Vista Privacy and Cookie Notice

Last updated: 5 September, 2024

This Vista Privacy and Cookie Notice ("Privacy Notice") describes how Vista and its signature services, including VistaPrint, VistaCreate, 99designs by Vista, and Vista Corporate Solutions (collectively, "Vista", "we", "our", or "us"), collect, use, and share your personal information when you use and access our websites and mobile sites ("Sites"), applications ("Apps"), services, and other tools we offer (collectively "Vista Services"). This Privacy Notice also gives information about the rights and options you have to control your personal information.

This Privacy Notice applies to all users of our Vista Services, including unregistered and registered consumer users, business users, and employees of business users, designer contributors, customers, and potential customers (collectively, "user", "you" or "your"), and to all Vista Services that link to this Privacy Notice.

Please keep in mind that this Privacy Notice does not apply to personal information collected by third-party websites and apps that may post links or advertisements on or otherwise be accessible from our Sites and Apps. We advise you to read the privacy notices of these third parties when you visit their websites or apps in order to understand how such third parties collect and use your personal information.

Content

This Privacy Notice will give you information about:

We encourage you to read this Privacy Notice carefully and to consult it on a regular basis when using the Vista Services. If you have any questions about this Privacy Notice or our privacy practices, please contact us by emailing [email protected].

Who is responsible for collecting and using your personal information

Cimpress Schweiz GmbH and the Cimpress group companies listed below provide the Vista Services and are independently responsible for collecting, using and disclosing your personal information when providing you with the Vista Services you requested. Cimpress Schweiz GmbH and the other Cimpress group companies listed below work together to bring your print, digital and design needs all over the world. Where Cimpress group companies are jointly responsible for using your personal information to bring you with specific Vista Services, appropriate arrangements are in place and you can reach out to each Vista entity to enforce your privacy rights. Depending on the Vista Service you use and your location, the relevant Cimpress companies who are responsible for the can be found below. Regardless of the Vista Service you have used or the Cimpress company responsible for providing the Vista Service, you can reach out to us at any time by sending an email to [email protected].

Vista Services User Location Responsible Cimpress Company
Vista account Global Cimpress Schweiz GmbH, Talacker 41, 8001 Zürich, Switzerland
Contact us by sending an email to [email protected]
VistaPrint Services If you reside in the European Economic Area (“EEA”), UK, or Switzerland Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands
Contact us by sending an email to [email protected]
If you reside in the United States Vistaprint Netherlands B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands
Contact us by sending an email to [email protected]
If you reside in Australia, New Zealand, or Singapore Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia
Contact us by sending an email to [email protected]
If you reside in Canada Vistaprint Canada Corporation, 333 Bay Street, Suite 2400, Toronto, Ontario, M5H 2T6, Canada
Contact us by sending an email to [email protected]
If you reside in India Cimpress India Private Limited, ‘C’ Block, Voltas Premises, T. B. Kadam Marg, Chinchpokli, Mumbai -400 033, Maharashtra, India
Contact us by sending an email to [email protected]
For all other countries Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used.
VistaCreate Services Global Crello Limited, 1 Anastasi Sioukri, Themis Court, 4th floor, Office 402, 3105 Limassol, Cyprus
Contact us by sending an email to [email protected]
99designs by Vista Services Global, except United States 99designs Pty Limited, Level 2, 41-43 Stewart Street, Richmond, VIC 3121, Australia
Contact us by sending an email to [email protected]
United States 99designs LLC, 275 Wyman Street, Waltham, MA 02451, United States
Contact us by sending an email to [email protected]
Vista Corporate Solutions Services If you reside in the United States or Canada Vistaprint Corporate Solutions Incorporated, c/o 275 Wyman Street, Waltham, MA 02451, United States
Contact us by sending an email to [email protected]
If you reside in Australia Vistaprint Australia Pty Limited, 66 Paramount Boulevard, Derrimut, Victoria 3030, Australia
Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451, United States
If you reside in the European Economic Area (“EEA”), UK, or Switzerland Vistaprint Corporate Solutions UK Limited, c/o Cogency Global (UK) Limited, 6 Lloyds Avenue, Unit 4CL, London EC3N 3AX
Please use our US postal address for post communications: c/o 275 Wyman Street, Waltham, MA 02451, United States
For all other counties Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used.
Other Vista Services Global Contact us by sending an email to [email protected] for more information on the Cimpress company responsible for using your personal information based on your location and the Vista Services used.

What personal information we collect

Personal information is all information that identifies you directly or in combination with other information. Personal information does in general not include information concerning a legal person or entity.

Vista offers you a wide range of services to bring together your print, digital and design needs. Depending on how you use the Vista Services, we collect and use personal information that you provide to us, automatically or otherwise. If you are a registered user, we link personal information that we automatically collect when you use the Vista Services to other personal information we collect about you. Below we explain which personal information we collect and use, and for which purposes.

Categories of personal information Description
Account Information Personal information we collect when you register for an account on our Sites and Apps, including:
  • first and last name;
  • e-mail address;
  • password.
Technical Information Personal information we automatically collect when you visit, access or navigate our Sites and Apps, including:
  • your IP address;
  • information about your computer's hardware and software (for example, the type of operating system, the browser you use, the versions of the application or software, and language settings);
  • location information (inferred from your IP address, such as country, state and/or city);
  • URL requested;
  • log information;
  • browser type;
  • browser history (such as the webpage that led you to our Sites and/or Apps);
  • online identifiers such as cookie data or data collected with other similar technologies.
For more information about how we use these technologies, please see How we use cookies below.
Usage Information Personal information we automatically collect about your activities on our Sites and Apps, including:
  • the date, time and pages you visit;
  • how you use our Vista Services and access its contents (such as search history, clickstream data, access logs and other usage data regarding your interactions with our Sites and Apps, and our marketing emails and online ads);
  • session replay recordings (such as mouse movements, clicks, key touches, typing, and scrolling).
Transaction Information Personal information you provide when you place an order or request a Vista Service, including:
  • your shipping, billing, and payment information (such as credit card or bank account details). You can also choose to store your credit card or other payment information in your Vista account to make it easier to purchase products or services from our Sites and Apps in the future;
  • tax information and information to verify your identity where required by local laws (such as passport, ID card or driver's license information);
  • purchase and transaction history;
  • telephone number;
  • email address.
Content Information Personal information you provide when you upload and share content (“Content”) with us or other users within our Sites and Apps or to personalize products and services, including:
  • images;
  • photos;
  • logos;
  • videos;
  • music tracks;
  • content-related information such as time and place of the content creation, tags and similar information stored by your device;
  • content of reviews you write;
  • any other content you choose to provide or upload when using the Vista Services.
Profile Information Personal information you share with us when you create a profile, including:
  • your gender;
  • country;
  • preferred language;
  • other information about your interests and preferences, including favorite templates and work on designs or products;
  • content you choose to make available to other users, such as your professional background, time zone, location, avatar, design concepts and templates, service offerings, and messages and testimonials.
Communication Information Personal information you provide and we automatically collect when you contact our customer service teams (e.g. chat(bot), email or phone) or communicate with us by other means (e.g. social media, text), including:
  • first and last name;
  • email address;
  • phone number;
  • subject matter;
  • description;
  • content of correspondence;
  • data exchanged with you by telephone, chat or other means of communication;
  • call recordings.
Marketing Information Personal information you provide to receive marketing materials about our products and services, including:
  • name;
  • email address;
  • phone number;
  • marketing and communication preferences;
  • social media profile(s).
Forms Information Personal information you provide when you choose to participate in sweepstakes, contests or surveys, including:
  • name;
  • email address;
  • phone number;
  • other relevant personal information as explained in the sweepstake, contest or survey.
If you participate, we may publicly disclose that information.

Personal information we receive from other sources

Vista may also obtain information about you that is publicly available or from other sources, such as independent third parties, business partners or Cimpress group companies. Any information we receive from these sources is combined with the personal information you provide to us for the purposes described in this Privacy Notice. The below overview sets out which personal information we receive from third parties.

Categories of third parties Description Categories of personal information
Postal service providers We may need to collect data, (e.g. name and postal address information) to validate your postal address Transaction Information
Security providers, fraud detection and prevention providers In certain instances, and as permitted by applicable law, we may need to collect your personal information to help us screen users for fraud detection and prevention purposes
Account Information
Technical Information
Usage Information
Social media platformsWe collect your personal information (e.g. email, username, accountinformation, profile photo) when you log in or sign-up using your socialmedia account
Account Information
Profile Information
Advertising and marketing partnersWe receive your personal information from advertising and marketingpartners to monitor, manage and measure our ad campaigns and serve youmore relevant advertising
Technical Information
Usage Information
Marketing Information
Lead enhancement companiesIn some cases, we collect personal information (e.g. name, email,address, phone) from lead enhancement companies to help us improve ourservice offering
Account Information
Usage Information
Profile Information

Personal information you give us about others

The Content you choose to upload to our Sites and Apps may include personal information of other individuals. If you choose to share your Content or other information with someone else through a feature we offer, or participate in our referral program, we will use the personal information you provide (for example, the email address of the recipient) to fulfil your request and the specific service requested. Please make sure other individuals are aware of and agree with the sharing of their personal information with us.

Why we process your personal information

In the overview below we explain which personal information we use and how and why we use it.

Purpose of processing Categories of personal information Corresponding legal basis
Creating, managing and maintaining your Vista account and facilitate integrated services
Account Information
Technical Information
Usage Information
Content Information
Profile Information
 This is necessary for us to fulfill our contract with you to create, manage and maintain your Vista account and facilitate integrated services, including:
  • single-sign on;
  • allowing you to log in;
  • navigate the Sites and Apps;
  • verify your identity;
  • store your uploads and designs;
  • provide technical support.
To provide you with the Vista Services
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
 This is necessary for us to fulfill our contract with you. For example, to:
  • enable you to access and use our Vista Services, including uploading, downloading, collaborating on and sharing Content;
  • process, manage and deliver your purchase order.
Further, it is our legitimate business interest to:
  • provide you with experiences, products and services you request, view, engage with or purchase;
  • maintain and administer our Vista Services.
To provide you with a helpful and seamless customer support experience
Account Information
Technical Information
Transaction Information
Content Information
Profile Information
Communication Information
 It is our legitimate business interest to provide you with a helpful and seamless customer support experience, including by:
  • sharing relevant data with our Customer Care team to address your questions and needs;
  • monitoring or recording calls and chats with our Customer Care team for quality control and training purposes.
Where required by applicable law we will ask for your prior consent for specific processing activities.
To provide you with a personalized user experience
Account Information
Technical Information
Content Information
Profile Information
 It is our legitimate business interest to provide you with personalized services, including:
  • conducting marketing and/or market research;
  • to personalize our communications with you;
  • to tailor the content you see in order to provide features and information that match your interests and preferences; and
  • to group users of our Vista Services based on, for example, usage and demographics.
Where required by applicable law we will ask for your prior consent for specific processing activities.
To analyze customer usage patterns, conduct research, improve and develop our products, features and Vista Services
Technical Information
Usage Information
Content Information
Profile Information
Communication Information
Marketing Information
 It is our legitimate business interest to analyze, develop and improve our Vista Services (including by understanding how you use the services) and to develop new features, services or products. Where required by applicable law we will ask for your prior consent for specific processing activities.
Supporting collaboration, networking, and projects
Account Information
Content Information
Profile Information
 This is necessary for us to fulfill our contract with you to enable you to communicate, collaborate and share Content with users you designate, to enable you to connect with designers, to submit projects and receive bids for design services and to otherwise connect users and designers or other providers.
To create profiles and market our activities and promote our products and Vista Services (including providing co-branded offers with our partners or affiliated Cimpress companies)
Content Information
Profile Information
Marketing Information
Forms Information
 It is our legitimate business interest to market our activities and promote products and services, including to send you offers and promotions of our products and services or products and services offered by our partners or other Cimpress group companies. Where required by applicable law we will ask for your prior consent for specific processing activities.
To protect, establish, exercise or defend our and third parties’ rights, and to defend against lawsuits
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
 It is our legitimate business interest to protect our interests and rights, and the rights and interests of third parties, for instance to defend our rights in legal proceedings.
To secure our Vista Services and data processed via our Vista Services, and to prevent, detect, and investigate unlawful or unwanted behavior, including crime and fraud, within or related to the Vista Services and the products we provide
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
 It is our legitimate business interest to keep the Vista Services safe, to prevent, detect and investigate unlawful or unwanted behavior, and to protect our and third parties’ rights and interests.
To comply with legal and regulatory requirements, and cooperating with regulators and government authorities
Account Information
Technical Information
Usage Information
Transaction Information
Content Information
Profile Information
Communication Information
 We process your personal information to comply with our legal obligations, and to cooperate with regulators and government authorities where required by law or when we have legitimate business reasons to do so.

With Which Parties We Share Personal Information

Where relevant and necessary, we provide your personal information to the following trusted third parties or service providers:

  • Third-party service providers to support us in operating our Sites and Apps, and providing the Vista Services, including website and platform hosting companies, IT service providers, marketing and analytics providers, payment processors, fraud detection and prevention companies, order fulfilling and delivering service providers, session replay and chat technologies providers, generative AI as well as machine learning providers, and other commercial partners to provide and improve our Vista Services.
  • Group companies that support us in providing the Vista Services and the processing of your personal information for the purposes described in this Privacy Notice.
  • Our partners if you choose to receive products or services from our partners. In such cases, our partners have access to and process your personal information. We also share your personal information where you direct us as part of the Vista Services to share your personal information with another user or to a third-party service provider to integrate our Vista Services with a service that such user or third party may provide, for example, with a third-party printing partner or third-party designers who may assist you with your website, logo or product designs, website builder or web development service provider so that they can provide you with a service.
  • Law enforcement agencies, courts, regulators, government authorities, and other similar public authorities or third parties when this is necessary to comply with a legal obligation or when we have legitimate business interests to do so, for instance, to protect our or a third party’s rights and interests.
  • Professional advisors when we have legitimate business interests to do so, for instance, to obtain legal advice or to assist us with a criminal or regulatory investigation.
  • Third parties in connection with investments, reorganizations, restructurings, mergers, bankruptcy, insolvency events, joint ventures, sale of shares or assets, or similar events. It is our legitimate business interest to share relevant and necessary data to enable such investments, reorganizations, restructurings, mergers, bankruptcy, insolvency events, joint ventures, sale of shares or assets, or similar events.

How We Transfer Personal Information Internationally

Vista is an international company and operates globally. We therefore transfer or store your personal information globally, including but not limited to the United States of America, Australia, Brazil, Jamaica, Tunisia, and the Philippines. Such countries may provide a lower level of data protection than your country. For example, Cimpress group companies, third-party service providers, or partners may be located outside of the EEA, the United Kingdom, or Switzerland. Where required by applicable data protection laws, we put in place appropriate safeguards to make sure your personal information is adequately protected, for instance by putting in place Standard Contractual Clauses as approved by the European Commission, by examining the countries to which the data is transferred, and by imposing specific technical and organisational security measures if needed.

If you would like to receive additional information on the transfer of your personal information or the transfer mechanisms used, please contact us by sending an email to [email protected].

How to Exercise Your Rights

You have certain rights to control how your personal information is used. Depending on the applicable law, these may include the right to:

  • Access: Access your personal information and obtain a copy of the personal information we hold about you.
  • Rectify: Correct or update inaccurate or incomplete personal information.
  • Erasure: In certain situations, request that we erase your personal information.
  • Object: In certain situations, object to the processing of your personal information.
  • Portability: In certain situations, receive your personal information in a reusable electronic format.
  • Restrict: In certain situations, restrict or block the processing of your personal information.
  • Withdraw consent: Withdraw your consent where we processed your personal information based on your prior consent.

We may ask you to verify your identity before taking further action on your request. We also rely on you to make sure that the personal information you provide is complete, accurate, and up-to-date. Please let us know of any changes to or inaccuracies in your personal information by sending an email to [email protected].

If you have a Vista account, you can access, update, and remove the personal information available in your account and change your preferences by going to your account settings page. You can also contact our Customer Care team by using any of the methods listed in the "How to Contact Us" section below.

Opt-out of Marketing Communications

You can change your marketing preferences at any time by following the "unsubscribe" instructions contained in the messages you receive, by changing your marketing preferences through your Vista account settings, or by contacting the Customer Care team. Even if you choose to unsubscribe from receiving advertising via email, telephone, or by post, we may still communicate with you using any of these methods regarding your orders, your Vista account, or for other administrative purposes (such as communications related to a pending order, an unresolved customer service issue, or a policy update). If you do not want to receive any communications from Vista, please delete your Vista account.

What Happens When You Request Your Account to be Deleted?

After we have verified your identity in response to your deletion request, we will close your Vista account and erase your personal information from our systems. Please note, however, that we may be allowed or required by law to keep certain information (e.g., records of transactions or shipments), for instance, to comply with legal record-keeping and tax obligations. After we process your deletion request, you will immediately lose access to:

  • Your Vista account;
  • Your Vista account login and password;
  • Order history with any Vista Services;
  • Products you have designed and stored, and Vista Services you have used;
  • Uploaded images, any stored designs, and other content with any Vista Services.

Please be aware that deleting your Vista account is a permanent change and cannot be reversed.

We are committed to handling your queries and complaints as best as we can. We encourage you to address any concerns or issues with us first by emailing [email protected], so that we can try to resolve it in a timely and effective manner. You also have the right to file a complaint with your local supervisory authority at any time.

How We Protect and Store Personal Information

Vista has implemented technical and organisational security measures to protect your personal information. These measures are aimed at ensuring the integrity, confidentiality, and availability of your personal information and to protect it against unlawful or unauthorized destruction, loss, alteration, use, disclosure, or access. These measures include but are not limited to encryption methods, access controls, controlled administration of user rights, and limiting access to personal information on a need-to-know basis. We evaluate and update these measures on a regular basis.

We encourage you to also take the security of your personal information seriously and select a strong password when creating a Vista account and not share it with others. You may change your Vista account password as often as you wish by going to your 'Account Settings'. If you have reason to believe that the security of your account might have been compromised (for example, your password has been leaked) or if you suspect someone else is using your account, please let us know immediately.

We take information security and privacy seriously, and our goal is to provide a safe and secure site for all users. To achieve this goal, we have implemented a security program to identify and remediate security issues, and we utilize external security researchers to report vulnerabilities. If you believe you have identified a security issue on our Sites or Apps, please contact [email protected].

We will retain your personal information for the duration of our relationship, unless a shorter retention period is required by law or the data is no longer necessary for the purposes for which we processed your data. Once our relationship with you has come to an end, we will retain your personal information for the period of time that enables us to:

  • Check our records of transactions or shipments;
  • Fulfil our legal obligations, including legal retention periods;
  • Initiate, investigate, or defend against legal claims;
  • Address your questions, requests, or complaints; and
  • Keep our records for analysis and audit purposes.

How We Handle Personal Information of Children

The Vista Services are not targeted at or meant for use by children under the age of sixteen (16) years old, and children under that age are prohibited from creating an account or otherwise providing their personal information. If we become aware that a child under the age of sixteen (16) has provided personal information through our Sites and/or Apps, we will delete their personal information. We ask parents or guardians to contact us at [email protected] if they become aware that their child has shared their personal information with us.

The Roles and Responsibilities for Business Users for Which We Act as Service Provider or Processor

We provide our business users with specific services on their websites for which we act as service provider or processor. We collect personal information of visitors and users of the business user’s websites or services ("End Users Information"), only as instructed by and on behalf of the business user. For example, business users are able to add a contact form on their website. Any personal information submitted by visitors of the website of the business users are then stored with Vista on the business user’s behalf. For such purposes, Vista acts as service provider or processor on the business user’s behalf when processing End Users Information and will act in accordance with the data processing agreement between Vista and the business user. Business users will be solely and independently responsible for the collection and use of End Users Information by using Vista Services and are responsible for complying with applicable data protection laws.

How We Use Cookies and Other Similar Technologies

We use cookies, pixels and other similar technologies (collectively referred to as “cookies”) to provide and improve our Vista Services, to tailor your website experience and to show personalised ads. Cookies are useful because they allow a website to recognize a user’s device. To learn more about what type of cookies VistaPrint uses, please visit our [Cookie Notice](#).

You can manage which cookies are placed on your device by:

  • Using browser controls: The Help menu on the menu bar of most browsers will tell you how to enable or prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie and how to disable cookies altogether. You can also disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on's settings or visiting the website of its manufacturer. Please be aware that if you disable or delete certain cookies our websites will not work properly.

  • Third-Party Cookies: When you use our Sites and Apps, you may notice content provided by a company other than us. Also, if you 'share' Vista content with friends through social networks, such as Facebook and Pinterest, these social networks may place cookies on your browser. We have no access to or control over cookies used by these companies or third-party websites. If you’d like to opt out of cookies created by 'sharing' Vista content through social networks — such as Facebook and Pinterest — we suggest you check those third-party websites for more information about their cookies and how to manage them.

If you want to know more about Third-Party Cookies and how to opt out of them, see www.allaboutcookies.org and www.youronlinechoices.eu.

How to Contact Us

If you have general questions about the Vista Services or would like to update your marketing preferences, please reach out to the Customer Care team as listed below:

If you have any questions about this Privacy Notice or our privacy practices, or would like to exercise your privacy rights, please contact us by emailing [email protected].

Users residing in the EU may also contact our EU representative at Vistaprint B.V., Hudsonweg 8, 5928 LW Venlo, The Netherlands.

Users residing in the UK may also contact our UK representative at Tradeprint Distribution Limited, 2 Fulton Rd, Dundee Scotland, UK, DD2 4SW.

Changes to This Privacy Notice

From time to time, we may change this Privacy Notice to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We reserve the right to modify this Privacy Notice at any time in accordance with the applicable law. If we do so, we will post the revised Privacy Notice and update the "Last Updated" date at the top, so please review it frequently. In case of material changes, we will also provide notice to you and, where required by applicable law, we will obtain your consent. We will send such notice by email to the last email address you provided to us, by posting the notice on our Sites and Apps, and/or by other means, consistent with applicable law.

Additional Information for US Users

This US Supplemental page (“US Notice”) is applicable to residents of certain US states that have their own laws and regulations regarding data privacy, such as California, Virginia, Colorado, Connecticut, Utah or Nevada. It describes how we collect, use, disclose, and otherwise process Personal Information, and which rights may be available to residents of these US states upon the effective dates of the respective US state laws and regulations (collectively, “US State Laws”).

The terms of this US Notice supplements and should be read in conjunction with our Vista Privacy and Cookie Policy.

Depending on your place of residence, and subject to the applicable law in that State, some parts of this US Notice will not be applicable to you.

Your Personal Information

You can learn about the categories of Personal Information we collect from you, the sources of that information, the purposes for collecting and using that information, and what types of third-party service providers we may share that information with, by reading Sections 3 to 7 of the Vista Privacy and Cookie Policy.

Your Privacy Rights

Depending on your place of residence, and subject to certain limitations under the applicable US State Laws, you may exercise the following rights in relation to your Personal Information:

  • Access: The right to confirm whether or not we are processing your Personal Information, and request we provide you with the following information (including in a portable, and, to the extent technically feasible, readily usable format):

◦ The categories of Personal Information we have collected about you;

◦ The categories of sources from which we collect your Personal Information;

◦ The business or commercial purpose for collecting your Personal Information;

◦ The categories of third parties with whom we have shared your Personal Information; and

◦ The specific pieces of Personal Information we have collected about you.

  • Correct: The right to correct or update inaccurate or incomplete Personal Information, taking into account the nature of the Personal Information and the purposes of the processing.

  • Deletion: The right to request we delete the Personal Information we have collected from you, with some exceptions.

  • Opt Out: If applicable, you may have the right to tell companies not to sell or share your Personal Information, or to opt-out of the processing of Personal Information for purposes of targeted advertising , sale, or profiling (as defined under the applicable US State Laws).

  • Limit: The right to limit the use or disclosure of sensitive personal information. Please note that we do not collect or process sensitive Personal Information for the purpose of inferring characteristics about you.
    Nondiscrimination: The right not to be discriminated against for exercising any of these rights.

  • Appeal: Where applicable, you may have the right to appeal our refusal to take action on, or respond to, a verified consumer request. Upon receipt of our denial or refusal to take action on, or respond to, a verified consumer request, you may, within a reasonable period of time from the refusal, submit a request to appeal our decision by sending an email to [email protected], or contacting our Customer Service following the information available in the Contact Us section below. Within the time frame established by the applicable US State Laws, we will inform you in writing of any action taken or not taken in response. We will also include a written explanation of the reasons for our decision. If your appeal is denied, you have the right to contact the State Attorney General.

How to Exercise Your Privacy Rights

You, or an authorized agent (where applicable), can exercise these rights with respect to one or more of our signature services as provided under the Contact Us section below and to the extent applicable to you under the respective US State Laws. In order to exercise your rights, we may have to verify your identity. We will do this by asking you to provide us with certain information we already have to confirm your identity. This can include your contact information, account number, or purchase history details. Authorized agents, where applicable, will be required to provide proof of their authorization and we may also require that you directly verify their identity and the authority of the authorized agent.

We recognize and support the Global Privacy Control (“GPC”) standard. As such, if you enabled your browser or device to broadcast a GPC signal, we will automatically process it upon receival as a valid request to opt out of the sale and sharing of your Personal Information. If you log into your account, your preference will be associated with your Vista account, maintaining your opt out preference when using a different device or browser. However, if you are not logged into your account, your preference will only be associated with that one browser.

Special Disclosures for California Residents

Shine the Light
As a California resident, you may request, once a year and free of charge, a list of the third parties to whom we have disclosed Personal Information (if any) for their own direct marketing purposes. See the Contact Us section below for how to make this request. However, note we do not share your Personal Information with third parties for their own marketing purposes without your express consent. Accordingly, you can prevent the type of sharing by withholding consent or opting out of sharing of Personal Information as further described on the Notice of Right to Opt Out section below.

Notice of Right to Opt Out
We do not sell your Personal Information in exchange for money. However, like many ecommerce companies, we do share your Personal Information with third parties, such as our advertising partners to help show relevant ads based on your interests. If you would like to learn more, or wish to opt-out of the sale or sharing of your Personal Information, please see the Contact Us section below. Please note that we do not knowingly sell or share the Personal Information of individuals under the age of 16 years old.

Notice of Financial Incentive
In some instances, we may offer various types of incentives in exchange for the collection of your Personal Information, such as discounts, promotional codes, prices as part of a sweepstake entry or contest, participation in surveys, exclusive offers when you sign up to receive our marketing emails and other programs. The amount and terms of such incentives will be presented to you at the time of the offer or program. When you participate in or sign up for one of these offers or programs, we collect Personal Information from you, such as identifiers like your name, email address and/or phone number.

Because these activities involve the collection of Personal Information as well as the offering of various benefits, they might be interpreted as providing a “financial incentive” under California law. To the extent that we derive value from the collection of your Personal Information, we reasonably estimate the value of the financial incentive to be equal to the value we receive from the Personal Information collected. We estimate the value of a consumer’s Personal Information by directly relating it to the expenses which might be incurred in the provision of each incentive and the collection, storage, and use of such Personal Information in the operation of our business.

Participation in our financial incentives is voluntary. You may opt into a financial incentive by following the sign-up or participation instructions provided, and you have the ability to opt out or withdraw at any time by unsubscribing from our marketing communications or terminating the participation in the sweepstake or contest prospectively by following the instructions in the applicable terms.

Special Disclosures for Virginia, Colorado, Connecticut and Utah Residents

Unless specifically stated, we do not sell Personal Information to third parties, nor do we process your Personal Information for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects. However, we do process your Personal Information for targeted advertising purposes. If you would like to learn more, or opt out of the sale or processing of your Personal Information for targeted advertising purposes, please see the Contact Us section below.

Special Disclosures for Nevada Residents

Nevada law gives Nevada residents the right to request that a company not sell their Personal Information for monetary consideration to certain other parties.  The right to opt out of the sale of your Personal Information applies even if your Personal Information is not currently being sold.  If you are a Nevada resident and wish to exercise this right, please contact us as indicated under the Contact Us section below.

Contact Us

If you would like to learn more or wish to exercise your rights under the applicable US State Laws with respect to one or more of our signature services, please contact us as follows:

If you have any questions about this Notice, please contact our privacy team by sending an email to [email protected].