Privacy Policy

---

This Privacy Policy explains how Xanadu, The Experience LLC. (“XTE,” “we,” or “us”) collects, uses, and discloses information about you. This Privacy Policy applies when you use our websites, contact our customer service team, engage with us on social media, or otherwise interact with us. 

We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

If you are a California resident, please see the ‘Your California Privacy Rights’ section below.

COLLECTION OF INFORMATION

Information You Provide to Us

We collect information you provide directly to us. For example, you share information directly with us when you sign up for a membership, submit a product review through our websites or comment on our blog, make a purchase, call or communicate with us via third-party platforms and on social media, sign up to join our email list, request customer support, or otherwise communicate with us. The types of personal information we may collect include your name, email address, shipping and billing postal address, phone number, credit card and other payment information, information about your skincare needs, and any other information you choose to provide.

Information We Collect Automatically When You Interact with Us

When you access or use our websites, we automatically collect certain information, including:

• Transactional Information: When you make a purchase, we collect information about the  transaction, such as product details, purchase price, and the date and      location of the transaction.

• Device and Usage Information: We collect information about how you access our websites, including data about the device and network you use, such as your hardware      model, operating system version, mobile network, IP address, unique device      identifiers, browser type, and app version. We also collect information about your activity on our websites, such as access times, pages viewed, links clicked, and the page you visited before navigating to our websites.

• Information Collected by Cookies and Similar Tracking Technologies: 

We (and our service providers) use tracking technologies, such as cookies and web beacons, to      collect information about you. Cookies are small data files stored on your      hard drive or in device memory that help us improve our websites and your      experience, see which areas and features of our websites are popular, and      count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are      electronic images that we use on our websites and in our emails to help      deliver cookies, count visits, and understand usage and campaign      effectiveness. For more information about cookies and how to disable them,      see the ‘Your Choices’ section below.

Information We Derive

We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address or make inferences about your preferences and interests based off your profile information. 

We use the information we collect to personalize and improve your experience on our websites. We also use the information we collect to: 

• Provide and deliver our products and services, process transactions, and send you related information, including  confirmations, receipts, invoices, customer experience surveys, and recall notices (if applicable);

• Communicate with you about products and events offered by XTE and others and provide news and information that we think will interest you (see the ‘Your Choices’ section below for information about how to opt-out of these communications at any time);

• Provide and administer our VIP program;

• Personalize the advertisements you see on third-party platforms and websites (for more information, see the ‘Advertising and Analytics’ section below);

• Send you technical notices, security alerts, and support and administrative messages; 

• Respond to your comments and questions and provide customer service;

• Monitor and analyze trends, usage, and activities in connection with our Websites; 

• Detect, investigate, and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of XTE and others;

• Debug to identify and repair errors in our Websites; 

• Comply with our legal and financial obligations; and carry out any other purpose described to you at the time the information was collected.

We share personal information in the following circumstances or as otherwise described in this policy: 

• We share personal information with vendors, service providers, and consultants that need access to personal information in  order to perform services for us, such as companies that assist us with web hosting, shipping and delivery, payment processing, fraud prevention, customer service, and marketing and advertising.

• If you submit a product review or comment on our blog, we share this information publicly on our Websites.

• We may disclose personal information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.

• We may share personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of TC, our users, the public, or others.

• We share personal information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.

• We may share personal information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. 

• We share personal information with your consent or at your direction.

We also share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. 

YOUR CHOICES

Account Information

You may update and correct certain account information at any time by emailing us at wecare@xanadu-exp.com. 

Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Websites.

Communications Preferences

You may opt-out of receiving promotional emails from XTE by following the instructions in those communications, contacting our Customer Experience team at wecare@xanadu-exp.com. If you opt-out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.

YOUR CALIFORNIA PRIVACY RIGHTS 

The California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, the “CCPA”), affords consumers residing in California certain rights with respect to their personal information. If you are a California resident, this section applies to you. 

In the preceding 12 months, we have collected the following categories of personal information: identifiers, information described in Cal. Civ. Code § 1798.80(e), commercial information, internet or other electronic network activity information, inferences, and sensitive personal information. Under Cal. Civ. Code § 1798.121(d), we do not infer characteristics about a consumer based on any sensitive personal information collected or processed as defined under Cal. Civ. Code § 1798.140(ae). For details about the precise data points we collect and the categories of sources of such collection, please see the ‘Collection of Information’ section above. We collect personal information for the business and commercial purposes described in the ‘Use of Information’ section above. In the preceding 12 months, we have disclosed the following categories of personal information for business purposes to the following categories of recipients:

Category   of Personal Information

Categories   of Recipients

Identifiers

Analytics   providers

Customer   service providers

Fraud   prevention and security providers

Infrastructure   providers

VIP   program providers

Marketing   and advertising providers

Payment   processors

Shipping   and other order fulfillment providers

Information   described in Cal. Civ. Code § 1798.80(e)

Payment   processors

Commercial   information

Analytics   providers

Customer   service providers

Fraud   prevention and security providers

Infrastructure   providers

VIP   program providers

Marketing   and advertising providers

Payment   processors

Shipping   and other order fulfillment providers

Internet   or other electronic network activity information

Analytics   providers

Fraud   prevention and security providers

Infrastructure   providers

Marketing   and advertising providers

Inferences

Analytics   providers

Infrastructure   providers

Marketing   and advertising providers

California law requires that we provide transparency about personal information we “sell” which, for the purposes of the CCPA, broadly means scenarios in which XTE has shared personal information with third parties in exchange for valuable consideration. California law also requires that we provide transparency about personal information we “share” which, for the purposes of the CCPA means scenarios in which XTE has disclosed personal information with third parties for the purpose of cross-contextual behavior advertising. While we do not provide personal information about you to other companies for money, we do allow our advertising and analytics partners to collect certain device identifiers, commercial information, and internet or other electronic network activity information via our websites to show ads that are targeted to your interests in ways that may be considered “selling” or “sharing” under the CCPA.

We offer various financial incentives. For example, we may provide discounts, coupons, and other benefits for users who sign up to receive our marketing emails or join our VIP membership program. When you participate in a financial incentive, we collect personal information from you, such as identifiers (like your name and email address) and commercial information (like your purchase history). You can opt into a financial incentive by following the sign-up or participation instructions provided, and you can opt-out of the financial incentive, or our subsequent use of your personal information in connection with a financial incentive, at any time by following the instructions in our promotional emails or by contacting us at wecare@xanadu-exp.com. In some cases, we may provide additional terms and conditions for a financial incentive, which we will present to you when you sign up. The value of your personal information is reasonably related to the value of the offer or discount presented to you.

CONTACT US

If you have any questions about this Privacy Policy, please contact us by phone at (440) 794-1570, or by email at wecare@xanadu-exp.com.