ANDRE-BOUDIN BAKERIES, INC.

PRIVACY POLICY

Updated on May 18, 2026

ANDRE BOUDIN BAKERIES, INC. (referred to here as “we,” “our,” or “Boudin”) is committed to protecting your privacy.  This Privacy Policy (“Policy”) applies to our offline and online data collection practices, including when you visit or use our website  www.boudinbakery.com and any other website owned or operated by us (the “Website”), mobile app, participate in our online community (“online services”), purchase or inquire about our products and services, subscribe to our mailing lists, visit our store, use our Wi-Fi, sign up for our loyalty program or sweepstakes/contests, engage with us on social media websites or otherwise interact with us in any manner (collectively, our “Services”).  Our intent is to be transparent about our practices regarding collection, use and disclosure of personal information.

We may update this Policy from time to time, as specified in the “Changes to This Privacy Policy” section below.

EU residents have certain rights related to personal data. If you are a resident of the EU, please click here.

California state law confers certain rights relating to personal information to its residents. If you are a California resident please see our California Privacy Notice at: boudinbakery.com/ccpa.

If you are a Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, OR Virginia resident, please also see our Privacy Notice below at: click here

Please note the arbitration provision set forth below, requiring you to arbitrate any claims you may have against Boudin on an individual basis.

ARBITRATION ON AN INDIVIDUAL BASIS MEANS THAT YOU WILL NOT HAVE, AND YOU WAIVE, THE RIGHT FOR A JUDGE OR JURY TO DECIDE YOUR CLAIMS, AND THAT YOU MAY NOT PROCEED IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE CAPACITY.

YOUR CONSENT

You should read this entire Policy before submitting personal information to us in any form including the Website, our online services, and Services.  Whenever you submit personal information to us, you consent to the collection, use disclosure, share, sale, transfer and storage of that information in accordance with this Policy. All personal information may be used for the purposes stated in this Policy.

We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form.

TYPES OF INFORMATION COLLECTED

We collect personal information about you in the following ways: 1) from you when you choose to voluntarily provide it; 2) using automated technology, including when you visit our Website, online services, stores, or interact with our electronic advertisements or communications; and 3) third party sources, including but not limited to service providers, analytics providers, social media and social networking websites and other entities.  Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology.  More information is given in the “Cookies and Other Technology” section below.

All personal information may be used for the purposes stated in this Policy. We may combine data collected from third party sources. We will retain your personal information for the period necessary to fulfill that purpose and as otherwise needed to comply with applicable law and internal company policies. Our Policy applies to all information collected via any method. To see a complete list of what we collect and how we use this data, please see Annex 1.

Personal Information

We collect the following personal information from consumers:

• Personal details, such as first name and last name, billing address, date of birth, email address, and telephone number;
• Billing information, such as credit card information and payment details;
• Profile information, including products and services you like, times you visit our websites or mobile apps, your favorite store location, and any other information you choose to provide to us when you interact with us;
• Commercial Information, such as products purchased, obtained, considered, reviewed or other purchasing or consuming habits including store and location preferences.
• Internet Protocol (“IP”) address, mobile or computer device ID, browser type, browser version, unique device identifiers including advertising identifiers, domain names, referring website addresses and other diagnostic data from your use and interaction with our online services including but not limited to the pages you visit on our Website or in our mobile apps, time you spend on those pages, and the time and date of your visit; and
• Photographs or video for security and safety purposes upon your in-person visit to our property, including but not limited to our stores, lobby, parking lot, and other general areas.

USE OF INFORMATION

We use personal information about customers for a wide range of purposes.  We use it to:

• respond to your requests;
• to provide products or services that you have ordered;
• to process your order transactions and contact you regarding your order, purchases or accounts with us, requests, questions and comments;
• to allow you to post information and other content online;
• to provide and monitor the online services we provide to you;
• to provide location-based services such as delivery, location based promotions and events;
• to improve our products, online services and Services and manage our business such as fraud prevention purposes, determining usage pattern of our consumers, complying with legal obligations, establishing, exercising or defending a legal claim, monitoring and reporting compliance issues;
• to follow up with you after you have communicated with us or submitted information to us;
• for analytics and profiling technology to customize your experience, statistical purposes, deliver content (including advertising) tailored to your interests and how you use our online services, to market to you through targeted advertising;
• to improve our business including our Website, online services, Services, selections, customer service, shopping experience;
• to send promotional communications or offers to you by mail, email, telephone, or text message or other means (unless you have requested that we not send such communications);
• to help improve the features and functionality of our Website, online services and Services;
• for marketing, research and legal purposes and other purposes (including, without limitation, call center recordings); to address your interests and concerns; and
• as otherwise specified in this Policy and/or at the point of collection of the personal information.

OTHERS WITH WHOM WE MAY SHARE YOUR INFORMATION

Service Providers.  We may disclose personal information you provide to our consultants, service providers, contractors that we use to support our business and operations who have agreed to keep the information confidential and use it only to provide the applicable service(s).  For example, we may share information with vendors that assist us with communicating with you, hosting our website, processing credit card payments, HR management, etc.

Third Party Partners.  We also share your information with third party companies who provide us with analytics, advertising, and online behavioral marketing services such as social networking websites like Facebook, Instagram, Twitter, Google, Snapchat, and TikTok.

Legal Obligations.  We may disclose personal information to third parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring.  We may also disclose personal information to third parties in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization or other transfer of our brand or company.

We may make full use of all information that is de-identified, aggregated or otherwise not in personally identifiable form.  We may also make full use of all user-generated content you submit to us.

HOW WE USE COOKIES AND OTHER TECHNOLOGY

Boudin Bakery and its analytics and other service providers use technologies such as cookies, web beacons, tags, scripts and other similar technologies (collectively, “Cookies”) to collect certain information. These technologies are used to help us and our business partners analyze trends, administer the Sites, remember preferences, track users’ movements around the Sites and gather demographic information about our customer base as a whole. Some types of Cookies, like web beacons, allow us or third parties working on our behalf to gauge and enhance the effectiveness of our marketing by allowing us to understand whether users follow links in our e-mails or on our Sites, and by gathering information about other sites users visit before and after visiting our Sites. Certain other Cookies are used to store preferences on a user’s computer or mobile device, or display content based upon what a user viewed on the Site to personalize their visit. Currently, Boudin Bakery employs cookies and tracking technologies on its Sites, including the following:

• Essential Cookies. These cookies enable you to move around the Sites and to use their features. Without these absolutely necessary cookies, certain aspects of the Sites would not work. No information about your browsing habits is gathered by these cookies.
• Advertising & Targeting Cookies. These cookies track user activity across websites to deliver personalized advertisements and measure the effectiveness of ad campaigns. They are often set by third-party advertising networks such as Google Ads and Microsoft Advertising. These cookies collect information about user interests, interactions with ads, and browsing behavior to provide targeted marketing. Users can manage advertising cookie preferences through their browser or the respective ad network’s settings.
• Performance Cookies. These cookies collect information about your use of the Sites, and enable us to improve the way they work. For example, analytics cookies show us the most frequently visited pages on the Sites, help us record any difficulties you have with the Sites, and show us whether our advertising is effective or not. This allows us to see the overall patterns of usage on the Sites, rather than the use of a single person. Some analytics cookies may be operated by third-party services such as Google Analytics. These cookies do not collect personal data for advertising purposes but may be used for aggregated reporting on website performance.

Because technology is constantly changing, however, we may change the types of Cookies that are used with the Sites from time to time. We will update this Policy in accordance with applicable law and if we materially change the manner in which we collect information. To find more information about cookies and for instructions on how to disable them please visit www.allaboutcookies.org or visit the help section of your browser. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won’t be able to enjoy the convenience provided by our customization.

We may also use technologies to collect information about your online activities over time and across third party websites or other online services (e.g., behavioral tracking), including the use of session replay technology. Because there are not yet common industry-accepted “do-not-track” standards and systems, our Website does not respond to “do-not-track” signals.

THIRD PARTY ANALYTICS AND ADVERTISING DISCLAIMER

We and/or third-parties including advertising companies, social networking sites, and service providers on our behalf, use cookies, web beacons and other similar technology, to collect information for the purposes described in this Policy including advertising, analytics, online behavioral marketing, monitoring performance and improvement of our online services (traffic, errors, page load time, popular pages, etc.). We do not use automated decision making or profiling to make decisions that produce legal or similarly significant effects on individuals.

Below are ways in which you can opt-out of each remarketing service:

Analytics

Google Analytics and Meta Pixel:  We use Google Analytics, Meta Pixel and The Trade Desk to understand how our website, services, and products perform, how you use them, and to serve you with ads on third-party websites and social networking sites like Facebook.  To learn more about how Google processes your data, please visit https://www.google.com/policies/privacy/.  To opt out of Google Analytics please visit https://tools.google.com/dlpage/gaoptout.  To learn more about how Facebook uses your data, please visit https://www.facebook.com/policy.php. To learn more about how The Trade Desk uses your data, please visit https://www.thetradedesk.com/us/privacy, and to opt out, please visit https://www.adsrvr.org/.

TikTok: To understand more about TikTok advertising and manage your preferences, please visit the TikTok Ad Settings page here.  You can also turn off interest-based ads from TikTok by adjusting your device settings or visiting the TikTok app’s privacy settings directly.

The Trade Desk:  We use The Trade Desk to understand how our website, services, and products perform, how you use them, and to serve you with ads on third-party websites and social networking sites.  To learn more about how The Trade Desk uses your data, please visit https://www.thetradedesk.com/us/privacy, and to opt out, please visit https://www.adsrvr.org/.

Snapchat: To understand more about Snapchat advertising and manage your interest-based ads and preferences, please visit the Snapchat Privacy Choices at https://help.snapchat.com/hc/en-us/articles/11399265637012-Your-Privacy-Choices-on-Snapchat.

Hotjar:  We use Hotjar’s session replay analytics services.  This allows us to record and replay an individual’s interaction with the Services.  For more information about how Hotjar uses your personal information, please visit the “Personal Data collected from a visitor of a Hotjar Enabled Site” section of Hotjar’s Privacy Policy.  To learn more about how to opt-out of Hotjar’s use of your information, please click here.

Advertising and Behavioral Remarketing

We use remarketing services to advertise on third-party websites to you after you visit our Website, applications, and other online services.

Google:  To opt out of Google Ads, please visit https://www.google.com/settings/ads/anonymous.

Facebook:  To understand more about Facebook advertising and manage your preferences, please visit https://www.facebook.com/about/ads.  Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.

For more information about targeted advertising and to opt out of collection of information and ad targeting from third-party websites, including Facebook and Google, please visit http://www.aboutads.info/choices.  If you choose to opt out, you will continue to receive advertisements but they will not be tailored to your interests.

This Policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third parties’ privacy policies. For more information, we encourage you to check the privacy policies of these third parties to learn about their privacy practices.

LINKS TO OR FROM ANOTHER WEBSITE

Our Website, online services, and Services may contain links to other websites not operated or controlled by us (the “Third Party Sites”). All data provided, collected, maintained, stored or otherwise disclosed on these Third Party Sites, if any, is governed by their privacy policies. The links on the Website do not imply that we endorse or have reviewed the Third Party Sites, or their privacy policies, if any. We strongly encourage you to contact those sites directly for information on their privacy policies.

If you have accessed the Website through a link from certain of our advertising or marketing partners, the Website may include a frame of the applicable advertising or marketing partner. Nevertheless, the information you provide to us through these framed web pages is collected by us, and our use of such information is governed by this Policy.

Legal Basis for Processing Personal Data and Information Under the General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), Boudin’s legal basis for collecting and using the personal information described in this Privacy Policy (under the GDPR, the “Personal Data”) depends on the personal information we collect and the specific context in which we collect it.  In addition, we process personal information with the principle of data minimization in mind.  This means that we limit ourselves to the minimum amount of personal information which is needed to achieve the particular purpose for which we process the personal information.  Below are some examples of the purposes for which personal information may be processed.

Boudin may process your personal information because:

• The processing is necessary to provide the services and features you have requested;
• The processing is necessary to protect the vital interests of our users or of others;
• The processing is necessary to perform a contract with you;
• The processing is necessary for the legitimate interests of our business, such as fraud prevention, information security, or to comply with the law;
• You have provided consent for us to do so.

Your Personal Information Protection Rights and Choices

If you are a resident of the European Economic Area (EEA), you have certain data protection rights.  You have choices about how we use and retain your personal information.  Boudin has implemented reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information.

If you wish to be informed of the type of personal information we hold about you and/or if you wish to remove such personal information from our systems, please contact us at privacy@boudinbakery.com.

You have the following personal information protection rights:

The right to access, update or delete the personal information we have on you.  In many instances, you can personally access and update your personal information by accessing your online account settings.  If you are unable to perform these actions yourself, please contact us to assist you.

The right of rectification.  You have the right to have your personal information corrected if that information is inaccurate or incomplete.

The right to object.  You have the right to object to our processing of your personal information.

The right of restriction.  You have the right to request that we restrict the processing of your personal information.

The right to data portability.  You have the right to be provided with a copy of the personal information that we have on you in a structured, machine-readable and commonly used format.

The right to withdraw consent.  You have the right to withdraw your consent at any time where Boudin relied on your consent to process your personal information.

You also have the right to not be discriminated against for exercising your privacy rights.

If you are a resident of the European Economic Area (EEA), you have the right to opt-out of decisions based solely on automatic decision-making, such as certain types of behavioral remarketing. We do not engage in solely automatic decision-making.

Please note that for your safety and security, we may ask you to verify your identity before responding to such requests.

CROSS BORDER DATA TRANSFERS

Your personal information may be transferred to—and maintained on—computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside of the United States and choose to provide information to us, please note that we transfer the information, including your personal information, to the United States and process it there. Data protection laws in the U.S. may be different from those in your country of residence. You consent to the transfer of your information, including personal information, to the U.S. as set forth in this Privacy Policy by visiting our website or using our Services.

RETENTION OF PERSONAL INFORMATION

We will retain your personal information (collected through offline and online methods) for as long as it is necessary for the purposes set out in this Policy.  We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your personal information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. For more information regarding retention of personal information, please see Annex 1.

INTENDED AUDIENCE; COPPA COMPLIANCE

We are in compliance with the requirements of the Children’s Online Privacy Protection Act (“COPPA”).  Our Website, online services and Services are not directed to children under the age of 13.  As a result, we do not request or knowingly collect personal information from individuals under the age of 13.  If you are not 14 or older, you should not visit or use our Website or Services, including online services.

SECURITY

We take appropriate steps to protect personal information from loss, misuse and unauthorized access, disclosure, alteration or destruction, whether in transmission or storage.  Please keep in mind, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free.  Moreover, you are responsible for maintaining the confidentiality of any user name and password you use.

We offer the use of a secure server.  All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology hosted by a third party and then encrypted into our payment gateway provider’s database only to be accessible by those authorized with special access rights to such systems, and who are required to keep the information confidential.

After a transaction, your sensitive Personal Information (credit cards, social security numbers, etc.) will not be stored on our servers. Although we strive to protect your personal information in accordance with this Policy, we will not be liable for disclosure of personal information obtained due to errors in transmission or security breaches.

CONTACT PREFERENCES; OPT-IN AND OPT-OUT

We would like to keep in touch with you in ways that you find to be beneficial.  If you don’t want us to use your contact information to communicate with you for promotional purposes, please tell us that when you provide your contact information.  If at any time you would like to unsubscribe from receiving future emails, you can click the unsubscribe link at the bottom of any email.  You may also contact us at privacy@boudinbakery.com.  Keep in mind that these preferences regarding promotional contacts do not mean that we might not contact you for other reasons, such as those related to an order you placed, an inquiry you made, a legally required notice and so on.

ARBITRATION; CLAIMS MUST BE BROUGHT ON AN INDIVIDUAL BASIS

By using the Website, online services, and Services, you agree that any dispute in any manner arising out of or relating in any way to this Policy, its enforcement or interpretation, or because of an alleged breach, default, or misrepresentation in connection with any of its provisions, shall be submitted to binding arbitration with Judicial Arbitration and Mediation Services, Inc. (“JAMS”) in the San Francisco, California area.  ARBITRATION MEANS THAT YOU WILL NOT HAVE AND YOU WAIVE THE RIGHT FOR A JUDGE OR JURY TO DECIDE YOUR CLAIMS.  Rights to the prehearing exchange of information and other discovery, as well as appeal rights, are more limited than were you to sue in court.

This arbitration provision is equally binding on claims brought by us as on claims brought by you or others.  Arbitrations will be conducted under the applicable JAMS rules.  The parties to arbitration will have all the same claims, legal rights, and remedies in arbitration that would be available in court.  A single neutral arbitrator shall be selected in accordance with the JAMS Streamlined Arbitration Rules, which shall provide you a reasonable opportunity to participate in the arbitrator selection.  It is further agreed that any disputes as to whether the scope of this arbitration provision covers the claim will be submitted to the arbitrator, and not a court, for decision.  The parties to arbitration will have full right to use legal counsel at their own expense.  All costs of arbitration (including arbitrator fees) shall be paid by us, except if you bring the arbitration, you may be charged an initial filing fee that shall not exceed the filing fees that you would incur for bringing an action in court.  You will not be required to pay fees and costs incurred by the opposing parties if you do not prevail in arbitration.  In arbitration, the parties may conduct reasonable discovery and shall reasonably exchange non-privileged information relevant to the dispute.  The arbitrator’s award shall be in writing and provide a written statement of the essential findings and conclusions.  The arbitrator will not have the power to commit any error of law or legal reasoning, and the award may be vacated or corrected on appeal to a court of competent jurisdiction for any such error.  As an exception to this arbitration provision, no one subject to the provision will be precluded from seeking remedies for disputes or claims less than $10,000 in the aggregate that can be brought in a court of competent jurisdiction.

ANY ARBITRATION SHALL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE CAPACITY.  It is expressly understood and agreed that neither you nor we are entitled to arbitrate or bring any dispute covered by this arbitration provision as a class, consolidated, representative, collective, or private attorney general action, and the arbitrator(s) will have no authority to proceed on a class, consolidated, representative, collective, or private attorney general action basis.  This means:

• You cannot bring a claim as a plaintiff or class member in a class action, consolidated action or representative action.
• The arbitrator cannot combine more than one person’s claim into a single case, and cannot preside over any consolidated, class or representative arbitration proceeding (unless we both agree to change this).
• The arbitrator’s decision or award in one person’s case can only impact the person who brought the claim, not other Boudin customers, and cannot be used to decide other disputes with other customers.

If any part of the agreement to arbitrate in this section is found unenforceable, the unenforceable term will be severed and the remaining arbitration terms will be enforced (but in no case will there be a class, representative or private attorney general arbitration).  In the event that any of the class action restrictions are ever deemed illegal or unenforceable, the illegally deemed or unenforceable restriction(s) shall be severed from this arbitration provision, and any class action shall be exempted from this arbitration provision and brought in court.  This arbitration provision is subject to the Federal Arbitration Act, and may be enforced in any court of competent jurisdiction.

DATA PROTECTION OFFICER AND QUESTIONS

For information and questions about the use of your personal information or this Privacy Policy, you may contact our Data Protection Officer at privacy@boudinbakery.com.

CHANGES TO THIS PRIVACY POLICY

This Policy may be revised from time to time for any reason.  If this Policy changes, the revised policy will include a new effective date, and we will notify you of such changes by posting the revised policy on this page.  Be sure to check the Privacy Policy whenever you submit personal information to us through the Website, online services, or Services. 

MULTI-STATE CONSUMER DATA PROTECTION ACT NOTICE 

COLORADO, CONNECTICUT, DELAWARE, IOWA, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, TENNESSEE, TEXAS, UTAH, OR VIRGINIA RESIDENTS ONLY:

This Notice provides additional information to Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia residents whose Personal Information is collected pursuant to the Colorado (“CPA”), Connecticut (“CTDPA”), Delaware (“DPDPA”), Iowa (“ICDPA”), Maryland (“MODPA”), Minnesota (“MNCDPA”), Montana (“MTCDPA”), Nebraska (“NDPA”), New Hampshire (“NHCPA”), New Jersey (“NJDPA”), Oregon (“OCPA”), Tennessee (“TIPA”), Texas (“TDPSA”), Utah (“UCPA”), AND Virginia (“VDPA”) privacy laws.

The Notice below applies only to residents of the above mentioned states.  Please visit our Privacy Policy (“Policy”) for more information.  Any capitalized terms undefined in this Notice have the same definition as the Policy.

RIGHT TO CONFIRM, ACCESS, AND DATA PORTABILITY

You have the right to confirm whether or not we are processing your personal data and to access such personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.

We have collected the categories of Personal Information about residents of the above mentioned states as described in this Notice in Annex 1. To review these categories, click here.

Information Disclosed for Targeted Advertising

As explained in Annex 1 of this Policy, we disclose your data with third-party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms.  This type of sharing may be considered sharing for purposes of targeted advertising under certain state laws.  You can control the information shared about you and request an opt-out as explained below.

We have disclosed the following categories of personal information for targeted advertising purposes in the preceding 12 months.

• Personal Identifiers
• Commercial Information
• Internet Activity

We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding 12 months:

• Personal Identifiers
• Commercial Information
• Internet Activity

We do not knowingly sell the personal information of individuals under 16 years of age without affirmative authorization.

For details regarding the categories of third parties with whom we have shared, sold, or disclosed personal information, please see Annex 1.

RIGHT TO REQUEST DELETION OF PERSONAL DATA

You have the right to request the deletion of your personal data provided by or obtained about you (“Request to Delete”), subject to certain exceptions permitted by law.

RIGHT TO CORRECT (NOT APPLICABLE TO IOWA AND UTAH RESIDENTS)

You have the right to request that we rectify inaccurate information about you.

RIGHT TO OPT OUT OF THE SALE OF PERSONAL DATA

We do not sell your personal data.

RIGHT TO OPT OUT OF DATA PROCESSING FOR TARGETED ADVERTISING

You have the right to opt out of the processing of your personal data for purposes of targeted advertising (“Request to Opt Out”).

RIGHT TO OPT OUT OF PROFILING (NOT APPLICABLE TO UTAH RESIDENTS)

You have the right to opt out of the processing of your personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects (“Request to Opt Out of Profiling”).  We do not process your personal data for profiling purposes.

HOW TO MAKE YOUR REQUESTS TO CONFIRM, ACCESS, DATA PORTABILITY, CORRECT, DELETE

You can make a Request in the following ways:

• You may make a request here by filling out our Do Not Sell or Share My Personal Information form here.
• You may make a request here: privacy@boudinbakery.com.
• You may also make a request by phone by contacting us at 1.833.754.1849.

We will acknowledge your Request within 10 days and will attempt to respond substantively within 45-90 days.

You must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will not be able to respond to your request.

Once we receive your Request, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records.  You will be asked to provide us with two or three pieces of information that will help us to verify your identity.  We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

OPT OUT OF TARGETED ADVERTISING

To opt out of use of your personal information for targeted advertising, click here.

OPT-OUT PREFERENCE SIGNALS

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information for targeted advertising purposes without first seeking your explicit consent.

COOKIES

As explained in our “HOW WE USE COOKIES AND OTHER TECHNOLOGY” section here, you can opt out of cookies using your browser.  You may also exercise your right to opt-out of cookies using our Cookie Preference Center here.

Please Note:

• Opt-outs are device and browser based.  You must opt out on each device and each browser where you want your choice to apply.
• Opt-outs maybe stored via cookies.  If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
• We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc.  These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
• You may still receive ads from us that are not tailored to your interests.

ADDITIONAL OPTIONS TO OPT OUT OF SALE OR TARGETED ADVERTISING

In addition to the above options to opt out of the “sale” or processing of your personal data for targeted advertising as described above, you have controls and choices with respect to collection and use of your data by third parties.  These are summarized for you below.  We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your data with third-party companies engaged in targeted advertising including social networking sites, such as Google, Facebook, Snapchat, and TikTok, using the following tools:

• For Websites  [hyperlink: https://optout.aboutads.info/?c=2&lang=EN]
• For Mobile Apps [hyperlink: https://youradchoices.com/appchoices ]

Google Opt-Out

If you would like to opt out of Google Analytics and Ads, you can.  If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on here [https://tools.google.com/dlpage/gaoptout], and you can opt out of interest-based Google ads using this link [https://adssettings.google.com/u/0/authenticated].

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights , including by exercising the rights specified herein.  As the Right to Non-Discrimination is effective across the board, there is no specific “request” that you need to make in order to exercise this right.

AUTHORIZED AGENT

You may designate an authorized agent to make a request on your behalf to opt out of the sale of personal information.

Authorized agents may make requests on behalf of consumers by emailing privacy@boudinbakery.com.  We will require authorized agents to provide proof of the consumer’s consent to and designation of the authorized agent for purpose of making the request, and will require authorized agents to provide information necessary to verify the identity of the consumer who is the subject of the request.  We may also require that a consumer verify his or her own identity directly with us before we respond to an authorized agent’s request.

RIGHT TO APPEAL (NOT APPLICABLE TO UTAH RESIDENTS)

You have the right to appeal our decision to deny any of your privacy rights requests above.  Within 60 days of receipt of your appeal (45 days for Colorado residents), we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

If your appeal is denied and you remain unsatisfied with our response, you may contact your state’s Attorney General to submit a complaint or seek further assistance. For help locating your state’s Attorney General’s contact information, visit Consumer Resources – File a Complaint.” [https://www.consumerresources.org/file-a-complaint/ ]

Making an Appeal

You can make an appeal in the following ways:

• Enter your appeal here.
• You may also make an appeal by email by contacting us at privacy@boudinbakery.com or by phone at 1.833.754.1849.

We reserve the right to deny appeals in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.