Educational information	N/A	NO

We obtain these categories of PII directly from California residents when they complete forms through our Site or provide it to us as a part of a transaction or inquiry concerning our products. We also obtain these categories of PII indirectly from California residents while observing their actions on our Site and from third parties or service providers that they have authorized to receive and share PII.

California residents have a right to request that we disclose what PII we collect from you and whether, and how, we disclose or sell that PII. California residents may also request that we delete any personal information collected or maintained by us from you.

California residents may also have the right to opt out of the sale of their personal information by contacting us or, where available, by clicking a link or icon associated with an advertisement. Specifically, this link or icon may state “Do Not Sell My Personal Information” or “Do Not Sell My Info.” By selecting this link or icon, you “Opt Out,” which means that you have opted out of the sale of your personal information as set forth in the California Consumer Privacy Act. You may visit our Do Not Sell or Share My Personal Data webpage at https://willygoat.com/pages/ccpa-opt-out.

However, even though you may have opted out, you may still see interest-based advertisements. To learn more about interest-based advertising across websites and additional opt-out choices, you can visit http://optout.aboutads.info. If you opt-out of the sale of your personal information but do not opt out of interest-based advertising more generally, you may still receive ads tailored to your interests based on PII that was not sold by us, personal information that was sold to downstream participants at least 90 days before you opted out, or personal information that was sold by other sources from which you have not opted out.

To submit a request for a list of the categories of personal information collected from you or to request that WillyGoat delete your personal information, please email us at privacy@willygoat.com, or mail us at:

Privacy Officer
WillyGoat, LLC
PO Box 59278
Birmingham, AL 35259

To verify your request, we may request certain information from you to confirm that you are a user of our Site, such as your phone number, email address, city, state, or geographic location. You may also designate an authorized agent to make a request to WillyGoat to disclose or delete your personal information. To do so, you must provide us with proof that the individual or business has been appointed as your agent, such by providing a signed power of attorney form, and provide accurate responses to any information requested by us that may be necessary to confirm that you are a user of our Site, such as your phone number, username, email address, city, state, or geographic location. California residents have a right not to receive discriminatory treatment by WillyGoat for their exercise of these rights conferred under California law.

Colorado Residents

WillyGoat does not conduct business in Colorado, control or process the personal data of 100,000 or more consumers during a calendar year or derive revenue or receive a discount on the price of goods or services from the sale of personal data.

Connecticut Residents

During the preceding calendar year, we did not control or process the personal data of at least 100,000 consumers or derive more than 25% of our gross revenue from the sale of personal data.

Montana Residents

WillyGoat does not control or process the personal data of 50,000 or more Montana residents during a calendar year or derive over 25% of its revenues from the sale of personal data and control or processing of personal data of 25,000 or more Montana residents. Therefore, the Montana Consumer Data Privacy Act does not apply to WillyGoat’s collection or use of PII.

Nevada Residents

If you are a resident of Nevada, you may provide notice to us to limit the sale of your PII to third parties for resale or licensing purposes. However, we do not sell your PII for such use. To notify us that you wish to limit the sale of your PII to third parties for resale or licensing purposes, you may send us an email to privacy@willygoat.com with the subject line, “Nevada Do Not Sell Request,” along with your name, address, and user account information.

Tennessee Residents

WillyGoat does not exceed $25 million in annual revenue, control or process the personal information of 175,000 or more Tennessee consumers, or control or process the data of 25,000 consumers while deriving more than 50% of its gross revenue from the sale of personal information.

Texas Residents

WillyGoat is considered a small business as defined by the Small Business Administration and, therefore, is exempt from the Texas Data Privacy and Security Act. However, WillyGoat generally collects and processes PII only to the extent that it is adequate, relevant, and reasonably necessary for the purposes disclosed in this Privacy Notice. The categories of PII collected by WillyGoat are disclosed within this Privacy Notice, and Texas residents may request, free of charge, information of the PII collected from them twice annually.

Utah Residents

WillyGoat does not have annual revenues of $25,000,000 or more and control or process the PII of 100,000 or more consumers. Therefore, the Utah Consumer Privacy Act does not apply to WillyGoat’s collection and use of PII.

Virginia Residents

WillyGoat does not control or process the personal data of at least 100,000 Virginia residents or control or process the personal data of at least 25,000 Virginia residents and derive more than 50% of its gross revenue from the sale of personal data. For these reasons, the Virginia Consumer Data Protection Act (VCDPA) does not apply to WillyGoat’s collection and use of PII.

Contacting Us If you have any questions about this Privacy Notice or the manner by which we collect or use Personal Information about you, email us at privacy@willygoat.com.

WillyGoat