ANDRE BOUDIN BAKERIES, INC.  

Privacy Policy Notice for California Residents

Updated on June 28 ,2023

 This Privacy Rights Act Notice (“Notice”) provides additional information to California residents whose personal information is collected by us pursuant to California law, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”).  If you are not a California resident, this Notice does not apply to you.  Please visit our Privacy Policy (“Policy”) boudinbakery.com/privacy-policy for more information.  Any capitalized terms undefined in this Notice have the same definition as the Policy.  The terms “Website,” “online services,” and “Services” and any undefined terms will have the same meaning as defined in our Privacy Policy.

RIGHT TO KNOW ABOUT PERSONAL INFORMATION COLLECTED, DISCLOSED, OR SOLD AND SHARED

Information Collected 

Within the past 12 months, we have collected the categories of personal information about California consumers as described in Annex 1 to this Notice.  To review these categories click here: Annex 1.

Business-to-Business (“B2B”) Information

If you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship, you have the same rights as other consumers set forth in this Notice with respect to the information we collect from you in that role.  We collect the contact information you provide to us, including name, phone number, address, email address and other contact and relationship information and communications consistent with your role in facilitating that business relationship.  We use that information for internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship.  We do not disclose that information outside our business relationship without your consent.  For more details see Annex 1.

Information Sold, Shared, or Disclosed

As explained in Annex 1 of this Policy, we share your data with third-party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms.  This type of sharing may be considered “selling” or “sharing” under the CPRA.  You can control the information shared about you and request an opt-out as explained below.

We have sold or shared the following categories of personal information for a business or commercial purpose in the preceding 12 months.

• Personal Identifiers
• Commercial Information
• Internet Activity

We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding 12 months:

• Personal Identifiers
• Commercial Information
• Internet Activity
• Biometric Data

We do not knowingly sell the personal information of individuals under 16 years of age without affirmative authorization.

For details regarding the categories of third parties with whom we have shared, sold, or disclosed personal information, please see Annex 1.

Requests to Know

You have the right to request that we disclose to you the following information about personal information we collect from you:

• categories of personal information collected;
• categories of sources of personal information collected;
• the business or commercial purpose for collecting or selling personal information;
• the categories of third parties with whom we share personal information; and
• the specific pieces of personal information we have collected about you over the past 12 months.

You also have a right to request that we disclose if we have sold or disclosed your personal information for a business purpose over the past 12 months and, if so, the categories of personal information sold or disclosed and the categories of third parties to whom personal information was sold or disclosed, along with the business or commercial purpose for which the personal information was sold or disclosed a (“Request to Know”).

To make a Request to Know, please submit a verifiable consumer request pursuant to the instructions below.  You may only make a verifiable consumer Request to Know twice within a 12-month period.  We will acknowledge your Request to Know within 10 days and will attempt to respond substantively within 45-90 days.

The Request to Know must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will not be able to respond to your request.

You can make a Request to Know what personal information we have about you in the following ways:

• If you are an existing customer that has an account with us, you may make a request through the settings page on your profile.
• You may make a request using our online form available here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Once we receive your Request to Know, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records.  You will be asked to provide us with two or three pieces of information that will help us to verify your identity.

RIGHT TO KNOW AND LIMIT USE OF SENSITIVE PERSONAL INFORMATION COLLECTED

We do not collect or process sensitive personal information for purposes of inferring characteristics or for any purposes other than those set forth in Regulations Section 7027(m).

RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION

Requests to Delete

You have the right to request the deletion of your Personal Information collected or maintained by us (“Request to Delete”), subject to certain exceptions permitted by law.

To make a Request to Delete, please submit a verifiable consumer request pursuant to the instructions below.  You may only make a verifiable consumer Request to Delete twice within a 12-month period. We will acknowledge your Request to Delete within 10 days and will attempt to respond substantively within 45-90 days.

The verifiable consumer Request to Delete must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request.  If we cannot verify your identity, we will notify you if this is the case.

A Request to Delete requires two steps: 1) making the Request to Delete and 2) confirming that you want your information to be deleted.

You can make a Request to Delete in the following ways:

• If you are an existing customer that has an account with us, you may make a request through the settings page on your profile.
• You may make a request using our online form here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Once we receive your initial request to delete and your separate confirmation to delete, we will need to verify that you are the person that is the subject of the request (the “Verification Process”).  The Verification Process consists of matching identifying information provided by you with the information we have about you in our records.  When making your request, you should be prepared to provide us with information that will help us to identify you.

We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

RIGHT TO OPT-OUT OF SALE OR SHARING OF PERSONAL INFORMATION

You have the right to opt-out of the sale of your personal information.  As explained in the chart in Annex 1 of this Policy, we and our third-party partners, such as social networking sites and advertising companies, share your data in order to serve you with ads tailored to your preferences across various platforms.  This type of sharing may be considered a “sale” under the CCPA.  You can control the information shared about you and request an opt-out.  We will process your Request to Opt-Out within 15 days.

You can make a Request to Opt Out in the following ways:

• You may make a request here by filling out our Do Not Sell or Share My Personal Information form here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Opt-out Preference Signals

We honor opt-out preference signals that you enable, including a Global Privacy Control.  Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information.  In order to process your request through an opt-out preference signal, you must use a browser supporting the preference signal.  If you choose to use an opt-out preference signal, you will need to turn it on for each browser and each device you use.  If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information without first seeking your explicit consent.

This Policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third-parties’ privacy policies.  For more information, we encourage you to check the privacy policies of these third-parties to learn about their privacy practices.

Cookies

As explained in our “Cookies and other technology” section in our privacy policy boudinbakery.com/privacy-policy, you can opt out of cookies using your browser.  You may also exercise your right to opt-out of cookies using our Privacy Policy online form here.

Please Note:

• Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.
• Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.
• We may still share your information with our service providers that help us perform functions that are necessary for our business such as vendors that host our website, credit card processors, analytics processors. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.
• You may still receive ads from us that are not tailored to your interests.

ADDITIONAL OPTIONS TO OPT-OUT OF SALE

In addition to the above options to opt out of the “sale” of your information under the CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties.  These are summarized for you below.  We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your information with third-party companies engaged in targeted advertising including social networking sites such as Google, Twitter and Facebook using the following tools: For websites:  https://optout.aboutads.info.  For mobile apps: http://www.aboutads.info/appchoices.

Google Opt-Out

We have already entered into a service provider addendum with Google.  However, if you would like to take additional precautions to opt out of Google Analytics and Ads, you can.  If you are on the web, you can opt out of Google Analytics by installing Google’s Opt-Out browser add on: https://tools.google.com/dlpage/gaoptout and opt out of interest-based Google ads using https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit https://www.facebook.com/about/ads.  Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.

Instagram Ad Preferences 

To learn more about Instagram Ads and to exercise your choices please visit: https://help.instagram.com/478880589321969

The Trade Desk

To learn more about how The Trade Desk uses your data, please visit https://www.thetradedesk.com/us/privacy, and to opt out, please visit https://www.adsrvr.org/.

RIGHT TO CORRECT

You have the right to request that we rectify inaccurate information about you.

To make a Request to Correct, please submit a verifiable consumer request pursuant to the instructions below.  We will acknowledge your Request to Correct within 10 business days and we will attempt to respond substantively within 45-90 days.

You can make a Request to Correct in the following ways:

• If you are an existing customer that has an account with us, you may make a request through the settings page on your profile.
• You may make a request using our online form here.
• You may also make a request by phone by contacting us at 1-833-754-1849.

Once we receive your request to correct, we will need to verify that you are the person that is the subject of the request through the Verification Process.

We will review all information provided by you to us, to determine whether the information is inaccurate.  We reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.

We will inform you of our decision to deny or grant your request.

We will retain correspondence, documents and information related to any Request to Correct for 24 months as required by law.

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act.

RIGHT TO ACCESS INFORMATION ABOUT AUTOMATED DECISION MAKING

You can request access to information about automated decision making processes we use and you may request to opt out of certain automated decision making.  We do not engage in automated processing.

NOTICE OF FINANCIAL INCENTIVE

From time to time, Boudin may provide financial incentives to consumers who elect to participate in these programs and, in connection with such programs, allow us to collect and retain certain personal information, such as Identifiers (e.g., your name, email address, or phone number) and Commercial Information (e.g., your purchase history).  These incentives may result in differences in the prices of our products offered to consumers (e.g., discounts and other promotions).  For example, the financial incentives we may provide include discounts based upon purchase activity other periodic discounts for promotional purposes.

The material aspects of any financial incentive will be explained and described in its program terms or in the details of the incentive offer.

Participation in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, please follow the instructions in the program’s terms and conditions, or contact us please email us at privacy@boudinbakery.com.

The value of your personal information that allows us to make these offers and financial incentives is the value of the offer itself.  Each financial incentive or price or service difference related to the collection and use of personal information is calculated based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself, the expense associated with the offer, and the anticipated revenue generation that may be realized by rewarding brand loyalty and repeat purchases.

RETENTION OF PERSONAL INFORMATION

We will retain your personal information for as long as it is necessary for the purposes set out in Annex 1 and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your personal information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

AUTHORIZED AGENT INFORMATION

You may designate an authorized agent to make a request on your behalf under the California Consumer Privacy Act.

In order to allow an authorized agent to make a request on your behalf, please email us at privacy@boudinbakery.com  to provide your written request and consent to an authorized agent.

When your authorized agent makes a request related to your personal information, we will require the agent to provide the above written permission.  We may also require that you verify your own identity directly with us at the time such a request is made.

CALOPPA COMPLIANCE STATEMENT

California Do Not Track Notice:  Because there are not yet common, industry accepted “do not track” standards and systems, our website does not respond to Do Not Track signals.  In addition, we may allow additional third parties to collect personal information from your activity on our website, as described in the “Information Collection and Use” section above.

CALIFORNIA SHINE THE LIGHT DISCLOSURE INFORMATION

Although we do not disclose to any third parties for their direct marketing purposes any personal information, California residents are entitled to receive the following disclosure information under California law:

Under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, e-mail address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties.  We will respond to such written requests within 30 days following receipt at the e-mail or mailing address specified below under “Contact Us.”  If we receive your request at a different e-mail or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received.  Please note that we are required to respond to each customer only once per calendar year

CONTACT FOR MORE INFORMATION

For information and questions about the use of your personal information or this California Consumer Privacy Act Notice or your rights under California law, you may contact our Data Protection Officer at privacy@boudinbakery.com.

CHANGES TO THIS POLICY

We may make changes to this Policy from time to time.  We will post any changes here, and such changes will become effective when they are posted.  Your continued use of our Services following the posting of any changes will mean you accept those changes.  For questions about our privacy practices contact us at 1-833-754-1849 or email us at privacy@boudinbakery.com.