Privacy Notice

‍Last Updated: January 2024

Your privacy is important to us. Please read this Privacy Notice carefully to learn how we collect, use, share, and otherwise process information relating to individuals (“Personal Data”), and to learn about your rights and choices regarding your Personal Data.

Ma Cherie Studios, Inc. (the “Company”) is the controller of your Personal Data as described in this Privacy Notice, unless specified otherwise. This Privacy Notice applies to the collection and processing of Personal Data collected by us when you visit our websites that link to this Privacy Notice; use our online products and services as an authorized user where we act as a controller of your Personal Data; visit our branded social media pages; visit our locations; communicate with us (including emails, phone calls, texts or fax); or register for, attend or take part in our events, webinars, or other offered services.

1. Collection of Personal Data. We collect three types of Personal Datal from you:

• Information You Provide: We collect and record any information that you provide to us directly, including any personal identifiers, professional information, financial account information, commercial information, visual information, or internet activity information that you provide to us through this website or other medium.

• Information We Collect Automatically: We automatically collect and store information about your use of this website and our services. To do so, we may use cookie technology and other online identifiers to track your IP address, web browser, geolocation, or your activity on this site.
• Other Information We Collect: We may combine data from other sources with Personal Data we from you. These other sources may be from third parties or from publicly available sources. This may include information related to your commercial interactions and internet activity.

In some cases, the collection and processing (see Section 2 below) of Personal Data is required for you to receive certain products or services. Personal Data does not include information that is anonymized or aggregated such that you cannot be identified from it.

If you provide us or our service providers with any Personal Data relating to other individuals, you represent that you have the authority to do so and have obtained any necessary consent for the information to be used in accordance with this Privacy Notice. If you believe that your Personal Data has been provided to us improperly or want to exercise your rights relating to your Personal Data, please contact us by using the information in Contact Us section (Section 16) below.

2. Processing your Personal Data. Where required by law, we obtain your consent to use and process your Personal Data for these purposes. Otherwise, we rely on other legal bases to collect and process your Personal Data. We process your Personal Data for the following purposes:

• Providing our services and website access: We process your Personal Data relating to your access of our services/website (e.g., IP address, internet activity, account information, etc.) to ensure both you and we meet our obligations under the applicable contract, terms of use, or service agreement and to project future demand as well as improve our websites and services; absent a contractual relationship, we process your Personal Data to further our legitimate interest in operating and improving our websites and services.
• Securing our websites and services: We process your Personal Data (e.g., name, IP address, account information, internet activity) as part of our efforts to maintain, monitor and secure our website and services. This may include aggregating data, verifying accounts, investigating suspicious activity, and enforcing our terms and policies to the extent necessary to further our legitimate interest in maintaining a safe and secure website, products and services and in protecting our rights and the rights of others.
• User Account Management: If you have registered for an account with us, we process your Personal Data (e.g., name, IP address, account information, payment information) to manage your user account for the purpose of meeting our obligations to you according to the applicable contract or terms of service.
• Responding to contact requests: If you contact us electronically or by phone, we process your Personal Data (e.g., name, account information, government identifiers) to perform our contract with you, or, if no contract applies, to the extent it is necessary for our legitimate interest in responding to your inquiry and communicating with you. We may record and process communications for training, quality assurance, and administration purposes. If required under applicable law, we will obtain your prior consent or give you the option to object to a call being recorded.
• Marketing and Advertising: We may process your Personal Data (e.g., name, account information, purchase history, internet activity) to advertise to you, conduct market research, and to provide other personalized content based upon your Personal Data to the extent it is necessary for our legitimate interest in advertising our websites, services or products. Where legally required, we will obtain your consent before engaging in any marketing or advertising.
• Complying with legal and safety obligations: We process your Personal Data (e.g., name, account information, payment history, internet history) when cooperating with public and government authorities, protecting our legal rights, conducting audits, and protecting against abuse of our services and products. Any such processing is based on our legitimate interest in protecting our legal rights or, when applicable, complying with a legal obligation to which we are subject.

3. Protecting Personal Data. We take commercially reasonable precautions to protect the Personal Data in our possession from loss, misuse, unauthorized access, disclosure, alteration, or destruction. While we follow generally accepted standards to protect Personal Data, no method of storage or transmission is 100% secure or error-free. Personal Data you send to or from the website or via e-mail may not be secure, and we encourage you to contact us about more secure ways to share sensitive information when necessary. Where you use passwords, ID numbers, or other special access features on this site, it is your responsibility to safeguard them and to log out of any accounts you access after your sessions.

4. Your Individual Rights. You may have certain rights relating to your Personal Data based on applicable local data protection laws, including from individual US state privacy laws (e.g., California, Virginia), Canadian privacy laws, and the EU/UK General Data Protection Regulation. Depending on the applicable laws these rights may include the right to:

• Request and receive copies of your Personal Data that we hold;
• Request additional information about how we process your Personal Data;
• Correct inaccurate or incomplete Personal Data (taking into account our use of it);
• Request deletion of your Personal Data;
• Restrict or object to our processing of your Personal Data, including restricting the sale or sharing of your data or its use for cross-context behavioral marketing. Where we process Personal Data for direct marketing purposes (either by us or third parties) or for cross-context behavioral marketing, you may not have to provide a specific reason for such objection;
• Require us (if possible) to transfer your Personal Data to another controller (i.e., data portability);
• Limit the use or disclosure of your sensitive Personal Data;
• Restrict certain disclosures of your Personal Data to third parties; Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects; and
• Withdraw your consent to the processing of your Personal Data (to the extent we base processing on consent and not on another lawful basis).

We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights. You may exercise these rights, to the extent applicable, by sending us an email at info@macheriestudios.com. We will respond to any such requests within 30 days of receipt.

5. Personal Data Retention. Personal Data will be stored for as long as the information is required to fulfill our legitimate business needs or the purposes for which the Personal Data was collected, or for such period as is required by law.

6. Disclosing Personal Data to Third Parties. We do not “sell” or “share” Personal Data about you as those terms are defined by the California Consumer Privacy Act. We may provide your Personal Data to the categories of recipients described below:

• Third party service providers or other entities that perform services on our behalf, help us provide you with our products and services, and that otherwise support our relationship with you (such as shipping or direct mailing organizations). These third-party service providers have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process the Personal Data in accordance with this Privacy Notice and as permitted by applicable data protection laws.
• Law enforcement, government agencies, or other regulators to comply with law or legal requirements, to enforce our agreements, and to protect our rights and the property or safety of Ma Cherie Studios, Inc., our users, or third parties.
• Transactional parties if we, or some or all of our assets, acquire or are acquired by another entity, including through a sale or in connection with a bankruptcy.

Promotional and Marketing Policy. We may ask you to consent to being contacted by us for promotional and marketing purposes. However, you may opt-out of receiving promotional or marketing emails at any time by notifying us as a reply to any unwanted e-mail, by using the unsubscribe function in our newsletter or by contacting us at info@macheriestudio.com. Requests to unsubscribe from Company e-mails may take 5 business days to process.

7. Cookies and Tracking Technologies. Please see our Cookies and Tracking Technologies Notification below.

8. Children. Our website is not intended for children under 18 years of age. No one under age 18 may provide any information to us through this website. We do not knowingly collect Personal Data from children under 18. If you are under 18, do not access, use, or provide any information on the website or on or through any of its features. If we learn we have collected or received Personal Data from a child under 18 without parental consent, we will delete that information.

9. Data Breaches. While we work hard to reduce the risk of data breaches, we have dedicated controls and procedures in place for when such situations, along with the procedures that are required to make notifications to you and to the relevant Supervisory Authority as appropriate.

10. Changes to this Privacy Policy. We may update this Privacy Policy at our discretion to reflect changes we deem necessary or to satisfy legal requirements. We will post a prominent notice of material changes on our websites.

11. Contact Us. We welcome comments and questions regarding this Privacy Policy. Any such questions should be directed via e-mail to info@macheriestudios.com.

ADDITIONAL STATE-SPECIFIC PRIVACY RIGHTS

Provisions in the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VDCPA), Colorado Privacy Act (CPA), Utah Consumer Privacy Act (UCPA), Nevada Senate Bill 220, and Connecticut Data Privacy Act (CTDPA) require some or all of the following disclosures. These disclosures supplement the Privacy Notice above.

Categories of personal information collected. The personal information that Company collects, or has collected from consumers in the twelve months prior to the effective date of this Disclosure, fall into the following categories established by the California Consumer Privacy Act:

• identifiers (e.g., name, address, phone number, IP address);
• internet or other online activity information;
• geolocation data (e.g., computer/device location);
• audio or visual information; professional/educational information;
• sensitive personal information (including government-issued identifiers, account log-in, and precise geolocation”) and
• inferences drawn from any of the above.

Categories of personal information disclosed for a business purpose. In the 12 months prior to the effective date of this Disclosure, the Company has disclosed to the third parties identified in the “Disclosing Personal Information to Third Parties” section of the Privacy Notice above personal information that falls into the following categories established by the California Consumer Privacy Act:

• identifiers;
• internet or other online activity information;
• geolocation data;
• audio or visual information; and
• professional/educational information.

Sources from which we collect your Personal Data. We collect the categories of Personal Data listed above from the following types of sources: consumers, data analytics companies, ad networks, social networks, internet service providers, service providers that help us to run our business, and data resellers such as data management platforms. We also collect Personal Data automatically via cookies, web beacons, and other tracking technologies when you use our websites, online services, or mobile apps.

Purposes for which we use your Personal Data: We use your Personal Data for the purposes listed in Section 2 of the main privacy notice above.

California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that the Company collects and discloses for a business purpose include "sensitive personal information" as defined under the California Privacy Rights Act. The Company does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.

Right to Access, Delete, or Restrict the Use of Personal Data: Residents of California, Virginia, Colorado Connecticut, Nevada and Utah may have the right to exercise some or all of the rights described in Section 4 of the Privacy Notice. Depending on your data choices and where you reside, certain of these rights may be limited or unavailable. You may exercise these rights by sending us an email at info@macheriestudios.com. We will respond to any such requests within 30 days of receipt.

No sale of Personal Data. The Company has not sold or shared any Personal Data of consumers, as those terms are defined under the California Consumer Privacy Act, in the 12 months prior to the effective date of this Disclosure.

No Discrimination. The Company will not discriminate against any consumer for exercising their rights under the applicable state laws.

Virginia Consumer Data Protection Act Deidentified Data Disclosure. We may use deidentified data in some instances. To the extent we use deidentified data, we will either maintain this data without attempting to re-identify it or we will treat it as Personal Data subject to applicable law.

Quebec Data Protection Contact. Pursuant to the requirements of Bill 64 of the National Assembly of Quebec, you may contact info@macheriestudios.com.

COOKIES AND TRACKING TECHNOLOGIES

Cookies and other Tracking Technologies. A cookie is a small data file that a website places in your web browser to remember information about you. We use some cookies and tracking technologies for purposes which are necessary for your use of our website, products, or services. These may include technologies which remember your preferences and settings; information that you may enter online; or to keep you logged in to our offerings. With your consent, we may also use cookiesand tracking technologies for other purposes. Strictly-necessary cookies and technology. These are cookies and other technologies that are required for the operation of our website, our products, and our services, and therefore cannot be turned off. You can set your browser or device to block or alert you about these cookies, but functionality may be impaired. These cookies do not store any personal data. These cookies are used solely for the purpose of carrying out or facilitating the transmission of a communication and are strictly necessary to provide you with the information society service you have expressly requested. The use of these cookies for the purposes described above is based on our legitimate interest in ensuring your access to and the proper technical functioning of our website, products, and services that you have expressly requested. Analytical/Performance cookies. Where you have permitted the use of performance cookies, we use Google Analytics to collect statistical information about how our website and services are used. Google Analytics services involve the use of cookies that collect information such as your IP address or other identifiers, browser information, and information about the content you view and interact with to record how you use the website, our products, and services. These analytics services help us count users, identify popular offerings, and track the demographics and interests of our users.

Targeting cookies. These cookies record your activity on our site or using our services including the pages you have visited and the links you have followed. We may use this information to make our content more relevant to you to measure the effectiveness of our marketing. We may also share this information with third parties for this purpose. These are also optional cookies, although if you do not allow these cookies, you will experience less targeted advertising.

Our Use of Google Analytics. This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”).

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google on servers in the U.S. If the IP anonymization is activated, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement in the European Economic Area. In exceptional cases, the full IP address is sent to and shortened by Google servers in the U.S.

On behalf of the website provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However,please note that if you do this, you may not be able to use the full functionality of this website. Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under

https://tools.google.com/dlpage/gaoptout?hl=en-GB.

Further information concerning the terms and conditions of use and data privacy can be found at:

https://www.google.com/intl/en/policies/privacy/partners/

http://www.google.com/analytics/terms/gb.html

https://www.google.de/intl/en_uk/policies/

https://support.google.com/analytics/answer/6004245?hl=en