Byram Baby Privacy Policy

Last Updated: 03/12/2025

This Byram Baby Privacy Policy (“Privacy Policy”) describes how Lofta, Inc., including its affiliates and subsidiaries (“we,” “our,” or “us”), collects, uses, maintains, discloses, and otherwise processes Personal Information through (the “Site”), or otherwise interact with us online or offline (with the Site, the “Services”).

This Privacy Policy does not apply to protected health information as defined by the Health Insurance Portability and Accountability Act (“HIPAA”). Information regarding privacy practices applicable to your protected health information under HIPAA can be found in the Notice of Privacy Practices provided to you at the time of collection.

By using our Services, you acknowledge the disclosures in this Privacy Policy and agree to our . Different or additional terms and policies may apply to other services we provide.

Contents

Personal Information We Collect
Sources of Personal Information
How We Use Personal Information
How We Disclose Personal Information
Cookies and Other Similar Technologies
External Links and Online Chat
Data Security
Your Choices
Additional U.S. State Privacy Law Disclosures
Information for Visitors Outside the United States
Changes
Contact Us

1. Personal Information We Collect

“Personal Information” is information that identifies, relates to, describes, is reasonably capable of being associated with, linked, or may reasonably be linkable, directly or indirectly, to you. “Personal Information” includes “Personal Data” and “Sensitive Personal Information” as defined under applicable privacy law. Personal Information does not include information that is publicly available, deidentified, or aggregated.

Generally, we or our vendors may obtain the following categories of Personal Information, depending on how you interact with us:

Identifiers and Personal Records, such as a name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, or other similar identifiers, signature, physical characteristics or description, telephone number, employment, employment history, insurance policy number, financial information, medical information, or health insurance information.
Demographic Information, including age, date of birth, and gender.
Commercial Information, including records of products purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or Other Electronic Network Activity Information, including browsing history, search history, and information regarding your interactions with our websites or advertisements.
Geolocation Data, including approximate location inferred from your device IP address.
Sensory Data, including audio recordings of customer service calls.
Professional or Employment-Related Information, including your employer where insurance is provided by your employer.
Inferences reflecting consumers’ preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

2. Sources of Personal Information

Generally, we collect the categories of Personal Information described above from the following sources:

Directly from you.
From our affiliated companies.
Automatically when you visit our Services (such as through cookies, pixels, and other tracking technologies).
Created by us (for example, if assign you with a login or develop inferences about you).
From entities you have requested or authorized in connection with our Services.
From service providers that help us to run our business.
From third parties including advertising networks, social networks, internet service providers, and data analytics providers.

3. How We Use Personal Information

Generally, we use the Personal Information we collect for the following business or commercial purposes:

To Provide Services You Request, including by operating and maintaining our services; providing information about our services; processing your payments and orders; communicating with you about our services; and responding to your requests and questions.
To Improve How We Do Business, including improving our services; assessing our services’ performance; tracking and responding to technical issues; and developing new or enhanced offerings.
To Conduct Business Analytics, including forecasting and planning, developing statistics on engagement with our services, and measuring how well marketing and promotional activities perform.
For Security and Integrity, including protecting our Services from cyber risks; authenticating visitors to our Services; preventing, identifying, investigating, and responding to fraud, illegal or malicious activities, and other liabilities; enforcing our policies and terms; protecting our rights; fulfilling our legal obligations; and generally providing you with a secure experience when using our Services.
For Quality, Safety, and Internal Research, including evaluating how our services perform; repairing or improving the quality of our services; tracking and responding to quality and security issues; and developing new or enhanced products and service offerings.
To Advertise and Market, including measuring the use of our services and effectiveness of our advertising and marketing; and uncovering insights to improve our services and provide our users with enhanced features and functionalities, such as personalized experiences.
To Operate Our Business, including performing system administration and technology management, including optimizing our services; for recordkeeping and auditing purposes; for risk management, investigations, reporting and other legal and compliance reasons; identifying prospective customers, business clients, suppliers, and other vendors; administering our relationships with our customers, business clients, suppliers, and other vendors; fulling purposes that we describe to you at the time we collect your information and in connection with mergers, acquisitions, divestitures, or similar corporate transactions.

We also may use the information we obtain about you in other ways for which we provide notice at the time of collection.

4. How We Disclose Personal Information

We may disclose Personal Information to other parties for the following purposes:

Within our group of companies, including with our affiliates and subsidiaries.
Service Providers and Vendors. We may disclose your information with vendors and service providers that we engage to provide services to us on our behalf, such as support for the internal operations of our services (including payment processors we use to process orders on our behalf); electronic mail; conducting analysis to improve our services; research; digital marketing; managing payments; and answering your questions.
Ad Tech Companies and Other Providers. We may disclose certain Personal Information (such as Internet or Other Electronic Network Activity) with ad tech companies and other online providers of services.
Business Partners. We may disclose or otherwise make your information available to business partners for an approved business purpose.
Corporate Transactions. We may disclose Personal Information to prospective or actual purchasers, investors, or successor entities in connection with a contemplated reorganization or an actual reorganization of our business, in connection with financing, a sale, or other transactions involving the disposal of all or part of our business or assets, including for the purpose of permitting the due diligence required to decide whether to proceed with a transaction.
Legal Compliance. We may disclose Personal Information as necessary for legal compliance and law enforcement or public safety purposes, including to law enforcement, government or regulatory bodies, or other authorized parties in order to comply with laws, regulations, subpoenas, court orders, or other legal obligations; to assist in investigations; to protect and defend our rights and property or the rights or safety of other parties; to enforce our Terms of Use, this Privacy Policy, or agreements with others; or for crime-prevention purposes.
With Notice or Consent. We may also disclose information about you, including Personal Information to other parties, where we have provided specific notice to you or asked for your consent, as applicable.

We may combine your Personal Information with data we obtain from our Site, our Services, or from other parties. We reserve the right to convert, or permit others to convert, your Personal Information into deidentified, anonymized, or aggregated data, as permitted by law.

5. Cookies and Other Similar Technologies

We and our vendors may use cookies, web beacons, pixels, APIs, and other similar technologies (collectively, “Cookies”) to collect information when you interact with our Services. These Cookies may collect usage information (such as the browser you are using, IP address and device identifier, length and time of visit, and pages visited), and general geolocation data (to deliver content based on your location).

This information is used by us and our vendors for a variety of purposes, including to store your preferences and settings, enable you to sign in, analyze how our Services performs, track your interactions with our Services, develop inferences about you, deliver and tailor cross-context and/or interest-based advertising, combat fraud, and to fulfill other business purposes.

We may implement data modification and obfuscation tools to help limit information collected by vendors through Cookies. These tools act as an intermediary between the Services and the Cookies by allowing us to adjust how Cookies interact with our Services.

We may also engage analytics services (such as Google Analytics and the Meta Pixel) to help us understand and analyze how visitors interact with our Services. We use such data to understand and analyze how visitors use our Services, help us administer and improve the quality of our Services. For more information on how Google Analytics uses data, visit support.google.com/analytics/answer/6004245. To opt out of aggregation and analysis of data collected by Google Analytics, please visit tools.google.com/dlpage/gaoptout. To change your settings with Facebook, login to your Facebook account and navigate to the Privacy Center at facebook.com/privacy/center or review your Ad Preferences at facebook.com/adpreferences.

Our online tracking technology vendors may include:

For more information on how Adobe uses data collected through tracking technologies, visit
We use Google Analytics, through which we implement Google advertising features such as dynamic remarketing, interest-based advertising, audience targeting, behavioral reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, video ads reporting, and impression reporting. To adjust your Google advertising settings, visit adssettings.google.com.
Microsoft Advertising. For information on how Microsoft collects or receives Personal Information to provide services through Microsoft Advertising, visit com/en-us/privacy/privacystatement.
YouTube API Services may collect, store, use, process and share personal information, including from your devices, as described in this Privacy Policy and to serve content. You can revoke access to your personal information collected and processed through the YouTube API Services using Google’s security settings at security.google.com/settings/security/permissions.

Additional options for opting out of interest-based advertising are available through tools provided by the Network Advertising Initiative (NAI) and the Digital Advertising Alliance (DAA). Your browser or extension may also allow you to automatically transmit Do Not Track signals. Like many websites, our Site does not respond to Do Not Track signals.

We are not responsible for the effectiveness of external parties’ opt out options or programs, or the accuracy of their statements regarding their programs. Note that opting out of these types of technologies may result in certain online features not functioning properly.

We or our vendors may collect Personal Information about your online activities over time and across different devices and online websites when you access our Services.

6. External Links and Online Chat

Our Services may contain links to, or features facilitated by, other online services. For example, you may voluntarily choose to interact with a chat feature on our Site for customer service purposes. When you use this interactive chat with a live agent, we and our vendors may process the information obtained through the chat, including capturing and keeping the contents of the chat as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf.

This Privacy Policy does not apply to the practices of companies that we do not own or control. If you choose to connect an external account to our Services, you should refer to that party’s privacy policy for information on how your Personal Information is collected, used, and protected.

7. Data Security

We maintain appropriate administrative, technical, and physical safeguards designed to help protect Personal Information collected or received through our services. Although we take commercially reasonable and appropriate steps to protect Personal Information from loss, misuse and unauthorized access, disclosure, alteration, or destruction, please keep in mind that there is no such thing as perfect security, and no internet transmission is ever completely secure or error-free.

8. Your Choices

If you hold an account with us, you can delete your account through your account settings.

You can also opt out of receiving certain communications from us. If you sign up to receive emails from us, we may periodically send you emails regarding promotions and special offers. If you no longer want to receive our promotional email communications, you can unsubscribe by clicking on the “unsubscribe” link found in our emails. If you opt out of our promotional emails, we may still send you email messages related to your account or any products or services you request from us.

9. Additional U.S. State Privacy Law Disclosures

This section applies to Personal Information we collect through our services from residents of states with comprehensive privacy laws, including the California Consumer Privacy Act (“CCPA”) (collectively “Applicable States”).

In the event of a conflict between this section and the Privacy Policy, this section will govern Applicable State residents' privacy rights.

a. Targeted Advertising, Sales, and Sharing of Personal Information

Although we do not sell Personal Information in exchange for money, some of the ways in which we disclose Personal Information for targeted advertising or analytics may be considered “sales” or “sharing” for targeted and cross-context behavioral advertising (“Targeted Advertising”). You have the right to opt out of both practices. Information on how to exercise your opt out rights, as well as other rights you may have are described below.

We may sell or share for Targeted Advertising the following categories of Personal Information: Identifiers and Personal Records, Internet or Other Electronic Network Activity, and Geolocation Data.

The types of third parties to which Personal Information is sold or shared are third-party advertisers and some analytics vendors. The purposes for which we sell/share this information include: showing you relevant ads while you browse the internet or use social media; marketing, advertising, certain types of analytics, and similar purposes.

We do not have actual knowledge that we sell or share the Personal Information of consumers under 16 years of age.

b. How to Exercise Your Privacy Rights

If you are a resident of an Applicable State, you may, depending on your state of residency, have the right to submit a request relating to your Personal Information by emailing use at privacy@lofta.com [or calling us at [TOLL-FREE PHONE NUMBER]].

Please note that we may need to authenticate your identity before your request can be processed. In some states and for some types of requests, you may designate an authorized agent to make a request on your behalf; however, you may still need to verify your identity directly with us before your request can be processed.

An authorized agent may submit a request on your behalf by emailing us at privacy@lofta.com or calling us at [TOLL-FREE PHONE NUMBER]].

We will not discriminate against you if you choose to exercise any of your privacy rights under the Applicable State privacy laws.

Request to Access and Data Portability. You may have the right to confirm that we process your Personal Information, know details about the Personal Information we process, and access your Personal Information. Residents of certain Applicable States may also request details about a list of third parties to which we have disclosed Personal Information. California residents may also request:

The categories of sources from which the Personal Information was collected.
Our purposes for collecting, selling, sharing, or disclosing Personal Information.
The categories of recipients to which we disclose Personal Information.
The categories of Personal Information that we sold or shared, and for each category identified, the categories of third parties to which we sold or shared that particular category of Personal Information.
The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information.

Right to Data Portability. You may have the right to request a copy of your Personal Information in a portable format.

Request to Correct. You may request that we correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and our purposes for processing it.

Request to Delete. You may request that we delete your Personal Information.

Request to Opt Out of Sales and Targeted Advertising. You may request to opt out of sales and/or Targeted Advertising. To opt out of sales and/or Targeted Advertising via Cookies, please click on the “Do Not Sell or Share My Personal Information” link located in the footer of our Site to open our Cookie preference center. Please also note that if you choose to use the

Request to Appeal. Sometimes we are unable to process requests relating to your Personal Information, in which case, your request will be denied. If you believe we denied it in error, you may appeal for reconsideration of your request by emailing us at privacy@lofta.com pr calling us at [TOLL-FREE PHONE NUMBER]].

We also do not use Personal Information for profiling or automated decision-making in furtherance of decisions that produce legal or similarly significant effects.

We will comply with your request as soon as reasonably practicable, in accordance with applicable legal requirements. We will not discriminate against you for choosing to exercise any of your privacy rights.

c. Additional Disclosures for California Residents

This section is provided pursuant to the CCPA and applies to residents of California. Unless otherwise noted, the disclosures contained within this section cover our activities in the prior twelve (12) months from the Effective Date as well as our current practices.

i. Job Applicants

If you apply for a job with us, we also use your Personal Information to facilitate our recruitment and hiring process, including opening and maintaining your applicant record; assessing your eligibility for employment; communicating with you regarding your application and the recruitment process; confirming your right to work; and making any accommodations. In addition to the parties identified in the “How We Disclose Personal Information” section above, we may also disclose Personal Information we process for recruiting with your references and our verification providers.

ii. How Long We Keep Personal Information

We keep the categories of Personal Information described above for as long as necessary for the purposes described in this Privacy Policy or as otherwise authorized by law. This generally means holding Personal Information for as long as one of the following apply:

Your Personal Information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
Your Personal Information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the Personal Information was collected;
The Personal Information is reasonably required to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
We are otherwise required or permitted to keep your Personal Information by applicable laws or regulations.

Where Personal Information is used for more than one purpose, we will retain it until the purpose with the latest period expires.

iii. Shine the Light Law

California's "Shine the Light" law permits California residents to request certain information regarding our disclosure of certain personal information to third parties for their own direct marketing purposes. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us by email or postal mail using the information provided in the “Contact Us” section. Any such request must include "California Shine the Light Request" in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each calendar year.

10. Information for Visitors Outside the United States

If you access the Services from outside of the United States, please be aware that Personal Information collected through the Services may be transferred to, processed, stored, and used in the United States. Data protection laws in the United States may be different from those of your country of residence. Your use of the Services or provision of any Personal Information to us constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of your information in the United States as set forth in this Privacy Policy.

11. Changes

We may periodically update this Privacy Policy and will notify you by revising the “Last Updated” date at the top of this page. Please refer back to this Privacy Policy from time to time to ensure you are aware of our most current privacy practices.

12. Contact Us

If you have any questions about this Privacy Policy, you may contact us at [EMAIL ADDRESS, MAILING ADDRESS, TOLL-FREE NUMBER].