No time to search? Try Design Ally
Toggle Menu
My Cart

Privacy Policy

Last Updated: March, 10, 2026

This Privacy Notice describes how Carnegie Fabrics, LLC (“we”, “us,” “our”) collects, uses and discloses information about individuals who use our website, applications (services, tools and features, or otherwise interact with us (collectively, the “Services”). For the purposes of this Privacy Notice, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Notice.

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice. If you do not agree to this Privacy Notice, please do not use or access the Services.

Table of Contents:

1. Changes to This Privacy Notice 9. Data Security and Retention
2. Collection of Information 10. California Residents
3. Uses of Information 11. Your Privacy Rights
4. Cookies and Other Tracking Technologies 12. Additional Information for Individuals Located in the EEA
5. Disclosure of Information 13. Exercise Your Rights
6. Social Features 14. Notice of Financial Incentive
7. Third-Party Websites; Linked and Embedded Content 15. How to Contact Us
8. Children’s Privacy   



  1. CHANGES TO THIS PRIVACY NOTICE

    We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as emailing you at the last email address you provided us or posting notice of such changes on the Services) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

  2. COLLECTION OF INFORMATION

    When you use or access the Services, we collect certain categories of information about you from a variety of sources.

    Information You Provide to Us

    Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

    • Basic contact details, such as name, address; phone number, and email.

    • Account information, such as username, password, and security questions that you select and the answers you provide. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do net share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.

    • Business contact information, such as your job title, business telephone number and email, and business mailing address.

    • Payment information, such as credit or debit card information, alternative payment method details (e.g., PayPal), and billing address.

    • Commercial Information, such as products and services purchased and shipping information.

    • User-generated content, such as messages, photos, survey responses, comments, reviews, and recordings, submitted by you through the Services (“UGC”). We or others may store, display, reproduce, publish, or otherwise use UGC, and may or may not attribute it to you. Others may also have access to UGC and may have the ability to share it with third parties. You understand that, even after removal, copies of UGC may remain viewable in cached and archived pages and may have been copied or stored by Internet archives and others. If you choose to submit UGC to any public area of the Services, your UGC will be considered “public” and will be accessible by anyone, including us.

    • Survey and event information, such as your feedback about our Services and your responses to surveys (which constitutes UGC as defined above).

    • Recordings, such as recordings of customer support communications to monitor for quality control, and to assist us in the defense of any legal claims.

    • Any other information you choose to include in communications with us, for example, when sending a message through the Services or submitting information about you via a form through the Services.

    [Sensitive Information. [ ]]

    Information We Collect Automatically

    We also automatically collect certain information about your interaction with the Services, when you open an email, or connect to our wireless internet access (“Usage Data”). To do this, we may use cookies, pixels, SDKs, web beacons/clear gif, and other geolocation tracking technologies (“Tracking Technologies”). Usage Data includes:

    • Device information, such as device type, operating system, device ID, unique device identifier, screen resolution, media access control (MAC) address, and internet protocol (IP) address.

    • Location information, such as approximate location based on IP address.

    • Other information regarding your interaction with the Services, such as operating system, browser type, log data, date and time stamps, pages you access on the Services, websites you access before and after visiting the Services, length of time spent on the Services, clickstream data, and ad impressions.

    For more information on how we use Tracking Technologies and your choices, see the section below, Cookies and Other Tracking Technologies.

    Information Collected From Other Sources

    We may obtain information about you from outside sources, including information that we collect directly from third parties and information that you choose to have shared with us. Such third parties and information includes:

    • Analytics Providers. Information such as location, traffic, usage, and interaction data on the website that we receive from analytics providers such as HubSpot and Google Analytics.

    • Marketing Databases. Information we receive from consumer marketing databases or other data enrichment companies, such as name, address, title, email, and phone number.

    • Advertising Partners. Information such as Usage Data and Tracking Technologies (defined above) that we receive from advertising providers such as Google Ads, Meta Pixel, TikTok Pixel.

    • Third Party Retailers. If you purchase our products from a third-party retailer, we receive information from that third party for order processing and fulfilment, returns, and refunds processing, warranty and related purposes, which may include, for example, name, contact information, shipping, and other order details.

    • Public Records. We may collect information about you from public records.

    Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third Party Websites and Links.

  3. USES OF INFORMATION

    With respect to the categories of information we collect, we use information about you as described below:

    • Services and Purpose Collected; Communication with You: For the purpose for which you disclosed and we collected information about you, for example, to process and communicate with you in connection with your use of the Services, to process, fulfill and ship your purchases and orders, to process warranty claims, to process return requests, to register your product, to process your requests for information, analyze and display UGC you provide, to administer your account (where applicable) and our business activities, to provide customer support to users of the Services.

    • Returns; Refunds; Warranties: To process returns, or refund or warranty claims, in connections with purchases previously made, and to provide support and communication during such process.

    • Personalization; Advertising; Analytics: To tailor the content and information that we may send or display to you, to suggest personalized help and instructions, and to personalize your experience while visiting or using our Services; sharing it with our third party service providers to understand how our Services are used and to improve the Services; so we and our third party service providers to target advertisements for goods and services and to display those advertisements on other websites. For more information, please see the Cookies and Other Tracking Technologies section below.

    • Marketing Communications: To send you marketing communications about our business, products, Services, and other programs that may be of interest to you. In order to provide you with a personalized experience, these communications may be tailored to your preferences based on, for example, inferences we make using your visits to the Services or the links you click on in our emails. Please note that pixel tags, cookies and other online trackers may be used within emails to track your interactions with those websites and when emails are opened.

    • Evaluation and Improvement: To analyze, develop, and improve the content, materials, products, and the Services; to inform marketing and communication plans; to understand user demographics and preferences; to analyze the effectiveness of the Services; and to evaluate user experiences (e.g., analyzing which features and portions of the Services are most popular; for troubleshooting, for statistical purposes).

    • Quality Assurance: To perform quality assurance; to assist with fraud identification, and to assist our customer relationship representatives (for example, through representatives in our call center), we use tools to monitor and record certain user experience information, including, without limitation, audio of customer service calls and information resulting from such calls.

    • Lawful Processes; Protection of Company: In accordance with and in response to regulatory authorities, courts with competent jurisdiction, valid law enforcement requests, governmental agency requests, emergency services, and other necessary third parties for legal, protection, security, and safety purposes (e.g., to protect the safety of our employees, agents, and customers, or any other person); to protect our rights or the rights of others, including to enforce our agreements, policies, and terms; to bring legal action; to protect our operations and assets.

    • Auditing, Reporting, Corporate Governance, and Internal Operations. Relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, record keeping and legal functions; and related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business.

    • With Your Consent: With your consent, we may use and share information about you in ways not specifically described in this Privacy Notice.

    We may deidentify information about you such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified), and we may use such deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except solely for the purpose of determining whether our deidentification process satisfies legal requirements.

  4. COOKIES AND OTHER TRACKING TECHNOLOGIES

    The Services automatically use cookies and Tracking Technologies to track your use of the Services in order to facilitate and enhance the user experience on the Services, to learn and track how you access and use the Services, including when and how users visit the Services and how popular particular Service pages are and aren’t, to provide you with customized advertising, and for other purposes as described herein.

    Most browsers accept cookies and other Tracking Technologies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including certain features and general functionality, to work incorrectly. Changing your cookie preferences in one browser will not necessarily carry over to other browsers, so you may need to adjust your preferences each time you get a new device, install a new browser, upgrade an existing browser, or alter or delete a browser’s cookie file. If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

    What are cookies?
    Cookies are small pieces of information that are stored on your device’s hard drive by your web browser.

    The Services may use both cookies that we implement (sometimes referred to as first-party cookies) and cookies implemented by our suppliers and other third parties (sometimes referred to as third-party cookies). The types of information collected by a cookie and the purposes for which that information is used will depend on the type of cookie. By way of illustration, the types of cookies used, the types of information collected by those cookies, and the purposes for which that information are used are described below.

    • Necessary cookies are required for the operation of the Services.

    • Functional cookies offer enhanced functionality when accessing or using the Services.

    • Performance & analytical cookies assess the performance of the Services and enable us to personalize content and remember your preferences.

    • Advertising or targeted cookies are used to make the Services and its content more relevant to your interests (this is sometimes called “behavioral” or “targeted” advertising and is further discussed above) and to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns.

    For more information about cookies, including about advertising cookies and your choices regarding cookies, we suggest you visit the following websites: https://www.consumer.ftc.gov/articles/0042-online-tracking; http://www.allaboutcookies.org; http://www.youronlinechoices.com; and http://www.youronlinechoices.eu.

    Analytics Tools & Providers

    As noted above the Services use third-party analytics tools (e.g., Google Analytics) to collect and process data about your use of the Services. Our analytics providers may set and read cookies to collect this data, and your web browser will automatically send data collected by those cookies to our analytics providers. Our analytics providers use this data to provide us with reports that we will use to improve the Services’ structure and content.


    For example, we utilize Google Analytics and other analytical tools offered by Google. For more information on how Google uses this data, visit Google’s page on How Google uses data when you use websites or apps that use Google Services. To prevent this data from being used by Google Analytics, follow the instructions to download and install the Google Analytics Opt-out Browser Add-on for each browser you use. Using the Google Analytics Opt-out Browser Add-on will not prevent us from using other analytics tools and will not prevent data from being sent to the Service itself or to Google.

    Advertising networks, Personalized Advertising, Remarketing & Retargeting

    We may use or participate in advertising networks and related advertising services that are managed and provided by third-party advertising servers, advertising agencies, technology vendors, and research firms, including Google Ads, and advertising services provided by Meta (sometimes referred to the Meta “tracking pixel”).

    Advertising networks often gather data about consumers who view advertisements to make inferences about a consumer’s interests and preferences, which enables their computers to deliver advertisements directly targeted to the consumer’s specific interests. This practice is often referred to as “online behavioral advertising.” For example, a third-party advertising network might collect the type of web browser you use, the type of computer operating system you use, the domain name of a website you visit, whether or not you visit specific pages of the Services and other websites, the location of your Internet service provider, the date and time of a visit to a website, and other interactions between you and a website.

    Through Google Ads, Google uses your Internet searches, cookies, and similar identifiers (e.g., pixel tags) to collect information about your visits to the Service and your interaction with our products and services to generate targeted advertisements to you on other websites that you visit across the Internet. We may also enable and implement Google Analytics Advertising Features on the Services. To opt out of remarketing advertising provided through Google, to customize your ad preferences, or to limit Google’s collection or use this information, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions.

    For certain Meta advertising services, Meta Ireland is a Joint Controller (as defined in the GDPR) and that information required under the GDPR related to such processing can be found at https://www.facebook.com/about/privacy. We work with Meta and use their advertising services to measure and improve our ads and marketing efforts, as well as to display more relevant advertising to you. For further information on how Meta Ireland processes your personal information, including the legal basis, and the ways to exercise your rights, please visit https://www.facebook.com/about/privacy.

    Please remember if you change your cookie settings on individual web browsers or ad networks, such settings will not necessarily carry over to other browsers or ad networks. As a result, depending on the opt-outs that you request, you may still see our ads from time to time.

    Do Not Track & Global Privacy Controls

    Your browser settings may allow you to transmit a “do not track” signal, “opt-out preference” signal, or other mechanism for exercising your choice regarding the collection of information about you when you visit various websites. Our website recognizes the Global Privacy Control (GPC) signal which enables you to opt out of certain uses or disclosures of information about you. If you notify us of your preference through GPC, we will honor your request only for the browser or device that sends the GPC signal. If you do not have an account or are not logged into your account, your request to opt out through the GPC will not apply to any account information. To learn more about Global Privacy Control, you can visit https://globalprivacycontro1.urg.

  5. DISCLOSURE OF INFORMATION

    We may disclose information about you to third parties for legitimate purposes subject to this Privacy Notice, including the following categories of third parties:

    • Affiliates: Our affiliates, subsidiaries, or others within our corporate group.

    • Service Providers: Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, security, website hosting, mailing, customer relationship management, marketing communications, web analytics, payment networks, and payment processing.

    • Shipping & Logistics: Shipping and logistics partners for mailing and shipping purposes.

    • Manufacturers: The original manufacturer of the products we make available for purchase.

    • Marketing Providers: Third parties for marketing purposes.

    • At Your Direction: Third parties to whom you request or direct us to disclose information, such as through your use of social media widgets or login integration. enforce our agreements, policies, and terms; to bring legal action; to protect our operations and assets.

    • Advisors: Professional advisors, such as auditors, law firms, or accounting firms.

    • Bankruptcy and Other Business Transactions: Third parties in connection with or anticipation of an asset sale, merger, or other business transaction, including in the context of a bankruptcy.

    We may deidentify information about you such that it cannot reasonably be used to infer information about you or otherwise be linked to you (or we may collect information that has already been deidentified), and we may use such deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except solely for the purpose of determining whether our deidentification process satisfies legal requirements.

  6. SOCIAL FEATURES
    Certain features of the Services allow you to initiate interactions between the Services and third-party services or platforms, such as social networks (“Social Features”). Social Features include features that allow you to access our pages on third party platforms, and from there “like” or “share” our content. Use of Social Features may allow a third party to collect and/or use information about you. If you use Social Features, information you post or make accessible may be publicly displayed by the third-party service. Both we and the third party may have access to information about you and your use of both the Services and the third-party service for more information, see the section below, Third Party Websites and Links.

  7. THIRD PARTY WEBSITES; LINKS AND EMBEDDED CONTENT

    We may provide links to third party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as thirdparty social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use.

    Our inclusion of such links does not, in itself, imply any endorsement of the content on such platforms or of their owner or operators.

  8. CHILDREN’S PRIVACY

    Children under the age of 13 are not permitted to use the Services, and we do not seek or knowingly collect any personal information about children under 13 years of age. If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the information below to request that it be deleted.

  9. DATA SECURITY AND RETENTION
    Despite our reasonable efforts to protect information about you, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.
    Information you provide to us should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up to date. We retain information about you for as long as it is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain information about you, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity, or protect ourselves, including our rights, property or product.
  10. CALIFORNIA RESIDENTS
    This section applies to you only if you are a California resident (“resident” or “residents”). For purposes of this section, references to “personal information” shall include “sensitive personal information,” as these terms are defined under the California Consumer Privacy Act (“CCPA”).

    Processing of Personal Information

    In the preceding 12 months, we (i) collected the following categories of personal information about residents for the following purposes, and (ii) (where indicated below) disclosed for a business or commercial purpose (as identified below) to third parties the following categories of personal information:
    Category Categories of Purposes (defined in the Use of Information section above) Categories of Recipients (defined in the Disclosure of Information section above)
    Identifiers such as Name, e-mail address, IP address

    - Services and Purpose Collected; Communication with You 

    - Returns; Refunds; Warranties 

    - Personalization; Advertising; Analytics

    - Marketing Communications 

    - Evaluation and Improvement - Quality Assurance 

    - Lawful Processes; Protection of Company 

    - Auditing, Reporting, Corporate Governance, and Internal Operations

    - With Your Consent

    - Affiliates

     - Service Providers

    - Shipping & Logistics

     - Manufacturers

    - Marketing Providers

     - At Your Direction

     - Advisors

     - Bankruptcy and Other Business Transactions
    Commercial information such as records of products or services purchased Internet or other similar network activity such as information regarding your interaction with the Services
    Approximate geolocation data such as IP address
    Audio, electronic, visual, thermal, olfactory, or similar information such as photographs, video recordings and voice recordings
    Professional or employment-related information such as title of profession, employer, business contact information
    Inferences drawn from other personal information
    Personal information categories listed in the California Customer Records statute such as name and contact information.
    Characteristics of protected classifications under California or federal law such as [race, color, national origin or ancestry, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran status, genetic information, and citizenship]

    [Sensitive personal information such as:

    - government identifiers such as drivers license numbers, passport numbers and social security numbers;

    - Account access credentials such as account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to your account,

    - Sensitive demographic information such as race or ethnicity, religion or philosophical belief or union membership;

    - The contents of a resident’s mail, email, and text messages; - Biometric information; health data; genetic data;

    - precise geolocation data; - sexual orientation or information concerning a resident’s sex life]

    The criteria we use to determine how long to retain personal information about you is described in the section above, Data Security and Retention.

    Selling and/or Sharing Personal Information

    We do not have actual knowledge that we “sell” or “share” (as those terms are defined under the CCPA and used throughout this section) personal information of residents under 16 years of age. However, we do share certain categories of personal information for purposes of cross-contextual behavioral advertising, and, in the preceding 12 months, we have shared the categories of personal information and, in the preceding 12 months, we have shared the categories of personal information about residents as noted in the table set forth in the Your Privacy Rights section below. The CCPA holds such disclosures and sharing to be considered “selling” or “sharing”. You may have the right to opt out of such disclosures via the methods described in the Your Privacy Rights section below.

    Right to Know

    In addition to those rights set forth in the Your Privacy Rights section below (as applicable), California law provides residents the right to request that a business that collects personal information about them to disclose (1) the categories of personal information collected, disclosed, sold and/or shared; (2) the categories of sources from which the personal information was collected; (3) the business or commercial purpose for collecting, selling, and/or sharing personal information; (4) the categories of third parties with whom we disclosed, sold, and/or shared personal information; and (5) the specific pieces of personal information we have collected about you. To exercise this right, use the methods set forth in the Exercise Your Rights section below.

    Your California Privacy Rights
    California’s Shine the Light law permits residents to request certain details about how their “personal information” (as defined in California Civil Code Section 1798.83) is shared with third parties for their direct marketing purposes. We do not consider our data processing activities to fall into the category of sharing personal information with third parties for their own direct marketing purposes. However, to the extent Shine the Light applies to our data processing activities, you can opt out of any such disclosures by (i) utilizing the Global Privacy Control as mentioned in the Do Not Track & Global Privacy Controls section above, or (ii) by clicking the “Do Not Sell or Share My Personal Information” option in the footer of the website and changing your Cookie Settings as described on that webpage.

  11. YOUR PRIVACY RIGHTS
    Some U.S. states (for example, California, Colorado, Connecticut, Delaware, Texas, and Virginia) and other international jurisdictions (for example, the United Kingdom, European Union, and Canada) provide certain rights and options to their residents.

    Additional Rights

    Depending on the laws applicable to our processing of personal information about you and the location in which you reside, you may have the ability to exercise the rights listed below. Subject to foregoing and all applicable limitations, exemptions, or exceptions these rights you may have the right to:

    • Right to Confirm: Confirm whether we process personal information about you.

    • Right to Know: Obtain a list of third parties to whom we’ve disclosed your personal information to, or if we do not keep a specific list, a list of third parties we generally disclose personal information to.

    • Right to Data Portability: Access and receive the specific personal information we process about you in a structured, commonly used and machine-readable format, and to transmit it to another entity where this is technically feasible.

    • Right to Delete: Delete personal information about you.
    • Right to Correct: Correct personal information about you.
    • Right to Opt Out of Selling, Sharing, and/or Targeted Advertising: Optout of (i) the sale of personal information about you; and/or (ii) the use of personal information about you for targeted advertising purposes. Exercise this right by using the Global Privacy Control as noted in the Do Not Track & Global Privacy Controls section above or via the following form: “Do Not Sell or Share My Personal Information”
    • Right to No Discrimination: Not be discriminated against due to your exercise of the rights provided under applicable law that are applicable to our processing of your personal information.
    • Right to Complain: To lodge a complaint with a government regulator (e.g., your state attorney general) or supervisory authority, in the jurisdiction that
      you reside in, if you consider that the collection or use of personal information about you violates this Privacy Notice or applicable law.

    We do not use personal information about you in furtherance of automated profiling decisions that produce a legal or similarly significant effect.
    We do not discriminate against users for exercising the rights granted to them under applicable law and that are applicable to our processing of personal information.
    To exercise these rights, please see the Exercise Your Rights section below.

    Selling and Sharing

    We do not sell your personal information as the concept of “selling” is traditionally understood as being the exchange of something for money. However, we share your personal information with third parties for the purpose of cross-contextual behavioral advertising purposes (e.g., targeted advertising). U.S. state data protection laws hold such disclosures and sharing to be considered “selling” or “sharing”. Therefore, you have the right to opt out of such activities. In the preceding 12 months, we have sold or shared the following categories of personal information with the following categories of third parties and for the following purposes:

    Category of Personal Information Categories of Purposes  Categories of Recipients
    Identifiers Analytical and targeted advertising purposes (including, without limitation, crosscontextual behavioral advertising). Analytics, marketing, advertising, and remarketing partners and service providers
    Internet or other electronic network activity information


    You may have the right to opt out of the selling and targeted advertising as described herein. You may exercise this right to opt out by utilizing the Global Privacy Control as mentioned in the Do Not Track & Global Privacy Controls section above, or by clicking the “Do Not Sell or Share My Personal Information” option in the footer of the website and changing your Cookie Settings as described on that webpage. If you have any questions, concerns, or would like more information on our ability to opt out, you can contact us by emailing: mktassist@carnegiefabrics.com

  12. ADDTIONAL INFORMATION FOR INDIVIDUALS LOCATED IN THE EEA
    This section of the Privacy Notice applies to residents of countries or jurisdictions located in the European Economic Area (EEA), including, without limitation, the European Union and the United Kingdom.

    Legal Bases We Rely on When Processing Personal Information

    To the extent the European Union’s General Data Protection Regulation or other similar law applies to you (including, without limitation, those located in the United Kingdom) and is applicable to Company, we process personal information about you for the purposes set forth in this Privacy Notice under the following legal bases (as applicable):

    • Our Contract With You: Our processing is necessary to perform our obligations under a contract with you or to perform steps requested by you prior to entering into a contract with you: (e.g., to verify the information you have provided to us).

    • Our Legitimate Interests: Our processing is necessary for our legitimate interests, including to protect the security of our Services; to protect the health and safety of you or others; to establish, protect and defend our legal rights and interests; to prevent fraud and verify identity and authorization of clients; to understand and analyze usage trends; and to improve our products and services. Additionally, we have a legitimate interest in promoting our operations and goals as an organization and sending marketing communications for that purpose.

    • Legal Compliance: Where our processing is required to comply with applicable law (for example, to maintain your payment transaction history for tax reporting purposes) e.g., in response to subpoenas, court orders and other lawful requests by regulators, courts and law enforcement agencies, or related to national security requests.

    • Your Consent: When we have your express consent as defined by applicable law.
    Additional Rights for those in the EEA


    To the extent the European Union’s General Data Protection Regulation or other law granting particular rights to data subjects applies to you (including, without limitation, those located in the United Kingdom) and subject to all applicable exceptions and exemptions granted under such applicable laws, you may have the following rights with regard to our processing of personal information about you in addition to those rights set forth in the Your Privacy Choices section of the Privacy Notice above:

    • Right to Restrict Personal Information Use and Right to Object: You may have the right to restrict our use of your personal information where (i) you contest the accuracy of the personal information; (ii) the use is unlawful but you do not want us to erase the personal information; (iii) we no longer need the personal information for the relevant purposes, but you require it for the establishment, exercise or defense of legal claims; or (iv) you have objected to our personal information use justified on our legitimate interests pending verification as to whether Company has compelling interests to continue the relevant personal information use.
    • Right to Withdraw Consent: In the event personal information about you is processed on the basis of your consent, you have the right to withdraw consent at any time with effect for the future.


    Please see the “Exercise Your Rights” section below for information about how to make a request.

    International Transfers of Personal Information

    Due to the fact Company’s business is international, personal information about you and other information may be transferred to, stored in, and processed in any country where our or our suppliers’ servers, databases, or facilities are located or operated. By accessing, receiving, or using the Services or by providing consent to us (where consent is required by applicable law), you specifically acknowledge and agree that information will be transferred outside of the country from which you access the Services (including, for example, to the United States) and that such countries’ data protection and related laws, regulations, and rules may be different than, and may not be as protective as, those of the jurisdiction from where you access the Services. Your use of or access to the Services constitutes your consent to such transfers.

    Additionally, where required by applicable law, we have ensured that personal information about you included in such transfers is adequately protected through the use of contractual clauses or other adequate measures allowed or required under such applicable laws for example, by signing relevant EU standard contractual clauses as approved by the European Commission (the form for these clauses can be found here). Subject to applicable law, you have the right to obtain details about the mechanism under which personal information about you is transferred cross-border. For more information about these transfer mechanisms, please contact us as set out in the “How to Contact Us” section below.

  13. EXERCISE YOUR RIGHTS
    If this Privacy Notice expressly stated above that you have certain rights, or applicable law grants you certain rights as it relates to the Services and information we collect about you, you may exercise any of these rights by contacting us using the information provided below. You may submit a request to us by:

    Or by following the opt out methods and processes identified above. For clarity, to exercise your rights to opt-out of targeted advertising, or the “selling” or “sharing” of personal information about you, you must follow the instructions provided under the Your Privacy Rights section noted above.


    Additionally, you may have the right to appeal our decision regarding a request related to these rights by contacting us using the information provided below. If the appeal is denied, you may submit a complaint to the applicable government regulator or authority in the jurisdiction in which you are located (for example, the state Attorney General in the state in which you reside).

    When you submit a request or an appeal, we will limit our collection of information about you to only what is necessary to securely fulfil your request or process your appeal. Making a request or appeal does not require you to create an account with us.


    To verify certain requests—for example, requests to know, delete, or correct—we may need to collect additional information to verify your identity and the request before providing a substantive response to the request.

    Some jurisdictions, depending on your location, permit you to authorize an agent to make requests on your behalf to exercise your rights. If you have a registered agent to act on your behalf, we have the right to authenticate such agent’s authority to act.

  14. NOTICE OF FINANCIAL INCENTIVE
    [                    ]
  15. HOW TO CONTACT US
    Should you have any questions about our privacy practices or this Privacy Notice, please email us at mktassist@carnegiefabrics.com, or contact us at Carnegie Fabrics, LLC 110 North Centre Avenue, Rockville Centre, NY 11570, or at 800.727.6770.