Mariposa Privacy Policy

Effective Date: March 15, 2020  Last Updated: August 31, 2026

Mariposa ("Mariposa," "we," "us," or "our") respects your privacy and is committed to protecting it through compliance with this Privacy Policy.

This Policy describes the types of information we may collect from you, or that you may provide, when you visit our website at www.mariposa.com (the "Website"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect:

  • On this Website;
  • In email, text, and other electronic messages between you and this Website; and
  • Through mobile and web applications you download from this Website, if any, which provide dedicated non-browser-based interaction between you and this Website.

It does not apply to information collected by us offline or through any other means, including telephone or email outside the Website, or by any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Website.

Please read this Policy carefully. By using the Website, you agree to the practices described in this Policy. If you do not agree, please do not use the Website. This Policy may change from time to time (see Changes to This Privacy Policy, below). Your continued use of the Website after changes are posted constitutes your acceptance of those changes.

1. Information We Collect About You

We collect several types of information from and about users of our Website, including:

  • Personal information — information by which you may be personally identified, such as name, postal address, email address, telephone number, payment/billing information, or any other identifier by which you may be contacted online or offline;
  • Non-identifying information — demographic or other information that does not identify you individually; and
  • Internet/device activity information — information about your internet connection, the equipment you use to access the Website, and your usage details, including IP address, browser type, operating system, referring/exit pages, and clickstream data.

We collect this information:

  • Directly from you when you provide it (for example, by filling out a form, creating an account, making a purchase, or contacting us);
  • Automatically as you navigate the Website (through cookies, web beacons, pixels, and similar tracking technologies); and
  • From third parties, such as payment processors, analytics providers, or business partners.

Information You Provide to Us

This may include information you provide when you:

  • Fill out forms on the Website, including account registration or requests for services;
  • Make a purchase or provide payment information (processed through our third-party payment processor — see Payment Information, below);
  • Correspond with us by email, phone, or otherwise;
  • Search for content on the Website; or
  • Report a problem or request support.

Information Collected Through Automatic Data Collection Technologies

As you interact with the Website, we may automatically collect:

  • Details of your visits, including traffic data, logs, and the resources you access;
  • Information about your device and connection, including IP address, browser type, and operating system; and
  • Information about your online activity over time and across third-party sites (behavioral tracking), where permitted.

The technologies used for this include cookies, flash cookies, web beacons, and similar tools. See Your Privacy Choices, below, for how to control these.

Payment Information

If you make a purchase through the Website, payment card information is collected and processed by our third-party payment processor. We do not store full payment card numbers on our own servers. Our payment processing complies with applicable Payment Card Industry Data Security Standard (PCI DSS) requirements.

Children's Privacy

The Website is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or 16, where required by applicable law). If we learn that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information. If you believe we might have information from or about a child, please contact us using the information in Contact Us, below.

2. How We Use Your Information

We use information that we collect about you, or that you provide to us, to:

  • Present the Website and its contents to you;
  • Provide information, products, or services you request;
  • Process transactions and send related communications;
  • Fulfill any other purpose for which you provide the information;
  • Notify you about changes to the Website or our services;
  • Improve the Website and develop new features;
  • Prevent fraud and enforce our terms and policies; and
  • Comply with legal obligations.

We will not use your personal information for materially different, unrelated, or incompatible purposes without notifying you.

3. Disclosure of Your Information

We do not sell your personal information for money. We may disclose personal information that we collect or you provide:

  • To service providers who perform functions on our behalf, such as payment processing, website hosting, analytics, email delivery, and customer support, under contractual obligations to protect your information;
  • To fulfill the purpose for which you provided it;
  • For any other purpose disclosed by us at the time you provide the information;
  • With your consent;
  • To comply with law, including responding to a court order, subpoena, or governmental/regulatory request;
  • To protect rights and safety — if we believe disclosure is necessary to protect the rights, property, or safety of Mariposa, our users, employees, or others, or to detect, prevent, or address fraud, security, or technical issues; and
  • In connection with a business transaction — such as a merger, acquisition, financing, or sale of assets, in which personal information may be among the assets transferred.

We may disclose aggregated or de-identified information that does not identify any individual without restriction.

4. Cookies and Tracking Technologies

We and our third-party partners (such as analytics and advertising providers) use cookies and similar technologies to:

  • Operate and improve the Website;
  • Remember your preferences;
  • Understand how visitors use the Website; and
  • Deliver relevant content or advertising.

You can control cookies through your browser settings, including refusing all or some cookies or alerting you when cookies are set. Disabling cookies may affect Website functionality. Where required by law, we will obtain your consent before placing non-essential cookies.

We currently do not respond to "Do Not Track" browser signals, but you may exercise the choices described in this section and in Your Privacy Choices, below.

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law (for example, tax, accounting, or legal requirements). Criteria used to determine retention periods include:

  • How long the information is needed to provide our services or complete a transaction;
  • Whether we have a legal, contractual, or similar obligation to retain it; and
  • Whether retention is advisable considering our legal position (such as statutes of limitations, litigation, or regulatory investigations).

When personal information is no longer needed, we will securely delete, anonymize, or destroy it.

6. Data Security

We have implemented reasonable administrative, technical, and physical safeguards designed to protect personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. These safeguards may include encryption of sensitive data in transit, access controls limiting internal access to personal information, and regular review of our security practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. Any transmission of personal information is at your own risk.

Please do not send us sensitive information — including Social Security numbers, health/medical information, or full payment card numbers — through unsecured channels such as web forms or email.

Data Breach Notification

In the event of a breach of security compromising unencrypted personal information, we will notify affected individuals and any required regulators in accordance with applicable law, without unreasonable delay.

7. Your Privacy Choices and Rights

General Choices

You may:

  • Opt out of promotional emails by following the unsubscribe instructions in those emails;
  • Adjust your browser settings to refuse or limit cookies (see Cookies and Tracking Technologies, above); and
  • Request access to, correction of, or deletion of personal information you have provided to us, by contacting us using the information in Contact Us, below. We may not be able to accommodate a request if we believe it would violate any law or legal requirement, or cause the information provided to be incorrect.

Additional Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we have collected, used, disclosed, and sold/shared about you in the preceding 12 months;
  • Delete personal information we have collected from you, subject to certain exceptions;
  • Correct inaccurate personal information;
  • Opt out of the "sale" or "sharing" of your personal information (as those terms are defined under California law), including for cross-context behavioral advertising;
  • Limit the use of sensitive personal information; and
  • Non-discrimination — we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us using the information below or, if applicable, use the ["Do Not Sell or Share My Personal Information"] link on our Website. We will verify your request before fulfilling it, consistent with applicable law.

Additional Rights for Other U.S. State Residents

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and port your personal information, and to opt out of targeted advertising, the sale of personal information, or certain profiling. To exercise these rights, contact us using the information below.

Additional Rights for EU/UK/EEA Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, we process your personal information on the following legal bases: your consent, performance of a contract, compliance with a legal obligation, or our legitimate interests (such as improving and securing the Website), provided those interests are not overridden by your rights.

You have the right to:

  • Access, correct, or delete your personal information;
  • Restrict or object to our processing of your personal information;
  • Request portability of your personal information; and
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

If personal information is transferred outside the EEA/UK, we will use appropriate safeguards, such as Standard Contractual Clauses, as required by law. You also have the right to lodge a complaint with your local data protection authority.

8. Third-Party Links

The Website may contain links to third-party websites. This Policy does not apply to those websites, and we encourage you to review the privacy policies of any third-party sites you visit.

9. Changes to This Privacy Policy

We may update this Policy from time to time. The date at the top of this Policy indicates when it was last revised. Material changes will be indicated by an updated "Last Updated" date, and, where required by law, we will provide additional notice (such as a prominent notice on the Website or direct communication). We encourage you to review this Policy periodically.

10. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our data practices, please contact us at:

Mariposa 5 Elm Street Manchester, MA 01944 Phone: 800-788-1304 Email: privacy@mariposa.com