Mythical Society Privacy Policy

Effective September 26, 2023

Thank you for visiting Mythical Society, owned and operated by Mythical Entertainment, LLC (“

Mythical Society

,” “

we

,” “

us

,” “

our

”). Mythical Society respects your privacy and values your trust. We are committed to ensuring that the personal information stored by our systems is suitably protected and used appropriately. The purpose of this Privacy Policy is to inform you of the treatment and handling of information that we may learn about you from visiting the Mythical Society website at mythicalsociety.com (the “

Site

”), your use of the Mythical Society mobile application (the “

App

”), and/or by use of any of our services offered therein (collectively, the “

Service

”).

Mythical Store:

Vote Like a Beast:

Sporked:

MishMash:

If you have any questions regarding this information or our privacy practices, please see the section entitled How to Contact Us at the end of this Privacy Policy.

If you do not agree with the terms of this Privacy Policy or our

, then you should immediately discontinue use of our Service without providing us any personally identifiable information.

We may collect the following categories of personal information (a) directly from you (such as when you create an account, leave a comment, complete a survey, or send communications to us), (b) from the device and browser that you use to access the Service, (c) from cookies, or (d) from third parties (such as social media networks when you contact us via social media (e.g., through our Discord channel).

Identifiers

We may collect your name, email address, username and password, postal address, and phone number.

Financial and Transactional Information

We may collect payment method details (such as you credit or debit card information or bank account details), shipping address, billing address, and order history. We use certain authorized third-party payment processors to process payments on our behalf.

Demographic Information

We may collect your birthdate and age as well as your gender, gender identify and/or gender expression.

User-generated Content

We may collect the content you post to the Service, such as comments, survey responses, and profile photos.

Audio-Visual Information

We may host virtual events (e.g., online meet-and-greets) that may be recorded. As such, we may record your image and voice.

Device Information

We collect device information when you visit the Site and use the App. This includes your computer or mobile device type, browser type, unique identifiers, IP address, and geolocation information.

Internet or Electronic Network Activity Information

We may collect information concerning your interaction with the Site and App, including when you access the Site and App and your browsing activity on the Site and App (such as which pages you visit, in what order, and for how long). This may include “traffic” data or tracking information provided by the Site’s host or similar providers (e.g., Google Analytics) that may be helpful for marketing purposes or for improving the Site.

Interests and Inferences

We may collect information about your interests and hobbies. And we may draw inferences from the information above that may reflect your preferences, characteristics, or interests. 

You are not required to provide all personal information identified in this Privacy Policy to use the Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able to allow you to register an account or respond to your requests or inquiries.

We store certain information that gets collected automatically at our end through cookies and other similar technologies on the Site. A cookie is a small string of information that a website that you visit transfers to your browser for identification purposes. Cookies can be used to follow your activity while using a website or across websites, and that information helps companies understand your preferences and tendencies, as well as improve and personalize your website experience. Some cookies are necessary to operate a website, while others can be functional, analytical, or used for marketing purposes, including targeted advertising (as discussed in more detail below). Cookies on the Site are generally divided into the following categories:

You can prevent the use of certain cookies by modifying your Internet browser settings, typically under the section “Help,” “Internet Options,” or “Settings.” If you disable or delete certain cookies in your Internet browser settings, you may still access the Site, however, you might not be able to access or use important functions or features of the Site, and you may, for example, be required to re-enter your log-in details.

Do-Not-Track Signals

Some web browsers may allow you to transmit a “do-not-track” signal. At this time, Mythical Society does not take any action in response to these signals.

The Service is not intended for use by people under 16 years of age. We do not knowingly or intentionally gather personal information about visitors who are under the age of 16. If you are aware of, or suspect that, someone under the age of 16 is using the Site without permission, please notify us immediately by contacting us as detailed in the

How to Contact Us

section below. If you have questions or concerns about the Internet and privacy for your child, we encourage you to check out the

for protecting your child’s privacy online.

We collect and use personal information for the following purposes:

We may share your personal information with the following third parties:

If you no longer want to receive our newsletter or other marketing communications, you may unsubscribe at any time by following the unsubscribe options in the communication itself or by opting out in your user account or at check out. 

To opt-out of text messages, you may text “STOP” in reply to any Mythical Society marketing text message.

Please note that you cannot unsubscribe from certain correspondence from us, including messages relating directly to your account.

To review, amend, and delete certain information associated with your account (e.g., shipping addresses), you may do so by logging into your account. If you wish to delete your account, please contact us at

. We may be required to maintain certain information associated with your account for our internal record-keeping purposes or to comply with legal or regulatory obligations.

We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. We have implemented various security measures to protect both the personal information and the general information that we receive from you through the Service. Whenever you give out personal information online there is a risk that third parties may intercept and use that information. Although we seek to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. To the extent permitted under applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized access by third parties, or other causes beyond our control.

You play an important role in keeping your information secure. You should not share your username or password with anyone. If you have reason to believe that your account is no longer secure, please contact us immediately at the contact information in the

How to Contact Us

section below.

For residents of California, this section describes how we collect, use, disclose, and/or “sell” (as defined under California law) the personal information of California residents, and the rights you may have under California law. These disclosures are intended to supplement this Privacy Policy with information required by California law.

To understand what personal information we may have collected about you in the past 12 months, and from where we collected it, please see the section

above.

We collect his personal information to operate, manage, and maintain our business, to provide our services, and to accomplish our business purposes and objectives, as further described in the

section above. In addition, the financial information we collect (such as credit or debit card information or bank account information) may be considered sensitive personal information. Financial information is processed by authorized payment processors, and this information is only collected and used to process and fulfill your orders, to provide customer service, to ensure security and integrity of your data and our systems, and to comply with legal and regulatory obligations.

We may share personal information with the third parties listed above in the section

. Below we have provided more detail regarding the two ways we share your personal information: (a) “sales” of information and (b) general disclosures of information for a business purpose.

“Sales” of Information

We have marked “sales” in quotation marks because a “sale” under California law broadly includes any disclosure of information in return for any value. This value does not need to be monetary, like in a traditional sale. For example, a “sale” can be when a business provides information collected through cookies to an advertising network that it has hired to promote its own ads—but then the advertising network is able to use the cookie data provided for its own purposes, outside of this particular business relationship.

Mythical Society does not share personal information in exchange for payment and we require that our service providers only use your personal information to perform the services we have asked of them. However, we use advertising networks to help us improve your advertising experience (such as serving advertisements on our behalf across the Internet and providing analytics services). Sharing personal information with the third-party provider while using these tools may fall within the definition of a “sale” of personal information under California law.

In the past 12 months, we have provided Device Information, Internet or Electronic Network Activity Information, and Inferences to Advertising Networks. 

We do not sell, or have actual knowledge of any sale of, the personal information of minors under 16 years of age.

Disclosures of Information for a Business Purpose

To manage our business and provide services to you, we sometimes share personal information with third parties. As noted above, these third parties cannot further collect, sell, or use the personal information we share with them except as necessary to perform our purposes, as instructed by us.

In the past 12 months, we may have disclosed the following categories of personal information to the following third parties for our operational business purposes:

Identifiers

Financial and Transactional Information

Demographic Information

User-generated Content

Audio-Visual Information

Device Information

Internet or Electronic Network Activity Information

Interests and Inferences

Your Rights

Under California law, you have a right to notice, upon collection, of the categories of personal information collected and the purposes for which the information will be used. In addition, California residents may have additional rights, subject to certain limitations, including:

You may exercise your right to opt-out of “sales” and cross-context behavioral advertising by clicking this link and following the instructions:

. 

If you wish to exercise the right to access, correct, or delete your information or have any questions or concerns regarding the processing of your personal information, please contact us at

with the subject line “California Privacy” so that we can get your email to the right team. We will respond to your request consistent with applicable law. 

Please note, however, before we will be able to process your request for access or deletion of personal information, we will need to properly verify your identity for security purposes. If we possess appropriate information about you (e.g., name, email address), we will attempt to verify your identity using that information. If it is not reasonably possible to identify you, we may not be able to respond to your request. 

To use an authorized agent to make a request on your behalf, we may need the authorized agent to provide proof that you gave the authorized agent signed permission to submit the request on your behalf. We may also require you to verify your identity directly with us.

This section contains additional information for residents of Canada. As noted above, you may view and/or update certain information associated with your account (e.g., name, password, shipping address) by logging into your account. If you wish to request access to or correction of other personal information, request to opt-out of the processing of your personal information, or request that we delete your personal information, you may contact us at

with the subject line “Canada Privacy” so that we can get your email to the right team. You may also contact us for information about how foreign-based service providers process your personal information or if you have any questions or complaints about the manner in which we treat your personal information.

This section provides additional information for residents of the EU and UK.

Data Transfers

As a US company, most of our operations are conducted in the United States and in order to provide the Service, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. Where required by applicable law, we provide appropriate protections for cross-border transfers for international data transfers.

Retention of Your Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which the information was collected; as needed to address tax, corporate compliance, employment, litigation, and other legal rights and obligations; and as otherwise permitted by law.

Legal Basis for Processing Your Personal Information

Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the Our Use of Personal Information section above, including: (i) as may be necessary to perform a contract with you; (ii) as necessary to comply with a legal obligation; (iii) consent (where consent has been provided as appropriate under applicable law); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Service).

Automated Decision-Making

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or that otherwise significantly affects you.

Your Rights

As available and except as limited under applicable law, individuals in the EU and UK have the rights described below:

Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us at

with the subject line “EU Privacy” so that we can get your email to the right team. We will respond to you request consistent with applicable law. 

If you feel that your request or concern was not satisfactorily resolved by us, you have the right to lodge a complaint with your local data protection authority.

This section provides additional information for residents of Brazil.

Data Transfers

As a US company, most of our operations are conducted in the United States and in order to provide the Service, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. Where required by applicable law, we provide appropriate protections for cross-border transfers for international data transfers.

Retention of Your Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which the information was collected; as needed to address tax, corporate compliance, employment, litigation, and other legal rights and obligations; and as otherwise permitted by law.

Legal Basis for Processing Your Personal Information

Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the

section above, including: (i) as may be necessary to perform a contract with you; (ii) as necessary to comply with a legal obligation; (iii) consent (where consent has been provided as appropriate under applicable law); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Service).

Automated Processing

We do not use automated processing to make decisions that may affect you significantly. However, we use profiling and analytics to understand how people use the Site and for marketing purposes. These analytics help us understand and improve the Service. We also use security and fraud analytics, for example, to identify potential fraud.

Your Rights

As available and except as limited under applicable law, individuals in Brazil have the rights to request:

Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us at

with the subject line “Brazil Privacy” so that we can get your email to the right team. We will respond to your request consistent with applicable law.

If you are resident of Australia or New Zealand, you have the right to access the personal information we hold about you and to update and/or correct it, subject to certain exceptions. As noted above, you may view and/or update certain information associated with your account (e.g., name, email address, password) by logging into your account. If you wish to access or update/correct other personal information, contact us at

with the subject line “AU NZ Privacy” so that we can get your email to the right team. We will respond to you request consistent with applicable law.

As a US company, most of our operations are conducted in the United States and to provide the Service, personal information will be processed in the United States. When your personal information is no longer needed for the purpose for which it was obtained or to comply with legal and regulatory obligations, we will take reasonable steps to destroy or permanently de-identify your personal information.

If you have any questions or wish to lodge a complaint, you may do so by contacting us at the information in the

How to Contact Us

section below. If you submit a complaint, we will investigate your compliant and determine the steps that we will take to resolve it. We will contact you if we need any additional information from you and will notify of the outcome of the investigation.

For your convenience, we may link to third-party sites and services, or otherwise display third-party content through the Site to provide increased value to our visitors. We have no control over these linked sites, each of which has separate privacy and data collection policies and practices independent from us. As such we have no responsibility or liability for these independent policies or actions and are not responsible for the privacy practices or the content of any such websites. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information, and we encourage you to review their policies before engaging with these third-party sites.

This Privacy Policy is effective as of the date at the top of this policy. Mythical Society has the discretion to update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage users to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect, especially before you provide information, and particularly personal information, directly to us through the Service. In the event of a material change to this Privacy Policy, we will provide a message through our website or via email informing you of the change.

If you have any questions about this Privacy Policy or our Service, please contact us at

or you can contact us through our contact form at

.