It is always up to you whether to disclose personally identifiable information to us, although if you elect not to do so, we reserve the right not to register you as a user or provide you with any products or services. This website collects various types of information, such as:

• Voluntarily provided information which may include your name, address, email address, billing and/or credit card information etc. which may be used when you purchase products and/or services and to deliver the services you have requested.
• Information automatically collected when visiting our website, which may include cookies, third party tracking technologies and server logs.

In addition, Lamy Inc. may have the occasion to collect non-personal anonymous demographic information, such as age, gender, household income, political affiliation, race and religion, as well as the type of browser you are using, IP address, or type of operating system, which will assist us in providing and maintaining superior quality service.

Lamy Inc. may also deem it necessary, from time to time, to follow websites that our users may frequent to gleam what types of services and products may be the most popular to customers or the general public.

Please rest assured that this site will only collect personal information that you knowingly and willingly provide to us by way of surveys, completed membership forms, and emails. It is the intent of this site to use personal information only for the purpose for which it was requested, and any additional uses specifically provided for on this Policy.

Facebook Conversion API

We have integrated Facebook Conversion API into this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, based on the information provided by Facebook, the recorded data is also transmitted to the United States and other Non-EU and Non-EEZ countries.

Facebook Conversion API enables us to record the interactions of our website visitors with our website and to share this information with Facebook to improve the promotional performance with Facebook.

To do this, in particular the time you accessed the site, the website you accessed, your IP address and your user agent, as well as, if applicable, other specific data (e.g., purchased products, value of the shopping cart and currency) are tracked. For a complete overview of the tracked data, please visit: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

You may revoke your consent at any time.

If personal data is collected on our website with the assistance of the tool described herein and if it is shared with Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland shall be jointly responsible for the processing of your data, i.e., we are the data controllers. This shared responsibility is limited exclusively to the recording of your data and its sharing with Facebook. The processing that occurs after the data has been shared with Facebook is not part of this shared responsibility. The obligations we share responsibility for have been documented in an agreement on joint processing. The concrete wording of this agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for the provision of the data protection information when using the Facebook tool and for the data protection law compliant secure implementation of the tool on our website. Facebook is liable for the data security of Facebook products. You may request information on your rights as a data subject (e.g., request for information) related to the data processed by Facebook directly from Facebook.

If you claim any data subject rights with us, we are required to forward your request to Facebook. In Facebook’s data privacy policy, you will find additional information pertaining to the protection of your privacy: https://de-de.facebook.com/about/privacy/.

Friendly Captcha

We use Friendly Captcha (hereinafter referred to as “Friendly Captcha”) on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. Friendly Captcha is used to verify whether the entry of data into this website (e.g., into a contact form) is being processed by a person or an automated program. For this purpose, Friendly Captcha analyzes the behavior patterns of website visitors based on numerous characteristics. For the analysis, Friendly Captcha examines a wide range of information (e.g., anonymized IP address, referrer, time of the visit, etc.). For more related information please visit: https://friendlycaptcha.com/legal/privacy-end-users/.

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process the personal data of our website visitors only based on our instructions and in compliance with both UNCTAD and all independent state-initiated regulations.

We are collecting your data for several reasons:

• To better understand your needs and provide you with the services you have requested;
• To fulfill our legitimate interest in improving our services and products;
• To send you promotional emails containing information we think you may like when we have your consent to do so;
• To contact you to fill out surveys or participate in other types of market research, when we have your consent to do so;
• To customize our website according to your online behavior and personal preferences.

The data we collect from you will be stored for no longer than necessary. The length of time we retain said information will be determined based upon the following criteria: the length of time your personal information remains relevant; the length of time it is reasonable to keep records to demonstrate that we have fulfilled our duties and obligations; any limitation periods within which claims might be made; any retention periods prescribed by law or recommended by regulators, professional bodies or associations; the type of contract we have with you, the existence of your consent, and our legitimate interest in keeping such information as stated in this Policy.

Lamy Inc. does not now, nor will it in the future, sell, rent or lease any of its customer lists and/or names to any third parties.

Lamy Inc. may collect and may make use of personal information to assist in the operation of our website and to ensure delivery of the services you need and request. At times, we may find it necessary to use personally identifiable information as a means to keep you informed of other possible products and/or services that may be available to you from Lamy Inc. may also be in contact with you with regards to completing surveys and/or research questionnaires related to your opinion of current or potential future services that may be offered.

Lamy Inc. uses various third-party social media features including but not limited to Instagram and Facebook and other interactive programs. These may collect your IP address and require cookies to work properly. These services are governed by the privacy policies of the providers and are not within Lamy Inc.'s control.

Lamy Inc. may not use or disclose the information provided by you except under the following circumstances:

• as necessary to provide services or products you have ordered;
• in other ways described in this Policy or to which you have otherwise consented;
• in the aggregate with other information in such a way so that your identity cannot reasonably be determined;
• as required by law, or in response to a subpoena or search warrant;
• to outside auditors who have agreed to keep the information confidential;
• as necessary to enforce the Terms of Service;
• as necessary to maintain, safeguard and preserve all the rights and property of Lamy Inc.

Lamy Inc. greatly respects your privacy. We do maintain and reserve the right to contact you if needed for non-marketing purposes (such as bug alerts, security breaches, account issues, and/or changes in Lamy Inc. products and services). In certain circumstances, we may use our website, newspapers, or other public means to post a notice.

Children under the age of 13 Lamy Inc.'s website is not directed to, and does not knowingly collect personal identifiable information from, children under the age of thirteen (13). If it is determined that such information has been inadvertently collected on anyone under the age of thirteen (13), we shall immediately take the necessary steps to ensure that such information is deleted from our system's database, or in the alternative, that verifiable parental consent is obtained for the use and storage of such information. Anyone under the age of thirteen (13) must seek and obtain parent or guardian permission to use this website.

All users and visitors to our website have the option to discontinue receiving communications from us by way of email or newsletters. To discontinue or unsubscribe from our website please send an email that you wish to unsubscribe to customerservice@lamyinc.com. If you wish to unsubscribe or opt-out from any third-party websites, you must go to that specific website to unsubscribe or opt-out. Lamy Inc. will continue to adhere to this Policy with respect to any personal information previously collected.

Our website does contain links to affiliate and other websites. Lamy Inc. does not claim nor accept responsibility for any privacy policies, practices and/or procedures of other such websites.

Therefore, we encourage all users and visitors to be aware when they leave our website and to read the privacy statements of every website that collects personally identifiable information. This Privacy Policy Agreement applies only and solely to the information collected by our website.

Notice to European Union Users

Lamy Inc.'s operations are located primarily in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) and sent to the United States.

(The adequacy decision on the EU-US Privacy became operational on August 1, 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. It allows the free transfer of data to companies that are certified in the US under the Privacy Shield.)

By providing personal information to us, you are consenting to its storage and use as described in this Policy.

Under the regulations of the General Data Protection Regulation ("GDPR") of the EU you have certain rights as a Data Subject. These rights are as follows:

• The right to be informed: this means we must inform you of how we intend to use your personal data and we do this through the terms of this Policy.
• The right of access: this means you have the right to request access to the data we hold about you and we must respond to those requests within one month. You can do this by sending an email to customerservice@lamyinc.com.
• The right to rectification: this means that if you believe some of the date, we hold is incorrect, you have the right to have it corrected. You can do this by logging into your account with us, or by sending us an email with your request.
• The right to erasure: this means you can request that the information we hold be deleted, and we will comply unless we have a compelling reason not to, in which case you will be informed of same. You can do this by sending an email to customerservice@lamyinc.com.
• The right to restrict processing: this means you can change your communication preferences or opt-out of certain communications. You can do this by sending an email to customerservice@lamyinc.com.
• The right of data portability: this means you can obtain and use the data we hold for your own purposes without explanation. If you wish to request a copy of your information, contact us at customerservice@lamyinc.com.
• The right to object: this means you can file a formal objection with us regarding our use of your information with regard to third parties, or its processing where our legal basis is our legitimate interest in it. To do this, please send an email to customerservice@lamyinc.com.

In addition to the rights above, please rest assured that we will always aim to encrypt and anonymize your personal information whenever possible. We also have protocols in place in the unlikely event that we suffer a data breach and we will contact you if your personal information is ever at risk.

Lamy Inc. takes precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline. Wherever we collect sensitive information (e.g. credit card information), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for "https" at the beginning of the address of the webpage.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information.

The computers and servers in which we store personally identifiable information are kept in a secure environment. This is all done to prevent any loss, misuse, unauthorized access, disclosure or modification of the user's personal information under our control.

The company also uses Secure Socket Layer (SSL) for authentication and private communications to build users' trust and confidence in the internet and website use by providing simple and secure access and communication of credit card and personal information. In addition, Lamy Inc. is a licensee of TRUSTe. The website is also secured by VeriSign.

By using this website, you are hereby accepting the terms and conditions stipulated within the Privacy Policy Agreement. If you are not in agreement with our terms and conditions, then you should refrain from further use of our sites. In addition, your continued use of our website following the posting of any updates or changes to our terms and conditions shall mean that you agree and acceptance of such changes.

If you have any questions or concerns regarding the Privacy Policy Agreement related to our website, please feel free to contact us at the following email, telephone number or mailing address.
Email: customerservice@lamyinc.com

Mailing Address:

Lamy Inc.
452 W Broadway
New York, New York
10012

The data controller responsible for your personal information for the purposes of GDPR compliance is:

John Fleury
john.fleury@lamyinc.com
8604902121
452 West Broadway