The California Privacy Rights Act (“CPRA”) grants residents of the State of California (“consumers”) and households located in California certain rights regarding their Personal Information. This Notice (the “CPRA Notice”) applies to the Personal Information of consumers and/or households that is collected and/or processed (online and/or off-line) by or on behalf of Brooklyn Bedding, LLC d/b/a Allform, its affiliates and subsidiaries (collectively, “we,” “us,” or “our”) and supplements our Privacy Policy. All capitalized terms herein have the meanings given in the CPRA or the Privacy Policy. We address Personal Information associated with our employees and job applicants separately. In the event of any conflict between this CPRA Notice and terms in the Privacy Policy, the provision that is more protective of your Personal Information shall control to the extent of such conflict.

If you have any questions about this CPRA Notice or whether any of the following rights apply to you, please contact us at help@allform.com. If you are located outside of the State of California, this CPRA Notice does not apply to you and you should refer to our Privacy Policy.  

I. The Personal Information We Collect, Why We Collect it, and How Long We Keep it 

We may collect the categories of Personal Information (including sensitive information) listed in the tables below for the specific business purposes listed next to them.  

We determine the retention periods of each category of Personal Information based on the following criteria:

II. How We Obtain Your Personal Information  

We receive your Personal Information directly from you, as well as from the following categories of sources: 

 

III. What Kind of Personal Information We Disclose to Others 

We may disclose the following categories of Personal Information to the following categories of service providers and/or contractors for a business purpose.  

IV. Your Rights and Choices 

The CPRA provides consumers and households with specific rights regarding their Personal Information. We will usually be the business processing your Personal Information. If we are acting as a service provider or contractor on behalf of another business, please contact the business that collected your Personal Information in the first instance to address your rights with respect to such data.  

a) Right to Know About Your Personal Information  

You have the right to request that we disclose the following kinds of information to you about our collection, disclosure, sale, sharing, and use of your Personal Information:  

 
b) Right to Request Deletion 

You have the right to request deletion of your Personal Information. We will honor such request but might not be able to fulfill your request if we (or our service providers) are required to retain your Personal Information. Examples of such exceptions are:

c) Right to Request Correction 

You have the right to request that we correct inaccurate Personal Information that we maintain about you. We will honor such request but might not be able to fulfill your request if it is impossible to do so or would involve disproportionate effort, or if we have a good-faith, reasonable, and documented belief that a request to correct is fraudulent or abusive. 

 
d) Right to Opt-Out of the Sale and/or Sharing of Personal Information.  

You have the right to opt-out of the sale and/or sharing of your Personal Information. Please exercise your rights as set forth in Section V below. 

e) Right to Limit the Use and Disclosure of Sensitive Personal Information 

You have the right to limit certain ways in which a business uses and discloses sensitive Personal Information. Please note, however, that we only collect the information mentioned in this CPRA Notice, and do not use or disclose it for any purposes that are covered by this right (nor have we done so in the past). 

f) Right to Designate an Authorized Agent 

You have the right to submit a request through the use of an authorized agent If you choose to do so, we may require that you (i) provide the authorized agent written permission to act on your behalf, and (ii) verify their identity directly with us. We may deny a request from an authorized agent that does not submit proof of authorization. 

g) Right to Non-Discrimination 

We will not discriminate against you for exercising any of your CPRA rights. We will not (i) deny you Products or Services, (ii) charge you different prices or rates for Products or Services, including through granting discounts or other benefits, or imposing penalties, (iii) provide you a different level or quality of Products or Services, and (iv) suggest that you may receive a different price or rate for Products or Services or a different level or quality of Products or Services.  

V. Exercising Your Privacy Rights 

a) Rights to Know, to Request Deletion, and to Request Correction of Personal Information 

To exercise these rights, please submit a verifiable consumer request to us entitled “California Privacy Request,” by using the following methods: 

What we need to know to fulfill your request 

The verifiable consumer request must: (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you. Making a verifiable consumer request does not require you to create an account with us.  

 

How you will hear back from us 

We will confirm receipt of a verifiable consumer request within then (10) business days of its receipt. We will endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of its receipt. If we require more time, we will notify you of the extension and provide an explanation of the reason for the extension in writing, and we will provide you with a response no later than ninety (90) calendar days of receipt of the request. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.  

We may charge a reasonable fee to process or respond to your verifiable consumer requests if they are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will inform you of the reasons for this decision and provide you with a cost estimate before completing your request. 

 

b) Right to Opt-Out of the Sale and/or Sharing of Personal Information 

If you are 16 years of age or older, you have the right, at any time, to direct us to not sell/share your Personal Information (the “right to opt-out”). We do not knowingly sell/share the Personal Information of children under the age of 16, unless we receive affirmative authorization (the “right to opt-in”) from either (i) the consumer who is between 13 and 16 years of age, or (ii) the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to Personal Information sales/sharing may opt-out of future sales/sharing at any time. To exercise the right to opt-out, you (or your authorized representative) may submit a request to us emailing us at: help@allform.com   

Once you make an opt-out request, we will not ask you to reauthorize Personal Information sales/sharing for at least twelve (12) months. However, you may change your mind and opt back in to Personal Information sales/sharing at any time by contacting us at help@allform.com.   

You do not need to create an account with us to exercise your opt-out rights. We will only use Personal Information provided in an opt-out request to review and comply with the request. 

VI. Other California Privacy Rights 

Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to obtain certain information about the types of Personal Information that companies with whom they have an established business relationship (and that are not otherwise exempt) have shared with third parties for direct marketing purposes during the preceding calendar year, including the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. In order to submit such a request, please contact us at help@allform.com.


VII. Changes to this CPRA Notice 

This CPRA Notice is effective as of the date of the Last Update stated at the top of this CPRA Notice. We may change this CPRA Notice from time to time with or without notice to you. By visiting or accessing the Websites or the Services, or otherwise engaging or interacting with us after we make any such changes to this CPRA Notice, you are deemed to have accepted such changes. Please be aware that, to the extent permitted by applicable law, and without prejudice to the foregoing, our use of your Personal Information is governed by the CPRA Notice in current effect. Please refer back to this CPRA Notice on a regular basis.


VII. How to Contact Us 

If you have any questions or comments about this CPRA Notice, the ways in which we collect and use your information, or your choices and rights regarding such use, please do not hesitate to contact us at: