Effective as of March 2, 2021
Bookelicious LLC (“Bookelicious”, “we”, “us”, or “our”) owns and operates a website, bookelicious.com, which provides personalized book recommendations, using our curated collection of books integrated with our gamified, AI-driven recommendation engine, and offers books for purchase.
Note about Children: As required by applicable law and our Terms of Service, children under the age of 13 in the U.S. (and a higher age if required by the applicable law in another country) may only use our Services with the express prior consent of a parent or legal guardian or through an agreement with a school representative. More information about our practices regarding children’s data is below at “How does Bookelicious protect children’s information?”
1. What is this policy?
Information Sharing: Remember that if you create a Profile (as defined below) or share Personal Information with other users on the Services, your information may be visible to others. Note that we do not share your Personal Information with third parties for their marketing purposes; however, we may share your Personal Information under certain limited circumstances. For more details, please review the section below entitled “Will Bookelicious share any of the information it collects?”
Third parties: We work with third parties who provide us with certain services such as address validation, shipping cost calculations, payment processing, cloud hosting services, analytics providers, assessment providers, and who otherwise allow us to provide and improve the Services.
2. What information does Bookelicious collect?
Information Shared With Us
1. Registration and Other Information You Provide
The Services may collect “Personal Information” (which is information that can reasonably be used alone or in combination with other reasonably available information, to identify or contact a specific individual). Personal Information includes, but is not limited to, user (including child and parent/guardian) data, metadata, and user content. This may include a name, e-mail address, physical address, password, or usage information. Any information combined with Personal Information will be treated as Personal Information.
2. Your Account
Parent/Guardian/Educator User Account: The following information is collected about the adult account user:
- First Name
- Last Name
- E-mail Address
- User Name
- School (optional for parents/guardians)
- Payment Information (Note that Bookelicious does not store such information within our systems or network. Such information is stored directly with a third party or, if given directly, deleted immediately afterward.)
- First Name
- Last Name
- Username (cannot contain First Name or Last Name)
- Grade Level (optional)
- School (optional)
- Educator Name (optional)
- Birthday (MM/DD) (optional)
- Book “wish list” (optional)
- Bookmoji features (discussed in more detail below)
3. Third Party Services and Information Third Parties Provide About You
The Services may permit interactions between the Services and a third-party feature or service. These third parties may provide us with information about you. Similarly, if you publicly post information on a third-party platform, such as a social media site that references Bookelicious or one of the Services, your post may be published on our Services in accordance with that third party’s terms. These features may collect your IP address or other unique identifier and which page you are visiting on our website, and may also set a cookie to enable the third-party feature to function properly. When you use a third-party feature through the Services, the third party may also have access to information about you and your use of our Services. Your interactions with third-party links and features are governed by the privacy policies of the third parties.
Information We Collect Automatically
Like other websites and online services, we and our analytics providers, vendors and other third-party service providers may automatically collect certain “Usage Information” whenever you access and use the Services. Usage Information may include: the browser and operating system you are using, the URL that referred you to our Services (if applicable), the search terms you entered into a search engine that lead you to our Services (if applicable), all of the areas within our Services that you visit, the time of day you used the Services, and other information. We may use Usage Information for a variety of purposes, including to select appropriate content to display to you and to enhance or otherwise improve the Services and our products.
In addition, we automatically collect your IP address or other unique identifier (“Device Identifier”) for any computer, mobile phone or other device (any, a “Device”) you may use to access the Services. A Device Identifier is a number automatically assigned to the Device used to access a Service, and our servers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access a Service, internet service provider (ISP), date and time of visit, browser language, browser type, referring and exit pages and URLs, amount of time spent on particular pages, which parts of our Services you use, which links you click, search terms, operating system, traffic and related statistics, keywords, and/or other general browsing or usage data. Usage Information is generally non-identifying, but if we associate it with you as a specific and identifiable person, we treat it as Personal Information.
Usage Information is collected via tracking technologies.
Like many other websites and apps, we use “cookies” (a small file sent to your computer by a website or device to allow the website or app to store information which uniquely identifies you) or other similar software to collect data in order to assist our users and provide them with a more personal experience in our Website or apps. For example, cookies help our systems recognize you if you return to our Services shortly after exiting them. You can always disable cookies at your browser or device’s settings, but please note that if you do so, some (or all) of the features and functionality of our Services may not be available to you.
How We Respond to Do Not Track Signals:
Please note that your browser setting may allow you to automatically transmit a “Do Not Track” (DNT) signal to websites and online service you visit. DNT is a privacy preference that users can set in certain web browsers to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. However, we do not recognize or respond to browser-initiated DNT signals, as the internet industry is still working to determine what DNT means, how to comply with DNT, and how to create a common approach to responding to DNT. To find out more about “Do Not Track”, please visit http://www.allaboutdnt.com.
3. How does Bookelicious use the information it collects?
We may use information about you (including Personal Information, the information you provide in your Profile, User Content, and Usage Information) for the following purposes:
1. To provide the Services. We use your personal information to: verify your registration, allow you to participate in features we offer, and contact you regarding the Services.
2. To operate the websites. Your personal information may be used to tailor content, recommendations and offers we display to you, both on the Services and elsewhere online, as well as to maintain or improve our Services.
3. To send marketing communications and provide book recommendations. We may send marketing communications to parents/guardians/educators. We never send marketing communications to students. Anyone who receives these communications may unsubscribe at any time by clicking on the unsubscribe link in any e-mail or respond “STOP” to any text message. Children under the age of 18 are prohibited from signing up for marketing communications and will be unsubscribed if we become aware of a child under the age of 18 signing up to receive these communications. Children will not receive any marketing on their accounts; however, we will provide notifications to children regarding potential books of interest if their parent/guardian opts-in to such notifications.
4. To create anonymous data for analytics. We may make information anonymous (by excluding information that makes it personally identifiable to you), then use that anonymous data for our lawful business purposes.
5. For compliance, fraud prevention, and safety. We use your Personal Information as we believe is necessary or appropriate to (a) enforce our terms and conditions; (b) protect our (and your) rights, privacy, safety or property; and (c) protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.
6. To comply with law. We use your Personal Information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process (such as to respond to subpoenas or requests from government authorities).
7. With your consent. In some cases, we may ask for your consent to collect, use, or share your personal information, such as when required by law or agreements with third parties.
Please note that information submitted on the Services via a “Contact Us” or other similar function may not receive a response. We will not use the information provided via these functions to contact you for marketing purposes unrelated to your request unless you agree otherwise.
4. Will Bookelicious share any of the information it collects?
Bookelicious does not share your Personal Information with third parties for their marketing purposes. Bookelicious may share non-Personal Information (such as aggregate or de-identified user statistics, demographic information and Usage Information) with third parties.
1. Service Providers
We will share your Personal Information with third parties to provide services to us or you in connection with the Services. These disclosures will be subject to confidentiality obligations that limit their use and disclosure. For example, we may provide your Personal Information to companies that provide services to help us with our business activities, send our e-mails, or offer customer service. Consumer payments are primarily processed and stored via third party services and we only receive the last four digits of the credit card number used for such transaction. If credit card information is provided directly to us, we will only retain such information for as long as is necessary for our legitimate business purposes.
2. Administrative, Legal Reasons & Academic Integrity Investigations
We may also disclose your information, including Personal Information as follows: (i) in response to a subpoena, court order, or when otherwise required by law; (ii) in response to bankruptcy proceedings; (iii) to defend our rights; (iv) in response to a request from law enforcement; (v) to provide information to a claimed owner of intellectual property who claims that content you have provided to us infringes on their rights; (vi) upon request of or as otherwise authorized by an academic institution connected to an investigation into academic integrity; (vii) to protect and/or defend any applicable Terms of Service or other policies applicable to the Services; or (viii) to protect the personal safety, rights, property or security of any organization or individual.
We may also use Device Identifiers (including IP addresses) to identify users and may do so in cooperation with copyright owners, Internet service providers, wireless service providers or law enforcement agencies in our discretion. These disclosures may be carried out without your consent or without notice to you.
3. Business Transitions
We may display personal testimonials of satisfied users or other endorsements on our Services. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us.
5. How does Bookelicious work with third parties?
Bookelicious does not currently use any user data to target advertisements or marketing on behalf of third parties. We do not mine user data for any purposes other than those agreed to by the parties. Data mining or scanning of user content for the purpose of advertising or marketing to children or their parents is prohibited.
We work with third-party providers to provide us with services such as payment processing and to provide us with information regarding traffic on the Services, the features used when visiting the Services, and other information regarding the use of the Services.
Third-Party Content, Links to Other Sites, and Bookelicious Content Found Outside of the Services
Certain content provided through the Services may be hosted and served by third parties. In addition, the Services may link to third party websites or content over which Bookelicious has no control and which are governed by the privacy policies and business practices of those third parties.
Please also note that Bookelicious content may be included on web pages and websites that are not associated with us and over which we have no control. These third parties may independently collect data. Bookelicious is not responsible or liable for the privacy practices or business practices of any third party.
For more information about data we receive from third parties, please refer to “Third Party Services, Social Media Platforms, and Information Third Parties Provide About You” above.
6. What happens if I access Bookelicious’ services through a mobile device?
If you use the Services through a mobile device, you agree that Bookelicious may store and use certain information for security purposes (for example, for user verification or authentication).
7. How does Bookelicious protect children’s information?
Protecting the privacy of young children is especially important to Bookelicious. For this reason, we created certain features designed to help protect Personal Information relating to children who are less than 13 years of age or older if required by applicable law (“Child Users”). Note that Bookelicious uses an age screen designed to prevent any individual under the age of 18 from creating an Educator or Parent Account.
Bookelicious does not knowingly permit children under 13 to use our Services without prior, express consent from a parent or legal guardian, except as permitted under the Children’s Online Privacy Protection Rule (COPPA). If we learn that Personal Information of a child under 13 has been improperly collected on our Services without prior parental consent, we will take appropriate steps to delete this information. If you are a parent or guardian (“Parent”) and discover that your child under the age of 13 (or a higher age if required by applicable law) has a registered account with our Services without your consent or your child’s Educator’s consent, please contact Bookelicious to request that we delete that child’s personal information from our systems.
What is required when a child uses the account in School?
How does a Parent consent to their child’s use of the Services?
How does a child use the Services?
Child Users can access our online Services through an account created by their Parent. Child Users have the ability to create a book “wish list” or to develop a “Bookmoji” based on their interests that could be used to generate book recommendations as well as to create a reading log including information about a child’s reading activities. Children are not able to purchase books through their use of the services except through a gift card or subscription purchased by their Parent.
What children’s information is visible to others?
No child’s information is made available or visible to the public through Bookelicious. Parents may view their children’s information at any time by logging into their account. Educators may also view information related to Child Accounts (student accounts) created through their Educator account.
8. How does Bookelicious protect and store my information?
Bookelicious takes data security very seriously. Bookelicious takes commercially reasonable technical, physical, and administrative security measures designed to protect the Personal Information submitted to us, both during transmission, upon receipt, and at rest. These measures vary depending on the sensitivity of the information at issue and include the following:
- We store your information in a database that is regularly backed up.
- Only users (or for a Child User, their Parent/Guardian or Educator) can access and retrieve their own information.
- We periodically review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems.
- We continually develop and implement features to keep your personal information safe – for example, all traffic to and from our application is over secure, encrypted protocols (SSL/TLS).
- We ensure passwords are stored securely using encryption and salted one-way hashing.
- Administrators are knowledgeable of security practices and harden the infrastructure with necessary patches.
- Our technical infrastructure is designed to prevent unauthorized access to protected information at multiple points in every transaction.
Please note that no method of transmission over the Internet, or method of electronic storage, is completely secure. Therefore, while we strive to use commercially reasonable means to protect your Personal Information, we cannot guarantee its absolute security.
How will Bookelicious handle a data breach or security incident?
In the event that Bookelicious becomes aware of a data breach impacting your Personal Information, we will provide notification in compliance with all applicable laws. For example, we may post a notice on our homepage or elsewhere on the Service and may e-mail you at the e-mail address you have provided to us. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
Bookelicious has procedures in place that are designed to stop threats to your personally identifiable information, to restore Services to full functionality, and to document and take proactive steps to ensure that any incident cannot be repeated. Bookelicious will also preserve necessary evidence for investigation by security professionals and law enforcement as appropriate. In the unlikely event of an unauthorized disclosure of records, Bookelicious will follow its internal procedures, which articulate how to report the problem to internal and external stakeholders. The notification process includes any information that can identify which customers and children may have been impacted, the data that may have been accessed, Bookelicious’ process to inform affected customers, and steps to prevent the incident from happening again as appropriate.
In the unlikely event of an unauthorized disclosure of Data, Bookelicious will follow an appropriate process for responding to incidents and notifying affected individuals (and, if applicable, law enforcement personnel.)
If you have any questions about security on our Services, you can contact us at: email@example.com.
9. How can I opt-out of sharing, providing, or receiving certain information?
Providing Personal Information: You can always decline to share personal information with us, or even block all cookies. However, it’s important to remember that many of Bookelicious’ features may not be accessible, or may not function properly (for example, we may not be able to remember your language preferences for you) without this functionality.
E-mail Communication: You can opt-out of receiving further communications by clicking the unsubscribe button at the bottom of any e-mail from us. Bookelicious may continue to send you Service-related e-mails as we believe necessary to provide the Services. Bookelicious will never knowingly e-mail children.
10. How can I access and manage my Personal Information?
You may be able to review the information you provided to us on a Service and make any desired changes to the information, or to the settings for your account on that Service, by logging in to your account for that Service and editing or deleting the information. Note that certain accounts may have limitations regarding the ability to delete information. Even after information is deleted, we may maintain it in backup or archive form unless (i) you request permanent deletion or (ii) the account is terminated.
11. What communications will I receive from Bookelicious and how do I limit them?
Bookelicious may post notices on the homepage of our website, bookelicious.com, and/or may send users information by e-mail. You may choose to stop receiving certain e-mails from Bookelicious by using the unsubscribe button at the bottom of the Bookelicious e-mail. However, we reserve the right to send you information on our behalf and on behalf of third parties in connection with providing the Services. If you no longer want to receive information from us, you will need to close your account for that Service.
12. How do I close my account?
If you have an account and you wish to close your account with one of our Services, please contact us, and we will remove your Personal Information and Profile, if applicable, from the active databases for the Service(s) you request. Please let us know which Service(s) you wish to close and, if applicable, send your request using an e-mail account that you have registered with Bookelicious under your name. You typically will receive a response to a request sent to this account within five business days of our receiving it.
13. How long does Bookelicious keep my information?
Upon termination of your Account, Bookelicious will take commercially reasonable steps to delete any Personal Information, excluding information relating to messages you sent to active users, from our live databases in a reasonable amount of time. You further agree that Bookelicious has no obligation to delete aggregated or de-identified information. Bookelicious may retain and use aggregated and de-identified information (including information contained in a review) for any purpose consistent with laws and regulations.
14. How will Bookelicious notify me of changes to this policy?
15. What if I am a resident of California?
If you are a resident of the state of California, you have certain data protection rights. Bookelicious aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. This section describes how we collect, use and share Personal Information of California residents in operating our business, and their rights with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the California Consumer Privacy Act of 2018 (“CCPA”) but does not include information exempted from the scope of the CCPA.
In certain circumstances, you have the following data protection rights:
- Information. You can request the following information about how we have collected and used your or your child’s Personal Information during the past 12 months:
- The categories of Personal Information that we have collected.
- The categories of sources from which we collected Personal Information.
- The business or commercial purpose for collecting and/or selling Personal Information.
- The categories of third parties with whom we share Personal Information.
- Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information received by each category of third-party recipient.
- Whether we’ve sold your Personal Information, and if so, the categories of Personal Information received by each category of third-party recipient.
- Access. You can request a copy of the Personal Information that we have collected about you during the past 12 months.
- Deletion. You can ask us to delete the Personal Information that we have collected from you.
- Opt-out of sales. We do not currently sell Personal Information. If we plan to sell your or your child’s Personal Information, you will be notified and you can opt-out. In addition, if you direct us not to sell your Personal Information, we will consider it a request pursuant to California’s “Shine the Light” law to stop sharing your personal information covered by that law with third parties for their direct marketing purposes.
- Opt-in. We do not currently sell Personal Information. If we know that you are younger than 16 years old, we will ask for your permission (or if you are younger than 13 years old, your parent’s or guardian’s permission) to sell your Personal Information before we do so.
- Nondiscrimination. You are entitled to exercise the rights described above free from discrimination in the form of legally prohibited increases in the price or decreases in the quality of our Services.
How to Exercise Your Rights
You may exercise your California privacy rights described above as follows:
- Right to information, access and deletion. You can request to exercise your information, access and deletion rights by:
- emailing firstname.lastname@example.org
- calling us at (650) 419-5515
We reserve the right to confirm your California residence to process your requests and will need to confirm your identity to process your requests to exercise your information, access or deletion rights. As part of this process, government identification may be required. Consistent with California law, you may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government-issued identification, and the authorized agent’s valid government issued identification. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.
Personal information that we collect, use and share
We have not sold your personal information in the preceding 12 months.
|Category of personal information (PI)
|PI we collect
|Source of PI
|Business/ commercial purpose for collection
|Categories of third parties to whom we “disclose” PI for a business purpose
|Categories of third parties to whom we “sell” PI
|Internet or Network Information
|May be derived from your:
|Professional or Employment Information
|Protected Classification Characteristics
|We do not intentionally collect this information but it may be revealed in identity data or other information we collect
16. What if I do not live in the U.S.?
Consent to Transfer
The Services are operated in the United States. If you are located outside of the United States, please be aware that information we collect will be transferred to and processed in the United States. By using the Services, or providing us with any information, you fully understand and unambiguously consent to this transfer, processing and storage of your information in the United States, a jurisdiction in which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen.
Important Information for Users in the European Economic Area
The following information only applies to users in the European Economic Area (EEA), provided that we are the controller of your personal information as described below.
If you use the Services through your employer, school or another organization, that organization is the controller of your personal information and all questions or requests regarding your rights under European data protection legislation (including the rights described under Your rights below) or the processing of your personal information, should be directed to the organization. Bookelicious is the organization’s processor and uses your personal information only as instructed by the organization and to the extent necessary to comply with applicable law.
If you do not use the Services through an organization, Bookelicious is the controller of your personal information and can be reached using the contact details in “How can I contact Bookelicious with questions” section.
Legal bases for processing
We process your personal information on the following legal bases:
|To provide the Services.
|Processing is necessary to perform the contract governing our provision of the Services or to take steps that you request prior to requesting the Services.
|To operate the websites.
To send marketing communications.
To create anonymous data for analytics.
For compliance, fraud prevention, and safety.
|These processing activities constitute our legitimate interests. We consider and balance the potential impact on our rights before we process your personal information for our legitimate interests. We do not use your personal information for activities where your data protection interests override these legitimate interests (unless we have your consent or are otherwise required or permitted to by law).
|To comply with law
|Processing is necessary to comply with our legal obligations.
|With your consent
|Processing is based on your consent. Where we rely on your consent you have the right to withdraw it anytime in the manner indicated at the time consent is requested.
Cross-border data transfer
Whenever we transfer your personal information out of the European Economic Area (“EEA”) to countries not deemed by the European Commission to provide an adequate level of personal information protection, the transfer will be based on safeguards that allow us to conduct the transfer in accordance with the EEA’s data protection laws. Such safeguards may include applying the European Commission model contracts for the transfer of personal data to third countries described here. Please contact us for further information about any such transfers or the specific safeguards applied.
You may ask us to take the following actions in relation to your personal information that we hold:
Access. Provide you with information about our processing of your personal information and give you access to your personal information.
Correct. Update or correct inaccuracies in your personal information.
Delete. Delete your personal information.
Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
Restrict. Restrict the processing of your personal information.
Object. Object to our reliance on our legitimate interests as the legal basis of our processing your personal information, where that processing adversely impacts your legal rights.
You may send us these requests by contacting us at email@example.com. We may request information from you to help us confirm your identity and process your request. Applicable law may require or permit us to reject part or all of your request. If we reject your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator here.
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including to continue providing the Services to active users you sent information to and for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymize your personal information (so that it can no longer be associated with you) in which case we may use this information indefinitely without further notice to you.
17. How can I contact Bookelicious?
Or by mail at:
555 Bryant St., #353
Palo Alto, CA 94301.