ANDRE BOUDIN BAKERIES, INC.

Privacy Policy Notice for California Residents

Updated on July 22 20

This California Privacy Notice (“Notice”) supplements the information contained in our Privacy Policy and applies only to residents of California.  California state law confers certain rights relating to personal information to its residents.  The terms “Website,” “online services,” and “Services” and any undefined terms will have the same meaning as defined in our Privacy Policy.

RIGHT TO KNOW ABOUT PERSONAL INFORMATION COLLECTED, DISCLOSED OR SOLD

You have the right to request that we disclose to you the following information about Personal Information we collect from you:

• categories of personal information collected;
• categories of sources of personal information collected;
• the business or commercial purpose for collecting or selling personal information;
• the categories of third parties with whom we share personal information; and
• the specific pieces of personal information we have collected about you over the past 12 months.

You also have a right to request that we disclose if we have sold or disclosed your Personal Information for a business purpose over the past 12 months and, if so, the categories of Personal Information sold or disclosed and the categories of third parties to whom Personal Information was sold or disclosed, along with the business or commercial purpose for which the Personal Information was sold or disclosed a (“Request to Know”).

Requests to Know

To make a Request to Know, please submit a verifiable consumer request pursuant to the instructions below.  You may only make a verifiable consumer Request to Know twice within a 12-month period.

The Request to Know must provide sufficient information to allow us to verify that you are the person about whom the Personal Information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will not be able to respond to your request.

You can make a Request to Know what Personal Information we have about you in the following ways:

• If you are an existing customer that has an account with us, you may make a request through the settings page on your profile.
• You may make a request using our online form available here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Once we receive your Request to Know, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records.  If you are an account holder, making a request through your account is sufficient for verification purposes.  If you do not have an account with us, you should be prepared to provide us with information that will help us to verify your identity.

Information Collected

Within the past 12 months, we have collected the following categories of Personal Information about California consumers as described in the chart in ANNEX I.

Information Sold or Disclosed

We sold the following personal information to third parties for a business or commercial purpose in the preceding 12 months.  See ANNEX_I for more details.

• Personal Identifiers
• Commercial Information
• Internet Activity
• Geolocation Data
• Biometric Data

We have disclosed the following categories of Personal Information to third parties for a business or commercial purpose in the preceding 12 months:

• Personal Identifiers
• Commercial Information
• Internet Activity
• Geolocation Data
• Biometric

We do not sell the personal information of individuals under 21 years of age without affirmative authorization.

RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION

Requests to Delete

You have the right to request the deletion of your Personal Information collected or maintained by us (“Request to Delete”), subject to certain exceptions permitted by law.

To make a Request to Delete, please submit a verifiable consumer request pursuant to the instructions below.  You may only make a verifiable consumer Request to Delete twice within a 12-month period.

The verifiable consumer Request to Delete must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will notify you if this is the case.

A Request to Delete requires two steps: 1) making the Request to Delete and 2) confirming that you want your information to be deleted.

You can make a Request to Delete in the following ways:

• If you are an existing customer that has an account with us, you may make a request through the settings page on your profile.
• You may make a request to delete using our Customer Data Request form here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Once we receive your initial request to delete and your separate confirmation to delete, we will need to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records.  If you are an account holder, making a request through your account is sufficient for verification purposes.  If you do not have an account with us, when making your request, you should be prepared to provide us with information that will help us to identify you.

Depending on the sensitivity of the Personal Information you are requesting to delete, we may need to match two or three pieces of identifying information from your request with information our records.  If your request to delete involves deleting very sensitive information, we may also need a signed declaration stating that you are the consumer whose Personal Information is the subject of the request.

We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

RIGHT TO OPT-OUT OF SALE OF PERSONAL INFORMATION

You have the right to opt-out of the sale of your personal information.  As explained in the chart in ANNEX I of this Policy, we and our third-party partners such as social networking sites and advertising companies, share your data in order to serve you with ads tailored to your preferences across various platforms.  This type of sharing may be considered a “sale” under the CCPA.  You can control the information shared about you and request an opt-out.

You can make a Request to Opt Out in the following ways:

• You may make a request here by filling our our Do Not Sell My Personal Information form here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Cookies

As explained in our “Cookies and other technology” section in our privacy policy, you can opt out of cookies using your browser.  You may also exercise your right to opt-out of cookies using our Privacy Policy online form here.

Please Note:

• Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
• Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
• We may still share your information with our service providers that help us perform functions that are necessary for our business such as vendors that host our website, credit card processors, analytics processors. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
• You may still receive ads from us that are not tailored to your interests.

ADDITIONAL OPTIONS TO OPT-OUT OF SALE

In addition to the above options to opt out of the “sale” of your information under the CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties.  These are summarized for you below.  We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your information with third-party companies engaged in targeted advertising including social networking sites such as Google, Twitter and Facebook using the following tools: For websites:  http://optout.aboutads.info/?c=2&lang=EN  For mobile apps: http://www.aboutads.info/appchoices.

Google Opt-Out

We have already entered into a service provider addendum with Google.  However, if you would like to take additional precautions to opt out of Google Analytics and Ads, you can.  If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on: https://tools.google.com/dlpage/gaoptout and opt out of interest-based Google ads using https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit https://www.facebook.com/about/ads.  Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.

Twitter Tailored Advertising

To understand more about Twitter’s Personalized Ads and marketing and exercise your privacy options, please visit:  https://help.twitter.com/en/safety-and-security/privacy-controls-for-tailored-ads.

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act.

AUTHORIZED AGENT INFORMATION

You may designate an authorized agent to make a request on your behalf under the California Consumer Privacy Act.

In order to allow an authorized agent to make a request on your behalf, please email us at privacy@boudinbakery.com  to provide your written request and consent to an authorized agent.

When your authorized agent makes a request related to your personal information, we will require the agent to provide the above written permission.  We may also require that you verify your own identity directly with us at the time such a request is made.

CALOPPA COMPLIANCE STATEMENT

California Do Not Track Notice:  Because there are not yet common, industry accepted “do not track” standards and systems, our website does not respond to Do Not Track signals.  In addition, we may allow additional third parties to collect Personal Information from your activity on our website, as described in the “Information Collection and Use” section above.

CALIFORNIA SHINE THE LIGHT DISCLOSURE INFORMATION

Although we do not disclose to any third parties for their direct marketing purposes any personal information, California residents are entitled to receive the following disclosure information under California law:

Under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, e-mail address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties.  We will respond to such written requests within 30 days following receipt at the e-mail or mailing address specified below under “Contact Us.”  If we receive your request at a different e-mail or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received.  Please note that we are required to respond to each customer only once per calendar year

CONTACT FOR MORE INFORMATION

For information and questions about the use of your Personal Information or this California Consumer Privacy Act Notice or your rights under California law, you may contact our Data Protection Officer at privacy@boudinbakery.com

CHANGES TO THIS POLICY

We may make changes to this Policy from time to time. We will post any changes here, and such changes will become effective when they are posted.  Your continued use of our Services following the posting of any changes will mean you accept those changes.  For questions about our privacy practices contact us at 1-833-754-1849 or email us at privacy@boudinbakery.com

Click here to view NOTICE OF COLLECTION, USE AND DISCLOSURE: ANNEX I