Privacy Policy

Mythical Society Privacy Policy

Effective September 26, 2023

1. Scope of this Policy

Thank you for visiting Mythical Society, owned and operated by Mythical Entertainment, LLC (“

Mythical Society

,” “

we

,” “

us

,” “

our

”). Mythical Society respects your privacy and values your trust. We are committed to ensuring that the personal information stored by our systems is suitably protected and used appropriately. The purpose of this Privacy Policy is to inform you of the treatment and handling of information that we may learn about you from visiting the Mythical Society website at mythicalsociety.com (the “

Site

”), your use of the Mythical Society mobile application (the “

App

”), and/or by use of any of our services offered therein (collectively, the “

Service

”).

Mythical Store:

https://mythical.com/pages/privacy-policy

Vote Like a Beast:

https://votelikeabeast.com/privacy-policy/

Sporked:

https://sporked.com/privacy-policy/

MishMash:

https://eatmishmash.com/policies/privacy-policy

If you have any questions regarding this information or our privacy practices, please see the section entitled How to Contact Us at the end of this Privacy Policy.

2. Agreement to Terms

If you do not agree with the terms of this Privacy Policy or our

Terms of Use

, then you should immediately discontinue use of our Service without providing us any personally identifiable information.

3. Information We Collect

We may collect the following categories of personal information (a) directly from you (such as when you create an account, leave a comment, complete a survey, or send communications to us), (b) from the device and browser that you use to access the Service, (c) from cookies, or (d) from third parties (such as social media networks when you contact us via social media (e.g., through our Discord channel).

Identifiers

We may collect your name, email address, username and password, postal address, and phone number.

Financial and Transactional Information

We may collect payment method details (such as you credit or debit card information or bank account details), shipping address, billing address, and order history. We use certain authorized third-party payment processors to process payments on our behalf.

Demographic Information

We may collect your birthdate and age as well as your gender, gender identify and/or gender expression.

User-generated Content

We may collect the content you post to the Service, such as comments, survey responses, and profile photos.

Audio-Visual Information

We may host virtual events (e.g., online meet-and-greets) that may be recorded. As such, we may record your image and voice.

Device Information

We collect device information when you visit the Site and use the App. This includes your computer or mobile device type, browser type, unique identifiers, IP address, and geolocation information.

Internet or Electronic Network Activity Information

We may collect information concerning your interaction with the Site and App, including when you access the Site and App and your browsing activity on the Site and App (such as which pages you visit, in what order, and for how long). This may include “traffic” data or tracking information provided by the Site’s host or similar providers (e.g., Google Analytics) that may be helpful for marketing purposes or for improving the Site.

Interests and Inferences

We may collect information about your interests and hobbies. And we may draw inferences from the information above that may reflect your preferences, characteristics, or interests. 

You are not required to provide all personal information identified in this Privacy Policy to use the Service or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able to allow you to register an account or respond to your requests or inquiries.

4. Cookies

We store certain information that gets collected automatically at our end through cookies and other similar technologies on the Site. A cookie is a small string of information that a website that you visit transfers to your browser for identification purposes. Cookies can be used to follow your activity while using a website or across websites, and that information helps companies understand your preferences and tendencies, as well as improve and personalize your website experience. Some cookies are necessary to operate a website, while others can be functional, analytical, or used for marketing purposes, including targeted advertising (as discussed in more detail below). Cookies on the Site are generally divided into the following categories:

Strictly Necessary Cookies

: These are required for the operation of the Site. They include, for example, cookies that allow you to login to password-protected portions of the Site.

Analytical/Performance Cookies: These allow us to recognize and count the number of users on the Site and understand how such users navigate through the Site (e.g., when and which pages are visited, in what order the pages are visited, and where a user is located). This helps improve how the Site works, for example, by ensuring that users can find what they are looking for easily.

We use Google Analytics for part of this process. For more information about Google Analytics, please visit

http://www.google.com/policies/privacy/partners/

. You can opt-out of Google Analytics’ collection and use of data generated by your use of the Site by going to

https://tools.google.com/dlpage/gaoptout

.

Functional Cookies

: These improve the functional performance of websites and make them easier for you to use. These include cookies that are used to remember that you previously visit the Site and asked to remain logged in.

Targeting Cookies

: These record your visit to the Site, the pages you have visited, and the links you have followed to recognize you as a previous visitor, and to track your activity on the Site and other websites you visit. These cookies are used to display ads on other websites based on your visits to the Site and other online activity. These cookies qualify as persistent cookies because they remain on your device. For more information about targeted advertising and how to opt out with your specific browser and device, go to the

Network Advertising Initiative

and the

Digital Advertising Alliance

. If you opt-out, you will need to apply these opt-out settings in each device from which you wish to opt out. Not all companies that serve interest-based ads participate in these opt-out programs, so even after opting-out, you may still receive some cookies and interest-based ads from other companies. If you opt-out of interest-based advertisements, you will still see advertisements online, but they may be less relevant to you. 

You can prevent the use of certain cookies by modifying your Internet browser settings, typically under the section “Help,” “Internet Options,” or “Settings.” If you disable or delete certain cookies in your Internet browser settings, you may still access the Site, however, you might not be able to access or use important functions or features of the Site, and you may, for example, be required to re-enter your log-in details.

Do-Not-Track Signals

Some web browsers may allow you to transmit a “do-not-track” signal. At this time, Mythical Society does not take any action in response to these signals.

5. Children’s Privacy

The Service is not intended for use by people under 16 years of age. We do not knowingly or intentionally gather personal information about visitors who are under the age of 16. If you are aware of, or suspect that, someone under the age of 16 is using the Site without permission, please notify us immediately by contacting us as detailed in the

How to Contact Us

section below. If you have questions or concerns about the Internet and privacy for your child, we encourage you to check out the

FTC Guidelines

for protecting your child’s privacy online.

6. How We Use Your Personal Information

We collect and use personal information for the following purposes:

Providing the Service and providing goods and services requested by, or reasonably anticipated by, you;

Managing your relationship with us, requesting feedback, and responding to your inquiries or requests;

Managing your account, including tracking your username and password;

Personalizing the Site and the marketing messages you receive from us;

Providing you with promotional materials and information that we believe will be relevant to you;

Administering promotions, events, or surveys;

Analyzing use of the Site and App;

Tailoring advertisements to what we believe will be of interest to you (including working with our advertising partners to display advertisements on third-party website that you may visit);

Assessing the success of our marketing and advertising campaigns;

Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity or prosecuting those responsible; and 

Complying with legal and regulatory obligations.

7. How We Share Your Personal Information

We may share your personal information with the following third parties:

Our group companies

, including our parent companies, Mythical Holdings, LLC and Lillington Basement, Inc., as well as our affiliates, Mythical Entertainment, LLC, Mythical Goods, LLC, Fuquay-Varina Trading, LLC, Mythical Accelerator, LLC, Turn of Phrase, LLC, Mythical Roadshow, LLC, MishMash, LLC, Smosh Productions, Inc.

Service providers

, including hosting providers and IT outsourcing, membership software providers, web analytics providers, payment processors, order fulfillment and shipping providers, customer service support providers, communication service providers, and marketing providers. In some instances, service providers will be directly responsible to you for their use of your personal information. They may be obliged by law to provide you with additional information regarding the personal information that they hold about you and how and why they process that information. Further information may be provided to you in a separate notice or may be obtained from such service providers directly, for example, via their websites.

Other users

, for example, if you post a comment, your name, profile photo, and comment will be visible to other users of the Site.

Advertising networks

to provide you with marketing that we or our advertising partners believe will be relevant to you.

Advisers and financial institutions

, including auditors, notaries, business continuity support service providers, and legal, tax, and risk and compliance advisors.

With third parties in connection with a change to the control or financial status of the company

, including a corporate restructuring, sale, acquisition, financing, reorganizations, bankruptcy, receivership, transfer, assignment of assets, or business merger or divestiture. Personal information and other information may be shared in the diligence process with counterparties and others assisting with the transaction and transferred to a successor or affiliate as part of that transaction.

Government bodies, dispute resolution organizations, law enforcement agencies, or third parties

in connection with (a) responding to a subpoena, search warrant, or other lawful request for information that we receive; (b) cooperating in a law enforcement or similar investigation; or (c) otherwise protecting our rights, as applicable.

8. Your Privacy Choices

If you no longer want to receive our newsletter or other marketing communications, you may unsubscribe at any time by following the unsubscribe options in the communication itself or by opting out in your user account or at check out. 

To opt-out of text messages, you may text “STOP” in reply to any Mythical Society marketing text message.

Please note that you cannot unsubscribe from certain correspondence from us, including messages relating directly to your account.

To review, amend, and delete certain information associated with your account (e.g., shipping addresses), you may do so by logging into your account. If you wish to delete your account, please contact us at

society@mythical.com

. We may be required to maintain certain information associated with your account for our internal record-keeping purposes or to comply with legal or regulatory obligations.

9. Security

We maintain reasonable technical and organizational measures to protect personal information from loss, misuse, alteration, or unintentional destruction. We have implemented various security measures to protect both the personal information and the general information that we receive from you through the Service. Whenever you give out personal information online there is a risk that third parties may intercept and use that information. Although we seek to protect your personal information and privacy, we cannot guarantee the security of any information you disclose online. To the extent permitted under applicable law, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized access by third parties, or other causes beyond our control.

You play an important role in keeping your information secure. You should not share your username or password with anyone. If you have reason to believe that your account is no longer secure, please contact us immediately at the contact information in the

How to Contact Us

section below.

10. Additional Disclosures for Residents of California

For residents of California, this section describes how we collect, use, disclose, and/or “sell” (as defined under California law) the personal information of California residents, and the rights you may have under California law. These disclosures are intended to supplement this Privacy Policy with information required by California law.

To understand what personal information we may have collected about you in the past 12 months, and from where we collected it, please see the section

Information We Collect

above.

We collect his personal information to operate, manage, and maintain our business, to provide our services, and to accomplish our business purposes and objectives, as further described in the

Our Use of Personal Information

section above. In addition, the financial information we collect (such as credit or debit card information or bank account information) may be considered sensitive personal information. Financial information is processed by authorized payment processors, and this information is only collected and used to process and fulfill your orders, to provide customer service, to ensure security and integrity of your data and our systems, and to comply with legal and regulatory obligations.

We may share personal information with the third parties listed above in the section

Our Disclosure of Personal Information

. Below we have provided more detail regarding the two ways we share your personal information: (a) “sales” of information and (b) general disclosures of information for a business purpose.

“Sales” of Information

We have marked “sales” in quotation marks because a “sale” under California law broadly includes any disclosure of information in return for any value. This value does not need to be monetary, like in a traditional sale. For example, a “sale” can be when a business provides information collected through cookies to an advertising network that it has hired to promote its own ads—but then the advertising network is able to use the cookie data provided for its own purposes, outside of this particular business relationship.

Mythical Society does not share personal information in exchange for payment and we require that our service providers only use your personal information to perform the services we have asked of them. However, we use advertising networks to help us improve your advertising experience (such as serving advertisements on our behalf across the Internet and providing analytics services). Sharing personal information with the third-party provider while using these tools may fall within the definition of a “sale” of personal information under California law.

In the past 12 months, we have provided Device Information, Internet or Electronic Network Activity Information, and Inferences to Advertising Networks. 

We do not sell, or have actual knowledge of any sale of, the personal information of minors under 16 years of age.

Disclosures of Information for a Business Purpose

To manage our business and provide services to you, we sometimes share personal information with third parties. As noted above, these third parties cannot further collect, sell, or use the personal information we share with them except as necessary to perform our purposes, as instructed by us.

In the past 12 months, we may have disclosed the following categories of personal information to the following third parties for our operational business purposes:

Identifiers

Group Companies

Service Providers

Financial and Transactional Information

Group Companies

Service Providers

Demographic Information

Group Companies

Service Providers

User-generated Content

Group Companies

Service Providers

Other Users

Audio-Visual Information

Group Companies

Service Providers

Device Information

Group Companies

Service Providers

Internet or Electronic Network Activity Information

Group Companies

Service Providers

Interests and Inferences

Group Companies

Service Providers

Your Rights

Under California law, you have a right to notice, upon collection, of the categories of personal information collected and the purposes for which the information will be used. In addition, California residents may have additional rights, subject to certain limitations, including:

Access

: You may have the right to access a copy of the categories and specific pieces of personal information that we have collected, used, and/or disclosed.

Correction

: You may have the right to request that we correct inaccurate personal information that we hold about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.

Deletion

: You may have the right to request that we delete or anonymize your personal information, with certain exceptions.

Sale/Sharing Opt-out

: You may also have the right to opt-out of the sale of your personal information and to opt-out of cookies for cross-context behavioral advertising.

No Retaliation

: You have the right to be free from discrimination for exercising your rights.

You may exercise your right to opt-out of “sales” and cross-context behavioral advertising by clicking this link and following the instructions:

Do Not Sell My Personal Information

If you wish to exercise the right to access, correct, or delete your information or have any questions or concerns regarding the processing of your personal information, please contact us at

society@mythical.com

with the subject line “California Privacy” so that we can get your email to the right team. We will respond to your request consistent with applicable law. 

Please note, however, before we will be able to process your request for access or deletion of personal information, we will need to properly verify your identity for security purposes. If we possess appropriate information about you (e.g., name, email address), we will attempt to verify your identity using that information. If it is not reasonably possible to identify you, we may not be able to respond to your request. 

To use an authorized agent to make a request on your behalf, we may need the authorized agent to provide proof that you gave the authorized agent signed permission to submit the request on your behalf. We may also require you to verify your identity directly with us.

11. Additional Disclosures for Residents of Canada

This section contains additional information for residents of Canada. As noted above, you may view and/or update certain information associated with your account (e.g., name, password, shipping address) by logging into your account. If you wish to request access to or correction of other personal information, request to opt-out of the processing of your personal information, or request that we delete your personal information, you may contact us at

society@mythical.com

with the subject line “Canada Privacy” so that we can get your email to the right team. You may also contact us for information about how foreign-based service providers process your personal information or if you have any questions or complaints about the manner in which we treat your personal information.

12. Additional Disclosures for Residents of the European Union (EU) and United Kingdom (UK)

This section provides additional information for residents of the EU and UK.

Data Transfers

As a US company, most of our operations are conducted in the United States and in order to provide the Service, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. Where required by applicable law, we provide appropriate protections for cross-border transfers for international data transfers.

Retention of Your Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which the information was collected; as needed to address tax, corporate compliance, employment, litigation, and other legal rights and obligations; and as otherwise permitted by law.

Legal Basis for Processing Your Personal Information

Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the Our Use of Personal Information section above, including: (i) as may be necessary to perform a contract with you; (ii) as necessary to comply with a legal obligation; (iii) consent (where consent has been provided as appropriate under applicable law); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Service).

Automated Decision-Making

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or that otherwise significantly affects you.

Your Rights

As available and except as limited under applicable law, individuals in the EU and UK have the rights described below:

Access

. You have the right to request a copy of the personal information we are processing about you, which we will provide to you in electronic form.

Rectification

. You have the right to require that any incomplete or inaccurate personal information that we process about you is amended.

Deletion

. You have the right to request that we delete personal information that we process about you, unless, for example, we are required to retain such information to comply with a legal obligation or to establish, exercise, or defend a legal claim.

Restriction

. You have the right to request that we restrict our processing of your personal information where: (i) you believe such data to be inaccurate; (ii) our processing is unlawful; or (iii) we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.

Portability

. You have the right to request that we transmit the personal information we hold with respect to you to another data controller.

Objection

. Where the legal justification for our processing of your personal information is our legitimate interest, you have the right to object to such processing on grounds relating to your situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data to establish, exercise, or defend a legal claim.

Withdrawing Consent

.  If you have consented to our processing of your personal information, you have the right to withdraw your consent at any time, free of charge. Please note that if you withdraw your consent, this will not affect the lawfulness of our use and processing of your information based on your consent before the point in time when you withdraw your consent or processing of other information based on other legal bases.

Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us at

society@mythical.com

with the subject line “EU Privacy” so that we can get your email to the right team. We will respond to you request consistent with applicable law. 

If you feel that your request or concern was not satisfactorily resolved by us, you have the right to lodge a complaint with your local data protection authority.

13. Additional Disclosures for Residents of Brazil

This section provides additional information for residents of Brazil.

Data Transfers

As a US company, most of our operations are conducted in the United States and in order to provide the Service, personal information will be processed in the United States, where laws regarding processing of personal information may be less stringent than the laws in your country. Where required by applicable law, we provide appropriate protections for cross-border transfers for international data transfers.

Retention of Your Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which the information was collected; as needed to address tax, corporate compliance, employment, litigation, and other legal rights and obligations; and as otherwise permitted by law.

Legal Basis for Processing Your Personal Information

Where required, we have several different legal grounds on which we collect and process your personal information for the purposes set out in the

Our Use of Personal Information

section above, including: (i) as may be necessary to perform a contract with you; (ii) as necessary to comply with a legal obligation; (iii) consent (where consent has been provided as appropriate under applicable law); and (iv) as necessary for our legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the Service).

Automated Processing

We do not use automated processing to make decisions that may affect you significantly. However, we use profiling and analytics to understand how people use the Site and for marketing purposes. These analytics help us understand and improve the Service. We also use security and fraud analytics, for example, to identify potential fraud.

Your Rights

As available and except as limited under applicable law, individuals in Brazil have the rights to request:

Confirmation of processing of personal information;

Access to your personal information;

Correction of incomplete, inaccurate, or outdated personal information;

Anonymization, blocking, or deletion of unnecessary, excessive data;

Personal information portability to another service provider or product, upon express request;

Deletion of personal information processed with your consent;

Obtaining information about the entities with which Mythical Society has shared your personal information;

Information on the possibility of you not providing consent, as well as being informed about the consequences should you not give consent;

Revocation of consent.

Some rights may be limited, and we may need to retain certain personal information, as required or permitted by applicable law. To inquire about or exercise the rights listed above, at any time, contact us at

society@mythical.com

with the subject line “Brazil Privacy” so that we can get your email to the right team. We will respond to your request consistent with applicable law.

14. Additional Disclosures for Residents of Australia and New Zealand

If you are resident of Australia or New Zealand, you have the right to access the personal information we hold about you and to update and/or correct it, subject to certain exceptions. As noted above, you may view and/or update certain information associated with your account (e.g., name, email address, password) by logging into your account. If you wish to access or update/correct other personal information, contact us at

society@mythical.com

with the subject line “AU NZ Privacy” so that we can get your email to the right team. We will respond to you request consistent with applicable law.

As a US company, most of our operations are conducted in the United States and to provide the Service, personal information will be processed in the United States. When your personal information is no longer needed for the purpose for which it was obtained or to comply with legal and regulatory obligations, we will take reasonable steps to destroy or permanently de-identify your personal information.

If you have any questions or wish to lodge a complaint, you may do so by contacting us at the information in the

How to Contact Us

section below. If you submit a complaint, we will investigate your compliant and determine the steps that we will take to resolve it. We will contact you if we need any additional information from you and will notify of the outcome of the investigation.

15. Links to Other Websites

For your convenience, we may link to third-party sites and services, or otherwise display third-party content through the Site to provide increased value to our visitors. We have no control over these linked sites, each of which has separate privacy and data collection policies and practices independent from us. As such we have no responsibility or liability for these independent policies or actions and are not responsible for the privacy practices or the content of any such websites. Please note that these other sites may send their own cookies to users, collect data, or solicit personal information, and we encourage you to review their policies before engaging with these third-party sites.

16. Effective Date and Changes to this Privacy Policy

This Privacy Policy is effective as of the date at the top of this policy. Mythical Society has the discretion to update this Privacy Policy at any time. When we do, we will revise the effective date at the top of this page. We encourage users to frequently check this page for any changes and to stay informed about how we are helping to protect the personal information we collect, especially before you provide information, and particularly personal information, directly to us through the Service. In the event of a material change to this Privacy Policy, we will provide a message through our website or via email informing you of the change.

17. How to Contact Us

If you have any questions about this Privacy Policy or our Service, please contact us at

society@mythical.com

or you can contact us through our contact form at

https://www.mythicalsociety.com/contact/