Effective as of _______June 1______, 2024
 
This Privacy Notice (this “Privacy Notice”) governs your use of, as well as related in-person interactions and phone and email regarding, ACB, Inc.’s (“ACB” or “Advertising Checking Bureau”) retail rewards and incentive program site SSBRewards.com (collectively, the “Site”) operated on behalf of Serta Simmons Bedding, LLC or its affiliates or trusted representatives (“SSB”,” “we,” “us” or “our”).
By accessing or using the Site, you represent and agree that (a) your information will be handled in accordance with this Privacy Notice, as may be amended from time to time; (b) you represent that you have authority to bind yourself to this Privacy Notice, and (c) you are indicating to us that you agree to this Privacy Notice as it is written here on behalf of yourself.
If you do not agree to the terms and conditions of this Privacy Notice, please do not use the Site. The Privacy Notice is part of and incorporated into the Program Terms and Conditions (the “Terms”).

If you are a California resident, please review Section 16 below for California-specific terms.
 
1. Changes to This Privacy Notice
We may revise this Privacy Notice from time to time and when we do so, we will update the date above. We reserve the right to change, modify, add, or remove portions of this Privacy Notice from time to time and in our sole discretion. The most current version of the Notice will govern our collection, use, and disclosure of information about you. If we make material changes to the Notice, we will notify you by email or by posting a notice on the Site. Your continued access to the Site will indicate your acceptance of our updated Notice.
 
2. Purpose of this Privacy Notice
The purpose of this Privacy Notice is to inform you about how we collect, use, and disclose the information collected from and about you and other users of the Site.
 
3. Definitions
The following definitions apply when these terms are used in this Privacy Notice. If a term is not defined in this Privacy Notice, it is defined in the Terms.

“IP Address” refers to “Internet Protocol Address” and means the unique number that allows computers attached to the Internet to know where to send you data (such as the webpages you view) and where the data that you are sending is coming from. 
“Personal Information” means information that, alone or when in combination with other information, identifies, reasonably relates to, or could reasonably be linked to, directly or indirectly, a person or household. Your Personal Information includes, without limitation, your name, address, email address, phone number, IP address, cookie IDs, and device identifiers. Your Personal Information does not include information that we obtain in or transform into an anonymous format which cannot reasonably identify you. However, if we collect Non-Personal Information and link it to your full name or other type of Personal Information, the combination of this data would be “Personal Information.”
"Non-Personal Information” means information that does not identify you as a specific individual, including without limitation anonymous usage statistics including frequency of messaging and interaction with other users, clickstream data other log file data, or social analytics and tracking measurements. We may link your Non-Personal Information to your Personal Information which, in combination, would become, and would be treated as, Personal Information.
“Aggregate Data” is a subset of Non-Personal Information and means Non-Personal Information that we collect about a group or category of User’s or rewards. To "use" or to "process" information means to handle or utilize the information in any way, including without limitation by subjecting the information to statistical or other evaluation or analysis, or by collecting, storing, modifying, deleting, combining the information (including by using cookies on a computer), or by disclosing and/or transferring the information within our company or among our affiliates, partners or to our service providers within the United States or internationally.
 
4. Types of Information We Collect About You
We collect Personal Information, Non-Personal Information, and Aggregate Data as defined above. The categories of information we or our trusted service providers collect from you include:

Name and Contact Information: We and trusted our service providers may collect your name, email address, address, and phone number.

Demographic Information: We may collect demographic information such city, state, and country for you.

Usage Information: We and our service providers may collect data about how you and your devices interact with the Site and our related services. This usage information could include the time, date and user ID associated with any time you log into or out of the Site.

Financial Information: We and our service providers may collect information you provide to us in connection with a transaction. This may include your name and email address, phone number,  shipping information, and government identifiers such as social security number.  Any payment transactions with this Site are handled directly by our financial processor, ACB, which receives and processes financial information (card number, expiration date, and CVV, and ACH information, bank, and bank account information) and other Personal Information about you, your devices, and the network you use to connect to our Site, including IP Address and device identifiers. Such access to and use of Personal Information by ACB is governed by the ACB privacy policy, available at www.acbcoop.com.

Content and Other Information You Provide to Us: We collect additional content and information that you voluntarily provide us, such as comments you share, or content you submit when you contact us via the Site or by email.

Location Information: We also may collect your location (which may include your city, state, zip code). This information may help us process rewards, incentives and related items.

A note about fraud: SSB is aware of identity theft and unlawful practices known as "phishing.” We do not and will not solicit or request your credit card information or national identification numbers in an unsolicited email or telephone communication. If you receive such solicitations or requests that appear to be from us, please contact us at 1 800 216 6747 before responding. More information is available on the Federal Trade Commission’s website.
 
5. How We Collect Your Information
Information we collect from you:
will collect User’s name, email, home address and government identifier, such as social security number, when you register on the site.
will collect your ID and password each time you log into the Site.
may ask you to provide us with certain Personal Information when you communicate with us. When we process a payment, you will likely need to provide Personal Information to us and to our financial processor, ACB
may collect Personal Information from you if you send us Personal Information in an email, via the chat functionality on the Site, or when you type information into certain fields (e.g., an email address field) on the Site.
collect any information that you may choose to post on or via the Site in any public posting areas, such as comments or other feedback. If you choose to submit any such information, you do so at your own risk and by doing so you acknowledge it will not be confidential. If you do not want people to know certain information (your email address, for example), then do not include it in any message you post publicly. Please be extremely careful when disclosing any information in public posting areas. We are not responsible for use by others of information that you post publicly. We may ask you to participate in surveys or polls from time to time. If you decide to participate voluntarily, we may ask you to provide certain information, which may include Personal Information.

Information we collect from other sources:
may disclose to SSB which User(s) have accounts on the Site.
will need to provide us with the User’s name, email, dealer information to set up a User account
has the right to create log-in credentials on the Site for each User.
will need to provide us with the User’s name and email address and set up the scope of the User’s authority to use the Site to create log-in credentials for a User.
If you provide the Personal Information of another individual to us, you represent that you have provided the individual with all necessary notices and have obtained all necessary consents, rights, and authority from that individual to provide SSB with the individual’s Personal Information for our use and control under the terms of this Privacy Notice.
We also receive information, including Personal Information, from our financial processor ACB in connection with issuing your rewards.
Information we collect passively.

For more information on information we collect passively, please review Section 6 below.
 
6. Cookies and Other Similar Technologies
Cookies: A cookie is a small text or data file that is sent to your browser from a website's computer and is stored on your computer's hard drive. Most browsers automatically accept cookies as the default setting but allow you to block, delete, or pre-approve cookies. However, if you do that, certain websites, including our Site may not work fully or properly (e.g., you may not be able to access or use certain pages, features, or functionality). Some of the cookies that we use may be flash cookies/Adobe cookies, which are more persistent in nature. These cookies may not be deleted when your cookies are deleted. If you are interested in learning more about this, you should check your browser to determine where these types of cookies are stored and how they may be deleted. If you wish to block, delete, or pre-approve the use of cookies, you generally must do so on each computer and browser on which you wish to block, prevent, or pre-approve such cookies. These options may not be available on mobile applications.

Server Log Data: When you visit the Site, our servers automatically record information that your browser sends whenever you visit a website. This data may include information such as your IP Address, browser type, the webpage you were visiting before you came to our Site, the pages of our Site that you visit, the time spent on those pages, information for which you may search on our Site, access times and dates, and other statistics. When you log into or log out of the Site, in addition to collecting your ID and password, we collect the date and time of the log-in and log-out. We use this information to track activity on the Site, monitor and analyze use of the Site and for general technical administration of the Site, to improve the Site’s functionality and convenience, and to better serve our customers’ needs and preferences.
Do Not Track” signals or other mechanisms that provide a method to opt out of the collection of information over time and across third-party websites are currently under development. Because they are not yet finalized, we follow the standards in this Privacy Notice, and we will monitor and follow any Do Not Track or similar browser requests when they meet the requirements of applicable laws. More information about “do not track” is available at www.allaboutdnt.org concerning such information. Third parties and website analytics providers are permitted to track which websites you visited prior to and after visiting the Site. We cannot control third-party tracking including technologies that may be used.
 
7. How We Use Your Information
We use your Personal Information (in some cases, in conjunction with Non-Personal Information) to communicate with you, to manage the User’s account and your access to the Site, to answer your questions, to process and consummate transactions with us, to track, monitor, and issue rewards, to display current and historical information about rewards, and to try to solve any problems that you may encounter relating to the same. We use your Personal Information to personalize your experience on the Site and manage, protect, and improve our rewards and the Site.

By using the Site, you are authorizing us to gather, parse, and retain data related to the provision of the Site and your interactions with us.

By providing us with your email address, you agree to receive emails from us.

Aggregate Data helps us to understand trends so that we can better consider new rewards, incentives, services, analyze usage, facilitate payments, or otherwise improve or tailor our offerings. For example, we may collect Aggregate Data about rewards in a particular state (without linking this data to any specific Personal Information about the purchasers).
 
8. How We Share Your Information
We may share or disclose your Personal Information to the following categories of entities and for the following reasons:
To affiliated and unaffiliated service providers who assist us in operating the Site, conducting our business, and providing our services to you.
To law enforcement, government agencies, and other third parties, for complying with the law (or in the good faith belief that such action is necessary), enforcing our website policies, or protecting our or others’ rights, property, or safety.
To third parties as part of any direct or indirect corporate reorganization process including, but not limited to, mergers, acquisitions, and sales of all or substantially all of our assets.
To protect against potential fraud, we may verify with our service providers the information collected from the Site.
As otherwise described at the point of collection or otherwise pursuant to your consent.
With our trusted affiliated and unaffiliated service providers who are helping us process rewards and incentives.
These service providers also may collect or have access to Personal Information from our Site. Such service providers are not authorized to use the Personal Information for any purpose other than to help process the rewards and incentive-related services for which they are engaged.
Please let us know via 1(800)216-6747 if you want a list of such service providers. We reserve the right to share with service providers, for any reason not disclosed above, any Non-Personal Information, including Aggregate Data. We may do this for any business purposes, including industry analysis, and demographic profiling. Any Aggregate Data shared in these contexts will not contain your Personal Information.
 
9. Security
You must not share your login credentials with anyone else.  If you lose control of your login credentials, you may lose substantial control over your personally identifiable information and may be subject to legally binding actions taken on your behalf. 
NOTE:  If your login credentials have been compromised for any reason, you should promptly e-mail us at support@ssbrewards.com and notify us that your credentials have been compromised. 
We take reasonable steps to safeguard your Personal Information in accordance with this Privacy Notice. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. As such, we cannot promise, ensure, or warrant the security of any information that you may provide to us.

We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored personal information (as defined in applicable state statutes concerning security breach notifications) to you via email or conspicuous posting on the Site as promptly as possible, and without unreasonable delay, taking into account the legitimate needs of law enforcement or any measures necessary to determine the scope of the breach and/or to restore the reasonable integrity of the affected data system.

You may have a legal right to receive any such notice in writing. To receive free written notice of any security breach, or otherwise to withdraw your consent from receiving electronic notices, please notify us at 1(800)216-6747.
 
10. Compliance with Law and Law Enforcement
We may access, preserve, and disclose your Personal Information, other account information, and content if we believe that doing so is required or appropriate in order to comply with law enforcement requests, other legal obligations, to respond to your requests, or protect your, our, or other parties’ rights, property, safety, or welfare.
 
11. International Transfer
We are based in the U.S., which maintains your Personal Information within the U.S. By providing your Personal Information, you agree to the use of your Personal information for the uses identified above in accordance with this Privacy Notice and to the transfer of your Personal Information within the U.S. as indicated above, in accordance with applicable law.

If you choose to provide us with Personal Information, you agree that any dispute over privacy or this Privacy Notice will be governed in accordance with the Terms.
 
12. Links to Other Websites, Including Social Media Platforms
This Privacy Notice does not apply to information collected by other websites, including those linked to on the Site. The Site may provide links to other websites. We do not screen, have no control over, and are not responsible in any way for the content or privacy practices of such other websites or the persons or organizations that operate them. Likewise, no link to a third-party website, banner ad, or other advertisement for a third party should be construed as our endorsement, authorization, or indicia of any SSB affiliation with such other entity (or such entity’s privacy or information security policies or practices). Other websites may follow different rules relating to the collection, use, and/or disclosure of the personal information you may submit. We encourage you to read the privacy policies or statements of any other websites you visit.
 
13. Children
The Site does not knowingly target children under the age of 13, and SSB does not knowingly collect Personal Information from any child under the age of 13. If we learn that any such information has been provided to us via the Site, we will delete or destroy it. If you believe that Personal Information about your child or another child under the age of 13 has been transmitted through the Site, please contact us at 1(800)216-6747.
 
14. Business Transfers
In the event that all or part of our assets are sold or acquired by another party, or in the event of a merger, you grant us the right to assign the Personal and Non-Personal Information collected via the Site.
 
15. Opting-Out and Other Individual Rights
If you receive a marketing email from us that you would prefer not to have received, you can use the “unsubscribe” link found at the bottom of the email to “opt out” of receiving future emails to request the same. We will comply with your request. If you consent to our providing your e-mail address to a third party to receive their separate marketing communications, please contact the third-party to opt-out of their communications.
 
16. California Privacy Rights
Pursuant to Section 1798.83 of the California Civil Code, California residents have the right to request from a business with whom the California resident has an established business relationship what types of Personal Information, if any, the business shares with third parties for direct marketing purposes by such third parties and the identities of the third parties with whom the business has shared such information in the immediately preceding calendar year.

If you are a California resident who is a consumer, in addition to the rights listed in Section 15 above, you have certain rights, pursuant to the California Consumer Privacy Act of 2018, as amended (“CCPA”). The terms in this Section 16 are defined as in the CCPA. The Site collects Personal Information during direct communications with SSB employees, and ACB communicates with us to process rewards and incentives on the Site. These CCPA rights may only apply in certain circumstances and are subject to certain exemptions. Please see the table below for a summary of your rights. You can exercise these rights using the contact details below.
Right to Know As a California resident who is a consumer, you have the right to request that we disclose the following information:
The categories of personal information we have collected about you.
The categories of sources from which the personal information is collected.
The business or commercial purpose for collecting or “selling” or “sharing” your personal information.
The specific pieces of personal information we have collected about you.
The categories of personal information we have “sold” or “shared” or disclosed about you for a business purpose, and the categories of third parties to whom your personal information was “sold” or “shared” disclosed for a business purpose.

Right to Request Deletion As a California resident who is a consumer, you have a right to request the deletion of your personal information collected or maintained by us.
Right to Correct As a California resident who is a consumer, you have a right to request that we correct inaccurate personal information collected or maintained by us.
Right to Limit the Use and Disclosure of Sensitive Personal Information A business must only provide the Right to Limit the Use and Disclosure of Sensitive Personal Information when such sensitive personal information is collected or processed for the purpose of inferring characteristics about a consumer, or does not fall under certain statutory exceptions, pursuant to CPRA §1798.121. Our use and disclosure of sensitive personal information is not used for such purpose and/or falls within the statutory exceptions, and we therefore do not offer this right at this time.
Right to Opt out of Sale We do not sell your Personal Information in connection with the Site.
Right to Non-Discrimination As a California resident, you have a right not to receive discriminatory treatment by us for the exercise of any of your CCPA rights.
Authorized Agent As a California resident, you can exercise your CCPA rights, or you can designate an authorized agent to make a request on your behalf.
Contact Us for More Information If you have questions about this Privacy Notice, including anything in this section about your CCPA rights, please contact us using the contact methods listed below.
 
Categories of Personal Information of California Consumers:
Category of Personal Information Source(s) of Personal Information Business or Commercial Purpose for Which It Was Collected Categories of Third Parties with Whom the Business Shares Personal Information
Identifiers (name, postal address, email address, unique personal identifier, online identifier, Internet Protocol address, social security number) From ACB Representatives

via our service providers Performing services on behalf of the business including providing customer service,  processing or fulfilling orders and transactions, verifying customer information With vendors, affiliates, strategic partners, agents, for administrative, legal, and/or internal business purposes
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (name, address, telephone number, social security number) From ACB Representatives

via our service providers Performing services on behalf of the business including providing customer service,  processing or fulfilling orders and transactions, verifying customer information With vendors, affiliates, strategic partners, agents, for administrative, legal, and/or internal business purposes
Commercial information including records of rewards or incentives From ACB Representatives

via our service providers Performing services on behalf of the business including providing customer service,  processing or fulfilling orders and transactions, verifying customer information With vendors, affiliates, strategic partners, agents, for administrative, legal, and/or internal business purposes

 
Verifying Your Requests
Any request from you must be a request we can reasonably verify, and you must also describe your request with enough detail so that we can understand, evaluate and respond to it. Making such a request does not require you to create an account with us.
When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with information, beyond your full name, in order to verify your identity and fulfill your request, such as your mailing address, phone number (if you have provided it), and email address that you have used to interact with SSB. We will take reasonable steps to verify your identity based upon the information you provide and the type of request you are making. We may ask for additional information as needed to fully verify your request.
If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request.
Authorized Agents:
You may designate an authorized agent to make a request under the CCPA on the your behalf.
If you are an individual submitting a request on behalf of a California resident, you are required to submit either a valid power of attorney or a signed letter of authorization from the consumer AND must download (from the link below), complete and attach the affidavit located on the request webform.
If you are a business submitting on behalf of a California resident, you will be required to download (from the link below), complete and attach a Business Entity Authorized Agent form as well as the notarized authorization you received form the resident to act on their behalf.

If you are a California resident who is a consumer, you may exercise your rights under the CCPA by clicking here or by calling 1 800 216 6747 Monday – Friday 8:30 AM to 2:30 PM EST.
You may also mail your request to:
Serta Simmons Bedding, LLC
Attn: Consumer Services Department (CCPA)
2451 Industry Avenue
Doraville, GA 30360

In order to verify your request and identify any associated information within our systems, you must provide your full name, email address, phone number and current California address.

If you would like to print a copy of this Privacy Notice, please select the “Print” button in your web browser.

17. How Long Do We Keep Your Information?
We:
maintain an internal data retention policy, which reflects retention schedules that are reasonably necessary and proportionate to achieve the purposes for which data was collected as described in this Privacy Notice. 
will delete or anonymize data in accordance with that policy when we have no ongoing legal basis to process your Personal Information, but we may need to keep information longer in certain circumstances, such as when it is required for legal compliance (e.g., tax, accounting, or other legal requirements).
we will securely store your Personal Information and isolate it from any further processing if this is not possible to either delete or anonymize such information (for example, because your Personal Information has been stored in backup archives) until deletion is possible. 

18. Contact Information
If you have any questions about this Privacy Notice, would like to exercise your rights, or if you have suggestions on how we might improve this Privacy Notice, please contact us 1(800)216-6747.