Privacy & Cookie Statement

Effective Date: April 20, 2022

Last Updated on: April 20,2000

 A. General Information

1. Our Commitment to Privacy and Trust

We recognize the importance of users’ privacy and we have committed to respecting it. We care about your privacy and building trust with you is one of our highest and sincerest priorities. This Privacy Statement will explain how MAF LLC, owner of Cerrat, is collecting and using your personal information and how to contact us if you have questions about that collection and use.

2. Information about MAF LLC & Cerrat

MAF LLC (“MAF”) is a U.S. company headquartered in Dallas, Texas. MAF is the home-grown, family-owned Texas luxury leather goods parent company of Cerrat, and we are dedicated to providing our clients access to a distinctive and exclusive line of luxury products in which footwear and accessories serve as the brand’s hallmark categories.

Cerrat pursues a vision aimed at creating products that, while versatile, remain true to the brand’s DNA rooted in “luxury inspired by western wear fashion.” Heritage, quality and modern elegance are the distinct features of Cerrat that customers enjoy today.                  

MAF is the parent company of Cerrat (trademark) which sells luxury leather goods directly to clients on the Shopify webstore, www.cerratofficial.com (our “Services”). MAF believes in the sincere pursuit of delivering the best customer experience possible, which means taking available measures to protect user privacy and data. As part of this ethos, we believe it is our obligation to let you know what we do with your information and when possible, give you access to your own information when you want it. In this Policy Statement, any references to “MAF”,”Cerrat”, “we”, “our” or “us” or even the “Company” is a reference to MAF LLC and Cerrat based in Dallas, Texas.

3. Scope of this Privacy Statement

This Privacy Statement applies to MAF (Cerrat) only where we determine why and how we use the Personal Information we collect for sales of our products, customer service, marketing or other legitimate business purposes, and how in that capacity we act as the “Controller” of the data we collect. To be clear, this Privacy Statement does not cover any personal information our customers choose to collect and share with MAF where we are not the Controller, but rather the Processor. Additionally, our Website (“Site”) and Services may contain links to other websites, applications and services from third parties. The privacy and data security practices of those third-party sites are governed by the privacy statements of those third-parties, and not MAF.

B. Collection of Personal Information and Purposes of Use

1. Collection of Information and Its Use

The personal information MAF collects is generally determined by you and your interaction with us, our partners, publications and other resources. MAF uses Shopify to host its website, manage and present our web-store content to our visitors, process and fulfill your orders, as well as market to you in a limited capacity. Neither Shopify or MAF sell your data. We do share data for purposes of limited behavioral advertising (which you have the option to limit and opt-out of), but we do not knowingly sell or allow any of our partners or vendors to sell any of our customers’ data. Period.

                How and where does MAF collect information?

MAF collects information relating to or identifying individuals (“Personal Information”) from job candidates, prospects, customers, participants at our events, business partners and vendors and their employees, advisors, contractors, and individuals who choose to use our Services on other’s behalf (collectively, “Individuals”) who:

• Visit our Site(s);
• Receive or send communications from/to us, including email, phone calls, and mail;
• Use our Services as a customer or authorized user (for example, a retailer logs into their MAF (Cerrat) account as part of their use of our Services);
• Register for, attend and/or otherwise take part in our events, web-casts, contests, etc.;
• Download or otherwise engage our content or publications;
• Submit an inquiry about an order, for support or information;
• Participate in recorded meetings or events;
• Engage with our customer service or employees;
• Apply to work with us, view or share job postings; or
• Work at a partner or supplier of ours and interact with our company in the course of doing business or contemplating doing business with us.

We collect personal information from a variety of sources, including but not limited to:

• The person who is the subject of the Personal Information;
• Publicly available sources (such as a voting record);
• Third-Party Advertisers we have engaged to do advertising for us;
• Service Providers; and
• Business partners and/or vendors.

What type of personal information do we collect?

2. How We Use the Data

MAF collects Personal Information for a number of reasons or purposes, including but not only the following:

• Product and service fulfillment.
  • Complete, fulfill, manage, and communicate about purchases, etc.;
  • Set up and service your online profile on our Site or apps;
  • Provide customer service and alert you about product or shipping status; and
  • Manage any subscriptions, including order tracking, billing, and any messages with you about those subscriptions.

• Internal operations.
  • Improve the effectiveness of our Site, web-store, mobile apps, merchandise inventory, and customer service;
  • Conduct research and analytics related to our operations; and
  • Perform other logistics and operation activities as needed.

• Credit card processing:
  • Processing your payments and address any inquiries or requests about your purchase;
  • Offer additional products or services which could be of interest.

• Security, compliance, legal obligations and fraud prevention.
  • Protect our assets (on and offline) and prevent fraudulent activities;
  • Validate credentials and authenticate customers when logging into your profile, applications, or transacting online;
  • Protect the security and integrity of our Services and our data; and
  • Assist any law enforcement and respond to legal/regulatory inquiries.

• Marketing, promotions and advertising.
  • Send you information about our products, services, and promotions like personalized offers in email or mobile alerts;
  • Provide interactive features on our Site and apps, such as product ratings and reviews, and flash-sales;
  • Spot your product and shopping preferences; and
  • Oversee any contests, promotions, or surveys.

Sometimes Information is Vital: Where we need to collect and use Personal Information by law, to complete a transaction with your, or fulfill a contract with you, and you fail to provide the Personal Information required, such deficiency is likely to prevent MAF from meeting certain of our obligations.

Other People’s Privacy: If you provide us with Personal Information relating to another person, you must confirm you have informed them of our identity and why their Personal Information is required and how it will be used, and they must have given consent to share their information with us. THEY have to consent. Please know you cannot consent for them.

3. Sharing and Disclosure of Personal Information

We may share Personal Information to vetted third-parties for certain purposes, including the following:

• General Business Purposes: We may share information with consultants and other service providers for customer or technical support, marketing, recruiting, operations, account management, and legitimate general business purposes;

• Compliance with the Law: We may disclose information to a third-party where we are legally required to comply with applicable laws, regulations, legal processes or government requests.

• Protection of our Rights: We may also disclose information where it is needed to protect or exercise, establish or defend our legal rights;

• Business Transfers: We may share or transfer information to support negotiations of or for a merger, sale of company assets, financing, or acquisition of all or a portion of our business;

• Managing Events: If you use our Site to register for an event or webinar organized by a partner, we may share your Personal Information with that partner to process your registration and ensure your participation in the event; when this happens, our partner will process the Personal Information as a separate controller and their use and control over your Personal Information will be governed by their privacy statement and policies;

• Receiving Professional Advice: In certain instances, we may share Personal Information with professional advisers acting as processors or joint controllers, including lawyers, bankers, auditors and insurers where we operate, who provide their professional services, but only to the extent we are legally obliged to do so or have a legitimate interest in sharing information;

• Publicly Shared Information: Any Personal Information or other data you choose to submit in communities, on social media platforms, forums, blogs or chat rooms may be read, collected and used by others who visit these forums, depending on account settings. Your public statements are free to be seen, used and collected if provided publicly.

1. Use of Personal Information in the US, and Elsewhere

Our Site servers are located in the United States, and our third-party service providers and partners operate mainly in the United States and Canada. This means when we collect your Personal information, we may process it in these countries. These countries may have data protection laws different from those of your country, but we have in place appropriate safeguards. NOTE: MAF IS A US BASED AND US CENTRIC COMPANY. WE DO NOT HAVE A PRESENCE IN, BUSINESS IN, OR SOLICIT BUSINESS FROM OUTSIDE THE US. With that said, we act to and employ measures designed to reasonably protect the Personal Information we hold, including working with our service providers and partners to maintain the security of our Services.

2. Security

We use appropriate technical, organizational and administrative security measures designed to protect the security, confidentiality and integrity of information.

3. Data Retention

MAF will retain Personal Information we collect from you for the length of time necessary to complete our relationship with you, or there is an ongoing legitimate business need to do so and we have a valid reason to use the Personal Information. We determine the length of our retention periods for Personal Information on the basis of the purposes for the information, the amount, nature and sensitivity of the information used, any potential risk from unauthorized use or disclosure of that Personal Information and whether we can achieve the purposes of the use through other means, as well as on the basis of applicable legal requirements (such as applicable statutes of limitation).When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it or, if this is not possible (for example, because it has been stored in backup archives), we will securely store and isolate it from further processing until deletion is possible.

D. Your Privacy Rights

You may have the following privacy rights:

a. your name;
b. type of request:
c. approximate data of collection of the  information; and
d. a valid email address to contact you.

MAF does not use or process any Personal Data or Personal Information which would subject a person to a decision based solely on automated processing, including profiling, which produces legal effects ("Automated Decision-Making"). Automated Decision-Making currently does not take place on our Site or in or as part of our Services.

3. You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” link in the marketing communications we send you or by using the contact details provided under the “How to contact us” heading below. Please note opting-out of the receipt of marketing communications from us does not opt you out of receiving important business communications related to your current relationship with us, such as communications about your subscriptions or event registrations, service announcements or security information.

We respond to all requests we receive from individuals wishing to exercise their privacy rights under applicable data privacy or protection laws. If you seek to enforce any of your rights with respect to our Services, please contact the MAF representative with whom you have direct contact, or please mail us at privacy@cerratusa.com.

E. Important Information for California, Colorado, Connecticut and Virginia Residents

This section of our Privacy Statement supplements the information contained above and applies to visitors, users, and others who reside in California, Colorado and Virginia (”consumers” or “you”), in an effort to comply with the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCPA), the Connecticut Personal Data Privacy and Online Monitoring Act (CPOMA), and the Colorado Privacy Act (CPA) (collectively, the “State Privacy Laws") enacted in those states, as well as others in the future.

NOTE: This Statement does not apply to workforce-related personal information collected from California-based employees, job applicants, contractors, or similar individuals. Please see our notice as posted on our partner ADP internal MAF website.

As noted above in Section A, we collect information that identifies, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular consumer or household (”Personal Information”). Personal information, however, does not include:

• Publicly available information.
• Deidentified or aggregated consumer information.
• Information excluded from certain State Privacy Laws’ scope, including:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.]

MAF has collected the following categories of personal information from consumers within the last twelve (12) months:

Our Site collects the categories of Personal Information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete or products and services you purchase.
• Indirectly from you. For example, from observing your actions on our Website or through and from websites such as Pinterest and Instagram.
• From partners at events, conferences and business contacts.

We may use or disclose the Personal Information we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that Personal Information to respond to your inquiry. If you provide your Personal Information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.

• To provide, support, personalize, and develop our Site, products, and services.

• To create, maintain, customize, and secure your account with us.

• To process your requests, purchases, transactions, payments and prevent fraud.

• To provide support and respond to inquiries, including investigating and address your concerns and monitor and improve our responses.

• To personalize your Site experience and to deliver content, product and service offerings relevant to your interests, including offers and ads through our Site, third-party sites, and via email or text message (with your consent, where required).

• To help maintain the safety, security, and integrity of our Site, products and services, databases and other technology assets, and business.

•  For testing, research, analysis, and product development, including developing and improve our Site, products, and services.

• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

• As described to you when collecting your Personal Information or as otherwise set forth in State Privacy Laws.

• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred.

We may share your Personal Information by disclosing it to a third party for a valid business purposes under a written contracts that describe the purposes, requires the recipient to keep the Personal Information confidential, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, MAF has disclosed Personal Information for those business purposes identified below, to the categories of third parties indicated in the chart below.

We do not sell Personal Information as “sell” is defined by applicable State Privacy Laws. 

State Privacy Laws provide consumers (California, Connecticut, Colorado and Virginia residents) with specific rights regarding their Personal Information. This section, in everyday terms, describes those rights and explains how you may exercise those rights.

We will delete or deidentify Personal Information not subject to one of these exceptions from our records and will direct our service providers to take similar action

To exercise your rights to know or delete described above, please submit a request by either:

• Calling us at 469-834-4580
• Emailing us at privacy@cerratusa.com

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Information. You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

You do not need to create an account with us to submit a request to know or delete, however, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account.

We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Personal Information Sales Opt-Out and Opt-In Rights

 We do not intentionally collect the Personal Information of consumers and sell, or intentionally share in any way that could constitute a sale for value. We do “share” data as that term is defined under California law, in that we share that data with service providers who conduct cross contextual behavioral advertising on our behalf, such as Facebook and Instagram. You may OPT OUT of such “sharing” via our Cookie Consent Manager. We strongly advise utilizing this tool to avoid tracking cookies.

5. Do Not Track or Global Privacy Setting

We have deployed Shopify’s Cookie Consent Manager, which you can utilize to customize your cookie preferences, including to opt-out of targeting cookies for behavioral ads. The Global Privacy Control (“GPC”) signal is a browser setting that allows consumers to opt-out of targeted advertisements and/or the sale of personal information through a pre-determined signal. To set up GPC, you can visit the Global Privacy Control page. We are working with Shopify to recognize the GPC, but at this time Shopify is unable to implement a GPC response. Your use of our Cookie Consent manager will allow similar opt-out preferences as GPC.

6. Non-Discrimination

We will not discriminate against you for exercising any of your State Privacy Law rights. However, we may offer you certain financial incentives permitted by the State Privacy Laws that can result in different prices, rates, or quality levels. Any State Privacy Law -permitted financial incentive we offer will reasonably relate to your Personal Information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

F. MAF’s Cookie Statement

The Cookie Statement
MAF respects the privacy of visitors using our Site. This Cookie Statement is part of our Privacy Statement and provides you with clear and detailed information about the cookies we use and our purposes for using them.

Like most other sites, our Site uses cookies, in combination with other code such as pixels, scripts, tags and beacons (for us here, “cookies”) to distinguish you from other users of our Site. You can find out more about the different types of cookies used on our Site below. You should be aware that refusing certain types of cookies may impact your experience of our Site. You can change your preferences at any time by clicking on the Cookie Consent Manager button at the bottom of this Privacy Statement.

What is a Cookie?
A cookie is a small file of letters and numbers a website asks your browser to store on your device. Cookies store bits of information used to help make our Site work. Cookies set by MAF are called “first party cookies” (e.g. cookies placed by www.cerratofficial.com). We also use third party cookies, which are cookies set by a domain other than the current site you are visiting. Additional information about cookies is available at: www.whoishostingthis.com.

Your Choices Regarding Cookies
You have the option of changing cookie preferences when you first visit MAF’s site through our cookie banner or by clicking on the Cookie Banner button at the bottom of this statement.

When you visit our Site, strictly necessary cookies will be placed on your device so our site is able to function. You will be asked to consent or agree to other cookies via our cookie banner that appears when you land on our home page. You can give consent by clicking on the appropriate button on the banner displayed, or by setting your preferences when prompted. MAF does not assume consent and does not use cookies other than strictly necessary cookies if consent is not expressly given.

You can change or update your preferences at any time by clicking to the Cookie Consent Manager on our Site.

You may also alter your cookie settings on your Internet browser to set a “Do Not Track” (DNT) signal or through Global Privacy Control — Take Control Of Your Privacy, the All About DNT page, the Network Advertising Initiative’s Opt-Out page Opt Out - NAI: Network Advertising Initiative (thenai.org), and the Digital Advertising Alliance’s WebChoices tool WebChoices: Digital Advertising Alliance's Consumer Choice Tool for Web US (aboutads.info), each of which enables you to refuse the setting of all or some cookies for certain browsers and certain participating companies. Note, if your browser settings block all cookies (including strictly necessary cookies), you may not be able to access all or parts of our Site. Internet browser cookie settings are usually found in the “settings,” “preferences” or “options” menu. In order to understand more about these settings, the following links may be helpful. You can also use the “Help” option in your browser for more details.

• Cookie settings in Internet Explorer
• Cookie settings in Firefox
• Cookie settings in Safari
• Cookie settings in Chrome

How Long Do Cookies Last?
Except for Strictly Necessary Cookies, the cookies we run on our Site and apps will expire as follows:

Session cookies: They allow site operators to follow a user’s actions through a browser session. A browser session begins when a user opens the browser window and ends when the browser window is closed. Session cookies are temporary. Once the browser is closed, all session cookies are deleted.

Persistent cookies: These remain on a visitor’s device for a time period set by the cookie. They are activated each time a user visits the site that created that cookie.

What Cookies Does MAF Use & Why?

The cookies used on our Site are categorized as follows:
• Strictly necessary
• Performance
• Functional
• Targeting

Strictly Necessary & Functional Cookies

Our store is built with Shopify, which requires both Strictly Necessary and Functional cookies to operate our Site, and does not distinguish between the two. Our Strictly Necessary cookies are necessary for the Site to function and cannot be switched off in our systems. They allow you to move around the Site and use essential features like secure areas. Functional cookies are used to enable enhanced functionality and personalization, which here are set by Shopify on our behalf. If certain Functional Cookies are blocked, some of these advanced services may not function properly.
Without these cookies, we cannot provide the requested services.

We use Strictly Necessary & Functional Cookies to:

1. Identify and/or authenticate a user as being logged into the Site;
2. Identify a returning purchaser, and logging them into their correct account;
3. Used to set and manage your privacy setings;
4. Used to manage your checkout process;
5. Ensure a user connects to the right service if a change is made; and
6. Security purposes.

You can set your browser to block or alert you about these cookies. However, if they are blocked, MAF cannot guarantee performance of the Site or security during a visit.

If you do not allow these cookies, we will not know when you have visited our Site nor be able to monitor its performance. Some performance cookies are managed by third parties, such as Google Analytics.

Note: MAF does not request, require or knowingly allow such third parties to use cookies for purposes other than those identified above.

Targeting Cookies

Targeting cookies are used to help attract customers with targeted ads and can be shared with other advertisers so the performance of the ads themselves can be monitored and measured. Targeting cookies can be used to build user profiles, and offering our customers the best suited ads for their needs. These cookies follow users across websites (from TikTok to here, and back to TikTok) to show ads in banners or other sites online even after you have left this Site and moved to another.

If you do not add these cookies, then some of these services may not function properly. MAF [[at this time does not employ any functional cookies on its Site.

Consent Cookie Manager

F. Children

Our Services and Site at this time are not geared or in any way directed to individuals under the age of 16. We do not knowingly collect Personal Information from those under 16. If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, please send an email to privacy@cerratusa.com, or by any method identified in the “How to Contact Us” section below, and we will take steps needed to delete any under 16 Personal Information from our systems.

H. Changes to Our Privacy Statement

We will need to update and amend this Statement when needed, which may be needed and may occur at any time. When we make changes to this Statement, we will post the updated notice on our Site and update the effective date. Your continued use of our Site following the posting of changes constitutes your notice of and acceptance of such changes.

I. “How to Contact US” Information

If you have questions or comments about this Statement or the ways in which MAF collects and uses Personal Information it processes, please do not hesitate to contact us at:

Phone: 469-834-4580

Site: Contact Form

Email: privacy@cerratusa.com

Postal Address:

[Cerrat, MAF LLC.]

Attn: [Adriana & Magdel Frias]

 2019  Suite B.

Valley View Ln.

Farmers Branch, TX 75234

If you need to access this Statement in an alternative format due to having a disability, please contact clientservice@cerratusa.com and 469-834-4580.