Interested in Becoming
a Wholesaler?
We would love to hear from you.
Contact us at sales@placeshowroom.com.
We would love to hear from you.
Contact us at sales@placeshowroom.com.
Last Updated: June 18, 2024
Lulu’s Fashion Lounge, LLC’s (“Lulus” or the “Company”) acceptance of your wholesale orders is expressly made conditional on Your agreement to these Wholesale Terms and Conditions (“Terms”). The Terms set forth below will govern all transactions between you (“You” or “Customer”) and Lulus. These Terms include our Privacy Notice, which is available at https://www.luluswholesale.com/#privacy, and hereby incorporated by reference. Lulus specifically rejects any terms or provisions which set any standards, specifications or damages related to quality and time of delivery or which contradict or purportedly claim to supersede these Terms. By placing Your wholesale order, You acknowledge and agree to these Terms.
Lulus may revise these Terms at any time, so You should check Lulus’ Brand Page on NuOrder periodically to review the Terms that apply to Your orders. Should You have any questions concerning the Terms or any Lulus’ policies, please contact us at wholesale@lulus.com.
Effective: July 17, 2023
If you are a California resident, please see the Supplemental Information for California Residents section below for more information about your specific privacy rights.
If you are an EU, UK, Switzerland or Canadian resident, please see the Supplemental Information for EEA, EU, Switzerland and Canada section below for more information about who is the controller, the legal basis for processing, and your specific data protection rights.
This Privacy Notice (“Notice”) describes how Lulu’s Fashion Lounge, LLC, together with its subsidiaries and affiliates (collectively, "Company" "us," "we," or "our") processes Personal Data about employees of our wholesale partners (“Business Contacts”). If you interact with our website, use our products or services, or otherwise engage with us outside of our business relationship, Lulus’ Privacy Policy at www.lulus.com/customerservice/privacypolicy applies to any Personal Data we process through those interactions, not this Notice.
Whenever you interact with us on behalf of another individual or entity, such as by providing or accessing Personal Data about another individual, you need to obtain their consent (or have the legal authority without consent) to share any Personal Data you provide to us.
Changes: We may update this Notice from time to time. Any updated Notice will be effective when posted on the Company’s Brand Page in NuOrder. Please check this Notice periodically for updates. If any of the changes are unacceptable to you, you should stop interacting with us. When required under applicable law, we will notify you of any changes to this Notice via email.
1. Sources of Personal Data
“Personal Data” is any information relating to an identified or identifiable natural person and in some jurisdictions, information relating to an identified or identifiable household.
We collect Personal Data about you from the following sources:
We may combine information that we receive from the various sources described in this Notice, including third party sources, and use or disclose it for the purposes identified below.
2. Types of Personal Data We Collect
We may collect the following types of Personal Data:
3. How We Use Personal Data
We may use Personal Data for the following purposes:
We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.
4. How We Disclose Personal Data
We may disclose Personal Data to third parties, including to the categories of recipients described below:
5. Data Security and Data Retention
We maintain reasonable security procedures and technical and organizational measures to protect your Personal Data against accidental or unlawful destruction, loss, disclosure or use.
Your Personal Data will be retained as long as necessary to fulfill the purposes we have outlined above unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to maintain our business relationship with you or your company; improve our business over time; ensure the ongoing legality, safety and security of our services and relationships; or otherwise in accordance with our internal retention procedures. Once you or your company has terminated your relationship with us, we may retain your Personal Data in our systems and records in order to ensure adequate fulfillment of surviving provisions in terminated contracts or for other legitimate business purposes, such as to enable easier future user onboarding, in order to demonstrate our business practices and contractual obligations, or to provide you with information about our products and services in case of interest. If you would like to know more about the retention periods applicable to your Personal Data, you can contact us using details provided in Section 8 below.
6. Contact Information
If you have questions regarding this Notice, please contact privacy@lulus.com.
7. Supplemental Information for California Residents
California residents may have the following rights concerning their Personal Data:
California residents may request to exercise their privacy rights by calling our toll free number (1-866-918-5858) or by emailing privacy@lulus.com.
Verification: In order to process rights requests, we may need to obtain information to locate you in our records or verify your identity depending on the nature of the request. In most cases, we will collect some or all of the following data elements: first and last name, email address, and/or telephone number. In some cases, we may request different or additional information, including a signed declaration that you are who you say you are. We will inform you if we need such information.
Authorized Agents: Authorized agents may exercise rights on behalf of you by submitting a request via email to privacy@lulus.com and indicating that they are submitting the request as an agent. We may require the agent to demonstrate authority to act on behalf of you by providing signed permission from you. We may also require you to verify your own identity directly with us or to directly confirm with us that you provided the authorized agent permission to submit the request.
B. Disclosure of Personal Data
Below please find a chart detailing the categories of Personal Data we disclosed and the categories of third parties to whom we disclosed each category in the past 12 months. We do not “sell” or “share” Business Contact Personal Data (as “sell” or “share” is defined in the CCPA).
| Categories of Personal Data We Collect | Categories of Third Parties With Whom We Disclose Personal Data for a Business or Commercial Purpose |
| Identifiers (Section 2.A) | |
| Personal information subject to the California Customer Records Act (Section 2.B) | |
| Commercial information (Section 2.C) | |
| Professional or employment-related information (Section 2.D) | |
8. Supplemental information for the EEA, UK, Switzerland and Canada
The following terms supplement the above disclosures with respect to our processing of European Economic Area (i.e., European Union Member States, Iceland, Liechtenstein and Norway) (“EEA”), UK, Swiss, and Canadian Personal Data. To the extent applicable, in the event of any conflict or inconsistency between the other parts of the Notice and the terms of this Section 10, this Section 10 shall govern and prevail with regards to the processing of EEA, UK, Swiss and Canadian Personal Data.
Data Controller
Unless otherwise specified, the entity responsible for the processing of your Personal Data and acting as the controller is the Company entity with which you have a primary relationship, such as the entity that entered into the sales, service, or supply contract with you, the entity that provided you with marketing or promotional materials and communications, the entity in the country for which we created a local website, or the entity whose representatives you have been communicating with.
If you have any questions about controllership, do not hesitate to contact us using the information in Section 8 above.
Legal Bases for Processing
We rely on the following legal grounds for the collection, use, and other processing of your Personal Data:
A. Processing Purpose: To purchase products and services from you or your company(Section 3.A).
Legal Bases:B. Processing Purpose: For our internal business purposes (Section 3.B).
Legal Bases:C. Processing Purpose: For our internal research and product improvement purposes (Section 3.C).
Legal Bases:D. Processing Purpose: For legal, safety or security reasons (Section 3.D).
Legal Bases:E. Processing Purpose: In connection with a corporate transaction, if applicable (Section 3.E).
Legal Bases:Your Data Protection Rights
Under the conditions set by applicable data protection laws, you may exercise certain rights regarding your Personal Data.
You may exercise these rights by contacting us by privacy@lulus.com. Before responding to your request, we may ask you to verify your identity and to provide further details about your request. We will endeavor to respond within an appropriate timeframe and, in any event, within any timescales required by applicable laws and regulations.
International Transfers of Personal Data
Due to the global nature of our operations, some of the recipients mentioned in Section 4 of the Notice may be located in countries outside the EEA, UK or Switzerland that do not provide an adequate level of data protection as defined by data protection laws in the EEA, UK and Switzerland. Certain third countries, such as Canada, have been officially recognized by the European Commission and UK Secretary of State as providing an adequate level of protection. Transfers within our corporate group or to third parties located in countries that have not received such recognition take place using an acceptable data transfer mechanism, such as the EU and/or UK Standard Contractual Clauses, Binding Corporate Rules, approved Codes of Conduct and Certifications, on the basis of permissible statutory derogations, or any other valid data transfer mechanism issued by the EEA, UK or Swiss authorities.
Please reach out to us using the contact information in Section 8 above if you want to receive further information about how we transfer Personal Data or, where available, a copy of the relevant data transfer mechanism.
EU Representative
Representative in the EU
Lulus has designated McDermott Will & Emery Belgium LLP as its representative in the EU, whose registered address is at Avenue des Nerviens 9-31, 1040 Brussels, Belgium. For all EU GDPR related issues, you can contact our representative office by post at their registered address or email at Lulus-eu-representative@mwe.com. We recommend you use the email channel for time-saving reasons.
Representative in the UK
Lulus has designated McDermott Will & Emery UK LLP as its representative in the UK. For all UK GDPR related issues, you can contact our representative office by email at Lulus-uk-representative@mwe.com.