Thank you for visiting this website, a digital service presented to you by Kimball Midwest (“we”, “our” or “us”). Your privacy is important to us, and we are committed to protecting it through our compliance with this policy (“Privacy Policy”).
This Privacy Policy explains our privacy practices and the choices you can make about the way your personal data is collected, used, and shared when you use our Services. The Services include the online and mobile websites, applications, and digital services owned, operated and offered by Kimball Midwest, including online or mobile website, application or digital service installation through which this Privacy Policy appears (each a “Service,” collectively “Services”). It does not apply to information we collect offline, or to third party websites, applications, or services. Persons that use the Services are “Users” (“you” or “your”).
Kimball Midwest is the data controller and responsible for the processing of your personal data via the Services. If you have any questions, comments, requests, or concerns related to this Privacy Policy or our privacy practices, or if you would like to opt-out of future communications our exercise your other privacy-related rights, please feel free to contact us.
Write Us:
Kimball Midwest
Attn: Privacy Policy Inquiry
4800 Roberts Road
Columbus, OH 43026
Call Us:
1-(800)-233-1294
Email Us:
kmprivacy@kimballmidwest.com
We need to process your personal data to operate our organization and provide you with certain Services. Before accessing, using, or interacting with the Services you should carefully review the terms and conditions of this Privacy Policy. Your use of the Services is further governed by our Terms and Conditions located at https://www.kimballmidwest.com/TermsAndConditions/, which is also incorporated into your agreement by this reference.
By accepting our Privacy Policy and Terms of Service, you are confirming that you have read and understood these policies, including how and why we use your personal data. If you don’t want us to collect or process your personal data in the ways described in this Privacy Policy, you should not use the Services. Please note we are not responsible for the content or the privacy policies or practices of any third party organization or service.
The Services are not directed to children under the age of 18. You may not use the Services if you are under the age of 18. If you are under the age of 18, you should not provide any information on our Services.
Although this Service may be linked to other websites, Kimball Midwest is not, directly or indirectly, implying any approval, association, sponsorship, endorsement, or affiliation with the linked site, unless specifically stated therein. By entering this Service, you acknowledge and agree that Kimball Midwest has not reviewed all the sites linked to this Service and is not responsible for the content of any off-site pages or any other site linked to this Service. Your linking to any other off-site pages or other sites is at your own risk.
We receive both information that is directly provided to us, such as personal data you provide when you visit, use or interact with our Services, and information that automatically collected from you, such as anonymous information collected from your browser or device.
We rely on a number of legal bases to process the information we receive about you from your use of the Services, including where: (1) you have consented to the processing; (2) the processing is necessary to perform the contractual obligations in order to provide the Services to you, including those of our Terms and Conditions; (3) necessary to comply with a legal obligation, a court order, or to exercise or defend legal claims; (4) necessary to protect your vital interests, or those of others; (5) necessary in the public interest; (6) necessary for the purposes of our or a third party’s legitimate interests, such as those of visitors, users, or partners; and (7) you have expressly made the information public.
Where we process your information on the basis of consent, we will clearly obtain your opt-in consent. Where given, you may withdraw your consent at any time by following the unsubscribe instructions found in any marketing email we send. Where we process your information on the basis of legitimate interests, we do so where the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
The types of information we may collect about you include:
We generally process the information you provide to us on the legal basis of our legitimate interests in performing the function or service you requested. Where appropriate, we may rely on alternate legal bases, such as your consent to certain types of processing.
Account Information: Certain Services users may register for an account (a “Services Account”). We do not require you to register to use our Services. However, if you do register a Services Account, you will gain access to those areas and features of the Services that require registration. We will collect certain information about you in connection with your registration for a Services Account, which may include personal data and other information such as a username and password.
Payment Transaction Information: We may collect, and store information related to purchases and donations made through the Services. You may provide certain information to complete payments via the Services, including your credit or debit card number, card expiration date, CVV code, and billing address (collectively, “Payment Information”), along with your name and billing, delivery and shipping address, to complete payment transactions through certain services.
Please note we work with Service Providers (as defined below) to handle payment transactions. We do not collect or maintain your credit card or other financial account information; this information is handled for us by our Service Providers. You are subject to the Privacy Policies and Terms and Conditions of our Service Providers when utilizing a third party service through our Services. Please review the Service Providers’ privacy policies and terms of use before using their services.
Correspondence Information: If you purchase our products, sign up for our services, email us, subscribe to our blog, newsletters, or mailing lists, we may keep your message, email address, and contact information to respond to your requests, provide the requested products or Services, and to provide notifications or other correspondences to you. We do not share or sell any personal data to other organizations for commercial purposes.
If you do not want to receive communications from us in the future, please follow the unsubscribe instructions found in any e-mail we send. If you supply us with your postal address, you may receive periodic mailings from us with information on new products and services or upcoming events.
Please note requests to remove your email address from our lists may take some time to fulfil. We may also still contact you as needed to provide important announcements or notifications regarding the Services.
Support Information: You may provide information to us via a support request submitted through the Services. We will use this information to assist you with your support request and may maintain this information to assist you or other users with support requests. Please do not submit any information to us via a support submission, including confidential or sensitive information that you do not wish for our Service Providers to have access to or use in the future.
Form Information: We may use forms to request certain information from you on the Services, such as your contact information to assist with contacts or service requests. This information may include personal data.
We use automatic data collection and analytics technologies to collect aggregate and user-specific information about your equipment, domain name, patterns of use, communication data and the resources that you access and use on the Services, including your IP address, browsing and navigation patterns. This information is used to improve our Services.
We generally process information collected automatically on the legal basis of our legitimate interests in assessing the use of its Services. Where appropriate, we may rely on alternate legal bases, such as your consent to certain types of processing.
Information we collect automatically through your use of the Services includes:
Internet Browser: Your Internet browser automatically transmits certain anonymous information when you use certain Services. As you navigate through our Services, Kimball Midwest and our partners who include third party Service Providers (as defined below) we engage to help provide our Services, may use automated means to collect various types of information about you, your computer or other device used to access our Services.
A representative, non-exhaustive list of the types of automatically collected information may include: network or Internet protocol address and type of browser you are using (e.g. Chrome, Safari, Firefox, Internet Explorer), the type of operating system you are using (e.g., Microsoft Windows or Mac OS), the name of your Internet service provider (e.g. Comcast, Verizon or AT&T) and domains used by such providers, mobile network, device identifiers (such as an Apple IDFA or an Android Advertising ID), device settings, browser settings, the web pages of the Services you have visited, Services visited before and after your visit a Service, the type of handheld or mobile device used to view the Service (e.g. iOS, Android), location information, and the content and advertisements you have accessed, seen, forwarded and/or clicked on. Kimball Midwest may use this information to customize your experience on our site. You may set your browser to notify you when a cookie is sent or to refuse cookies altogether, but certain features of this site may not work without cookies.
We, along with our Service Providers, may use and combine such collected anonymous information to provide better service to site visitors, tailor the site based on your preferences, compile and analyze statistics and trends, monitor website activity and performance and otherwise administer and improve the site for your use. However, such information is not combined with your personal data collected.
Geo-location Information: If you are accessing our Services from a mobile device or through a mobile application, you may be asked to share your precise (GPS level) geo-location information with us so we can customize your experience on our Services. If you agree to such collection, in most cases, you will be able to turn off such data collection at any time by accessing the privacy settings of your mobile device and/or through the setting in the applicable mobile application.
Information Collected By and From Social Media Services and Other Third Party Platforms: Users can engage in content on or through social media services or other third party platforms, such as Facebook, or other third-party social media plug-ins, integrations and applications. When you engage in our content on or through social media services or other third party platforms, plug-ins, integrations or applications, you may allow us to have access to certain information in your profile. This may include your name, email address, photo, gender, birthday, location, and ID associated with the applicable third party platform or social media account user files, like photos and videos, your list of friends or connections, people you follow and/or who follow you, or your posts or “likes.” For a description on how social media services and other third party platforms, plug-ins, integrations or applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings.
When we interact with you through our content on third party websites, applications, integrations or platforms, we may obtain any information regarding your interaction with that content, such as content you have viewed and information about advertisements within the content you have been shown or may have clicked on.
Analytics Information: We use data analytics to ensure site functionality and improve the Services. We use mobile analytics software to allow us to understand the functionality of the Services on your phone. This software may record information such as how often you use the Services, what happens within the Services, aggregated usage, performance data, app errors and debugging information, and where the Services were downloaded from. We do not link the information we store within the analytics software to any personal data that you submit within the mobile application.
Log File Information: When you use our Services, we may receive log file information such as your IP address, browser type, access times, domain names operating system, the referring web page(s), pages visited, location, your mobile carrier, device information (including device and application IDs), search terms, and cookie information. We receive log file data when you interact with our Services, for example, when you visit our website, sign into our Services, or interact with our email notifications. We use log file data to provide, understand, and improve our Services, and to customize the content we show you. We may link this log file to other information we collects about you via the Services.
Public Information: We may also collect information about you from publicly available sources. Information you make publicly available in any public or open forum, such as on a social network, may be considered public information for the purposes of this Privacy Policy, and may be accessed and collected by us. Please be aware that any content or information you share with or provide to third parties using or related to your use of the Services are neither private, nor confidential. We are not responsible for any content or information you post or share with third parties. If you do not wish for certain information to be public, please do not share it publicly.
We use the information we receive about you for the purposes described in this Privacy Policy. We generally process personal data received about you through our Services on the legal basis of our legitimate interests in providing the Services and their functionality to you where such processing is necessary for the purposes of the legitimate interests pursued by us or by our Service Providers related to the Services. Where appropriate, we may rely on alternate legal bases, such as your consent to certain types of processing.
We will generally use your information in the following circumstances on the legal basis of legitimate interests to provide the Services requested:
Kimball Midwest may use your personal data collected from you to:
If you choose to create or update a kimballmidwest.com account, you may save personal data in that account, to include name, email address, shipping and billing addresses, and credit card information. This option is intended to streamline your shopping experience as it allows us to access your pre-saved information at checkout rather than requiring you to enter the information for each online order.
When you provide information from your social media account, it can help enable us to do things like (1) give you exclusive content, (2) personalize your online experience with us within and outside our Services, (2) contact you through the social media service or directly by sending you the latest news, special offerings, and rewards, and (4) enable you to share your experience and content via social media services. When you provide information about yourself to us through an application, through our Services, or on social media services or other third-party platforms, it may be publicly viewed by other members of these services, and we cannot prevent further use of the information by third parties.
Keeping Our Services Safe And Secure: We may also use your information for safety and security purposes, including sharing of your information for such purposes, and we do so because it is necessary to pursue our legitimate interests in ensuring the security of our Services, including enhancing protection of our community against spam, harassment, intellectual property infringement, crime, and security risks of all kind.
When you access or use the Services, we collect, use, share, and otherwise process your personal data as described in this Privacy Policy. We will not share, sell, rent, or otherwise disclose your private personal data to third parties without your consent or another valid legal basis permitted by law.
We will share your information in the following circumstances on the legal basis of the legitimate interests of providing the requested Services:
Kimball Midwest uses third parties to support our business and provide services such as receiving, processing and fulfilling orders, encrypting credit card data as a further measure of securing the data, processing credit card payments, processing product reviews, technical support, and providing comparative performance information relative to our site (“Service Providers”). These third parties have only limited access to your information and may use your information only to perform these tasks on our behalf. Information we share to our Service Providers may include both information you provide to us and information we collect about you, including personal data and information from data collection tools like cookies, web beacons, and log files.
We may disclose the personal data that you have provided to us to Service Providers that we have engaged to perform business-related functions on our behalf, but only:
(i) to contractors we use to support our business (such as fulfillment services, technical support, delivery services, and financial institutions) or assist in providing the Services, in which case we will require such third parties to agree to treat your personal data in accordance with this Privacy Policy and use it for the same purposes;
(ii) in connection about the sale, assignment, merger or other transfer of the business of this site to which the information relates, in which case we will require any such buyer to agree to treat your personal data in accordance with this Privacy Policy and use it for the same purposes; or
(iii) to respond to law enforcement requests or where required by applicable laws, court orders, or government regulations.
Business Transactions: We may purchase other businesses or their assets, sell our business assets, or be involved in a bankruptcy, merger, acquisition, reorganization or sale of assets (a “Business Transaction”). Your information, including personal data, may be among assets sold or transferred as part of a Business Transaction. In some cases, we may choose to buy or sell assets. Such transactions may be necessary and in our legitimate interests, particularly our interest in making decisions that enables our organization to develop over the long term.
Safety and Lawful Requests: We may be required to disclose Services user information pursuant to lawful requests, such as subpoenas or court orders, or in compliance with applicable laws. We generally do not disclose user information unless we have a good faith belief that an information request by law enforcement or private litigants meets applicable legal standards. We may share your information when we believe it is necessary to comply with applicable laws, to protect our interests or property, to prevent fraud or other illegal activity perpetrated through the Services or using our name, or to protect the safety of any person. This may include sharing information with other companies, lawyers, agents, or government agencies. Nothing in this Privacy Policy is intended to limit any legal defenses or objections that you may have to a third party’s, including a government’s or request to disclose your information.
Aggregated Non-Personal Data: We may disclose aggregated, non-personal data received from providing the Services, including information that does not identify any individual, without restriction. We may share demographic information with business partners, but it will be aggregated and de-personalized, so that personal data is not revealed.
We seek to ensure all individuals are provided with the rights mandated by their governing jurisdiction. Not all of the rights discussed in this Privacy Policy will apply to each individual data subject and may not apply to you depending upon your jurisdiction.
You may benefit from a number of rights in relation to your information that we process. Some rights apply only in certain limited cases, depending on your location. If you would like to manage, change, limit, or delete your personal data, you can do so by contacting us. Upon request, we will provide you with information about whether we hold any of your personal data. In certain cases where we process your information, you may also have a right to restrict or limit the ways in which we use your personal data. In certain circumstances, you also have the right to request the deletion of your personal data, and to obtain a copy of your personal data in an easily accessible format.
To the extent that such rights are mandated by the laws applicable to the individual data subject, such as all data subjects residing in the European Union (“EU”), the following rights may apply: the right to access (GDPR, Article 15); the right to rectification (GDPR, Article16); the right to erasure (GDPR, Article 17); the right to restrict processing (GDPR, Articles 18); the right of object (GDPR, Article 21); and if applicable, the right to data portability (GDPR, Article 20). You may also have a right to lodge a complaint with an appropriate data privacy regulatory authority (GDPR, Article 77).
If we process your information based on our legitimate interests as explained in this Privacy Policy, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. Where we use your data for direct marketing purposes, you can always object using the unsubscribe link in such communications or changing your account settings.
Where you have provided consent to certain data processing, you have the right to withdraw that consent at any time by contacting us at: kmprivacy@kimballmidwest.com. A withdrawal of consent will not affect the validity of our use of your personal data up until the point you have withdrawn your consent.
If you no longer wish to use the Services or receive service-related messages (except for legally required notices), then you may contact us using the information above.
Access To The Information We Has Collected About You
We provide certain tools and settings within the Services to help you access, correct, delete, or modify your personal data associated with the Services. We welcome you to contact us regarding the information we have collected about you, including regarding the nature and accuracy of the data that has been collected about you, to request an update, modification, or deletion of your information, to opt-out of certain Services uses of your information, or to withdraw any consent you may have granted to us.
Please note requests to delete or remove your information do not necessarily ensure complete or comprehensive removal of the content or information posted, and removed information may persist in backup copies indefinitely. Please note that if you choose to delete your information or opt-out of the collection and use of your information, you understand that certain features, including but not limited to access to the Services, may no longer be available to you.
Data Retention
We will retain your information only for as long as is necessary for the purposes set out in this Privacy Policy, for as long as an account is active, as described in this Privacy Policy, or as needed to provide the Services to you. We will retain and use your information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your information to comply with applicable tax/revenue laws), resolve disputes, enforce our agreements, and as otherwise described in this Privacy Policy. In addition, our sellers may also be required to retain and use your information in order to comply with certain legal obligations. We also retain log files for internal analysis purposes. These log files are generally retained for a brief period of time, except in cases where they are used for site safety and security, to improve site functionality, or we are legally obligated to retain them for longer time periods. We may delete your personal data from our systems as part of a data retention plan. Following termination or deactivation of a Services Account, we may retain your information and content for a commercially reasonable time for backup, archival, and audit purposes.
Opting-Out of Communications From Us
Users may opt-out of receiving certain communications from us by following the unsubscribe process described in email communication, or by contacting us using the contact information provided above. However, please note you may not opt-out of certain Services-related communications, such as account verification, changes or updates to features of the Services, or technical and security notices.
Do Not Track
We do not currently employ a process for automatically responding to “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including personal data, about your online activities over time and across different websites or online services when you use Services. You may opt out of online behavioral ads at http://www.aboutads.info/choices/. You also may limit certain tracking by disabling cookies in your web browser.
The security of your personal data is important to us. We take reasonable efforts to secure and protect the privacy, accuracy, and reliability of your information and to protect it from loss, misuse, unauthorized access, disclosure, alteration and destruction. We implement security measures as we deem appropriate and consistent with industry standards. As no data security protocol is impenetrable, we cannot guarantee the security of our systems or databases, nor can we guarantee that personal data we collect about you will not be breached, intercepted, destroyed, accessed, or otherwise disclosed without authorization. Accordingly, any information you transfer to or from Services are provided at your own risk.
Please do your part to help us keep your information secure. Services Account information is protected by a password. It is important that you protect against unauthorized access to your account and information by choosing your password carefully and by keeping your password and computer secure, such as by signing out after using the Services. You are responsible for maintaining the confidentiality of your password and Services Account, and are fully responsible for all activities that occur under your password or Services Account. We specifically reserve the right to terminate your access to the Services and any contract you have with us related to the Services in the event it learns or suspects you have disclosed your Services Account or password information to an unauthorized third party.
Kimball Midwest takes reasonable steps to protect your personal data as you transmit it to our site and to protect such information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. Although we take appropriate measures to safeguard against unauthorized disclosures of personal data, we cannot assure you that Information will never be disclosed, altered or destroyed in a manner that is inconsistent with this policy. E-mail sent to or from this site may not be secure.
The United States, European Economic Area (“EEA”) Member States, and other countries all have different laws relating to privacy and data protection. When your information is moved from your home country to another country, the laws and rules that protect your personal data in the country to which your information is transferred may be different from those in the country in which you live. For example, the circumstances in which law enforcement can access personal data may vary from country to country. In particular, if your information is in the United States, it may be accessed by government authorities in accordance with U.S. law.
Please be advised information we collects about you via the Services may be transferred, processed and/or accessed by us in the United States, or another country where we, or our Service Providers operate. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal data, may differ from those that apply in the country in which you reside. If you are located outside the United States and choose to allow us to collect information about you, please be aware that we may transfer your personal data to the United States and process and store it there. We will transfer personal data only to those countries to which we are permitted by law to transfer personal data, and we will take steps to ensure that your personal data continues to enjoy appropriate protections.
Processing Necessary For The Performance Of The Contract
You can choose whether or not you want to use the Services. However, if you want to use the Services, you need to agree to our Terms and Conditions, which set out the contract between our and the users of the Services. We cannot provide many of the Services without your agreement to this contract, and without moving your personal data to our entities and Service Providers in various jurisdictions. Therefore certain processing of your personal data is done on the legal basis of processing necessary for the performance of the contract between you, as a user of the Services, and us.
Your California Privacy Rights
If you are a California resident, the processing of certain personal data about you may be subject to the California Consumer Privacy Act (“CCPA”) and other applicable California state privacy laws. Beginning January 1, 2020, the CCPA gives you certain rights with respect to the processing of your personal data (known as “personal information,” as described in the CCPA).
This section provides additional privacy disclosures and informs you of key additional rights as a California resident:
Right to Know Request
Under the CCPA, you have a right to request information about our collection, use, and disclosure of your personal information over the prior 12 months, and ask that we provide you with the following information:
To make a verifiable request for information about the personal information we have collected about you, you may email us at kmprivacy@kimballmidwest.com.
Right to Delete Request
Under the CCPA, you also have a right to request that we delete personal information, subject to certain exceptions. You may exercise your right by emailing us at kmprivacy@kimballmidwest.com.
Requests made through Agents
You may designate, in writing or through a power of attorney document, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us.
No Sale of Personal Information
Under the CCPA, a “sale” means providing to a third party personal information for valuable consideration. Since Kimball Midwest doesn’t make money from ads, we don’t collect data to facilitate nor enable third parties to advertise to you. At this time and pending final regulations and guidance interpreting the CCPA, we don’t believe any of our data practices constitute a “sale” under the CCPA.
These terms are effective unless and until terminated by either you or Kimball Midwest. You may terminate this Agreement at any time, provided that you discontinue any further use of this site and remove all software or downloaded materials you have obtained from this site. Kimball Midwest also may terminate this Agreement at any time and may do so immediately without notice, and accordingly deny you access to the site, if in Kimball Midwest's sole discretion, you fail to comply with any term or provision of this Agreement.
From time to time, we may update this Privacy Policy. Kimball Midwest reserves the right to revise this legal information at any time and for any reason and reserves the right to make changes at any time, without notice or obligation, to any of the information contained on this Service. By the continued use of this Service, you acknowledge and agree that you are bound by any such revisions.
We encourage you to periodically check back and review this Privacy Policy so that you always will know what information we collect, how we use it, and with whom we share it.