Privacy Policy

Overview

Verdrobe, Inc. (Verdrobe, we, our and/or us) operates Verdrobe, a platform located at verdrobe.com (Website) that connects eco-conscious shoppers with brands that describe themselves as more sustainable (the Services).

We are committed to handling personal information in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applicable U.S. federal and state privacy and consumer-protection laws, and, where they apply, the EU General Data Protection Regulation and UK GDPR.

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (and includes “personal data” under the GDPR).

The Services are live. You do not need to provide personal information simply to browse the Website, and you do not need to create an account to use our search and matching features. The personal information we collect is mainly the search inputs you choose to submit, together with limited technical and usage data we collect automatically. You may optionally create an account; if you do, we also hold the account information described below (such as your email, display name, and the searches and items you save). For most visitors, the main personal information we hold is the search inputs you submit and basic technical data such as your IP address.

How we collect your personal information

We collect personal information directly from you — for example, the search inputs you submit when you use the Website, or when you contact us by email.

We also collect certain information automatically through your interaction with the Website (for example via cookies and analytics — see the Cookies section). We may also receive limited information from service providers and affiliate networks, such as confirmation that a referred click resulted in a purchase.

What personal information we collect

If you contact us by email, we collect your email address and the content of your message. You do not need to give us your email or any account details to use the search and matching features.

We also automatically collect technical and usage data such as IP address, browser and device type, operating system, pages viewed, links clicked, and the date and time of access, together with identifiers set by cookies and similar technologies.

When you use the Services, we collect the search inputs you submit (product links, descriptions, images or criteria) and records of outbound clicks and resulting purchases used for affiliate attribution.

If you create an account, we also collect your email address, the display name you choose, and the content you save to your account — the searches you keep as saved or recent searches and the items you favourite. We store these so we can show them back to you and provide account features across your sessions and devices.

If you submit an image as a search input, we process it only to identify matching or alternative products and we do not use it to identify any individual. Please do not upload images that contain other people, identity documents, or other sensitive information.

We do not seek to collect sensitive personal information (such as health, precise geolocation, or racial or ethnic origin). Please do not send it to us.

Summary: categories of personal information we collect

This table is our California “notice at collection” under the CCPA/CPRA. It summarises the statutory categories of personal information we collect, the main purposes, and whether we “sell” or “share” it as those terms are used under California law. The sections above and below give the full detail.

We do not sell personal information for money, and because the Services are intended only for users aged 16 and over, we do not knowingly collect, sell or share the personal information of anyone under 16. “Sharing” here means the CCPA/CPRA meaning (cross-context behavioural advertising). We engage in it with your consent where required (for EU/UK visitors, opt-in) or otherwise subject to your right to opt out (for US visitors, via the Do Not Sell or Share control and Global Privacy Control signals described below).

How we use your personal information

We use and disclose your personal information to:

• if you create an account, register you, authenticate you (by email sign-in link or one-time code), and send related service messages; where you have given any consent required by law, send you updates, news and marketing about Verdrobe;
• provide Verdrobe account features using the content you save, including your saved and recent searches and article and product recommendations;
• respond to your enquiries, feedback and complaints, and provide support;
• operate, maintain, secure, analyse and improve the Services;
• provide search and matching, suggest alternatives, and attribute and measure affiliate referrals;
• enforce our Terms and protect our legal rights, and comply with our legal obligations; and
• any other purpose disclosed at the time of collection or to which you consent.

We may analyse the search inputs and other content you submit to operate, evaluate and improve our matching and the Services, including developing new features. We do not currently use your content to train general-purpose AI models. If we decide to use your content to train or develop machine-learning models, we will update this Policy beforehand and, where the law requires, give you notice and the ability to opt out. We do not use uploaded images for facial recognition or to identify any individual.

Where the GDPR applies, we rely on the following lawful bases: your consent (marketing emails and non-essential cookies); our legitimate interests (operating, securing and improving the Services, and basic analytics), balanced against your rights; performance of a contract or steps at your request (creating and operating your account, including saving your searches and favourites); and compliance with legal obligations. You may withdraw consent at any time.

Direct marketing and email

Sign-in links and one-time codes we send so you can access your account are service (transactional) messages, not marketing, and are not subject to marketing opt-out. Separately, if you create an account or otherwise sign up for our emails, you will be able to consent to receiving launch and marketing communications from us by email. Every marketing email contains an unsubscribe link, and you can opt out at any time using it or by contacting us. We handle marketing email in accordance with the U.S. CAN-SPAM Act and applicable California law (and, where applicable, the GDPR/UK GDPR). We honour opt-out requests promptly.

Cookies and analytics

We use cookies and similar technologies to operate the Website, remember your preferences, understand usage and support affiliate attribution. Some cookies are strictly necessary; others are analytics or marketing cookies that we use only with your consent where required. You can control cookies through your browser settings and, where shown, through our cookie banner or preferences tool. See our Cookie Notice for detail.

When you create an account, you consent to our use of performance and analytics cookies as part of signing up, as described at sign-up and in our Cookie Notice. You can withdraw this consent at any time through our cookie preferences tool or, where applicable, by using the Global Privacy Control signal or our “Do Not Sell or Share” control.

“Sale” / “sharing” and your California choices

We do not sell your personal information for money. Under the CCPA/CPRA, certain affiliate-attribution and cross-context advertising activity may be considered a “sale” or “sharing.” Where it is, we provide a “Do Not Sell or Share My Personal Information” control and we honour Global Privacy Control (GPC) browser signals. Because the Services are intended for users aged 16 and over, we do not knowingly sell or share the personal information of anyone under 16.

Automated processing

Verdrobe uses automated matching to generate suggestions of alternative products based on the link or description you provide. These suggestions are informational, do not produce legal or similarly significant effects on you, and you decide whether to click through or purchase. If we introduce any automated decision-making technology that could significantly affect your rights, we will update this Policy and provide any notices, access and opt-out rights required by the CCPA/CPRA (including its automated decision-making regulations) and, where applicable, Article 22 of the GDPR.

Who we disclose your personal information to

We may disclose your personal information to:

• service providers who help us run the Services (hosting, authentication and account/database storage, email/marketing, analytics, support) — for example Supabase, which provides our account authentication and database storage — who are bound to use it only for our purposes;
• affiliate networks and brand partners, to attribute referrals and measure conversions (typically using pseudonymised identifiers);
• professional advisers, and any person authorised by law to obtain it;
• a successor entity in connection with a merger, acquisition, financing or sale of assets (see Business transfers); and
• any party where necessary to protect rights, safety or property, or to comply with law.

International data transfers

We are based in the United States and process personal information there. If you access the Services from outside the United States, you understand your information will be transferred to and processed in the United States. Where personal data is transferred out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum / IDTA) or an applicable adequacy decision.

Verdrobe is operated from the United States and these Services are directed to users in the United States. We do not target, market or actively offer the Services to individuals in the European Economic Area (EEA) or the United Kingdom, and we have no establishment in those regions. If you choose to access the Services from the EEA or the UK, you do so on your own initiative. Where the EU or UK GDPR nonetheless applies to our processing of your personal data, the lawful bases, transfer safeguards and data-subject rights described in this Policy apply, and you may contact us using the details below to exercise them.

How we keep personal information secure

We take reasonable technical and organisational steps to protect personal information from misuse, loss and unauthorised access, modification or disclosure, including access controls, encryption in transit and reputable providers. No method of transmission or storage is completely secure. If a data breach occurs that triggers notification obligations, we will notify affected individuals and the relevant authorities as required by applicable U.S. state breach-notification laws (for example California Civil Code §1798.82) and any other applicable law. If you suspect any misuse, loss or unauthorised access to your personal information, please contact us immediately.

How long we keep personal information

We keep personal information only for as long as we need it for the purposes in this Policy, or as required by law. As a guide: we keep your account data and the content you save while your account is active, so that we can provide Verdrobe features including your saved and recent searches and article and product recommendations; we keep search inputs for as long as needed to provide those features and to provide and improve matching; and we keep affiliate-attribution records for as long as needed to verify and reconcile commissions and to meet tax, accounting and audit obligations. You can delete your account and its saved content at any time from your account settings, which removes that data; you can also unsubscribe or ask us to delete your details, and we will remove or de-identify them within a reasonable period, except where we must retain certain records (for example, to evidence your opt-out or to meet legal obligations).

Your privacy rights

If you have an account, you can access and update your details and delete your account and its saved content at any time from your account settings; deleting your account removes your saved searches and favourites. You can also exercise the rights below by contacting us.

California (CCPA/CPRA): subject to conditions, you have the right to know and access the personal information we collect; to delete it; to correct it; to opt out of any “sale” or “sharing”; to limit the use of sensitive personal information; and to be free from discrimination for exercising your rights. You may submit a request using the contact details below or our “Do Not Sell or Share” control. We may need to verify your identity, and you may use an authorised agent.

Other U.S. states: if you reside in a state with a comprehensive privacy law, you may have similar rights to access, delete, correct and opt out; contact us to exercise them.

EEA / UK (GDPR): subject to conditions, you have the rights to access; rectification; erasure; restriction; data portability; objection (including to direct marketing); and to withdraw consent. You may also lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office at ico.org.uk).

Australia (courtesy note): if you are in Australia and believe we hold personal information about you, you may contact us to access or correct it; we will handle your request consistently with this Policy.

Children

The Services are intended for users aged 16 and over. The Services are not directed to anyone under 16, and we do not knowingly collect personal information from anyone under 16 (consistent with the U.S. Children's Online Privacy Protection Act (COPPA), the children's provisions of the CCPA/CPRA, and Article 8 of the GDPR / UK GDPR where applicable). Because we do not permit use by anyone under 16, we do not sell or share the personal information of consumers under 16. If you believe a child under 16 has provided us personal information, please contact us and we will take reasonable steps to delete it.

Third-party websites and links

This Policy applies solely to personal information we collect through the Services. We are not responsible for the collection of information or the privacy practices of any third parties whose websites may be linked on our Website, our social media accounts or in our email communications. We encourage you to read their privacy policies.

Business transfers

If we are involved in a sale, merger, consolidation, change in control, transfer of substantial assets, reorganisation or liquidation, we may transfer, sell or assign personal information collected by us to one or more relevant third parties, subject to this Policy and applicable law.

Changes to this Policy

We may update this Policy from time to time. The current version will always be available on the Website with the “Last updated” date. If we make material changes, we will take reasonable steps to notify you, for example by email or a notice on the Website.

Questions or complaints

If you have any question about this Policy, wish to exercise a privacy right, or wish to make a complaint, please contact us by email at hello@verdrobe.com, Verdrobe, Inc., 2108 N ST STE N Sacramento, CA, 95816, USA. California residents may also contact the California Privacy Protection Agency or the California Attorney General; EEA/UK residents may contact their local supervisory authority.