American Greetings Corporation, and its subsidiaries and affiliates, which include but are not limited to, AG Interactive, Inc., Cardstore.com, Inc., and AGC, LLC (collectively referred to as, "AG," "AG Companies," "we," "us," and "our"). We respect your privacy and are committed to protecting your personal information while providing a fun and safe online experience.
This Privacy Notice applies to all websites (any, a "Site"), mobile applications (any, an "App"), social features, online services, widgets, downloads, or other outlets, that are owned or controlled by AG and that post or include a link to this Privacy Notice (individually, a "Platform," and collectively, the "Platforms"), regardless of whether accessed by computer, mobile device, or otherwise. The Sites, Apps, and Platforms are collectively referred to as the "Services" and include, but are not limited to:
PURPOSE OF THIS PRIVACY NOTICE
This Privacy Notice explains how we look after your Personal Information whenever that information is provided to us. This includes when you request information from us, Contact us (or we contact you), buy products and services from us, use the Platforms, or connect with us via social media or link to or from our Site. It also tells you about your privacy rights and how the law protects you. It has been updated to reflect the new and additional requirement of the General Data Protection Regulation ("GDPR").
By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice, and agree to the Terms of Service which are incorporated by reference. If you do not agree, please do not access or use the Services.
Click on one of the links below to jump directly to the listed section:
WE FULLY DESCRIBE OUR PRIVACY PRACTICES WITH RESPECT TO THE PLATFORMS BELOW IN THIS PRIVACY NOTICE. THIS SUMMARY HIGHLIGHTS IMPORTANT INFORMATION REGARDING OUR COLLECTION AND PROCESSING OF YOUR PERSONAL INFORMATION, AND REGARDING THIRD PARTIES WHO MAY COLLECT CERTAIN INFORMATION WHEN YOU USE THE PLATFORMS. PLEASE REVIEW OUR FULL PRIVACY NOTICE BEFORE USING OUR PLATFORMS.
The Platforms may request that you provide certain personally identifiable information, which is information that may reasonably be used to identify you as a specific individual ("Personal Information"). Examples of Personal Information include your name, e-mail address, username, address, and phone number. The Platforms may also request additional information about you, such as payment information, demographic information (e.g., your gender, ZIP code, or marital status), or information about your preferences and interests. The Platforms may require that you provide certain information to use the Platforms or certain features, and the required information may change from time to time depending on, among other things, the nature of your relationship with us. If we combine demographic or similar information with the Personal Information we collect, we will treat the combined information as Personal Information under this Privacy Notice.
The Platforms may also enable you to transmit files or otherwise provide information to AG. Please note that files you transmit may contain metadata, which may contain Personal Information about you. For example, photos you transmit could include metadata indicating where (e.g., GPS coordinates) and when (date and time) the photo was taken.
We and our third-party service providers collect certain information about your use of our Platforms ("Usage Information"). Usage Information may include the browser and operating system you are using, the URL, advertisements, or search terms that referred or otherwise led you to the Platforms (if applicable), aspects of the Platforms that you use or visit, the products or services you access or view, the types of greeting cards that you send, and the time of day you accessed the Platforms, among other information.
Usage Information also includes the IP address or other unique identifier ("Device Identifier") for any computer, mobile phone or other device (any, a "Device") used to access the Platforms. A Device Identifier is automatically assigned to your Device, and our servers identify your Device by its Device Identifier. Please note that your IP address is included in the header information of every e-card notification email that we send for your e-cards. Some mobile service providers may also provide us or our third party service providers with information regarding the physical location of a Device used to access the Platforms. Usage Information is generally non-identifying, but if we associate it with you as a specific and identifiable person, we treat it as Personal Information.
The methods used to collect Usage Information may include:
A cookie is a data file placed on a Device when it is used to visit a Platform or otherwise access our online content. Cookies may be used for many purposes, such as remembering you and your preferences and tracking your visits to the Platforms. A Flash cookie is a data file placed on a Device via the Adobe Flash plug-in that may be built-in to or downloaded by you to your Device. Flash cookies may be used for various purposes, such as enabling a Flash feature and remembering your preferences. Flash cookies may not be deleted when you delete other types of cookies from a Device. For more information about Flash and the privacy choices Adobe offers, visit here. If you choose to disable cookies on your Device, some features of the Platforms or our content may not function properly.
Below is information about one such vendor we use across one or more Platforms.
AG uses a specific cookie in order to facilitate the use of Google Universal Analytics for users logged-in to the Platforms ("Logged-In User"). If you are a Logged-In User, AG may use your AG user ID in combination with Google Universal Analytics and Google Analytics to track and analyze the pages of the services you visit. We do this only to better understand how you use the Platform, with a view to offering improvements for all AG users; and to tailor our business and marketing activities accordingly, both generally and specifically to you. Google Analytics cookies do not provide AG with any Personal Information and you may opt-out of this feature by installing the Google Analytics Opt-out Browser Add-on. Note: This opt-out feature only works on your desktop browser and not on a mobile device.
Small graphic images or other web programming code called "web beacons" "clear GIFs" or "1x1 pixels" may be used on the Platforms or in our emails and may be invisible to you. Web beacons may be connected to your Personal Information, if you have provided it. Web beacons may be used for a various purposes, such as counting visitors to the Platforms, monitoring how users navigate the Platforms, counting how many emails that were sent were actually opened, or counting how many times a link was accessed. We do not sell, rent, trade, or otherwise distribute information about you gathered through the web beacons or 1x1 pixels with any third parties, except for third parties who provide us with advertising, marketing, research, or analysis services.
Additionally, the Platforms may use GPS (global positioning systems) software and other location-based technologies such as "iBeacons" to locate you so we may verify your location, deliver you relevant content based on your location, as well as allow you to share your location to other users as part of the services we provide via the Platform. We may determine your approximate and/or exact location information to provide location-based services. In addition to traditional GPS location-based services, some of the retailers and others we work with may install other types of location-tracking technology. These technologies emit a signal that we can use to detect to pinpoint your proximity to those locations (such as how close you are to retail locations and products) or otherwise interact with the Platform (such as to send you helpful information, offers, and discounts).
An embedded script is programming code that is designed to collect information about your interactions with the Platforms, such as the links you click on. The code is temporarily downloaded onto your Device from our web server or a third party service provider, is active only while you are connected to the Platforms, and is deactivated or deleted thereafter.
The Platform does not currently support recognition of Do Not Track signals sent by a browser.
The Platforms may permit you to provide Personal Information about third parties, such as mailing address, email addresses, or significant dates (such as birthdays or anniversaries), and may permit you to do so through the use of Social Features or a Contact Importer. If you use the Platforms to send an ecard, paper card, gift card, or any other content, we collect certain Personal Information about the recipient (such as name, mailing address, and email address, as applicable). We may share the information regarding your transaction with third parties as necessary to process your transaction (i.e., to create, send or deliver the card). If you choose to provide Recipient Data we will store that information only in connection with your relationship with us (e.g., to send greeting cards).
We may receive information about you from third parties. For example, if you are on another website and you opt-in to receive information from AG, the other website will forward your contact and other information to us so that we may contact you as requested. Further, we may receive certain information about you from third parties if you engage the third parties in connection with our Platforms – for example, if you download one of our Apps from an app store, make an in-app purchase, connect via Social Features, or make a payment using a third-party payment provider like PayPal, consistent with the privacy policies of the applicable third parties.
We also may supplement the information we collect with outside records from third parties in order to provide you with information, services or goods you have requested, to enhance our ability to serve you, and to tailor our content to you. We may combine the information we receive from those other sources with information we collect through the Platforms. In those cases, we will apply this Privacy Notice to the combined information.
We may use information about you, including Personal Information and Usage Information, to: (1) allow you to use the Platforms or to provide related customer service; (2) provide or offer you information, products, or services, any of which may be tailored to you; (3) send or display special offers or advertisements from AG Companies (as hereinafter defined) and our business partners; (4) process your registration, including verifying that information you provide is active and valid; (5) process a transaction you initiate; (6) improve the Platforms and our products, and for internal business purposes, including the measurement of the Platforms' effectiveness; (7) contact you with regard to your use of the Platforms and, in our discretion, changes to our policies; (8) to identify and protect against fraudulent activities, transactions, and abuse of the Platforms, and to protect the rights and property of AG, its partners, and customers; and (9) as otherwise described in this Privacy Notice, for purposes disclosed at the time you provide your information, or with your consent.
Some of our Apps may request your location information (whether GPS or network-based). We may use the location information for a variety of purposes, including notifying you of stores or products near you. Unless otherwise stated, this location information is not tied to your Personal Information; and you may be able to prevent the collection of your location through your device settings.
If you contact us for customer support regarding the Platforms, we will not use the information you provide to contact you for marketing purposes unrelated to your request unless you agree otherwise.
We do not share your Personal Information with third parties for their marketing purposes without your specific consent. However, we may share non-Personal Information, such as aggregate user statistics, demographic information and Usage Information with third parties.
Third parties may also collect non-Personal Information when you download or use the Platforms. We may share your Personal Information with third parties with your consent, as disclosed at the time you provide us with information, or as described below in this Section III or elsewhere in this Privacy Notice.
We may share Personal Information with our service providers who perform services for us or on our behalf; and in some instances, our service providers may collect information from you directly. Such services may include, for example, hosting or maintaining the Platforms, providing customer support, monitoring the Platform, sending email or other electronic communications, sending paper cards or gift cards, providing marketing assistance, processing payments, and providing analytics services. We do not authorize these service providers to use or disclose the information they obtain from us for any purpose other than the purposes for which they obtained the information or to comply with legal requirements.
We may offer the opportunity to receive information or marketing offers from one or more third parties, or to otherwise have your information shared with a third party. We may also offer you the opportunity to order products and services from a third party directly through the Platforms or in communications you may receive from AG; and in this case, we will disclose that a third party will be fulfilling your order. If you agree to have us share your Personal Information and we do so, your Personal Information will be subject to the privacy practices of that third party. Please note that we are not responsible for the privacy policies and practices of third parties. If you later decide that you no longer wish to receive communications from a third party, you must contact that third party directly.
We may sponsor contests, sweepstakes or other promotions (any, a "Promotion", and collectively, "Promotions"). If you choose to participate in a Promotion, you may be required to provide certain Personal Information. By participating in a Promotion, you agree to the official rules that govern that Promotion. The official rules may contain specific requirements of you, including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing associated with the Promotion. If you choose to enter a Promotion, your Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion's official rules, such as on a winners list.
AG Companies are the parents, subsidiaries and affiliates of American Greetings Corporation. We may share your information, including Personal Information, with AG Companies for a variety of purposes, such as to conduct Promotions, offer special premiums, and for business and operational purposes (such as sharing databases and IT equipment). We may, and reserve the right to, share your information with any other company that is not presently, but becomes one of the AG Companies. AG will facilitate payments through third party partners, but we will not share your credit card information or other payment information with anyone, including AG Companies, without your express, specific permission.
We may also disclose and transfer your Personal and Usage Information: (i) to a subsequent owner, co-owner or operator of a Platform or applicable database; (ii) if AG (or any of its affiliated, parent, or subsidiary companies) assigns its rights regarding any of your information to a third party; or (iii) in connection with a corporate merger, consolidation, liquidation, restructuring, the sale of certain of AG's ownership interests, assets, or both, or other company change, including during the course of any due diligence process (collectively, a "Business Transition"). If we disclose and transfer your Personal Information in connection with a Business Transition, we will place a prominent notice of the Business Transition on the homepages of the Site and within the App if you have activated this feature on your Device, with links to information about how you can change your privacy preferences.
We may disclose your information, including Personal Information and Usage Information, to third parties (i) if we are required to respond to subpoenas or other legal process or if in our opinion such disclosure is required by law; (ii) at the request of governmental authorities conducting an investigation; (iii) to protect and/or defend the Platforms or any of the AG Companies' rights and property, or to enforce the Terms of Service or other policies applicable to the Platforms; or (iv) to respond to an emergency or otherwise protect the personal safety, rights, property or security of any of the AG Companies or any third party. We may also use Device Identifiers, including IP addresses, to identify users, and may do so in cooperation with copyright owners, Internet service providers, wireless service providers, or law enforcement agencies in our discretion. These transfers and disclosures may be carried out without notice to you.
We work with certain third parties (including network advertisers, ad agencies, and analytics companies) for a variety of purposes. These purposes include providing us with information regarding traffic and use of the Platforms and our advertisements on the Platforms and across the Internet, and to engage in multi-site advertising. For example, if you click on an advertisement that led you to one of our Platforms, our service provider(s) may be able to tell us which advertisement you clicked on and where you were viewing the advertisement; or, you may be served AG advertisements elsewhere online based on your visit to or use of the Platforms. Some of these third parties may collect Personal Information when you visit the Platforms or other websites or online services. Additionally, we may share certain information derived from your Personal Information with third parties to assist us in delivering content or advertising to you, both on the Platforms and elsewhere online.
These third parties may set and access their own tracking technologies (including cookies, web beacons, and embedded scripts) and may otherwise collect or have access to your Device Identifier, Usage Information and related information about you. These service providers may use that information for their own purposes, including to target advertisements to you, prevent you from seeing the same advertisements too many times and to conduct research regarding the usefulness of certain advertisements to you. We may share the Device Identifier and Usage Information about visitors with third party advertising companies, analytics providers and other vendors for similar purposes.
AG does not control the information collection, use, or sharing practices of third party analytics providers or advertisers. Some of these parties may collect your Personal Information when you access the Platforms or other online websites and services.
While we may use a variety of service providers to perform advertising and analytics services, some of these companies may be members of the Network Advertising Initiative ("NAI") or the Digital Advertising Alliance ("DAA") Self-Regulatory Program for Online Behavioral Advertising. You may want to visit here, which provides information regarding targeted advertising and the "opt-out" procedures of NAI members. You may also want to visit or here, which provides information regarding targeted advertising and offers an "opt-out" by participating companies in the DAA Self-Regulatory Program.
Certain content found on the Platforms may be hosted and served by third parties. The Platforms may also contain links to third party websites or apps that we do not control. This includes links from advertisers, reward programs, sponsors and partners associated with the Platforms. These links may use AG's logo or the logo of one of the AG Companies as part of a co-branding agreement (e.g., a third party may be selling or providing AG products or services). In addition, AG content may be included on web pages and websites that are not associated with us and over which we have no control.
These third parties may collect Usage Information through the use of their own cookies, web beacons, or embedded scripts, and they may also independently collect data or solicit Personal Information. AG is not responsible for the privacy practices employed by any third party.
The Platforms may provide you the opportunity to participate and post content publicly through interactive features and through other communication functionality ("Community Forums"). You may choose, through such features or otherwise, to submit or post photographs (which may include metadata), videos, questions, comments, suggestions or other content (collectively, "User Content"). Please note that certain information, such as your name and other Personal Information, may be publicly displayed on the Platforms along with your User Content.
Anything you post to a Community Forum is public -- others will have access to your User Content and may use it or share it with third parties. Information or other content you choose to post or make available in the Community Forums may be viewed, collected and used by others. If you choose to voluntarily disclose Personal Information, that information will be considered public information and this Privacy Notice will not apply to such information. If you submit User Content, it may be published online or offline at any time. In addition, we may use your User Content and any excerpt from your User Content in connection with our advertising, marketing, publicity and promotional activities.
Certain functions on the Website may permit interactions between the Website and a third -party website or interactive service ("Social Features"). If you choose to use Social Features (e.g., the "like button", "share this card on Facebook"), certain information, which may include your Personal Information, may be publicly displayed, and the third -party website or interactive service used in connection with the Social Features (and its users) may have access to information about you and your use of the Website.
The Platforms may also allow you to import information about yourself or third parties from a third-party website or interactive service. For example, the Platforms may allow you to provide your login information to your email account so that the Platforms may import your contacts or list of persons with whom you have communicated. By providing the login information in your account in any such situation, you are consenting to AG, or a party on behalf of AG, importing your contacts or list of persons with whom you have communicated for using with the Platforms. Unless you consent, we will not store the password you provide if you import your contacts from a third-party source.
We may post customer testimonials on our Platforms, which may contain User Content or Personal Information. We do obtain your consent to post your name along with your testimonial via email prior to posting the testimonial on our Platforms. However, if you wish to request the removal of your testimonial, please contact us at here.
We will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Details of retention periods for different types of your Personal Information are available in our retention policy which you can request from us by contacting us.
In some circumstances you can ask us to delete your data by following the Request erasure right as outlined in Section VII.
In some circumstances we may anonymize your Personal Information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Depending on where you reside, you may have the following rights under data protection laws in relation to your Personal Information, including:
If you wish to exercise any of the rights set out above, please contact us.
You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to enable us to deal with your request or to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or we have received a number of requests. In this case, we will notify you and keep you updated.
AG may provide functionality on some Platforms to update your contact information and/or preferences through a "My Account" (or similar) section. If you submit a request to update your contact information, AG will make good faith efforts to make requested changes in our then active databases as soon as reasonably practicable. Note, however, that information may persist internally for AG's administrative purposes and that residual data may remain on backup media or for other reasons. Please also note that if you are the user of one of our Apps, you may be able to review and update your Personal Information or preferences only through the website associated with that App.
You may opt out of receiving marketing e-mails from us by following the opt-out instructions provided to you in those e-mails. Please note that we reserve the right to send you certain communications relating to your use of the Platforms and these transactional messages may be unaffected if you opt-out from marketing communications.
To opt-out of receiving direct mail, you may contact us through Customer Support at here.
Note: Because mailings often are prepared well in advance you may, for a period of time, continue to receive some offers after you send us your request.
In this section regarding Privacy Shield compliance, AG only refers to those AG entities listed on AG's Privacy Shield certification.
In compliance with the EU-US Privacy Shield Principles, AG commits to resolve complaints about its compliance about your privacy and our collection or use of Personal Information. European Union Individuals with inquiring or complaints regarding this privacy should first contact AG. AG will respond to all such inquires and complaints within 45 days of receiving them.
AG has further committed to surrender unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgement of your complaint, or if your complaint is not satisfactorily addressed, please visit here for more information and to file a complaint. If neither AG nor the Council of Better Business Bureaus resolves your complaint, you may have the possibility to engage in binding arbitration before a Privacy Shield Panel.
AG maintains contracts with third parties that process Personal Information within the scope of the Privacy Shield. The contracts restrict their access, use, and disclosure of Personal Information in compliance with AG's Privacy Shield obligations. AG may be liable for damages if such third parties fail to comply with their contractual obligations.
AG is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
AG may be required to disclose Personal Information in response to lawful requests by public authorities, including meeting national security or law enforcement requirements
AG acknowledges that EU individuals have the right to access the personal information/data that we maintain about them. Subject to certain exceptions, upon requests and provided you provide us sufficient information to confirm your identity, AG will provide you with the Personal Information that AG has collected about you for the purpose of enabling you to correct, amend, or delete any inaccuracies. You may make this request by contacting us. If AG is not able to provide the information that you are requesting within 30 days of receipt of your request, AG will provide you a timeline for providing the requested information. If AG denies access to your Personal Information, AG will explain why access was denied and give you contact information for further inquiries regarding the denial of access.
AG will not process Personal Information about EU individuals maintained in reliance on the Privacy Shield for purposes other than those for which the information was originally obtained or subsequently authorized by the EU individual, unless the individual affirmatively and explicitly consents to the processing, or unless an exception applies. Those EU individuals may contact AG at any time to withdraw consent, in which case the person's Personal Information will not be further processed. EU individuals may also contact AG to opt out of AG sharing Personal Information with most third parties, excluding those necessary for AG processing, as required by law, or as necessary to protect the AG Companies and its users.
The Platforms are not intended for children, and AG does not knowingly collect information from persons younger than the age of thirteen (13). We would ask parents please to ensure that their children under the age of 13 do not provide us with personal information without your permission. If we learn that we have inadvertently collected information from a person younger than the age of 13, we will take commercially reasonable efforts to delete that information from our databases.
We have put in place appropriate security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Information to those employees, agents, contractors and other third parties who have a business need to know. Processors we appoint will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.
You should be aware, however, that transmission of information via the internet is not completely secure.
We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We may change this Privacy Notice at any time without notice to you. We may also provide notice to you in other ways in our discretion, such as through contact information you have provided. Any changes will be effective immediately upon the posting of the revised Privacy Notice. However, unless you consent, we will not use your Personal Information in a manner materially different than what was stated in our posted Privacy Notice at the time your Personal Information was collected.
As always, if you have any questions, please feel free to contact us through our Customer Support or via our Legal Department at firstname.lastname@example.org.
It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us.
Please be aware that information we collect through the Platforms may be transferred to and processed in the United States, where the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen. For residents or citizens of the European Economic Area ("EEA"), whenever we transfer your Personal Information, we look to ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
By using the Platforms or providing us with any information, you acknowledge and consent to the transfer, processing and storage of your information in the United States, or such other countries as AG may choose in its sole discretion.
We do not share personal information as defined by California Civil Code section 1798.83 ("Shine the Light Law") with third parties for their direct marketing purposes absent obtaining your specific consent. If you are a California resident and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please send your request to the following email address: email@example.com or write to us at the following mailing address: American Greetings Corporation, One American Boulevard, Westlake, OH 44145.
You must put the statement "Your California Privacy Rights" in the subject field of your e-mail or include it in your writing if you choose to write to us at the designated mailing address. You must include your name, street address, city, state, and zip code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.
If you are a California resident under the age of 18, and a registered user of any Platform, California Business and Professions Code Section 22581 permits you to request and obtain removal of content that you have publicly posted. To make such a request, please send an e-mail with a detailed description of the specific content to firstname.lastname@example.org. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information that you have posted and there may be circumstances in which the law does not require or allow removal even if requested.
If you have any questions, comments, or complaints about your privacy and our collection or processing of your personal information, please contact us as follows:
American Greetings Corporation
c/o AG Interactive, Inc.
800-711-4474 (between 9am and 5pm Eastern)
Frequently Asked Questions
AG has appointed its UK subsidiary, UK Greetings, Ltd. (Company Registration Number 3480710, VAT registration number 168966988) as its EU Representative. If you are located in the EU, and have any questions, comments, or complaints relating to our processing of your Personal Information, this Privacy Notice, or our Cookies Policy, please contact us through our EU Representative.
By email GDPR.Enquiry@ukgreetings.co.uk