Privacy Policy

This Privacy Policy describes the policies and procedures of nabfly, Inc, doing business as Fill Mill, ("we", "our" or "us") and our collection, use and disclosure of information that identifies or is associated with you ("Personal Information"), including on fillmill.co (the "Site") and the services, features, content or applications we offer (collectively with the Site, the "Services"). The Services are not available to individuals under 18 years of age. The Site and Services are intended for users who access the Site from the United States or Canada.

This Privacy Policy does not apply to the practices of third parties that we do not own or control, including but not limited to any third-party websites, services, and applications ("Third-Party Services") that you elect to access through the Service or to individuals that we do not manage or employ. While we attempt to facilitate access only to those Third-Party Services that share our respect for your privacy, we cannot take responsibility for the content or privacy policies of those Third-Party Services. We encourage you to carefully review the privacy policies of any Third-Party Services you access.

We collect Personal Information in a variety of ways depending on how you interact with us, the Services you use, and the choices you make.  Categories of Personal Information we collect include identifiers, personal information, commercial information, Internet activity, and inferences, all as described in more detail below.

We collect information about you from different sources and in various ways when you use our Services, including information you provide directly, information collected automatically, information obtained from third-party data sources, and data we infer or generate from other data.

Information You Provide Directly. We collect Personal Information you provide to us. For example:

Some features of the Services allow you to provide content to the Services, such as written comments or any other content or files you might provide to us. If you send us email messages or other communications, we will collect and retain those communications.

Some features of the Services may give you the option to request information, complete surveys or otherwise interact with us and our partners. We may collect information you provide in connection with your profile such as, but not limited to, your contact information such as name, username, password, email address, postal address, and phone number.

Some features of the Services may request that you provide demographic data such as likes, dislikes, profession, hobbies, gender, age, responses to surveys, and other demographic details.

When you create an account or place an order, we process Personal Information such as billing address(es), billing phone number, and credit card number.

Information Collected Automatically. When you use our Services, we collect some Personal Information automatically. For example:

We automatically receive and record information from your web browser when you interact with the Services, including your IP address, location, and information about your device, including device identifiers (such as MAC address), device type, and your device’s operating system, browser, and other software including type, version, language, settings, and configuration. As further described under Cookies and Similar Technologies below, we also collect cookie information and other data.

We automatically log your activity on our Services, including the URL of the website from which you came to the Site, and details about how you use the Site and Services.  This may include details about your mouse movements, clicks, page visits, text entered, how long you spent on a page, and other details of your actions on our Site.

Information We Create or Generate. We infer new Personal Information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics ("inferences"). For example, we infer your product interests from your purchases from us and use of the Services, and we infer your city, state, and country location based on your IP address.

Information We Obtain From Third-party Sources. We also obtain information from third parties. We treat Personal Information obtained from third parties as described in this Privacy Policy, and we honor any additional restrictions imposed by the source of the information. These third-party sources and the categories of Personal Information we obtain from these third parties include, for example:

When you are asked to provide Personal Information, you may decline. And you may use device controls to prevent certain types of automatic Personal Information collection. But if you choose not to provide or allow Personal Information that is necessary for certain products or features, those products or features may not be available or function correctly.

We use cookies, web beacons, mobile analytics and advertising IDs, and similar technologies (collectively, “Technologies”) to collect Personal Information (such as identifiers, demographic data, commercial information, Internet activity, and inferences) and to help operate our Services.

How Technologies Collect Personal Information

Cookies are pieces of text that may be provided to your computer through your web browser when you access a website. Your browser stores cookies in a manner associated with each website you visit. We use cookies to enable our servers to recognize the mobile or web browser, to tell us how and when you visit the Site and otherwise use the Services through the Internet, and for the other purposes described in this Privacy Policy.

Web beacons are electronic images (also called single-pixel or clear GIFs) that are contained within a website. When your browser opens a webpage that contains a web beacon, it automatically connects to the web server that hosts the image (typically hosted by a third-party). This allows that web server to log information about your device and to set and read its own cookies. In the same way, third-party content on our websites (such as embedded videos, plug-ins, or ads) results in your browser connecting to the third-party web server that hosts that content. We also include web beacons in our promotional email messages or newsletters to tell us if you open and act on them.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies.

We, and our third-party partners and service providers, use these Technologies to collect Personal Information when you use our Services. These Technologies may also be used to collect Personal Information about your online activities over time and across different websites or online services. This information is used by us and our third-party partners and service providers for a variety of purposes, including to store your preferences and settings, enable you to sign-in, analyze how our Services perform, track your interaction with the Services, develop inferences about you, deliver and tailor cross-context and/or interest-based advertising, combat fraud, and to fulfill other legitimate purposes. We and our third-party partners and service providers also share this Personal Information with third parties for these purposes. 

Some laws define "sell", “share”, and "personal information" very broadly, and some of the data sharing practices described in this Cookies and Similar Technologies section may be considered a "sale" or “sharing” of personal information under those definitions. In the past 12 months for purposes of these laws, we have “sold” and/or “shared” the following categories of personal information: identifiers, demographic data, commercial information, Internet activity, and inferences, all as described above. We do not "sell" or “share” any other categories of Personal Information. Our purposes for which we “sell” and/or “share” these categories of Personal Information are each of the purposes described above.  The purposes for which our third-party partners use Personal Information may include those or other purposes.  As an example of a “sale” or “sharing” of personal information, we let third-party partners like advertising and analytics providers collect information such as IP addresses, cookie IDs, and mobile IDs in connection with our Services, and that information may be used to deliver and tailor cross-context and/or interest-based advertising for us and others. We do not knowingly sell the personal information of minors under 16 years of age without affirmative authorization.

More information about the purposes for which we use Technologies on our site is detailed in our Cookie Preference Center.

Options For Technologies.  The following options may help you control what Personal Information Technologies collect.

• Cookie Preference Center. We offer choices about some of the Technologies used by third-party partners and service providers in connection with our Site in our Cookie Preference Center
• Industry Advertising Opt-Outs. Some of the third-party partners and service providers that use Technologies in connection with our Services are also members of industry associations that provide advertising-related choices that you can access at:
  
  • United States: NAI ( http://www.networkadvertising.org/managing/opt_out.aspx ) and DAA ( http://www.aboutads.info/choices/ )
  • Canada: Digital Advertising Alliance of Canada ( https://youradchoices.ca/ )
• Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.
• Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking and/or reset the advertising IDs.
• Email web beacons. Most email clients have settings which allow you prevent the automatic downloading of images, which will disable web beacons in the email messages we send.

Do Not Track. Some browsers have incorporated "Do Not Track" (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. If we are able to detect this, we will opt you out of targeting cookies.

We use the Personal Information we collect for purposes described in this Privacy Policy or otherwise disclosed to you. One goal in collecting Personal Information from you is to provide an efficient, meaningful, and customized experience. For example, we use your Personal Information for:

In carrying out these purposes, we combine data we collect from different sources to give you a more seamless, consistent, and personalized experience.  We may also use technology to help us automatically process your Personal Information for the purposes noted above, such as to help us personalize our Services for you, work to keep our Services secure, or to detect potential fraud or illegal activity.

We share Personal Information with your consent, to help us complete your transactions, or to provide the Services you have requested or authorized. Examples of Personal Information sharing practices are described below.

We share each of the categories of Personal Information we collect (as described above) with:

• Our subsidiaries and affiliates that help us to provide our Services and operate our business;
• Vendors, agents, and service providers working on our behalf: to help us provide the Services, for our legitimate business purposes, or for any other use we make of Personal Information as described in this Privacy Policy; and
• Third parties or other entities as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or at transfer, divestiture, or sale of all or a portion of our business or assets.

We will also share Personal Information with third parties when we believe that doing so is necessary or appropriate to:

• comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;
• protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;
• operate and maintain the security of our Services, including to prevent or stop an attack on our computer systems or networks; or
• protect the rights or property or ourselves or others, including enforcing our agreements, terms, and policies.

Some of your Profile Information and activity on and through the Services is public by default. This may include, but is not limited to, content you have posted publicly on the Site or otherwise through the Services.

Please also remember that if you choose to provide User Content using certain public features of the Services, then that information is governed by the privacy settings of those particular features and may be publicly available. Individuals reading such information may use or disclose it to other individuals or entities without our control and without your knowledge, and search engines may index that information. We therefore urge you to think carefully about including any specific information you may deem private in content that you create or information that you submit through the Services.

You may use certain features of the Services to respond to advertisers, request information, purchase products or Services, respond to surveys, enter contests, surveys or sweepstakes, or for other purposes. We may use information that you elect to provide for the purposes stated at the time of submission.

You may access other Third-Party Services through the Services, for example by clicking on links to those Third-Party Services from within the Site. We are not responsible for the privacy policies and/or practices of these Third-Party Services, and you are responsible for reading and understanding those Third-Party Services' privacy policies. This Privacy Policy only governs our collection of information through the Services.

Personal Information (such as identifiers, demographic data, commercial information, Internet activity, and inferences, all as described above) may be shared with, or collected directly from visitors to our Site and users of our Services by, third-party partners that provide Technologies used in connection with our Services.  These third-party partners may include analytics and advertising companies that use the information for cross-context and/or interest-based advertising.  See the Cookies and Similar Technologies section above for more information.

We share Aggregate Information with our partners, service providers and other persons with whom we conduct business. In general, Aggregate Information is information that can no longer be used to identify you.

We take reasonable and appropriate steps to help protect Personal Information from unauthorized access, use, disclosure, alteration, and destruction.

To help us protect Personal Information, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.

We retain each of the categories of Personal Information described in the “What Information Do We Collect?” Section for as long as necessary to provide the Services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and conduct other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.

If you are located outside of the United States, please note that the Site is hosted on our computer servers in the United States. Therefore, your information may be processed and stored in the United States, which may provide for different data protection rules than in your country.

Under California Civil Code section 1798.83, also known as the "Shine the Light" law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes ("California Customers") may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. Please be aware that we do not disclose personal information to any third parties for their direct marketing purposes as defined by this law. California customers may request further information about our compliance with this law by e-mailing help@fillmill.co. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated e-mail address.

Below is information about choices that all users have regarding their Personal Information.

Right to Request Access and Correction. If you wish to request access to or correction of Personal Information about you that we hold, you may utilize the settings associated with your Account.

If you cannot access or correct certain Personal Information we have directly through the Account, you can contact us at help@fllmill.co or at 888-565-6762.

Right to Know. You can request that we provide you with the following information (a “request to know”):

• The categories and specific pieces of Personal Information we have collected about you.
• The categories of sources from which we collect Personal Information.
• The purposes for collecting, using, selling, or sharing Personal Information.
• The categories of third parties to which we disclose Personal Information.
• The categories of Personal Information we have disclosed about you for a business purpose. 
• The categories of Personal Information we have "sold" about you or “shared” about you for cross-context behavioral advertising (if any), and the categories of third parties to which the categories of Personal Information were "sold" or “shared” (if any).

You may make a "request to know" by contacting us at help@fllmill.co or calling us at 888-565-6762. Note that we have provided much of this information in this Privacy Policy, and we may refer you back to this Privacy Policy for the information it provides.

Right to Request Deletion. If you wish to delete Personal Information about you that we hold, you may utilize the settings associated with your Account.  You also have a right to request that we delete personal information, subject to a number of exceptions. To make a request to delete personal information, contact us at help@fillmill.co or call us at 888-565-6762. Please be sure to specifically mention that you are making a Personal Information deletion request to ensure we route your request to the proper channels.

Right to Request Opt-Out of “Sales” and “Sharing”. You have a right to opt-out from future "sales" or “sharing” (for cross-contextual behavioral advertising) of Personal Information. To do so, you must take two actions: (1) contact us at help@fillmill.co or call us at 888-565-6762 to tell us you would like to opt out of sales and sharing, and (2) opt-out of all Performance, Functional, and Targeting Cookies in our Cookie Preference Center.

Verifications and Honoring Requests. To the extent permitted by applicable law for the Access and Correction, Know, Deletion, and Opt-Out rights noted above, we reserve the right to decline requests that: are unreasonable or excessive, we believe to be fraudulent, where honoring the request (such as by providing Personal Information) would be prohibited by law or could adversely affect the privacy or other rights of another person, or where we are unable to authenticate you as the person to whom the Personal Information relates.  In general, we authenticate you by requiring you to validate requests by responding from the email address we have associated with your information or account.

Communications Preferences. You can choose whether to receive promotional communications from us by email. If you receive promotional email from us and would like to stop, you can do so by following the directions in that message. These choices do not apply to mandatory service communications that are part of certain of our Services, or to surveys or other informational communications that may have their own unsubscribe method.

Choices for Cookies and Similar Technologies. See the Cookies section for choices about cookies and other analytics and advertising controls.

Using Agents. You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us. Further, to provide or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law.

Right to Non-Discrimination. We do not discriminate or retaliate against you for exercising any of the rights noted in this Section.  Applicable law may also prohibit companies from discriminating against you for exercising the types of rights described in this Section.

Financial Incentives.

When you sign up for a subscription with Fill Mill, we collect certain personal information necessary to fulfill your orders (e.g., name, email address, phone number, zip code, and category or size preferences), and as your relationship with Fill Mill progresses, we track your choices to offer you a more tailored selection and to enhance your customer experience. While we do not offer you financial incentives in exchange for this information, and do not share it with anyone else, it may have value to us in customizing the products and services we offer you.

From time to time, we may offer customers special discounts, rewards, or offers to you related to the collection of your personal information. We offer these financial incentives to enhance our relationship with you and to improve your customer experience. There is no obligation to sign up for any of these incentives and you may withdraw your consent at any time.

Generally, we do not assign monetary or other value to the personal information that we collect and consider the value to be in the form of customer loyalty and increased purchase engagement. However, in the event we are required by law to assign such value in the context of financial incentives or price differences that we offer, we have valued the personal information as being equal to the value of the offer, less our costs associated with promoting the offer. The value will vary by customer depending on the amount and frequency of purchases, the value of the discount offered and the expense associated with acquiring the personal information. Any value that may be assigned to your personal information cannot be redeemed for cash. This notice of value is not intended to waive, nor should be interpreted as a waiver to, our proprietary or confidential information, including trade secrets, and does not constitute any representation with regard to generally accepted accounting principles or financial accounting standards.

We may amend this Privacy Policy from time to time when necessary to reflect changes in our Services, how we use personal data, or the applicable law. When we post changes to the Privacy Policy, we will change the "Last Updated" date at the top of the Privacy Policy. If we make material changes to the Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law.

If you have any questions or concerns regarding privacy using the Services, please send us a detailed message to help@fllmill.co