PRIVACY POLICY AND COOKIES

Last Updated: February 20, 2025

At BIMBA Y LOLA, we are committed to your Privacy. This Privacy Policy (“Privacy Policy”) outlines how BIMBA Y LOLA USA, CORP., its parent company BIMBA Y LOLA, S.L., and their subsidiaries and affiliates (collectively, “BIMBA Y LOLA,” “Company,” “we,” “us,” or “our”) collect and use your personal information when you access or use our website located at bimbaylola.com, our mobile site, or our mobile (collectively, the “Site”). This Privacy Policy along with other referenced documents, applies to all personal information collected through our Site and any related services, sales, marketing or events. Please note that our website may contain links to other organizations’ websites, such as links to sites for individual BIMBA Y LOLA dealers, distributors, international affiliates, or suppliers. BIMBA Y LOLA is not responsible for the privacy policy or practices of those organizations or the content of such websites.

By making purchases through or otherwise visiting this Site, you agree to the policies and practices outlined in this Privacy Policy. BIMBA Y LOLA reserves the right to modify this notice by posting such changes on this website, with such changes becoming effective immediately unless otherwise specified. This notice applies to all information collected or submitted on the BIMBA Y LOLA website.

If you are a California resident, please refer to the “California Residents’ Rights” section below for details on additional rights you may have.

a. NFORMATION YOU PROVIDE TO US AND PURPOSE OF COLLECTION

We collect personal information directly from you (from completed forms, submitted information, purchased products, or requested services) and indirectly from you (through automated collection of your web browsing activities). This information serves various purposes, as described in more detail below, and was provided to us under the conditions established under this Privacy Policy.

Contact and registration information. There are pages on this site where we request specific information about you. This information is used to register your BIMBA Y LOLA account, process your orders, fulfill your requests for information (such as when you download products), provide customer service, communicate with you about past orders, and keep your knowledge about our products and services current (collectively, “Personal Information”). We may also collect information you provide us with if you enter a contest or promotion, or sign-up to receive newsletters or related services. We may also collect information when you apply for a job opening or otherwise submit employment data to us. The types of Personal Information collected at these pages are:
- Name
- Address
- Email address
- Phone number
- Other contact details

On some pages, we may request that you submit information about other people. For example, if you order a gift online and want it sent directly to the recipient, you will need to submit the recipient’s address. In this circumstance, the types of Personal Information collected about other people are:
- Name
- Address
- Email address
- Phone number

Whenever we need information from you, our policy is to collect and store it to avoid repeated requests. You can choose not to provide certain information, but this may limit your access to some features on this website.

Registration Form. Information you submit on our website will not be used to provide promotional or marketing information unless you agree to this on the registration form. When you register on the site, we provide you with the opportunity to “opt out” of receiving any information, product, service, or other informational emails from BIMBA Y LOLA. If you choose to opt out, we will only answer the email we receive from you and provide necessary status information regarding your orders or your product registration. Such addresses are not used for any other purpose and are not shared with outside parties.

Orders. When placing an order on the Site, you provide necessary information to complete your transaction, verify your identity, ensure compliance with purchase-related regulations, and finalize the order. Other than as expressly stated herein, we do not share this information with external parties except where necessary to fulfill that order. Information provided about someone else during an order is used solely for shipping the product and confirming delivery.

Optional Information Provided Voluntarily. Occasionally, we may invite you to participate in voluntary surveys or provide additional optional information. Your participation in these activities is entirely voluntary and at your discretion. We collect and analyze information voluntarily from surveys or other sources to enhance our service to customers and potential customers, for internal marketing purposes, and for any specific purposes outlined in the information request.

We use non-identifying and aggregate information to improve the design of our website and to share it with advertisers. For example, we might inform an advertiser about the number of visitors to a specific area of our website, or how many men and women completed our registration form, without disclosing any information that could identify those individuals. Additionally, this demographic information helps us in the development and evaluation of new products manufactured by BIMBA Y LOLA.

Geolocation Data. When you use a smart phone, mobile device or computer to access the Site or use our mobile application, we may gather information about your physical location. This data may be combined with other location-based information, such as your IP address and billing or postal code, to offer additional services on your mobile device. We only share your location information with third parties that help us in delivering these services. You have the option to opt out of sharing this information by adjusting the permissions on your mobile device.

Special Categories of Data. Generally, we do not collect or process categories of Personal Information that require a heightened level of protection under data protection legislation in some jurisdictions because it reveals or concerns sensitive information, such as health matters, race, or ethnic origin (“Special Categories of Data”). However, there could be a situation (such as for employment purposes) where we may process such data. In this case, we will be sure to comply with applicable data protection legislation, including relying on the necessary legal grounds to process the data (e.g., processing health data for an insurance contract). We shall use reasonable security practices and procedures to safeguard your Special Categories of Data.

Automatic Collection of Information. Like many websites, our site may periodically utilize a technology called “cookies.” A cookie is a small data file that a web server can deliver to your browser, which is then stored on your computer’s hard drive. Cookies are designed to permit us to provide better or more personalized service when you are visiting our site and can also identify websites visited between visits to our site. You can set your browser to notify you when you receive a cookie, providing you with as much control as you wish as to the decision to accept/reject the cookie, and deletion of the cookie upon leaving our website. Refer to your browser’s Help information for details on setting cookie notification services.

We may also track the Internet domains from which people contact us, and from time-to-time we may gather information concerning the “referring“ domain that a person visited prior to our site, and the “destination“ domain a person visits after leaving our site. Information automatically collected is used to identify and analyze the trends and statistics of visits to our website and to make our website more responsive to the needs and interests of our customers. We may also use the information to support Site features by not asking you to re-enter information we already possess. We also use this information to personalize your experience when you use the Site and to improve marketing efforts, including through the use of targeted advertising. As the Internet evolves, we may use different types of technologies for this purpose. Unless prohibited by law, creating a user identity during a visit to the Site constitutes your consent to processing your Personal Information, and we may link the information your browser provides to information that identifies you personally, as described in this Privacy Policy.

b. INFORMATION FROM THIRD PARTIES

We may gather personal information about you from various sources, including:

Service Providers and Contractors: These entities collect personal information while processing it on our behalf for specific business purposes we determine, either alone or jointly with other data controllers. This includes information you provide to us, as well as data we generate and automatically collect.

Social Media Platforms and Content Distribution Channels: When you interact with social media platform features on our online services or view our content or advertisements on social media platforms (such as login features or tools for sharing our content), we may receive information from these platforms. This includes your username, user ID, demographic details, and other service-related information, based on the settings and privacy practices of the respective social media platform. Furthermore, interactions with our content, products, services, or advertisements on third-party sites, apps, content distribution channels, or other media (such as video-sharing and social networking platforms) may also provide us with information. This can include details about the content you access, demographic data, and your interests.

Other Third Parties: We may receive information from third-party data suppliers (like data aggregators and resellers) who provide us with internet and network activity data, demographic information, and other insights that help us understand you and other users of our online services better.

Third-Party Cookies and Other Similar Technologies. Web technologies may also be placed on the Site by third party providers. Also, we or third-party providers may place web technologies on behalf of the supplier whose branding appears on the Site or its service providers. In this way, our supplier would be allowed to use the data collected. This information is used to enhance your experience with the Site, for marketing analysis, for targeted and display advertising, and for quality improvement. We may collect your IP address through web technologies.

We and our suppliers may use third party service providers in connection with the Site. These and other service providers may collect information about your visits to websites, your interaction with that website, and the products and services offered by us or our suppliers. The following describes our policy regarding the collection of cookies.

When you visit the Site, we will use your Personal Information as follows:

In Connection with Your Order. When you visit the Site to make a purchase, we process your data to complete the transaction and meet our contractual obligations, which includes processing necessary to:
- Ensure security and monitor and prevent fraud;
- Determine the country where you are located for trade compliance;
- Process your order and payment, verify your tax status, contest chargebacks, determine your eligibility for a line of credit or to send you transactional notifications;
- Provide you with a personalized shopping experience;
- Register your purchase for warranty, technical support or similar purposes;
- Provide you with keys, access codes or other information necessary to access your purchased products and services;
- Where you have consented, establish an account for future purchases;
- Facilitate the renewal of subscriptions for subscription products or services; and
- Provide you with effective experience and support. As allowable by law, this may include contacting you if you start a checkout process to follow-up on the incomplete session or to see if there was a problem with your use of the Site.

There may be occasions when we need to share your information with our affiliates, providers, contractors, suppliers, or distributors to fulfill orders for products and services you have requested, or to process transactions and related information. Prior to sharing, we ensure that these organizations commit to maintaining the same level of protection for your information as outlined in this Privacy Policy. We do not knowingly disclose your name, address, or other information provided outside of the BIMBA Y LOLA group of subsidiaries and affiliates, nor we disclose that you have submitted information to us, unless we obtain your permission beforehand, notify you in advance, or we are legally obligated to do so by law or government order.

Use of Anonymous Information. We may use information that has been anonymized to the extent that it no longer identifies an individual and cannot be combined with other information to re-identify an individual (“Anonymous Information”). This process ensures that all elements of Personal Information, such as name, street address, phone number, and email address, are anonymized in compliance with applicable laws.
We may use the Anonymous Information for the following purposes:
- Conducting fraud prevention activities;
- Personalizing and supporting your use of the Site and/or the services provided by our supplier;
- Improving the Site, the customer experience, our advertising systems, and our products and services;
- Identifying transactions originating from an affiliate marketing or referral programs;
- Delivering targeted advertisements on the Site and other commerce platforms;
- Providing reporting to our current and prospective suppliers and service providers; and
- Conducting other historical or statistical research and analysis.

We may also use de-identified data (where specific identifiers are removed to prevent direct identification for the same purposes as outlined in this section, as well as for related purposes, as allowed by applicable law.

Other Uses of Your Personal Information. We may also use your Personal Information:
- to verify the accuracy of the data we hold about you;
- to contact you as per your communication requests;
- for human resources purpose, such as collecting your email address if you are applying for a position online.
- managing our customer service telephone service, which may involve recording conversations to handle inquires and requests and ensure service quality. Similarly, for managing customer care via online chat and WhatsApp, owned by Meta Platforms, Inc.

Information about our customers is crucial to our business, and we do not engage in selling it to others. However, we may disclose your Personal Information and other relevant details as necessary to operate our business. Specifically:

Service Providers. We engage other companies, including our corporate affiliates, service providers, and other processors to perform specific services for us or on our behalf. These services are conducted under our instructions and in compliance with stringent confidentiality and security measures. Our service providers operate globally and may include:
- Providing fraud monitoring or detection services;
- Hosting or maintaining the site;
- Conducting data integrity checks;
- Offering optimization services;
- Processing credit card payments;
- Collecting payments;
- Fulfilling your order;
- Delivering advertisements on the site and third-party websites;
- Sending mail or e-mail;
- Providing employment and human resources related services; and/or
- Providing customer service.

We do not share your Personal Information with our service providers unless it is necessary for our legitimate interests or for fulfilling our obligations to you. These service providers may be contractually required to use any shared information solely to perform services for us or on our behalf, and to maintain the confidentiality of your Personal Information. Additionally, we may allow these companies to use Anonymous Information for their own business purposes. We do not share your Personal Information with our affiliates or unrelated third parties to use for their own marketing purposes without your consent.

Suppliers. We may provide certain Personal Information, Anonymous Information or de-identified data to our suppliers to fulfill our obligations to you and to support our operations as outlined in the “Use of Information” section, including:
- Reporting purposes;
- Order fulfillments;
- Registration of your purchases by our supplier or its service provider;
- Facilitating access to products or services provided by our supplier or its suppliers;
- Assisting with warranty, technical support, or after-sales service;
- Providing customer service;
- Enabling our supplier or its service provider to offer services related the site (such as customer support or single sign-on functionality);
- Sending communications if you have consented to receive them.
- Other necessary purposes to fulfill our obligations to you.

Business Transactions. In the event of a merger, are acquired, enter into bankruptcy, or sell a major part of our assets, your information may be among the assets transferred. We strive to notify (i) the new owner about the restrictions placed on your information, and (ii) you about the sale to the extent feasible.

Legal Requirements. If necessary, we may disclose specific information without your consent and without notice as required to comply with applicable laws and regulations, court orders, subpoenas, or lawful discovery requests. Information collected from you may also be used to investigate security breaches or cooperate with legal authorities.

Protective Measures. We may disclose information about you without your consent and without prior notice to you to enforce the Terms and Conditions, or other agreements, including for billing and collection purposes. We may disclose your Personal Information if we believe it is essential to protect BIMBA Y LOLA, its employees, and/or other third parties, including, for example, to assist in fraud protection or investigation.

Aggregated or De-Identified Data. We may use or share information that has been aggregated or de-identified to prevent identification of individuals. We may use or share this information in several ways, including for fraud prevention services or for analytical purposes.

We never use or share the personally identifiable information provided to us online in ways unrelated to those described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

Depending on your location and applicable laws, you may have rights to privacy requests. Even if you do not reside in such jurisdictions, we extend these rights to you and will make reasonable efforts to honor them. You can request:

To know: Obtain a copy of the personal information we have collected about you.

Delete: Request that we delete the personal information we have collected about you.

Correct: Request corrections to inaccurate information about you.

Choose not to have certain personal information shared with third parties for analytics services and targeted advertising on our behalf.

To submit a request to know, delete, or correct your personal information, please use our email lopd@bimbaylola.com.

To process your request, we may need to verify your identity. You will receive an email containing a confirmation link to verify your email address, and we may request additional information solely for identity verification purposes. Information collected through the Privacy Requests Form or otherwise requested is used solely to fulfill and maintain records of your request.

Please follow the instructions provided in the communications sent to you, including how to check the status and receive other relevant information regarding your request.

If you wish to have an authorized agent make a request on your behalf, they must use the Privacy Requests Form and provide written proof that you have authorized them to act on your behalf. In some cases, we may require you to verify your identity directly with us or confirm that you have authorized the agent to make the request.

Alternatively, you or your authorized agent may also submit requests by calling us at +1 786-882-0867

For business contacts, please submit your requests by calling our number or using the contact information provided above.

Regarding requests to delete personal information: Upon receipt of a deletion request, your personal information, including online accounts will be permanently deleted. This includes all related records, rewards, benefits, and available promotions. Deleted information cannot be reinstated, and you will no longer accrue rewards or benefits after deletion.

Reviewing and correcting personal information: If you have created a customer account, you can review and update certain information and preferences by signing in and accessing "your account" in the top right corner of our website or the account icon in our mobile apps. You may also contact customer service or submit a request for deletion.

We strive to process requests within the time frames required by applicable law, which may take up to 30 or 45 days depending on your jurisdiction.

We do not sell your Personal Information for a monetary fee. However, certain U.S. privacy laws define “sale” and “share” very broadly, which may include our sharing of your Personal Information with certain third parties if we receive any form of value in return. In these cases, we share your Personal Information with certain third-party marketing partners and in exchange for the ability to promote our products and services on their platforms. These arrangements may be considered a “sale” under some laws.

Personal Information shared or sold in this context typically includes your name, email address, other contact information, records of products purchased, product registration and customer service records.

Our third-party marketing partners include Selligent, SaleCycle and Meta.

You may opt out of the sale of your Personal Information by adjusting your preferences in COOKIES SETTINGS.

Please note the following:
- Opt-out tools are tied to the browser or device you are using, as they rely on your browser ID and device ID. If you are not logged into your customer account or do not have one, you will need to opt-out on each browser and device separately.
- Your browser may store some information in its cookies and cache to maintain your privacy preferences. Clearing these settings may remove your opt-out preferences, necessitating you to opt-out again.
- Opting out means you may still encounter online advertisements, but these will not be based on your inferred interests.
- Certain automated methods may still be employed to gather information about your interactions with our online services for other purposes outlined in this Privacy Policy, such as remembering user preferences or enabling specific functionalities.
- We utilize necessary cookies to ensure our sites function properly. These cookies provide essential features like security, network management, and accessibility. You can disable these cookies by adjusting your browser settings, but this may impact the functionality of our sites.

We may be unable to fulfill your request if we cannot verify your identity. Confirming your email address is one method we use for verification. For instance, your request may be denied if you do not promptly respond to our request to confirm your email address or provide additional requested information needed to verify your identity or process your request.

In cases where you request deletion of your personal information, certain information may not be deleted if it is necessary for processing your purchase payments, fulfilling orders (including exchanges or returns), or providing requested services.

We may also be unable to honor your request if it conflicts with our legal obligations, such as complying with applicable laws (including cooperating with law enforcement) or regulatory requirements (such as maintaining records of your requests and preferences). Additionally, we may need to retain information if we believe it is necessary to defend against legal claims, protect our operations and property, or safeguard the privacy, safety, and property of others.

If your request is denied, you have the right to appeal to our decision by writing to us using the address provided in the "Contact us" section of this Privacy Policy. If you remain unsatisfied with the outcome of the appeal, you may contact the supervisory authority in your jurisdiction.

You can choose to stop receiving marketing or promotional emails from us by clicking the “unsubscribe” link included in such emails. Please note that opting out of marketing or promotional emails does not affect transactional communications related to your purchases.

If you wish to stop receiving marketing/promotional and/or customer services text messages from us, reply with the word STOP to the text messages or follow the provided instructions when you originally signed up to receive text messages.

We have implemented reasonable physical, technical, and organizational safeguards to help protect your Personal Information from unauthorized access, acquisition, disclosure, alteration, or destruction. While we make every effort to keep your Personal Information secure, no security measures no security measures can provide absolute guarantee. Therefore, when transferring personal or sensitive information over the Internet, we recommend exercising caution. Please promptly inform us using the contact information below of any incident involving the loss, unauthorized access, or disclosure of Personal Information that is under our custody or control.

In cases where we are legally obligated to collect Personal Information or need it to fulfill our contractual obligations with you, failure to provide requested data may prevent us from performing our contract with you. This may result in our inability to provide you with the requested products and/or services. For instance, if you do not provide your address information or neglect to agree to our Terms and Conditions and Privacy Policy, we may be unable to process and fulfill your order.

The Site may contain links to other websites. Please note that when you click on one of these links, you will leave the Site and will be subject to the policies and privacy practices of the other site, which may be very different from our practices. You should review the policies of other sites you visit. We are not responsible for the content, technology, security, or practices of linked sites operated by others, or for your use of linked sites.

Our services and the Site are not directed at or intended for children. We do not knowingly collect information from children under the age of thirteen, without parental consent. If we become aware that we have inadvertently collected personal information pertaining to a child under the age of thirteen, we will promptly delete such information from our records. If you believe we might have any information from or about a child under the age of thirteen, please contact us at lopd@bimbaylola.com.

Data related to the Site is hosted, processed, and handled in the United States and European Union. We recognize that the Site may be accessed from anywhere in the world, and that the laws of the jurisdictions in which some users are located may differ substantially from those of the United States, the State of Delaware, where we are headquartered, and Spain, where our parent company is headquartered. We comply with applicable laws of the United States, Delaware, and Spain.

Because we cannot practicably prevent users in different jurisdictions from accessing the Site, you are responsible for knowing and complying with the laws of your jurisdiction. If such laws conflict with your use of the Site or any of its content or functionality, the Site is not intended for you, and we ask you not to use it or submit any information through it.

"Do Not Track" is a privacy setting available in your web browser. When enabled, this setting requests that websites refrain from tracking user information. Currently, we do not acknowledge or respond to "Do Not Track" browser settings or signals.

BIMBA Y LOLA may update this Privacy Policy and the Site to reflect material changes in how we collect, use, share, or store your information, to satisfy legal requirements, or for other business purposes. You should review this Privacy Policy when you visit the Site to understand our current practices. The date at the top of the page shows when this Privacy Policy was last updated.

We encourage you to refer to this Privacy Policy on an ongoing basis, so you understand our current practices.

Should you have other questions or concerns about these privacy policies, please email us at lopd@bimbaylola.com.

The California Consumer Privacy Act (CCPA), California’s “Shine the Light” law, and the California Online Privacy Protection Act provide consumers who are California residents with specific rights regarding their Personal Information. If you are a California resident, this section provides you with additional information, describes your rights and explains how to exercise those rights.

a. CATEGORIES OF INFORMATION COLLECTED AND DISCLOSED; RETENTION

In the 12 months preceding the Last Updated date of this Privacy Policy, we have collected or received, disclosed for a business purpose, or shared the following categories of Personal Information about California residents.

b. RIGHT TO INFORMATION

Subject to certain limits, you may ask us to provide the following information for the 12-month period preceding your request:

(1) The categories of Personal Information we collected about you.
(2) The categories of sources from which the Personal Information was collected.
(3) The business or commercial purpose for collecting the Personal Information.
(4) The categories of third parties with whom we shared the Personal Information.
(5) If we disclosed Personal Information for a business purpose, a list of the disclosures including the Personal Information categories that each category of recipient received.
(6) The specific pieces of Personal Information we collected about you.

c. RIGHT TO DELETE

You also have the right to ask us to delete any Personal Information that we have collected about you, subject to certain limitations as set forth under CCPA. We may deny your deletion request if the information is necessary for us or our service providers to, among other things, provide a good or service you requested, take actions reasonably anticipated in the context of our business relationship with you, perform a contract we have with you, detect and protect against security incidents or illegal activity, comply with a legal obligation, or exercise a right provided for by law.

d. RIGHT TO OPT OUT OF SALE OR SHARING

As noted above, we do not sell your Personal Information for a monetary fee; however, the CCPA defines a “sale” and “share” very broadly. In that regard, we share your Personal Information with certain third-party marketing partners and in exchange we receive the ability to market or offer our products and services through their websites and applications. This may be considered a “sale” under the CCPA. You may opt out of the sale of your Personal Information by clicking COOKIES SETTINGS or by submitting a request as described in the “Submission of Requests” section below.

e. RIGHT TO CORRECTION

If you believe your Personal Information is incorrect, you may request that we correct such Personal Information.

f. RIGHT TO NONDISCRIMINATION

We will not discriminate against you if you exercise your privacy rights under California law, including by:

- Denying you goods or services.
- Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Providing you a different level or quality of goods or services.
- Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
- Retaliating against an employee, applicant for employment, or independent contractor for exercising their rights under California law.

However, the CCPA permits us to offer you certain financial incentives that can result in different prices, rates, or quality levels, which are related to your Personal Information’s value. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time. We do not offer financial incentives at this time.

g. SUBMISSION OF REQUESTS FOR INFORMATION OR TO DELETE

If you are a California resident, you may submit a request for information or a request to delete in any of the following ways:

- Call us at +1 786-882-0867
- Filling out a form located on our Site here
- Emailing us at lopd@bimbaylola.com

What We May Need from You. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Verifying Your Identity. To protect your privacy and security, we will take reasonable steps to verify your identity before providing your Personal Information and before deleting your information. Only you or someone legally authorized to act on your behalf may make a verifiable request related to your Personal Information. For example, if you make a request, we will ask you to confirm your name, email address, and/or other information we in our records to verify your identity, so that we can help protect your information.

Requests from Authorized Agents. If you live in California, you may designate an authorized agent to make a request for you. If you designate an authorized agent to make a request on your behalf, we may require you to verify your identity and provide the authorized agent’s identity and contact information to us.

h. RESPONSE TO REQUESTS

We do not charge a fee to respond to your request unless it is repetitive (more than twice in a 12-month period) or excessive. We will confirm receipt of your request within 10 business days of receipt and generally will respond to your request, correct inaccurate Personal Information, or delete your Personal Information within 45 days of receipt. If we need more time to respond, we will inform you of the reason and we may take up to an additional 45 days to respond.

i. NO FEE USUALLY REQUIRED

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.