Last updated: August 18, 2024
INTRODUCTION
This Privacy Policy (Policy) delineates the protocols for the collection, utilization,
disclosure, and safeguarding of Personal Data by Papa Boost Company,We,;Us,
or Our;) through the digital platform accessible at https://www.papaboost.com (the
Website;). By accessing or using the Website, you (You,Your,or "User") consent to
this Policy, our Terms of Use, and any other successively cited or disclosed terms
(collectively referred to as TOU). This consent is a legally binding agreement between
You and the Company.
SCOPE AND APPLICABILITY
This Policy applies to all Users of the Website, irrespective of their geographical
location. It includes specific provisions for residents of California, Virginia, Colorado,
Connecticut, Utah, Brazil, Switzerland, and the European Union. It comprehensively
outlines our practices regarding the collection, processing, and safeguarding of Your
Personal Data, and it is in compliance with all applicable laws and regulations.
MODIFICATIONS AND AMENDMENTS TO THIS PRIVACY POLICY
We reserve the right to modify or update this Policy at any time, at our sole discretion.
Changes will be effective immediately upon posting on the Website. Your continued use
of the Website following any changes signifies Your acceptance of these changes. We
will endeavor to notify Users of any significant changes via email and/or a prominent
notice on our Service. However, you are responsible for ensuring we have an up-to-date
email address for you and reviewing this Privacy Policy for changes periodically. If
alterations involve consent-based processing, we will seek fresh consent from You.
DEFINITIONS, CLARIFICATIONS, AND LEGAL REFERENCES
This section includes definitions and clarifications of terms such as Account, Device,
Personal Data, Transfer of Your Personal Data, Usage Data, User, Consumer, Data
Subject, Data Processor, Company, Data Controller, Business, This Website, Service,
"Do Not Track," and Reference to the European Union. These terms are defined in
accordance with the applicable laws and regulations.
EQUAL PROTECTION OF USER DATA
This website shares User Data only with third parties carefully selected to ensure that
they provide the same or equal protection of User Data as stated in this privacy policy
and requested by applicable data protection laws. Further information on data
processing and privacy practices by third parties can be found in their respective privacy
policies.
RIGHT TO OBJECT TO PROCESSING
Users have the right to object to the processing of Personal Data under certain
circumstances. This includes processing based on public interest, official authority, or
the Owner's legitimate interests. A substantial, situation-specific justification must
support the objection. Users also have the right to object to processing for direct
marketing purposes at any time without charge or explanation.
EXERCISING USER RIGHTS
Users may exercise their rights through the contact details provided in this Policy.
Requests are free and will be addressed within one month or as applicable law requires.
The Owner will communicate any rectification, erasure, or processing restrictions to
recipients unless it is impractical or involves excessive effort.
LEGAL BASIS AND PURPOSES FOR PROCESSING
We process Personal Data under various legal bases, including but not limited to
consent, contractual obligations, legal compliance, public interest, and legitimate
interests, as detailed in this Policy. Personal Data may be used for legal purposes in
Court or during the stages leading to possible legal action. Users acknowledge that the
Owner may disclose Personal Data upon request by public authorities in accordance
with applicable laws and regulations.
ADDITIONAL DATA INFORMATION
This Website may gather files recording interactions or utilize other Personal Data for
operational purposes. Additional Information not contained in this Policy can be
requested from the Owner.
"DO NOT TRACK" REQUESTS
Because there is no legal or industry consensus yet on how “Do Not Track” signals
should be recognized or honored; this website does not support “Do Not Track”
requests at this time.
To determine whether any of the third-party services it uses honor the “Do Not Track”
requests, please read their privacy policies.
This processing constitutes a sale based on the definition under the CCPA. In addition
to the information in this clause, the User can find information regarding how to opt out
of the sale in the section detailing the rights of Californian consumers.
UNDERSTANDING COOKIES AND TRACKING TECHNOLOGIES
Cookies are small files stored on Your device to enhance user experience and provide
personalized content. We may use Cookies or other tracking tools to provide the service
requested by the User and for other purposes described in this document and our
Cookie Policy. We employ Cookies, beacons, tags, scripts, and other tracking
technologies to monitor activity and retain Information. The Website uses Trackers as
described in the Cookie Policy.
LINKS TO OTHER WEBSITES
Our Service may provide links to other websites not under our control. We recommend
reviewing each website's privacy policy. We disclaim responsibility for the content,
privacy policies, or practices.
PSEUDONYMOUS USE
When registering for this website, Users have the option to indicate a nickname or
pseudonym. In this case, User's Personal Data shall not be published or made publicly
available. Any activity performed by Users on this website shall appear in connection
with the indicated nickname or pseudonym. However, Users acknowledge and accept
that their activity on this website, including content, information, or any other material
possibly uploaded or shared on a voluntary and intentional basis, may directly or
indirectly reveal their identity.
PUSH NOTIFICATIONS
This website may send push notifications to the User to achieve the purposes outlined
in this privacy policy.
Users may, in most cases opt-out of receiving push notifications by visiting their device
settings, such as the notification settings for mobile phones, and then change those
settings for this website, some or all of the apps on the particular device.
Users must be aware that disabling push notifications may negatively affect the utility of
this website.
PUSH NOTIFICATIONS BASED ON THE USER'S GEOGRAPHIC LOCATION
This website may use the User's geographic location to send push notifications for the
purposes outlined in this privacy policy. Users may, in most cases opt-out of receiving
push notifications by visiting their device settings, such as the notification settings for
mobile phones, and then changing those settings for some or all of the apps on the
particular device. Users must be aware that disabling push notifications may negatively
affect the utility of this website.
TRACKER DEFINITION
Tracker refers to any technology enabling the tracking of Users, including Cookies,
unique identifiers, web beacons, embedded scripts, e-tags, fingerprinting, etc.
COLLECTION OF PERSONAL DATA AND PERSONAL INFORMATION SOURCES
We collect Personal Data independently or via third parties. The categories of Personal
Data collected are detailed in specific sections of this Policy or through explanatory
notices displayed prior to data acquisition. We collect Personal Information from you
directly, indirectly, automatically, and from Service Providers. This includes forms,
preferences, purchases, cookies, third-party vendors, etc.
USAGE OF PERSONAL INFORMATION
We may employ Your Personal Data for various purposes, including but not limited to
Service Management, Account Management, Contractual Performance,
Communication, Advertising, Business Transfers, and Miscellaneous Purposes as
detailed in this Policy.
SHARING OF PERSONAL DATA
Your Personal Information may be shared with Service Providers, Affiliates, Business
Partners, and Other Users or With Your Consent, as this Policy outlines. Any sharing of
Personal Data will be in compliance with applicable laws and regulations.
CONTACTING THE USER
By filling in the contact form with their Data, the User authorizes this website to use
these details to reply to requests for information, quotes, or any other kind of request as
indicated by the form’s header.
Personal Data processed: city; company name; country; county; date of birth; email
address; fax number; field of activity; first name; gender; last name; number of
employees; phone number; physical address; profession; state; Tax ID; Trackers; Usage
Data; User ID; various types of Data; website; ZIP/Postal code.
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; employment-related information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
Mailing list or newsletter (this website)
By registering on the mailing list or for the newsletter, the User’s email address will be
added to the contact list of those who may receive email messages containing
information of commercial or promotional nature concerning this Website. Your email
address might also be added to this list as a result of signing up for this Website or after
making a purchase.
Personal Data processed: city; company name; country; county; date of birth; email
address; first name; gender; last name; phone number; physical address; profession;
state; Trackers; Usage Data; website; ZIP/Postal code.
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; employment-related information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
PROCESSING TECHNIQUES AND LOCATIONS
We implement appropriate security measures to prevent unauthorized access,
disclosure, alteration, or unauthorized destruction of the Data. However, no method of
transmission over the Internet or electronic storage is 100% secure. Personal Data is
processed at Our operating offices and other locations where parties involved in the
processing are situated. Depending on the User's location, data transfers may involve
transferring the User's Data to a country other than their own. Users are entitled to learn
about the legal basis for such transfers and the security measures undertaken.
DATA ACQUISITION FROM THIRD-PARTY SOCIAL MEDIA PLATFORMS
We facilitate account creation and login through Third-party Social Media Services,
including Google, Facebook, and Twitter. We may collect Personal Data linked to your
Third-Party Social Media Service account. You may opt to share additional Information
with the Company via your Third-Party Social Media Service account, granting us rights
to utilize, share, and retain it in line with this Policy.
USER'S RIGHTS AND CONTACT INFORMATION
Users have specific rights under applicable laws, including the right to access, rectify,
delete, or restrict their Personal Data. Requests to exercise these rights can be directed
to:
Owner and Data Supervisor:
Papa Boost
1234 Made Up Way #123
West Palm Beach, FL 334 _ _
Legal Advocate: To be disclosed
Email: Privacy@papaboost.com
Phone: 1-888-123-4567
CALIFORNIA PRIVACY NOTICE (CCPA/CPRA)
INTRODUCTION
This Notice is crafted exclusively for the residents of the State of California, United
States of America, in strict adherence to the California Consumer Privacy Act of 2018
(CCPA), as amended by the California Privacy Rights Act (CPRA), and any subsequent
amendments, enactments, or regulations. All terms and definitions utilized herein shall
be interpreted in conformity with the meanings ascribed under the CCPA and CPRA,
reflecting our commitment to transparency, compliance, and the protection of your
privacy.
SCOPE AND LIMITATIONS
This Notice serves as a supplement to other sections of our privacy policy and shall
supersede any inconsistent or conflicting provisions therein with respect to California
residents.
The provisions of this Notice shall not extend to information that does not qualify as
"personal information" as meticulously defined under CCPA and CPRA. This exclusion
encompasses but is not limited to, anonymous, deidentified, aggregated, publicly
available information as meticulously defined in the relevant statutes.
In the event of processing de-identified personal information, neither we nor any third
party will undertake to reidentify such information, adhering to the principles of data
minimization and purpose limitation.
INFORMATION "SHARING," "SELLING," COLLECTION, AND USAGE NOTICE
(CCPA)
For the purposes of this Notice, "Personal Information" and "Sensitive Personal
Information" (SPI) shall be understood as defined by the CCPA.
Information "Sharing" and "Selling"
Affirmation: We categorically affirm that we do not "sell" or "share" Personal
Information in exchange for monetary or other valuable consideration, in
alignment with the CCPA's definitions.
Age Limitation: We neither willfully nor knowingly sell or share the Personal
Information of consumers under the age of sixteen (16) years for cross-context
behavioral advertising, upholding the rights of minors.
Collection and Usage Notice
General Practices: Information regarding the categories, methods, and purposes
of Personal Information collection is detailed herein and further elaborated in the
“Detailed Information on the Processing of Personal Data” section.
Categories of Personal Information: A comprehensive list of the categories of
Personal Information that may have been collected within the past twelve (12)
months is provided. This includes but is not limited to, Identifiers, Customer
Records, Protected Classifications, Commercial Information, Biometric
Information, Internet Activity, Precise Geolocation Data, Health Data, Sensory
Data, Employment Information, Non-public Education Information, and
Inferences.
Exceptions: Personal Information does not encompass publicly accessible data
from governmental records, deidentified or consolidated consumer data, and
data exempted under specific laws such as HIPAA, FRCA, GLBA, FIPA, etc.
YOUR CALIFORNIA CONSUMER PRIVACY ACT (CCPA) PRIVACY RIGHTS
As a resident of California, the CCPA bestows upon you the following rights:
Right to Know and Access: You may request information about the categories, specific
pieces, sources, purposes, and third parties related to your personal information.
Right to Notification: You are entitled to be informed about the accumulation and
intended use of your Personal Data.
Right to Disclosure: We will disclose our practices concerning your Personal
Information upon request validation.
Right to Opt-Out: You may direct us not to sell your Personal Information.
Right to Deletion: Subject to legal exceptions, you may request the deletion of
your Personal Data.
Right to Non-Discrimination: We pledge non-discriminatory practices regarding
the exercise of your privacy rights.
Details on how to exercise these rights are provided within this Notice.
SENSITIVE PERSONAL INFORMATION CATEGORIES AND USAGE
Categories Gathered: Includes passwords, etc., with no additional categories
collected without prior notification.
Use for Business or Commercial Purposes: This may include Service Operation
and Delivery, Legal Compliance, Security and Fraud Prevention, and Internal
Administration.
The use of your Personal Data for these purposes is further detailed in the "Use of Your
Personal Data" section.
Management and Disclosure of Personal Information
General Principles: We are committed to responsibly handling your Personal
Information in accordance with applicable laws and regulations, including the California
Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). The
principles outlined herein reflect our dedication to privacy.
Disclosure Categories:
Business Transactions:
o Merger & Acquisition: In the event of a merger, acquisition, asset sale, or a
similar transaction, your Personal Data may be transferred. Notification
will be provided in advance, including details of any new Privacy Policy
that may apply.
Legal Obligations and Law Enforcement:
o Compliance: To comply with legal obligations, lawful requests from public
authorities, courts, or government agencies.
o Protection & Defense: To fulfill legal duties, protect and defend our rights
or property, prevent or investigate misconduct related to the Service,
safeguard users' or the public's safety, or shield against legal liability.
Sensitive Personal Information Control:
o Limited Use: Restriction upon your request, as necessary, to deliver
services or goods within reasonable consumer expectations.
o Lawful Purposes: Utilization for specific lawful purposes in accordance
with applicable laws.
o Unrestricted Right: You may request cessation of use or disclosure, and
we will comply and instruct our contractors likewise.
o Contact and Compliance: Please refer to the contact details in this
document for enforcement.
Utilization of Your Personal Information:
o Purpose: For operating this Website, commercial websites, legal
compliance, and rights defense.
o Consent: Explicit consent is required for unexpected or incompatible
purposes.
Preservation & Retention:
o Duration: Retention only for necessary purposes unless stated otherwise.
Collection & Origin:
o Sources: Information collected directly or indirectly from you or third
parties connected to this Website.
Dissemination to Third Parties:
o Definition & Disclosure: Further details are available in the "Detailed
Information on the Processing of Personal Data" section.
Trade or Exchange of Personal Information:
o Sale & Sharing: As defined by the CCPA, including specific terms for third-
party sharing.
Contact Information: For further details or inquiries, please refer to the contact
information in this document.
Section 2: Authorized Agent
Agent Procedure:
Submission: via email at CCPA@znaturalfoods.com.
Consumer Verification: Consistent with our verification process.
Proof of Authorization: Evidence of authorization is required, including direct verification.
Power of Attorney: Statutory power pursuant to California Probate Code sections 4121-
4130.
1. Additional Assistance: Contact us with any questions or for additional
information.
Section 3: Opt-Out Rights for the Trade or Exchange of Personal Information
General Rights: Includes the right to opt-out of processing, selling, or sharing
Personal Information for targeted advertising, profiling, or other significant
effects.
Methods to Exercise Rights: Including direct contact and privacy choices link on
our Website.
Global Privacy Controls: Opt-out using global privacy controls, such as the
Global Privacy Control (GPC).
Follow-Up: A 12-month waiting period will apply after opting out.
Section 4: Privacy Rights under the California Consumer Privacy Act (CCPA)
Right to Access and Portability: You may request disclosure and portability of
Personal Information as detailed below.
Scope of Disclosure: Disclosure encompasses the past 12 months and will be in
a "portable" format if possible.
Exercising Your Rights: Please follow the procedures in this policy or contact us
using the information provided.
Response Time: We will respond to verifiable requests in accordance with
applicable legal requirements.
CONTACT, INQUIRIES, AND COMPLAINTS
Should you have any questions, require further information about this Notice, or wish to
exercise your rights under the California Consumer Privacy Act (CCPA) and California
Privacy Rights Act (CPRA), please do not hesitate to contact us using the details
provided below:
Email Address: CCPA@PapaBoost.com
Phone Number: 1-888-123-4567
Website Contact Page: https://www.papaboost.com/pages/contact-support
Postal Address: 1234 Made Up way #123, West Palm Beach, FL 334_ _ USA
Your privacy rights are paramount to our commitment to transparency, compliance, and
adherence to all pertinent laws and regulations, including but not limited to the CCPA
and CPRA.
We endeavor to handle all inquiries, concerns, and complaints with fairness, integrity,
and due diligence, in line with our legal obligations and our stringent internal policies
and procedures. Our practices are structured in alignment with the CCPA/CPRA,
reflecting our unwavering dedication to safeguarding your privacy and promoting trust.
Procedure for Complaints and Concerns:
1. Initial Contact: Please reach out to us using the contact details provided,
including a brief description of your inquiry or concern. We will acknowledge
receipt of your communication promptly.
2. Investigation: We will thoroughly investigate your inquiry or complaint and may
request additional information or documentation from you to assist in our
investigation.
3. Response: We will provide a substantive response detailing our findings and any
actions taken or to be taken within a reasonable time frame consistent with legal
requirements.
4. Appeal: If you are dissatisfied with our response, you may appeal our decision,
providing further details or evidence to support your case.
5. External Resolution: Should our internal resolution process not satisfy your
concerns, you may escalate your complaint to the relevant legal authority, such
as the California Attorney General's Office.
Please be assured that we will treat your inquiry or complaint with the utmost
confidentiality and professionalism. We are committed to fostering a relationship of trust
and mutual respect with you and will work assiduously to resolve any matters pertaining
to your privacy rights and our obligations.
COLORADO PRIVACY ACT NOTICE (CPA)
INTRODUCTION
This section of our Privacy Policy ("Policy") is specifically tailored for consumers
domiciled in the State of Colorado in compliance with the Colorado Privacy Act (CPA).
The terminology used herein retains the meaning as defined by the CPA and pertains
solely to "personal data," excluding deidentified or publicly available information.
CATEGORIZATION OF PROCESSED PERSONAL DATA
We collect, disclose, and retain personal data as described in the following sections:
Information Collection: We collect various types of personal data, as outlined in this
Policy's "Information We Collect" section.
Disclosure to Third Parties: We may disclose your personal data to third parties. The
categories of third parties and the purposes for such disclosure are provided in the
"How We Disclose Information" section of this Policy.
Data Retention: We retain your personal data for a period as specified in the "How Long
We Keep Your Data" section of this Policy.
Purposes of Processing: We process your personal data for various purposes, as
detailed in the "Purposes of Processing" section of this Policy.
SALE AND TARGETED ADVERTISING OF PERSONAL DATA
We neither sell your personal data in exchange for valuable consideration nor process it
for targeted advertising as defined by the CPA.
PROFILING
We perform automated processing of your personal data to evaluate, analyze, or predict
personal aspects related to, for example, your economic situation, health, personal
preferences, interests, reliability, behavior, location, or movements. Such profiling
activity is done in furtherance of decisions that may result in the provision or denial of,
for example, financial or lending services, housing, insurance, education enrollment or
opportunity, criminal justice, employment opportunities, healthcare services, or access
to essential goods or services.
You always have the right to opt-out of this kind of profiling activity. To fully exercise this
right to opt-out, you can contact us at any time using the contact details provided in this
document. To find out more about your rights and how to exercise them, you can
consult the section of this document outlining your rights under the CPA.
YOUR RIGHTS UNDER THE CPA
As a Colorado consumer, you have the following rights under the CPA:
Right to Access: You have the right to confirm whether we process your personal data
and to receive a copy of your personal data in a portable and readily usable format.
Right to Delete: You have the right to request the deletion of your personal data, subject
to certain legal exceptions.
Right to Non-Discrimination: You have the right to exercise your privacy rights without
receiving discriminatory treatment, such as changes in the price or quality of goods or
services, except where it is reasonably related to the value provided by your data.
Right to Opt-Out: Given that we do not sell personal data, process targeted advertising,
or engage in certain profiling, there is no need to exercise an opt-out right.
Authorized Agents: You may designate an authorized agent to make a request on your
behalf, subject to certain requirements.
Right to Correct: You have the right to correct inaccuracies in your personal data.
Authenticating Your Request: We will verify your identity before processing your request
and may request additional information if necessary.
Right to Appeal: If you are dissatisfied with our response, you have the right to appeal
our decision within 90 days or file a complaint with the Colorado Attorney General’s
Office.
GENERAL PROVISIONS
This Colorado Privacy Notice is an integral part of our broader Privacy Policy and
exclusively pertains to consumers in Colorado. We employ the term "Personal Data" as
defined in the CPA, have provided a synopsis of relevant categories, and abstain from
gathering sensitive data unless otherwise disclosed.
For comprehensive details on these activities, please refer to the specific sections within
this document, such as "Detailed Information on the Processing of Personal Data."
CONCLUSION
We are committed to adhering to the CPA's guidelines and providing you the opportunity
to control your personal data. Should you have any concerns or wish to exercise your
rights, please contact us using the details provided in this document. If you believe your
rights have been violated, you may file a complaint with the Colorado Attorney
General’s Office.
This revised Colorado Privacy Policy is designed to provide a comprehensive and
legally robust framework for the protection of Personal Data in compliance with the
Colorado Privacy Act. It includes clear definitions, detailed explanations of data
processing techniques, user rights, and legal bases for processing, all aimed at
enhancing transparency and legal protection.
NOTICE OF PRIVACY RIGHTS UNDER THE VIRGINIA CONSUMER DATA
PROTECTION ACT (VCDPA)
This Notice is provided exclusively to Virginia residents in accordance with the Virginia
Consumer Data Protection Act (VCDPA). It delineates your rights and our
responsibilities regarding the collection, usage, processing, and disclosure of Personal
Data.
DEFINITIONS
"Personal Data" refers to the information defined as such in the VCDPA.
Other terms used herein have the meaning ascribed to them in the VCDPA unless
otherwise noted.
YOUR RIGHTS UNDER THE VCDPA
Access, Correction, and Obtaining Personal Data
Access: You may request confirmation regarding whether or not we are
processing your Personal Data and accessing such data.
Correction: Subject to the nature of the Personal Data and its processing
purpose, you may request corrections to any inaccurate Personal Data we hold
about you.
Obtaining a Copy: We will furnish your Personal Data in a portable, easily
transferable format if technically feasible.
Disclosure of Personal Information for Business or Commercial Objectives
We may use or disclose specific categories of Personal Information for business
or commercial objectives, subject to contractual restrictions to maintain
confidentiality and prevent unauthorized use.
Refraining from the Sale or Processing of Personal Data
Sale of Personal Data: You may direct us not to sell your Personal Data. Any
information collected related to this request will be used solely to comply with it.
Processing for Tailored Advertising: You have the right to abstain from the
processing of your Personal Data for tailored advertising as defined by the
VCDPA.
Third-Party Disclosures
Your Personal Data may be disclosed to third parties as detailed in this
document, consistent with VCDPA definitions.
Sale Interpretation under VCDPA and CCPA
The terms "sell" and "sale" are defined uniquely in the VCDPA and CCPA. Our
use of your Personal Data may be construed as a sale under the VCDPA,
although not necessarily involving monetary benefit.
III. DATA HANDLING
Collection, Disclosure, Retention, and Purposes
Refer to specific sections within this document for details on the collection,
disclosure to third parties, retention periods, and purposes for processing data.
Data “Selling” and Targeted Advertising
We do not "sell" your data or process it for targeted advertising as defined in the
VCDPA.
Profiling
We perform automated processing of your personal data to evaluate, analyze, or
predict personal aspects related to, for example, your economic situation, health,
personal preferences, interests, reliability, behavior, location, or movements.
Such profiling activity is done in furtherance of decisions that result in the
provision or denial of, for example, financial or lending services, housing,
insurance, education enrollment or opportunity, criminal justice, employment
opportunities, healthcare services, or access to essential goods or services.
You always have the right to opt out of this profiling activity. To fully exercise this
right to opt-out, you can contact us any time using the contact details provided in
this document. To find out more about your rights and how to exercise them, you
can consult the section of this document outlining your rights under the VCDPA.
EXERCISING YOUR VCDPA RIGHTS
Procedures for access, deletion, non-discrimination, opt-out, correction,
authentication, and appeal are outlined, with potential fees, limitations, or denials
under specific circumstances.
COMPLAINTS
Violations may be reported to the Virginia Attorney General’s Office.
SPECIAL PROVISIONS FOR VIRGINIA CONSUMERS
Entity, definitions, categories and purposes, consent, and integrity are specified
in this document, including options to manage your consent.
VII. GENERAL PROVISIONS
This Notice operates in conjunction with our broader privacy policy, with specific
provisions for Virginia residents, and supersedes conflicting statements within
that policy.
Your VCDPA rights can be exercised via the links provided or by contacting us as
indicated.
This revised Virginia Privacy Policy is designed to provide a comprehensive and legally
robust framework for the protection of Personal Data in compliance with the Virginia
Consumer Data Protection Act. It includes clear definitions, detailed explanations of
data processing techniques, user rights, and legal bases for processing, all aimed at
enhancing transparency and legal protection.
CONNECTICUT PRIVACY NOTICE (CTDPA)
This Privacy Notice is provided for the residents of the State of Connecticut in
accordance with the Connecticut Data Privacy Act (CTDPA). Definitions and terms used
within this section are consistent with the definitions found in the CTDPA.
SCOPE AND WEBSITE
This notice applies exclusively to personal data as defined by the CTDPA and does not
encompass deidentified or publicly available information.
CONTACT INFORMATION
For inquiries, concerns, or to exercise your rights under this Privacy Notice, please
email Privacy@znaturalfoods.com.
III. COLLECTION, DISCLOSURE, AND RETENTION OF PERSONAL DATA
Collection: A detailed description of the personal data we collect is found in the
section titled "Information we collect."
Disclosure: Information on how we disclose personal data to third parties is
provided in "How we disclose information."
Retention: The retention period for personal data is specified in "How long we
keep your data."
DATA SELLING AND TARGETED ADVERTISING
We do not engage in the selling of your personal data nor process it for targeted
advertising as per CTDPA definitions.
PROFILING
We perform automated processing of your personal data to evaluate, analyze, or predict
personal aspects related to, for example, your economic situation, health, personal
preferences, interests, reliability, behavior, location, or movements. Such profiling
activity is done in furtherance of decisions that may result in the provision or denial of,
for example, financial or lending services, housing, insurance, education enrollment or
opportunity, criminal justice, employment opportunities, healthcare services, or access
to essential goods or services.
You always have the right to opt-out of this kind of profiling activity. To fully exercise this
right to opt-out, you can contact us at any time using the contact details provided in this
document. To find out more about your rights and how to exercise them, you can
consult the section of this document outlining your rights under the CTDPA.
CTDPA RIGHTS
1. Right to Access: Confirmation and access to your personal data processed by
us.
2. Right to Delete: Deletion of personal data, subject to legal exceptions.
3. Right to Non-Discrimination: Non-discriminatory practices upon exercising rights.
4. Right to Opt-Out: Opt-out from the sale of personal data, targeted advertising, or
profiling.
5. Authorized Agents: Designation of agents for requests.
6. Right to Correct: Correction of inaccuracies in personal data.
7. Right to Appeal: Appeals against decisions within 90 days.
8. Privacy Policy Provisions: Specific provisions for Connecticut residents.
VII. CATEGORIES AND MOTIVES OF PERSONAL DATA PROCESSED
A comprehensive overview of the categories and motives for processing Personal Data
is provided within this document.
VIII. SALE AND SHARING OF YOUR PERSONAL DATA
Details of the sale and sharing of personal data with third parties are elaborated within
this document.
YOUR RIGHTS TO OPT-OUT OF SALES AND TARGETED ADVERTISING
Explanation of rights to opt-out of the sale of personal data and targeted advertising,
including the utilization of the Global Privacy Control (GPC).
INVOCATION OF RIGHTS UNDER THE CTDPA
Outline of rights under the CTDPA, including verification, rectification, erasure,
procurement, opt-out, and non-discrimination.
PROCEDURE FOR EXERCISING YOUR RIGHTS
Detailed instructions for enforcing rights, including authentication procedures, response
timeframes, and appeal rights.
XII. COMPLAINTS
Complaints may be filed with the Connecticut Attorney General’s Office if rights are
violated.
XIII. CONCLUSION
This Connecticut Privacy Notice (CTDPA) is binding on all parties and governed by
Connecticut law. Inquiries and requests should be directed to the contact information
provided. This notice may be updated periodically and will be available on this website.
This revised Connecticut Privacy Policy is designed to provide a comprehensive and
legally robust framework for the protection of Personal Data in compliance with the
Connecticut Data Privacy Act. It includes clear definitions, detailed explanations of data
processing techniques, user rights, and legal bases for processing, all aimed at
enhancing transparency and legal protection.
UTAH CONSUMER PRIVACY ACT (UCPA) SUPPLEMENT
This Supplement constitutes an integral part of our Privacy Policy, exclusively governing
consumers domiciled in the State of Utah (hereinafter "you") and is promulgated in
accordance with the Utah Consumer Privacy Act (the "UCPA"). This document
supplements and supersedes any conflicting provisions in our primary Privacy Policy.
DEFINITIONS
"We," "Us," or "Our": Refers to the entity managing this website, including, where
applicable, its parent, subsidiaries, and affiliates.
"Personal Data": Corresponds to its definition under the UCPA, encompassing
identifiable information about you.
CATEGORIES AND INTENT OF PERSONAL DATA PROCESSING
Collection and Processing of Personal Data
Categories: We collect Personal Data, including identifiers, commercial
information, and internet information, and refrain from collecting sensitive data.
Purpose: Refer to "Detailed Information on the Processing of Personal Data" and
"The Purposes of Processing" within this document.
Employment of Data and Disclosure to Third Parties
Sharing and Classification: Your Personal Data may be shared with third parties
as detailed in this document.
Trade of Your Personal Data
Definition and Interpretation: Terms such as "trade," "sell," or "sold" are defined
as per the UCPA.
Opt-Out Procedures and Entitlement
Opt-Out Rights: Procedures for opting out of the trade of your Personal Data are
detailed herein.
Use of Personal Data for Targeted Advertising
Definition and Procedures: Targeted advertising is defined and regulated as per
the UCPA.
Privacy Rights Under the UCPA and Procedures
Access, Deletion, Procurement, Opt-Out: Your rights concerning your data are
detailed herein.
Pricing and Services: No discrimination in pricing or services based on your
execution of rights, except for voluntary loyalty programs.
Procedure to Exercise Your Rights: Instructions on how to exercise your rights
are provided.
Our Response to Your Request: We will respond within 45 days, with a possible
extension of up to 90 days, and provide an explanation for any delays.
III. CONFIRMATION OF ADHERENCE
We are committed to maintaining transparency and compliance with the UCPA. Any
Personal Data collected, including opt-out requests, will be used exclusively for the
purposes stated herein. We assure adherence to these provisions and recognize the
significance of safeguarding your Personal Data.
CONTACT INFORMATION
Should you have any questions or need further clarification regarding these provisions,
please contact us through the information provided in this document. You may also
utilize the privacy choices link provided on this website for streamlined processes.
UPDATES AND REVISIONS
This Supplement may be updated or revised periodically to reflect changes in our
practices or for other operational, legal, or regulatory reasons. Please review this
Supplement regularly to stay informed about our information practices and your privacy
rights and choices.
CONCLUSION
This Utah Consumer Privacy Act Supplement is binding and governed by the laws of
the State of Utah. It is designed to provide a comprehensive framework for the
protection of Personal Data in compliance with the Utah Consumer Privacy Act and
includes clear definitions, detailed explanations of data processing techniques, user
rights, and legal bases for processing.
This revised Utah Privacy Policy is designed to provide a comprehensive and legally
robust framework for the protection of Personal Data in compliance with the Utah
Consumer Privacy Act. It includes clear definitions, detailed explanations of data
processing techniques, user rights, and legal bases for processing, all aimed at
enhancing transparency and legal protection.
PRIVACY INFORMATION FOR USERS RESIDING IN BRAZIL (LGPD)
This section supplements and provides further explanation of the information in the
privacy policy and is formulated by the entity managing this website and, where
applicable, its parent, subsidiaries, and affiliates (collectively referred to as "we," "us," or
"our").
APPLICABILITY OF REGULATIONS
The regulations laid down in this section apply to all users residing in Brazil, in
compliance with the "Lei Geral de Proteção de Dados" (hereafter referred to as
"LGPD"). These regulations supersede any contradictory or divergent provisions in the
privacy policy.
DEFINITION OF PERSONAL INFORMATION
In this section, the term "Personal Information" refers to the definition provided in the
LGPD.
III. BASIS FOR PROCESSING YOUR PERSONAL INFORMATION
We process your Personal Information only when there is a legal basis for such
processing, including but not limited to:
Your explicit consent to specific processing activities;
Compliance with legal or regulatory obligations;
Execution of public policies or contracts;
Studies conducted by research entities;
Protection of physical safety or health;
Our legitimate interests, provided your fundamental rights do not override such
interests;
Credit protection.
CATEGORIES AND PURPOSE OF PERSONAL INFORMATION PROCESSING
Categories: For detailed information about the categories of your Personal
Information that we process, please refer to the section titled "Detailed
Information on the Processing of Personal Data."
Purpose: For detailed information about why we process your Personal
Information, please refer to the sections titled "Detailed Information on the
Processing of Personal Data" and "The Purposes of Processing."
YOUR PRIVACY RIGHTS UNDER BRAZILIAN LAW, SUBMISSION OF A REQUEST,
AND OUR RESPONSE
Your Privacy Rights Under Brazilian Law: You have the right to access, rectify,
anonymize, block, delete, object to processing, request portability, revoke
consent, lodge a complaint, and request information about automated decisions.
Submitting Your Request: You may submit your request to exercise your rights
through the contact details provided in this document or via a legally authorized
representative.
Our Response to Your Requests: We pledge to address your requests promptly
and efficiently, providing detailed responses as required by the LGPD.
AUTHORIZED TRANSFER OF PERSONAL INFORMATION OUTSIDE BRAZIL
We are authorized to transmit your Personal Information outside of Brazil, subject to
specific conditions outlined in the LGPD, including international legal cooperation,
protection of life or physical safety, compliance with legal obligations, execution of public
policies, and more.
VII. SECURITY MEASURES
We implement appropriate technical and organizational measures to protect your
Personal Information against unauthorized access, alteration, disclosure, or destruction.
VIII. CONTACT INFORMATION
For more detailed information about these legal bases or any other inquiries, please
contact us using the contact details provided in this document.
UPDATES AND CHANGES
We reserve the right to update or modify this section to reflect changes in legal,
regulatory, or operational requirements. We encourage you to review this section
regularly to stay informed about our privacy practices and your rights.
CONCLUSION
This Privacy Information for Users Residing in Brazil is binding and governed by the
laws of Brazil. It is designed to provide a comprehensive framework for the protection of
Personal Information in compliance with the LGPD and includes clear definitions,
detailed explanations of data processing techniques, user rights, and legal bases for
processing, all aimed at enhancing transparency and legal protection.
This revised Brazil Privacy Policy is designed to provide a comprehensive and legally
robust framework for the protection of Personal Information in compliance with the
LGPD. It includes clear definitions, detailed explanations of data processing techniques,
user rights, and legal bases for processing, all aimed at enhancing transparency and
legal protection.
SWISS FEDERAL ACT ON DATA PROTECTION (FADP) COMPLIANCE STATEMENT
APPLICABILITY TO SWISS USERS
This section exclusively governs the processing of personal data pertaining to Users
resident in or otherwise subject to the jurisdiction of Switzerland. To the extent that any
information contained in the general privacy policy of this document is inconsistent with
or contradicts the provisions herein, this section shall prevail for Swiss Users.
DETAILS OF PROCESSING OF PERSONAL DATA
Categories and Types: Further particulars regarding the types and categories of
Personal Data processed may be obtained by reference to the section entitled
“Detailed Information on the Processing of Personal Data” within this document.
Purposes: Specific purposes of such processing are detailed within this
document.
Recipients: Information regarding the categories of recipients to whom Personal
Data may be disclosed is provided.
Retention Periods: The retention periods for Personal Data are outlined in
accordance with Swiss law.
III. USER RIGHTS UNDER THE SWISS FEDERAL ACT ON DATA PROTECTION
Users in Switzerland shall be entitled to exercise the following rights concerning their
Personal Data:
1. Right of Access: Obtain confirmation and information regarding the processing.
2. Right to Object and Restrict Processing: Object to processing and request
restrictions, including deletion, destruction, or prohibition of specific disclosures.
3. Data Portability: Receive Personal Data in a structured format and have it
transferred to another controller.
4. Right of Rectification: Request correction or amendment of incorrect or
incomplete data.
5. Right to Erasure: Request deletion of Personal Data in accordance with legal
requirements.
6. Right to Lodge a Complaint: Lodge a complaint with the competent supervisory
authority if you believe that your rights have been violated.
PROCEDURES FOR EXERCISING RIGHTS
Submission of Requests: Requests to exercise the above rights must be
submitted to the Owner through the contact information provided in this
document.
Response Time: Requests will be responded to promptly but no later than the
period prescribed by applicable law.
Verification: The Owner may request additional information to verify the identity of
the User making the request.
ADDITIONAL PROVISIONS
Compliance with Law: The processing of Personal Data shall be conducted in strict
adherence to the principles and obligations set forth in the FADP and any other
applicable laws.
Updates and Changes: This section may be updated periodically to reflect changes in
the law or practices concerning Personal Data.
Contact Information: For any questions or concerns, please contact the Owner using the
contact details provided in this document.
SECURITY MEASURES
We implement appropriate technical and organizational measures to ensure the security
and confidentiality of Personal Data in compliance with Swiss law.
VII. CONCLUSION
This Swiss Federal Act on Data Protection (FADP) Compliance Statement is designed
to provide a comprehensive framework for the protection of Personal Data in
compliance with Swiss law. It includes clear definitions, detailed explanations of data
processing techniques, user rights, and legal bases for processing, all aimed at
enhancing transparency and legal protection.
This revised Switzerland Privacy Policy is designed to provide a comprehensive and
legally robust framework for the protection of Personal Data in compliance with the
FADP. It includes clear definitions, detailed explanations of data processing techniques,
user rights, and legal bases for processing, all aimed at enhancing transparency and
legal protection.
CHILDREN'S ONLINE PRIVACY PROTECTION ACT (“COPPA”) COMPLIANCE
STATEMENT
GENERAL PROVISIONS
This document outlines our commitment to complying with the Children's Online Privacy
Protection Act (“COPPA”) and related state laws, including California's Shine the Light
Law and California Business and Professions Code Section 22581. It details our
practices and obligations concerning collecting, using, and disclosing personal
information from children under 13 and minors under 16.
PROHIBITION ON COLLECTION OF INFORMATION FROM CHILDREN UNDER 13
Scope: Our Service is not intended for, and we do not knowingly target or solicit
information from, anyone under the age of 13.
Due Diligence: We exercise due diligence to avoid collecting Personally
Identifiable Information from individuals under 13.
Parental Notification: Parents or guardians discovering their child has provided
Personal Data to us should notify us promptly.
Remedial Measures: We shall delete that data immediately if we discover a
collection from an individual under 13 without verified parental consent.
III. PARENTAL CONSENT REQUIREMENTS
Compliance: We shall obtain parental consent before collecting and using
information if applicable legal requirements require.
PROHIBITION OF PERSONAL INFORMATION TRANSACTIONS OF MINORS UNDER
16 YEARS
Scope: Our Services are not designed to collect Personal Data from users under
16 years knowingly.
Parental Guidance: Parents and guardians are urged to supervise their child's
online activity and counsel them against sharing information without parental
authorization.
RIGHT TO OPT-IN AND OPT-OUT FOR CONSUMERS UNDER 16 YEARS
Consent Requirements: We do not trade or sell the Personal Data of Consumers
under 16 years without explicit authorization.
Revocation of Consent: Consumers may revoke their consent at any time. To
exercise the right to opt-out, please contact us.
REPORTING SUSPECTED VIOLATIONS
Notification: If you believe a child under 13 (or 16) years has provided us with
Personal Data, please contact us for deletion.
VII. CALIFORNIA RESIDENTS' PRIVACY RIGHTS (CALIFORNIA'S SHINE THE LIGHT
LAW)
Disclosure: California residents may request information about the sharing of
their Personal Data with third parties for direct marketing purposes.
VIII. PRIVACY RIGHTS OF CALIFORNIAN MINOR USERS (CALIFORNIA BUSINESS
AND PROFESSIONS CODE SECTION 22581)
Right to Removal: California residents under 18 may request the removal of
publicly posted content or information.
CONCLUSION AND CONTACT INFORMATION
This disclosure policy is crafted in alignment with our commitment to maintaining
transparency, security, and compliance with applicable laws and regulations. We
encourage you to review the full policy and reach out to us using the contact information
provided if you have any questions or concerns.
This revised policy is designed to provide a comprehensive and legally robust
framework for the protection of children's and minors' privacy online, in compliance with
COPPA and relevant state laws. It includes clear definitions, detailed explanations, and
specific procedures, all aimed at enhancing transparency and legal protection.
PERMISSIONS REQUESTED BY THIS WEBSITE FROM FACEBOOK
This Website may request certain permissions from Facebook to execute actions with
the User's Facebook account and to extract Information, including Personal Data. This
enables the Website to connect with the User's Facebook social network account, a
service provided by Facebook Inc.
For a comprehensive understanding of these permissions, kindly refer to Facebook's
permissions documentation and privacy policy.
Permissions requested are as follows:
Basic Information: By default, this includes specific User Data such as id, name,
picture, gender, and locale. Certain connections, like Friends, are also
accessible. Additional data may be available if the User has made more data
public.
Device Information
Email: This grants access to the User's primary email address.
Trackers: This term refers to any technology - including Cookies, unique
identifiers, web beacons, embedded scripts, e-tags, and fingerprinting - that
allows the tracking of Users. This can be achieved by accessing or storing
Information on the User's device.
DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for various purposes and through different services, which
include:
Access to Third-Party Accounts: This service allows the Website to access Data
from your account on a third-party service and perform actions with it. These
services require explicit authorization from the User and are not automatically
activated.
Facebook Account Access (Meta Platforms, Inc.): This service enables the
connection between this Website and the User's Facebook social network
account provided by Meta Platforms, Inc. The permissions sought include device
Information, Email, and Trackers. The processing's legal basis is Consent. The
place of processing is the United States. The legal basis for data transfer is the
Standard data protection clauses. The category of Personal Information collected
per the CCPA includes identifiers and Internet Information.
Advertising: This service uses User Data for communication purposes displayed
in banners and other advertisements on the Website, potentially based on User
interests. Not all Personal Data is used for this purpose; specific Information and
terms of use are detailed below. Some services listed below may use Trackers to
identify Users or employ behavioral retargeting techniques, displaying ads
tailored to the User's interests and behaviors, including those detected outside
the Website. For more details, please review the privacy policies of the relevant
services. Users can opt-out of such tracking by using any opt-out feature offered
by the services listed below or by referring to the section titled "How to opt-out of
interest-based advertising" in this document.
ADVERTISING AND ANALYTIC SERVICES
Impact (Provided by Impact Tech, Inc.)
Impact serves as an advertising service that facilitates processing Personal data
encompassing Trackers and Usage Data. Processing is based on user consent,
executed in the United States in accordance with Standard Data Protection Clauses. It
encompasses operations, which under various regulations, including CCPA, VCDPA,
CPA, CTDPA, and UCPA, constitute a sale and sharing as per the CCPA. The data
category collected aligns with CCPA's "Internet Information."
Google Ads Conversion Tracking (Provided by Google LLC or Google Ireland Limited)
This analytical service connects data from the Google Ads network to actions taken on
our Website. It processes data based on user consent, operates from the United States
in compliance with Standard Data Protection Clauses, and constitutes a sale under
regulations including CCPA, VCDPA, CPA, CTDPA, and UCPA.
Google AdSense & DoubleClick Cookie (Provided by Google LLC or Google Ireland
Limited)
Google AdSense and DoubleClick network data correlate with actions on our Website,
operating with user consent, under Standard Data Protection Clauses in the United
States. This involves a sale under CCPA, VCDPA, CPA, CTDPA, and UCPA. Google
uses cookies to display personalized ads. Users may opt out of the DoubleClick Cookie
by visiting Google Ads Settings.
AdMob by Google (Provided by Google LLC or Google Ireland Limited)
AdMob links data from the Google AdSense and DoubleClick networks with actions on
this Website. It operates with user consent in the United States in accordance with
Standard Data Protection Clauses and is involved in a sale under regulations including
CCPA, VCDPA, CPA, CTDPA, and UCPA. Opt-out instructions are available on
Google's support page. For data usage details, visit Google's 'How Google uses data'
and Privacy Policy pages.
Bing Ads (Provided by Microsoft Inc.)
This service correlates Bing network data with actions on this Website, based on user
consent, operating in the United States under Standard Data Protection Clauses, and
includes a sale under regulations including CCPA, VCDPA, CPA, CTDPA, and UCPA.
Opt-out instructions are provided on the Bing Ads Opt-out page. Further details can be
obtained from Bing Ads' Privacy Policy.
AdButler (Provided by Sparklit Networks Inc.)
AdButler, an advertising service, links AdButler network data with actions on our
Website. It processes data based on user consent in the United States in accordance
with Standard Data Protection Clauses involving a sale under various regulations,
including CCPA, VCDPA, CPA, CTDPA, and UCPA. Sparklit Networks Inc.'s Privacy
Policy provides additional Information.
Unity Ads (Provided by Unity Technologies)
Unity Ads correlates Unity Ads network data with actions on this Website. It operates
with user consent in the United States, under Standard Data Protection Clauses, and
participates in a sale under CCPA, VCDPA, CPA, CTDPA, and UCPA. Unity
Technologies collects, uses, and transfers Personal data as its Privacy Policy outlines.
Opt-out is possible via Unity Analytics or by enabling privacy features on mobile
devices.
Heap Analytics (Provided by Heap Inc.)
Heap Analytics assists in analyzing revenue and user activity on our Website,
processing Trackers and Usage Data based on user consent. Operating in the United
States, it abides by Standard Data Protection Clauses and retains data for the
necessary duration. This processing qualifies as a sale under CCPA, VCDPA, CPA,
CTDPA, and UCPA.
Meta Ads Conversion Tracking (Meta Pixel) (Provided by Meta Platforms, Inc.)
This service correlates data from the Meta Audience Network with actions on our
Website. Operating with user consent, it is located in the United States, complies with
Standard Data Protection Clauses, and partakes in a sale under CCPA, VCDPA, CPA,
CTDPA, and UCPA.
PRIVACY PREFERENCE SERVICES
Papa Boost Consent Database (Operated by Papa Boost)
This facility secures and provides access to users' consent records pertinent to
Personal data processing and related inclinations.
Basis for Processing: Contractual Necessity
Processing Location: United States - Privacy Policy -
https://www.papaboost.com/pages/legal#tab-1
Data Retention: For the contract duration and as legally mandated
Category of Information Collected as per CCPA: Internet Information
Papa Boost Privacy Controls and Cookie Solution (Operated by Papa Boost)
This feature amasses and retains users' preferences concerning Personal Information
processing, especially via cookies and similar tracking technologies deployed on this
Website.
Basis for Processing: Legal Requirement
Processing Location: United States - Privacy Policy -
https://www.papaboost.com/pages/legal#tab-1
Category of Information Collected as per CCPA: Internet Information
COMMERCIAL AFFILIATION
This service enables third-party product or service advertisements. Ads appear as
variously styled advertising links or banners. The services below monitor clicks on the
embedded icon or banner and communicate this data to our website. For details on
collected data, consult the privacy policy of each service.
ReferralCandy (Facilitated by Anafore Pte. Ltd.)
A marketing affiliation tool offered by Anafore Pte. Ltd.
Processed Personal Data Categories: Email Address, First and Last Name,
Tracker, Usage Data
Legal Processing Basis: User Consent
Processing Location: Singapore - Privacy Policy -
https://www.referralcandy.com/privacy
Personal Information Category as per CCPA: Identifiers, Internet Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale; adheres to CCPA-regulated promotional activities as per VCDPA, CPA,
CTDPA, and UCPA.
Admitad (Facilitated by Admitad GmbH)
A marketing affiliation service by Admitad GmbH.
Processed Personal Data Categories: Tracker, Universally Unique Identifier
(UUID), Usage Data
Processing Legal Basis: User Consent
Processing Location: Germany - Privacy Policy -
https://policies.mitgo.com/en/privacy-policy/admitad-privacy-policy-intro/
Data Transfer Legal Basis: Standard Data Protection Clauses
Personal Information Category as per CCPA: Identifiers, Internet Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale; adheres to CCPA-regulated promotional activities as per VCDPA, CPA,
CTDPA, and UCPA.
CJ Affiliate (Facilitated by Epsilon International UK Ltd, part of Publicis Groupe)
A marketing affiliation service by Epsilon International UK Ltd, part of Publicis Groupe.
Processed Personal Data Categories: Purchase History, Tracker, Usage Data
Processing Legal Basis: User Consent
Processing Location: United Kingdom - Privacy Policy -
https://www.cj.com/legal/privacy-policy-services
Data Transfer Legal Basis: Standard Data Protection Clauses
Personal Information Category as per CCPA: Commercial Information, Internet
Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale; adheres to CCPA-regulated promotional activities as per VCDPA, CPA,
CTDPA, and UCPA.
DATA INTEGRATION
These services authorize the Data Controller to integrate user data with the third-party
services listed in this privacy policy, potentially leading to data retention.
Integromat (Operated by Integromat s.r.o.)
Integromat is a workflow automation tool provided by Integromat s.r.o., enabling data
integration across third-party services.
Processed Personal Data Categories: Data communicated during the use of the
service
Processing
Location: Czech Republic - Privacy Policy - https://www.make.com/en/privacy-
notice
Personal Information Category as per CCPA: Internet Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale.
USER CONTACT
Mailing List or Newsletter (This Website)
Upon enrolling for the mailing list or newsletter, the user’s email address is
included in a contact list for possible receipt of email messages containing
information of commercial or promotional importance concerning this Website.
Processed Personal Data Category: Email Address
Processing Legal Basis: User Consent
Personal Information Category as per CCPA: Identifiers.
Integration of Richpanel (Operated by Richpanel, Inc.)
When a User voluntarily provides their email address via the Richpanel Messaging
widget or a Richpoanel support ticket, their email address and other data may be
incorporated into Richpanel, a Customer help desk service provided by Richpanel, Inc.
Processed Personal Data Category: Email Address
Processing Legal Basis: Contractual Necessity
Processing Location: United States - Privacy Policy -
https://www.richpanel.com/privacy-policy
Data Transfer Legal Basis: Standard Data Protection Clauses
Data Retention: Data is retained as long as necessary to establish, exercise or
defend legal claims
Personal Information Category as per CCPA: Identifiers.
Swiftype (Operated by Elasticsearch BV)
Swiftype, a service by Elasticsearch BV, enables the Website to incorporate its search
engine functionality.
Processed Personal Data Categories: Trackers and Usage Data
Processing Legal Basis: User Consent
Processing Location: Netherlands - Privacy Policy -
https://www.elastic.co/legal/privacy-statement
Data Transfer Legal Basis: Standard Data Protection Clauses
Personal Information Category as per CCPA: Internet Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale.
Wistia widget (Privacy Mode) (Operated by Wistia, Inc.)
The Wistia widget, a video content visualization service, operates in privacy mode,
ensuring Wistia captures fully anonymized viewing data from Users unless they actively
consent to track.
Processed Personal Data Category: Usage Data
Processing Location: United States - Privacy Policy - https://wistia.com/privacy
Personal Information Category as per CCPA: Internet Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale.
TrustBox widget (Operated by Trustpilot A/S)
TrustBox widget, a service by Trustpilot A/S, offers a review and ratings functionality
integrated into the Website's pages.
Processed Personal Data Categories: Clicks, Page Views, and Usage Data
Processing Legal Basis: User Consent
Processing Location: Denmark - Privacy Policy - https://legal.trustpilot.com/for-
reviewers/end-user-privacy-terms
Personal Information Category as per CCPA: Internet Information
Nature of Processing: Complies with CCPA, VCDPA, CPA, CTDPA, and UCPA as
a sale.
ELECTRONIC COMMUNICATION AND MARKETING ENGAGEMENT
We reserve the right to engage you via electronic mail with informative newsletters,
promotional materials, or other content that may pique your interest. You can withdraw
from these correspondences at any time by adhering to the "unsubscribe" instructions in
our emails or by contacting us directly.
To enhance our marketing communications, we may enlist the support of third-party
Email Marketing Service Providers.
1. Mailchimp: A communication service offered by The Rocket Science Group LLC.
Their privacy practices can be reviewed here -
https://mailchimp.com/legal/privacy/
2. Klaviyo: A marketing platform provided by Klaviyo. Their privacy measures can
be examined here - https://www.klaviyo.com/legal/privacy
3. Attentive: A SMS/text message marketing service presented by Attentive Mobile
Inc. Their privacy standards can be assessed here -
https://www.attentive.com/privacy
4. AWeber: A communication platform offered by AWeber Communications. Their
privacy policies can be perused here - https://www.aweber.com/privacy.htm
5. Sinch: An email marketing platform, including services such as Mailgun, Mailjet,
Email on Acid, and InboxReady. Their privacy practices can be viewed here -
https://www.mailgun.com/legal/privacy-policy/
6. GetResponse: A marketing platform offered by GetResponse. Their privacy
standards can be inspected here -
https://www.getresponse.com/legal/privacy.html
7. Remarkety: Their privacy policy can be scrutinized here -
https://www.remarkety.com/privacy-policy/
8. SendGrid: Their privacy policy can be assessed here -
https://sendgrid.com/policies/privacy/
HANDLING PAYMENTS AND DATA SECURITY
1. Third-Party Payment Processing Services: For the purpose of facilitating
transactions related to paid products and/or services offered within our Service,
we may engage the services of third-party payment processing entities. These
entities are entrusted with the responsibility of securely managing and processing
payment transactions on our behalf.
2. Non-collection of Payment Details: At no point in time does our Service directly
collect, store, or have access to your payment card details or any other sensitive
financial information. Such data is exclusively provided by you, the user, directly
to our third-party payment processors.
3. Compliance with PCI-DSS Standards: We take the security of payment
information seriously. To this end, all our third-party payment processors are
mandated to be in full compliance with the Payment Card Industry Data Security
Standard (PCI-DSS). This standard is managed and upheld by the PCI Security
Standards Council, which is a collaborative initiative of major credit card brands
including, but not limited to, Visa, Mastercard, American Express, and Discover.
Adherence to the PCI-DSS requirements ensures that payment information is
handled, processed, and stored in a secure and protected manner.
4. Liability: We shall not be held liable for any breaches, unauthorized transactions,
or any other issues arising from the use of third-party payment processors. Users
are advised to direct any concerns or disputes directly to the respective payment
service provider.
5. Limitation of Our Involvement: Our website does not participate in, nor is it
involved in, the direct collection or processing of payment details or personal
information related to payment transactions. Our role is limited to receiving
notifications from the relevant payment service provider regarding the status of
the payment, specifically whether the payment transaction has been successfully
executed or not.
6. External Payment Service Providers: Unless explicitly mentioned otherwise, all
payments made via this website, whether by credit card, bank transfer, or other
means, are processed through external payment service providers. As a general
practice, and unless stated otherwise, users are required to furnish their payment
details and associated personal information directly to these external payment
service providers.
7. Third-party Privacy Policies: The collection, storage, and utilization of your
Personal Information by our third-party payment processors are strictly governed
by their individual Privacy Policies. We strongly recommend that users review the
policies below to understand how their data is managed and protected.
Shopify Payments / Shop Pay
Shopify Payments and Shop Pay is a payment service that processes various forms of
payments, including credit and debit cards.
Personal Data processed: Data communicated while using the service; email address;
first name; language; last name; payment info; phone number; physical address; Usage
Data; User ID.
Place of processing: United States - Privacy Policy -
https://www.shopify.com/legal/privacy
We encourage you to peruse the privacy policies of our payment processors:
1. Apple Store In-App Payments - https://www.apple.com/legal/privacy/en-ww/
2. Google Play In-App Payments - https://www.google.com/policies/privacy/
3. Stripe - https://stripe.com/us/privacy
4. WePay - https://go.wepay.com/privacy-policy
5. PayPal - https://www.paypal.com/webapps/mpp/ua/privacy-full
6. Braintree - https://www.braintreepayments.com/legal/braintree-privacy-policy
7. FastSpring - http://fastspring.com/privacy/
8. Authorize.net - https://www.authorize.net/company/privacy/
9. 2Checkout - https://www.2checkout.com/policies/privacy-policy
10. Square - https://squareup.com/legal/privacy-no-account
11. Go Cardless - https://gocardless.com/en-eu/legal/privacy/
12. Elavon - https://www.elavon.com/privacy-pledge.html
13. WeChat - https://www.wechat.com/en/privacy_policy.html
14. Alipay -
https://render.alipay.com/p/f/agreementpages/alipayglobalprivacypolicy.html
15. Affirm - https://www.affirm.com/privacy
16. WorldPay - https://www.worldpay.com/en-gb/privacy-policy
For transactions via bank transfers within our Service, we may require information to
execute the transaction and authenticate your identity.
HOSTING AND BACKEND INFRASTRUCTURE SERVICES
This section pertains to services specifically engineered to provide hosting and backend
infrastructure. These services are fundamental to the operational continuity and
accessibility of our website and the facilitation of various functionalities and elements of
our service. The geographic dispersion of these services might make it complex to
ascertain the precise storage location of Personal Data.
Google Cloud Storage (Google LLC)
Google Cloud Storage is a hosting service provided by Google LLC.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing: United States - Privacy Policy - https://policies.google.com/privacy
Cloudflare Cloud Storage (Cloudflare, Inc.)
Cloudflare Cloud Storage is a hosting service provided by Cloudflare, Inc.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing: United States - Privacy Policy -
https://www.cloudflare.com/privacypolicy/
DigitalOcean (DigitalOcean Inc.): DigitalOcean, offered by DigitalOcean Inc., provides
hosting services employed by our website. It processes various categories of Personal
Data as delineated in its privacy policy on the legal basis of Contractual Obligation. The
processing occurs in the Netherlands and Germany. Data retention extends to the
duration required for the purpose of fulfillment. Personal Information collected under
CCPA guidelines: Identifiers. Privacy Policy -
https://www.digitalocean.com/legal/privacy-policy/
Amazon Web Services (AWS) (Amazon Web Services, Inc.): AWS, furnished by
Amazon Web Services, Inc., caters to our hosting and backend needs. Personal Data
processed includes various types detailed in their privacy policy under the legal ground
of Contractual Obligation. Processing location: Ireland. Retained data persists as long
as necessary for purpose fulfillment. Personal Information collected under CCPA
guidelines: Identifiers. Privacy Policy - https://aws.amazon.com/privacy/
A-CUBE API (A-CUBE S.R.L): A-CUBE S.R.L provides A-CUBE API to facilitate this
Website's compliance with the Italian Exchange System (ES). Post-payment, users'
Personal data is shared for electronic invoice generation. The processed Personal data
category: Invoicing Information. Processing location: Italy. Personal Information
collected under CCPA guidelines: Commercial Information. Privacy Policy -
https://www.acube.com/privacy-policy/
MongoDB Cloud (MongoDB, Inc.): MongoDB Cloud, offered by MongoDB, Inc., is a
backend and hosting service. Category of Personal Data processed: Usage Data.
Processing location: Germany. Personal Information collected under CCPA guidelines:
Internet Information. Privacy Policy - https://www.mongodb.com/legal/privacy-policy
INFRASTRUCTURE MONITORING
Services under this category empower us to monitor the utilization and behavior of our
website's components, enabling operational enhancements, performance optimization,
maintenance improvements, and troubleshooting. The specifics of Personal Data
processed depend on these services' features and manner of implementation,
fundamentally designed to filter website activities.
New Relic (New Relic): New Relic, a monitoring service provided by New Relic Inc.,
filters all website traffic, including the interaction between the website and the user's
browser or device, and collects analytical data pertaining to the website. Personal
Information collected under CCPA guidelines: Identifiers and Internet Information.
Privacy Policy - https://newrelic.com/termsandconditions/privacy
Uptime Robot (Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.)
Uptime Robot is a monitoring service provided by Buzpark Bilisim Tarim Urunleri Sanayi
Tic. Ltd. Sti.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing: Turkey - Privacy Policy - https://uptimerobot.com/privacyPolicy
INTERACTION WITH DATA COLLECTION AND OTHER THIRD-PARTY PLATFORMS
Services under this section enable users to engage with data collection platforms or
other services directly from our website's pages. Whether the user employs these
services actively or not, it may gather browsing and usage data upon installation.
Typeform widget (TYPEFORM S.L): The Typeform widget, offered by
TYPEFORM S.L., fosters interaction with the Typeform data collection platform.
Personal Information collected under CCPA guidelines: Identifiers and Internet
Information. Privacy Policy - https://admin.typeform.com/to/dwk6gt
INTERACTION WITH LIVE CHAT PLATFORMS
This type of service allows Users to interact with third-party live chat platforms directly
from the pages of this website in order to contact and be contacted by this website‘s
support service.
If one of these services is installed, it may collect browsing and Usage Data on the
pages where it is installed, even if the Users do not actively use the service. Moreover,
live chat conversations may be logged.
Richpanel
Richpanel Chat is a service for interacting with the Richpanel live chat platform provided
by Richpanel Inc.
Personal Data processed: billing address; city; clicks; contents of the email or message;
country; device information; email address; first name; geography/region; last name;
order ID; phone number; product interaction; purchase history; shipping address; state;
time zone; Trackers; Usage Data; User ID.
Place of processing: United States - Privacy Policy - https://www.richpanel.com/privacy-
policy
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; geolocation data.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
Shopify Chat
Shopify Chat is a service for interacting with the Shopify live chat platform provided by
Shopify Inc., Shopify Commerce Singapore Pte. Ltd or by Shopify International Limited,
depending on how the Owner manages the Data processing.
Personal Data processed: billing address; city; clicks; contents of the email or message;
country; device information; email address; first name; geography/region; last name;
order ID; phone number; product interaction; purchase history; shipping address; state;
time zone; Trackers; Usage Data; User ID.
Place of processing:
Canada - Privacy Policy - https://www.shopify.com/legal/privacy
Singapore - Privacy Policy - https://www.shopify.com/legal/privacy
Ireland - Privacy Policy - https://www.shopify.com/legal/privacy
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; geolocation data.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
Facebook Messenger Customer Chat
The Facebook Messenger Customer Chat is a service for interacting with the
Messenger instant messaging app and platform provided by Meta Platforms, Inc. or by
Meta Platforms Ireland Limited, depending on how the Owner manages the Data
processing.
Personal Data processed: Data communicated while using the service; Trackers; Usage
Data.
Place of processing:
United States - Privacy Policy - https://www.facebook.com/about/privacy/
Ireland - Privacy Policy - https://www.facebook.com/about/privacy/
Freshdesk
Freshdesk Messaging Widget (Freshworks, Inc.): The Freshdesk Messaging Widget,
furnished by Freshworks, Inc., enables interaction with the Freshdesk live chat platform.
Personal Data processed: billing address; city; clicks; contents of the email or message;
country; device information; email address; first name; geography/region; last name;
order ID; phone number; product interaction; purchase history; shipping address; state;
time zone; Trackers; Usage Data; User ID.
Place of processing: United States - Privacy Policy -
https://www.freshworks.com/privacy/
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; geolocation data.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
INTERACTION WITH SUPPORT AND FEEDBACK PLATFORMS
Services under this category enable users to interact with third-party support and
feedback platforms directly from our website's pages. These services may collect
browsing and usage data even if not actively used by the user.
Elevio Widget (Elevio Pty. Ltd.): The Elevio Widget, provided by Elevio Pty. Ltd.,
allows interaction with the Elevio support and feedback platform. Personal
Information collected under CCPA guidelines: Internet Information. Privacy Policy
- https://elev.io/legal/privacy-policy
INTERNAL PROCESSING TOOLS
Radar, a proprietary tool of Papa Boost, periodically scans customer websites to identify
compliance issues and communicate the outcomes via email. The legal ground for this
processing is a contract, and no data transfer occurs.
MANAGEMENT OF CONTACTS AND SENDING MESSAGES
Services in this category manage a database of email contacts, phone contacts, or
other contact information to communicate with the User. These services may also
collect data regarding the User's interactions with the messages.
Vero (Vero Holdings Australia Pty. Ltd.): Vero, a service that manages email
addresses and sends messages, is provided by Vero Holdings Australia Pty. Ltd.
Personal Information collected under CCPA guidelines: Identifiers and Internet
Information. Privacy Policy - https://www.getvero.com/privacy/
Twilio (Twilio, Inc.): Twilio, a service that manages phone numbers and enables
communication, is provided by Twilio, Inc. Personal Information collected under
CCPA guidelines: Identifiers. Privacy Policy - https://www.twilio.com/legal/privacy
Klaviyo (Klaviyo Inc.): Klaviyo is an email address management and message-
sending service provided by Klaviyo Inc. To take advantage of the service
provided by Klaviyo, the Owner typically shares information about (purchasing)
Users, such as for example contact details and shopping histories. Check the
indication at “Personal Data processed“ below for an explanation of the extent of
the sharing.
Personal Data processed: company name; country; date of birth; email address; first
name; gender; last name; phone number; physical address; profession; purchase
history; state; Trackers; Usage Data; username; various types of Data.
Place of processing: United States - Privacy Policy -
https://www.klaviyo.com/legal/privacy/privacy-notice
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; employment-related information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
MANAGEMENT OF SUPPORT AND CONTACT REQUESTS
This service enables the website to manage support and contact requests received via
email or other means, such as the contact form. The processed Personal Data depends
on the Information in the user's messages and the communication method used (e.g.,
email address).
WhatsApp Business customer support
WhatsApp Business customer support is a customer support service provided by Meta
Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner
manages the Data processing.
Personal Data processed: account log-in; answers to questions; app information; billing
address; browser information; browsing history; city; contents of the email or message;
country; county; custom events; customer support; Data communicated while using the
service; data relating to the point of sale; date of the message; device information;
device logs; first name; geography/region; in-app messages; in-app purchases;
interaction events; invoicing information; IP address; language; last name; latitude (of
city); login history; longitude (of city); metro area; operating systems; order ID;
password; payment info; phone number; primary account information; product
interaction; profile picture; province; purchase history; sender of the message; shipping
address; state; time the message was sent; time zone; Trackers; Usage Data; user
content; username; ZIP/Postal code.
Place of processing:
United States - Privacy Policy - https://www.whatsapp.com/legal/privacy-policy
Ireland - Privacy Policy - https://www.whatsapp.com/legal/privacy-policy-eea
CUSTOMER SERVICE MANAGEMENT
Freshdesk (Freshworks, Inc.)
Freshdesk, a comprehensive solution furnished by Freshworks, Inc., streamlines the
administration and management of customer service requests and inquiries.
Nature of Personal Data Processed: Data proffered during service engagement
and various data categories specified in the service's privacy policy.
Juridical Ground for Processing: Contractual Obligation.
Data Processing Locale: United States - Privacy Policy -
https://www.freshworks.com/privacy/
Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
Data Retention Period: Kept until no longer required for legal claims'
establishment, execution, or defense.
Classification of Personal Information under CCPA: Identifiers and Internet
Activity.
CONTENT COMMENTING
Content commenting services allow Users to make and publish their comments on the
contents of this website.
Depending on the settings chosen by the Owner, Users may also leave anonymous
comments. If there is an email address among the Personal Data provided by the User,
it may be used to send notifications of comments on the same content. Users are
responsible for the content of their own comments.
If a content commenting service provided by third parties is installed, it may still collect
web traffic data for the pages where the comment service is installed, even when Users
do not use the content commenting service.
Comment system managed directly (this website)
This website has its own internal content comment system.
Personal Data processed: email address; first name; last name; phone number;
Trackers; Usage Data; username; website.
Category of personal information collected according to the CCPA: identifiers; internet
information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
WEB CONFERENCE AND ONLINE TELEPHONY MANAGEMENT
This facility empowers the website to orchestrate the execution, administration, hosting,
recording, circulation, and analysis of online telephony and web conferences for User
interaction. Personal Data collected hinges on the Information Users submit while
utilizing these services. They may be integrated with an array of third-party services
facilitating subsequent data-processing actions, such as contact management, message
dissemination, analytics, advertising, and payment processing.
Livestorm (LIVESTORM SAS)
Livestorm, provided by LIVESTORM SAS, is an avant-garde web conference
management service. To understand user behavior, Livestorm may deploy cookies.
Users can learn about opting out of Livestorm's cookie tracking on the designated page.
Nature of Personal Data Processed: Data proffered during service engagement
and Email Address.
Juridical Ground for Processing: Consent.
Data Processing Locale: France - Privacy Policy -
https://www.livestorm.co/privacy-policy/
Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
Data Retention Period: 3 Years.
Classification of Personal Information under CCPA: Identifiers and Internet
Activity.
The processing constitutes: A Sale, as defined by CCPA, VCDPA, CPA, CTDPA,
and UCPA.
REGISTRATION AND AUTHENTICATION
By registering or authenticating, Users authorize the Website to identify them and
provide access to dedicated services.
As indicated below, third parties might provide registration and authentication services.
In these scenarios, this Website may access specific Data these third-party services
have stored for registration or identification. Some of these services may also compile
Personal Data for targeting and profiling. For comprehensive details, refer to the
descriptions of each service.
Facebook Authentication (Meta Platforms, Inc.)
Facebook Authentication, provided by Meta Platforms, Inc., is a registration and
authentication service linked with the Facebook social network.
Nature of Personal Data Processed: Trackers and various data types.
Juridical Ground for Processing: Consent.
Data Processing Locale: United States - Privacy Policy -
https://www.facebook.com/about/privacy/
Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
Classification of Personal Information under CCPA: Identifiers and Internet
Activity.
The processing constitutes A Sale and a Sharing, as defined by CCPA, VCDPA,
CPA, CTDPA, and UCPA.
Direct Registration (this Website)
The User registers by filling out the registration form and providing Personal Data
directly to this website.
Personal Data processed: academic background; billing address; budget; city; company
name; country; county; date of birth; email address; fax number; field of activity; first
name; gender; house number; language; last name; number of employees; password;
phone number; physical address; picture; prefix; profession; profile picture; Social
Security number (SSN); state; Tax ID; Trackers; Twitter handle; Usage Data; User ID;
username; various types of Data; VAT Number; website; workplace; ZIP/Postal code.
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; sensorial information; employment-related
information; inferred information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
Auth0 (Auth0, Inc)
Auth0 is a registration and authentication service provided by Auth0, Inc. To simplify the
registration and authentication process, Auth0 can make use of third-party identity
providers and save the information on its platform.
Personal Data processed: email address; first name; last name; password; picture;
Trackers; various types of Data as specified in the privacy policy of the service.
Place of processing:
United States - Privacy Policy - https://auth0.com/privacy
European Union - Privacy Policy - https://auth0.com/privacy
Australia - Privacy Policy - https://auth0.com/privacy
Google OAuth
Google OAuth is a registration and authentication service provided by Google LLC or by
Google Ireland Limited, depending on how the Owner manages the Data processing
and is connected to the Google network.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
Instagram Authentication
Instagram Authentication is a registration and authentication service provided by Meta
Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner
manages the Data processing and is connected to the Instagram social network.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing:
United States - Privacy Policy - https://help.instagram.com/519522125107875
Ireland - Privacy Policy - https://help.instagram.com/519522125107875
Linkedin OAuth (LinkedIn Corporation)
Linkedin Oauth is a registration and authentication service provided by Linkedin
Corporation and is connected to the Linkedin social network.
Personal Data processed: Trackers; Usage Data; various types of Data as specified in
the privacy policy of the service.
Place of processing: United States - Privacy Policy -
https://www.linkedin.com/legal/privacy-policy
Log In with PayPal (PayPal Inc.)
Log In with PayPal is a registration and authentication service provided by PayPal Inc.
and is connected to the PayPal network.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing: See the PayPal privacy policy - Privacy Policy -
https://www.paypal.com/webapps/mpp/ua/privacy-full
Pinterest OAuth (Pinterest, Inc.)
Pinterest OAuth is a registration and authentication service provided by Pinterest, Inc.
and is connected to the Pinterest social network.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing: United States - Privacy Policy -
https://policy.pinterest.com/en/privacy-policy
Twitter OAuth (X Corp.)
Twitter Oauth is a registration and authentication service provided by X Corp. and is
connected to the Twitter social network.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing: United States - Privacy Policy - https://twitter.com/en/privacy
YouTube OAuth
YouTube OAuth is a registration and authentication service provided by Google LLC or
by Google Ireland Limited, depending on how the Owner manages the Data processing
and is connected to the YouTube network.
Personal Data processed: various types of Data as specified in the privacy policy of the
service.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
MANAGING CONTACTS AND SENDING MESSAGES
This type of service makes it possible to manage a database of email contacts, phone
contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message
was viewed by the User, as well as when the User interacted with it, such as by clicking
on links included in the message.
Remarkety (Namogoo Inc.)
Mailchimp is an email address management and message-sending service provided by
Intuit Inc.
Personal Data processed: company name; country; Data communicated while using the
service; date of birth; email address; first name; gender; last name; phone number;
physical address; Trackers; Usage Data; username; various types of Data.
Place of processing: United States - Privacy Policy - https://www.remarkety.com/privacy-
policy/
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
BACKUP SAVING AND MANAGEMENT
This type of service allows the Owner to save and manage backups of this website on
external servers managed by the service provider itself. The backups may include the
source code and content and the data the User provides to this website.
Backup on Google Drive
Google Drive is a service to save and manage backups provided by Google LLC or by
Google Ireland Limited, depending on how the Owner manages the Data processing.
Personal Data processed: various types of Data as specified in the service's privacy
policy.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
Category of personal information collected according to the CCPA: identifiers.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
MANAGING DATA COLLECTION AND ONLINE SURVEYS
This type of service allows this website to manage the creation, deployment,
administration, distribution, and analysis of online forms and surveys in order to collect,
save and reuse Data from any responding Users.
The Personal Data collected depend on the information asked and provided by the
Users in the corresponding online form.
These services may be integrated with a wide range of third-party services to enable the
Owner to take subsequent steps with the Data processed - e.g., managing contacts,
sending messages, analytics, advertising, and payment processing.
Klaviyo Forms (Klaviyo Inc.)
Klaviyo Forms is a form builder and data collection platform provided by Klaviyo Inc. To
take advantage of the service provided by Klaviyo, the Owner typically shares
information about (purchasing) Users, such as for example contact details and shopping
histories. Check the indication at “Personal Data processed“ below for an explanation of
the extent of the sharing.
Personal Data processed: city; company name; country; Data communicated while
using the service; date of birth; email address; first name; gender; last name; phone
number; physical address; profession; purchase history; state; Trackers; Usage Data;
username.
Place of processing: United States – Privacy Policy.
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; employment-related information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
REMARKETING AND BEHAVIORAL TARGETING
The Company employs remarketing strategies to engage Users subsequent to their
interaction with our Service. Our third-party partners utilize cookies and non-cookie
technologies to facilitate understanding of User Devices and Service interaction. This
enables Service enhancement in alignment with User interests and allows for the
delivery of advertisements likely to resonate with Users.
Such services empower the Company and its partners to optimize and customize
advertisements based on prior Website usage. This activity is accomplished by tracking
Usage Data and employing Tracking Tools to collect Information, which is then relayed
to our partners responsible for the remarketing and behavioral targeting activities.
Certain services provide a remarketing option based on email address lists. Along with
any opt-out features provided by the services listed below, Users may learn more about
opting out of interest-based advertising by referring to the dedicated section entitled
"Options for Opting Out of Interest-Based Advertising" within this document.
These third-party vendors collect, store, use, process, and transfer Information about
Your activity on Our Service in accordance with their Privacy Policies and to enable Us
to:
Measure and analyze traffic and browsing activity on Our Service.
Show you advertisements for our products and/or services on third-party
websites or apps.
Measure and analyze the performance of Our advertising campaigns.
Some of these third-party vendors may utilize non-cookie technologies that may not be
impacted by browser settings that block cookies. Your browser may not permit You to
block such technologies. For more information, refer to the Privacy Policy of each
vendor listed below.
The above excludes text messaging originator opt-in data and consent; this Information
will not be shared with third parties.
Google Ads Remarketing (Google LLC or Google Ireland Limited)
Google Ads Remarketing, provided by either Google LLC or Google Ireland Limited,
connects the activity of this Website with the Google Ads advertising network and the
DoubleClick Cookie.
For details on Google's Data usage, refer to Google's partner policy. Users can opt out
of Google's use of Trackers for Personalized ads by accessing Google's Ads Settings.
You can opt out of Google Analytics for Display Advertising and customize the Google
Display Network ads by visiting the Google Ads Settings page:
http://www.google.com/settings/ads
Google also recommends installing the Google Analytics Opt-out Browser Add-on -
https://tools.google.com/dlpage/gaoptout - for your web browser. Google Analytics Opt-
out Browser Add-on allows visitors to prevent their data from being collected and used
by Google Analytics.
For more information on the privacy practices of Google, please visit the Google Privacy
& Terms web page: https://policies.google.com/privacy
Nature of Personal Data Processed: Tracker and Usage Data.
Legal Basis for Processing: Consent.
Data Processing Locale:
United States - Privacy Policy - https://policies.google.com/privacy - Opt Out -
https://adssettings.google.com/
Ireland - Privacy Policy - https://policies.google.com/privacy - Opt-Out -
https://adssettings.google.com/
Legal Mechanism for Data Transfer: EU Standard Data Protection Clauses.
Classification of Personal Information under CCPA: Internet Activity.
This Processing Constitutes: A Sale, a Sharing, and Targeted Advertising as
defined by CCPA, VCDPA, CPA, CTDPA, and UCPA.
Klaviyo segmentation and social advertising (Klaviyo Inc.)
Klaviyo segmentation and social advertising is a remarketing and behavioral targeting
service provided by Klaviyo Inc. Klaviyo segmentation and social advertising makes use
of tracking technologies to monitor User behavior. This Data is then used to personalize
the User's experience and to provide targeted advertising. Klaviyo segmentation and
social advertising may also connect the collected Data with other networks, including
advertising networks, and enable these parties to track and target the User. The Owner,
unless otherwise specified in this document, has no direct relationship with the third
parties that Klaviyo segmentation and social advertising may be including. To take
advantage of the service provided by Klaviyo, the Owner typically shares information
about (purchasing) Users, such as for example contact details and shopping histories.
Check the indication at “Personal Data processed“ below for an explanation of the
extent of the sharing.
Personal Data processed: device information; email address; purchase history;
Trackers; Usage Data.
Place of processing: United States - Privacy Policy/Opt out -
https://www.klaviyo.com/legal/privacy/privacy-notice
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
META CUSTOM AUDIENCE (META PLATFORMS, INC.)
Meta Custom Audience, a behavioral targeting, and remarketing service rendered by
Meta Platforms, Inc., intertwines this Website's activity with the Meta Audience Network.
Please refer to this opt-out page to exclude yourself from Meta's utilization of Trackers
for Personalized advertisements.
Data Categories Processed: Email Address and Trackers.
Grounds for Data Processing: Consent.
Processing Locale: United States – Privacy Policy – Opt-out.
Mechanism for Data Transfer: EU Standard Data Protection Clauses.
CCPA-Compliant Personal Information Classification: Identifiers and Internet
Information.
Processing Connotes: A Sale, a Sharing, and Targeted Advertising as
characterized by CCPA, VCDPA, CPA, CTDPA, and UCPA.
FACEBOOK REMARKETING (META PLATFORMS, INC.)
Facebook Remarketing, a remarketing and behavioral targeting service extended by
Meta Platforms, Inc., associates this Website's activity with the Meta Audience Network.
Data Categories Processed: Tracker and Usage Data.
Access this page to garner knowledge on Facebook's interest-based advertising:
https://www.facebook.com/help/516147308587266.
Instructions to opt-out of Facebook's interest-based ads are available here:
https://www.facebook.com/help/568137493302217.
Facebook adheres to the Self-Regulatory Principles for Online Behavioral Advertising
orchestrated by the Digital Advertising Alliance. Opting out from Facebook and other
participating entities can be executed through the Digital Advertising Alliance in the USA
(http://www.aboutads.info/choices/), the Digital Advertising Alliance of Canada in
Canada (http://youradchoices.ca/), the European Interactive Digital Advertising Alliance
in Europe (http://www.youronlinechoices.eu/), or by utilizing your mobile device settings.
For an in-depth understanding of Facebook's privacy practices, refer to Facebook's
Data Policy: https://www.facebook.com/privacy/explanation.
Grounds for Data Processing: Consent.
Processing Locale: United States – Privacy Policy – Opt Out.
Mechanism for Data Transfer: EU Standard Data Protection Clauses.
CCPA-Compliant Personal Information Classification: Internet Information.
Processing Connotes: A Sale, a Sharing, and Targeted Advertising as
characterized by CCPA, VCDPA, CPA, CTDPA, and UCPA.
E-COMMERCE SERVICES
The Owner employs the following services to facilitate the sale of goods, service
provision, or online content monetization. These enable payment processing,
subscription model setup, order tracking, and delivery management.
CHARGEBEE (CHARGEBEE INC.)
Chargebee, a subscription management tool provided by Chargebee Inc., aids the
Owner in managing subscriptions, invoicing, pricing models, and subscription and
revenue analytics.
Data Categories Processed: Email Address, First Name, Invoicing Information,
Last Name, Phone Number, and User Subscriptions.
Grounds for Data Processing: Contract.
Processing Locale: United States - Privacy Policy -
https://www.chargebee.com/privacy
Mechanism for Data Transfer: EU Standard Data Protection Clauses.
CCPA-Compliant Personal Information Classification: Identifiers and Commercial
Information.
TAG MANAGEMENT SERVICES
The Owner utilizes the services listed below to centralize the management of the tags or
scripts required on this Website. This may result in User Data flowing through these
services and potentially being retained.
SEGMENT (TWILIO, INC.)
Segment, a service rendered by Twilio, Inc., oversees tag management.
Data Categories Processed: Trackers and Usage Data.
Grounds for Data Processing: Consent.
Processing Locale: United States - Privacy Policy - https://www.twilio.com/en-
us/legal/privacy
Mechanism for Data Transfer: No Data Transfer.
Data Retention Duration: Until the intended purpose is fulfilled.
CCPA-Compliant Personal Information Classification: Internet Information.
Processing Connotes: A Sale as defined by the CCPA, VCDPA, CPA, CTDPA,
and UCPA.
Google Tag Manager
Google Tag Manager is a tag management service provided by Google LLC or by
Google Ireland Limited, depending on how the Owner manages the Data processing.
Personal Data processed: Trackers; Usage Data.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
Category of personal information collected according to the CCPA: internet information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
RUDDERSTACK (SELF-HOSTED) (THIS WEBSITE)
RudderStack (self-hosted) is a tag management service employed by this Website.
Data Categories Processed: Trackers and Usage Data.
Processing Locale: United States - Privacy Policy -
https://www.rudderstack.com/privacy-policy/
Grounds for Data Processing: Consent.
Mechanism for Data Transfer: No Data Transfer.
CCPA-Compliant Personal Information Classification: Internet Information.
TRAFFIC OPTIMIZATION AND DISTRIBUTION SERVICES
These services enable this Website to distribute its content using servers across
different countries and optimize performance. The Personal Data processed depends
on the characteristics and the manner in which these services are implemented. Their
function is to filter communications between this Website and the User's browser. Given
the widespread distribution of this system, it is difficult to ascertain the locations to
which the contents that may contain the User's Personal Information are transferred.
Cloudflare (Cloudflare, Inc.)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this website,
i.e., communication between this website and the User's browser, while also allowing
analytical data from this website to be collected.
Personal Data processed: Trackers; various types of Data as specified in the privacy
policy of the service.
Place of processing: United States - Privacy Policy -
https://www.cloudflare.com/privacypolicy/
Category of personal information collected according to the CCPA: identifiers; internet
information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
AKAMAI CONTENT DELIVERY NETWORK (AKAMAI TECHNOLOGIES, INC.)
Akamai Technologies, Inc. provides a hosting service known as Akamai.
Data Categories Processed: Trackers and Usage Data.
Grounds for Data Processing: Performance of a Contract.
Processing Locale: United States - Privacy Policy -
https://www.akamai.com/legal/privacy-statement
Mechanism for Data Transfer: EU Standard Data Protection Clauses.
Data Retention Duration: Until the intended purpose is fulfilled.
CCPA-Compliant Personal Information Classification: Internet Information.
BUNNY CDN (BUNNYWAY D.O.O.)
BunnyWay d.o.o. provides a traffic optimization and distribution service known as Bunny
CDN.
Data Categories Processed: Usage Data.
Grounds for Data Processing: Performance of a Contract.
Processing Locale: Slovenia - Privacy Policy - https://bunny.com/privacy
CCPA-Compliant Personal Information Classification: Internet Information.
CLOUDNS (CLOUD DNS LTD)
ClouDNS is a managed domain name system (DNS) service rendered by Cloud DNS
Ltd. ClouDNS oversees DNS infrastructure to ensure rapid and secure traffic delivery.
Data Categories Processed: Usage Data.
Processing Locale: Bulgaria - Privacy Policy - https://www.cloudns.net/privacy-
policy/
Mechanism for Data Transfer: No Data Transfer.
CCPA-Compliant Personal Information Classification: Internet Information.
LOCATION-BASED INTERACTIONS
Geolocation (this website)
This website may collect, use, and share User location Data in order to provide location-
based services.
Most browsers and devices provide tools to opt-out of this feature by default. If explicit
authorization has been provided, the User’s location data may be tracked by this
website.
Personal Data processed: coarse location, geographic position, precise location.
SPAM PROTECTION
This type of service analyzes the traffic of this website, potentially containing Users'
Personal Data, with the purpose of filtering it from parts of traffic, messages, and
content that are recognized as SPAM.
Google reCAPTCHA
Google reCAPTCHA is a SPAM protection service provided by Google LLC or by
Google Ireland Limited, depending on how the Owner manages the Data processing.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.
Personal Data processed: answers to questions; clicks; keypress events; motion sensor
events; mouse movements; scroll position; touch events; Trackers; Usage Data.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
Category of personal information collected according to the CCPA: internet information;
inferred information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
ENHANCEMENT, OPTIMIZATION, AND DIVERSE FUNCTIONALITIES
We collaborate with select third-party Service Providers to optimize our Service and
enhance user experience.
Mouseflow
We use Mouseflow, a service by ApS, to monitor and understand user behavior on our
website. This tool offers session replays and heatmap analytics to track interactions like
clicks, scrolls, and browsing habits. It may gather Information from your device.
For Mouseflow's data handling policy, refer to: https://mouseflow.com/privacy/
FreshDesk
We use FreshDesk, a customer support software Freshworks, Inc. developed to
streamline our customer service. The software may collect Information from your
device.
For FreshDesk's privacy practices, refer to: https://www.freshworks.com/privacy/
Google Places
We utilize Google Places to garner Information about locations via HTTP requests.
Google Places may collect Information from you and your device for security purposes.
For Google's data handling policy, kindly visit:
https://www.google.com/intl/en/policies/privacy/
Richpanel
Their data management policy can be accessed at: https://richpanel.com/privacy-policy
ShipStation
Their data handling policy is available at: https://www.shipstation.com/privacy-policy/
APC Postal Logistics
Their privacy policy is provided at: https://www.apc-pli.com/privacy-policy.html
FedEx
Their privacy policy can be accessed at: https://www.fedex.com/en-us/trust-center.html
UPS
Their data management policy can be accessed at:
https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/privacy-
notice.page
USPS
Their data handling policy is available at: https://about.usps.com/who/legal/privacy-
policy/
Twitter
Their privacy practices can be accessed at: https://twitter.com/en/privacy
Amazon
Their data management policy is available at:
https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRN
J
Instagram
Their privacy practices can be accessed at: https://www.instagram.com/legal/privacy/
Pinterest
Their privacy policy can be accessed at: https://www.privacypolicies.com/our-privacy-
policy/
Snapchat
Their privacy policy can be accessed at: https://www.snap.com/privacy/privacy-policy
TikTok
Their data handling policy is available at: https://www.tiktok.com/legal/privacy-policy-row
Walmart
Their privacy practices can be accessed at: https://corporate.walmart.com/privacy-
security
eBay
Their data management policy is available at:
https://pages.ebay.com/help/policies/privacy-policy.html
LiveAgent
Their privacy policy can be accessed at: https://www.liveagent.com/privacy-policy/
Shopify
Their data handling policy is available at: https://www.shopify.com/legal/privacy
Gorgias
Their privacy practices can be accessed at: https://www.gorgias.com/privacy/privacy
Judge.me
Their data management policy is available at: https://judge.me/privacy
Yahoo
Their privacy policy can be accessed at:
https://legal.yahoo.com/us/en/yahoo/privacy/index.html
DEVICE PERMISSIONS FOR PERSONAL DATA ACCESS
This website requests certain permissions from Users that allow it to access the User's
device Data as described below.
Device permissions for Personal Data access (this website)
This website requests certain permissions from Users that allow it to access the User's
device Data as summarized here and described within this document.
Personal Data processed: Apple's speech recognition servers permission; Approximate
location permission (continuous); Approximate location permission (non-continuous);
Biometric Data access permission; Bluetooth sharing permission; Calendar permission;
Call permission; Camera permission; Camera permission, without saving or recording;
Contacts permission; Google Assistant permission; Google Home permission; Health
Data read permission; Health Data update permission; HomeKit permission; Media
Library permission (Music); Microphone permission; Microphone permission, without
recording; Motion sensors permission; NFC Reader permission; Phone permission;
Photo Library permission; Precise location permission (continuous); Precise location
permission (non-continuous); Reminders permission; Sensors permission; Siri
permission; SMS permission; Social media accounts permission; Storage permission;
TV Provider permission; Write-only Photo Library permission.
DISPLAYING CONTENT FROM EXTERNAL PLATFORMS
This type of service allows you to view content hosted on external platforms directly
from the pages of this website and interact with them.
This type of service might still collect web traffic data for the pages where the service is
installed, even when Users do not use it.
Google Maps widget
Google Maps is a maps visualization service provided by Google LLC or by Google
Ireland Limited, depending on how the Owner manages the Data processing, that
allows this website to incorporate content of this kind on its pages.
Personal Data processed: Trackers; Usage Data.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
YouTube IFrame Player
YouTube IFrame Player is a video content visualization service provided by Google LLC
or by Google Ireland Limited, depending on how the Owner manages the Data
processing, that allows this website to incorporate content of this kind on its pages.
Through this Service, this website may collect Data directly or indirectly on or from
Users’ devices, including by making use of trackers. Users may restrict such access to
their Data via the security settings page provided by Google. Users may ask the Owner
for further information about these privacy settings at any time through the contact
details provided in this document. Data collected through the Service may also be used
to help third parties deliver interest-based advertising. Users can opt out of third-party
interest-based advertising through their device settings or by visiting the Network
Advertising Initiative opt-out page.
Personal Data processed: Data communicated in order to use the Service; device
information; password; Trackers; Usage Data; User ID; username.
Place of processing:
United States - Privacy Policy - http://www.google.com/policies/privacy - Opt out -
https://security.google.com/settings/security/permissions
Ireland - Privacy Policy - http://www.google.com/policies/privacy - Opt out -
https://security.google.com/settings/security/permissions
YouTube Data API
YouTube Data API is a video content visualization service provided by Google LLC or
by Google Ireland Limited, depending on how the Owner manages the Data processing,
that allows this website to incorporate functions normally executed on YouTube so that
Users can watch, find, and manage YouTube content directly on this website. Through
this Service, this website may collect Data directly or indirectly on or from Users’
devices, including by making use of Trackers. Users may restrict such access to their
Data via the security settings page provided by Google. Users may ask the Owner for
further information about these privacy settings at any time through the contact details
provided in this document. Data collected through the Service may also be used to help
third parties deliver interest-based advertising. Users can opt out of third-party interest-
based advertising through their device settings or by visiting the Network Advertising
Initiative opt-out page.
Personal Data processed: Data communicated in order to use the Service; Data
communicated while using the service; device information; password; Trackers; Usage
Data; User ID; username.
Place of processing:
United States - Privacy Policy - http://www.google.com/policies/privacy - Opt out -
https://security.google.com/settings/security/permissions
Ireland - Privacy Policy - http://www.google.com/policies/privacy - Opt out -
https://security.google.com/settings/security/permissions
YouTube video widget (Google LLC)
YouTube is a video content visualization service provided by Google LLC or by Google
Ireland Limited, depending on how the Owner manages the Data processing that allows
this website to incorporate content of this kind on its pages.
Personal Data processed: Trackers; Usage Data.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
Category of personal information collected according to the CCPA: internet information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
Google Fonts
Google Fonts is a typeface visualization service provided by Google LLC or by Google
Ireland Limited, depending on how the Owner manages the Data processing, that
allows this website to incorporate content of this kind on its pages.
Personal Data processed: Trackers; Usage Data.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy
Ireland - Privacy Policy - https://policies.google.com/privacy
Category of personal information collected according to the CCPA: internet information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
Font Awesome (Fonticons, Inc. )
Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows
this website to incorporate content of this kind on its pages.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States - Privacy Policy - https://fontawesome.com/privacy
Category of personal information collected according to the CCPA: internet information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
ANALYTICAL ASSESSMENTS
We may enlist the expertise of third-party service providers to monitor and scrutinize the
use of our Service.
Cloudflare Web Analytics (Cloudflare, Inc.)
Cloudflare Web Analytics is an anonymized analytics service provided by Cloudflare,
Inc. that gives the Owner insight into the use of this website by Users without needing to
identify them. Further information may be found here and within the service's privacy
policy.
Personal Data processed: device information; language; Usage Data.
Place of processing: United States - Privacy Policy -
https://www.cloudflare.com/privacypolicy/
Category of personal information collected according to the CCPA: internet information;
inferred information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
YouTube Analytics and Reporting API
YouTube Analytics and Reporting API is a video content analytics service provided by
Google LLC or by Google Ireland Limited, depending on how the Owner manages the
Data processing. Through this Service, this website may collect Data directly or
indirectly on or from Users’ devices, including by making use of trackers. Users may
restrict such access to their Data via the security settings page provided by Google.
Users may ask the Owner for further information about these privacy settings at any
time through the contact details provided in this document. Data collected through the
Service may also be used to help third parties deliver interest-based advertising. Users
can opt out of third-party interest-based advertising through their device settings or by
visiting the Network Advertising Initiative opt-out page.
Personal Data processed: Data communicated in order to use the Service; Data
communicated while using the service; device information; password; Trackers; Usage
Data; User ID; username.
Place of processing:
United States Privacy Policy - http://www.google.com/policies/privacy - Opt out -
https://security.google.com/settings/security/permissions
Ireland Privacy Policy - http://www.google.com/policies/privacy - Opt out -
https://security.google.com/settings/security/permissions
Category of personal information collected according to the CCPA: identifiers; internet
information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
Google Analytics
Google Analytics, a web analytics service proffered by Google, tracks and reports
website traffic. Google employs the data collated to trail and examine our Service
usage. Such data may be amalgamated with other services rendered by Google.
Google may utilize the gathered data to contextualize and Personalize the
advertisements of its proprietary advertising network.
To abstain from making your activity on the Service accessible to Google Analytics, you
may install the Google Analytics opt-out browser add-on. This add-on prohibits Google
Analytics JavaScript (ga.js, analytics.js, and dc.js) from disseminating visit activity
Information to Google Analytics.
For comprehensive details on Google's privacy practices, we invite you to visit the
Google Privacy & Terms web page: https://policies.google.com/privacy
Google Analytics 4
Google Analytics 4 is a web analysis service provided by Google LLC or by Google
Ireland Limited, depending on how the Owner manages the Data processing,
(“Google”). Google utilizes the Data collected to track and examine the use of this
website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own
advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded
before Data is logged in any data center or server. Users can learn more by consulting
Google’s official documentation.
Personal Data processed: browser information; city; device information; latitude (of city);
longitude (of city); number of Users; session statistics; Trackers; Usage Data.
Place of processing:
United States - Privacy Policy - https://policies.google.com/privacy - Opt-Out -
https://tools.google.com/dlpage/gaoptout?hl=en
Ireland - Privacy Policy - https://policies.google.com/privacy - Opt-Out -
https://tools.google.com/dlpage/gaoptout?hl=en
Category of personal information collected according to the CCPA: identifiers; internet
information; geolocation data.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA and UCPA
Firebase
Firebase is an analytical service provided by Google Inc. You may opt out of specific
Firebase features through your mobile device settings, such as your device advertising
settings, or by adhering to the directives provided by Google in their Privacy Policy:
https://policies.google.com/privacy
We strongly encourage you to peruse Google's safeguarding data policy:
https://support.google.com/analytics/answer/6004245
For a detailed understanding of the type of Information Firebase collates, we suggest
visiting the How Google uses data when you use our partners' sites or apps webpage:
https://policies.google.com/technologies/partner-sites
Matomo
Matomo is a web analytics service. Their Privacy Policy can be accessed at:
https://matomo.org/privacy-policy
Clicky
Clicky is a web analytics service. For more information about Clicky's privacy practices,
please refer to their Privacy Policy: https://clicky.com/terms
Statcounter
Statcounter is a tool for web traffic analysis. For more information about Statcounter's
privacy practices, please refer to their Privacy Policy:
https://statcounter.com/about/legal/
Flurry Analytics
Flurry Analytics is a service provided by Yahoo! Inc. You can opt-out from the Flurry
Analytics service to preclude Flurry Analytics from utilizing and sharing your Information
by visiting Flurry's Opt-out page: https://developer.yahoo.com/flurry/end-user-opt-out/
For further details about Yahoo!'s privacy practices and policies, we invite you to visit
their Privacy Policy page: https://policies.yahoo.com/xa/en/yahoo/privacy/index.htm
Mixpanel
Mixpanel is a service provided by Mixpanel Inc. To prevent Mixpanel from using your
data for analytical purposes, you may choose to opt-out by visiting:
https://mixpanel.com/optout/
For a detailed understanding of the type of Information Mixpanel collects, please visit
the Mixpanel Terms of Use page: https://mixpanel.com/terms/
Unity Analytics
Unity Analytics, a service provided by Unity Technologies, collects, stores, processes,
and transfers Personal data to provide, operate, and enhance Unity Technologies'
services, including Personalized advertising services. To learn more about the type of
data Unity Technologies collects, we invite you to visit their Privacy Policy
page: https://unity3d.com/legal/privacy-policy.
To opt out of Unity Analytics, please visit: https://unity3d.com/legal/privacy-policy
You may opt out of all Personalized advertising by enabling privacy features on your
mobile devices, such as Limit Ad Tracking (iOS) and Opt-Out of Ads Personalization
(Android). Please refer to your mobile device's Help system for more Information.
Microsoft
Their Privacy Policy can be found at: https://privacy.microsoft.com/en-
us/privacystatement
Linkedin
Their Privacy Policy is accessible at: https://www.linkedin.com/legal/privacy-policy
Facebook
Their Privacy Policy can be found at: https://www.facebook.com/privacy/explanation
USER DATABASE MANAGEMENT
This service facilitates the creation of user profiles by the Owner, commencing with the
User's provision of an email address, Personal name, or other pertinent Information to
this Website. User interactions are subject to analytical observation. The Personal Data
thus procured may be amalgamated with publicly available User Information (including
social media profiles) to fabricate private profiles that enhance this Website. Select
services may enable the timely dissemination of messages to the User, such as emails
triggered by specific actions on this Website.
Freshsales (Freshworks, Inc.)
Freshworks, Inc. provides a proprietary user database management service known as
Freshsales.
Categories of Personal Data Processed: Varied as per the service's privacy
policy.
Legal Justification for Processing: Contractual Performance.
Jurisdiction of Processing: United States - Privacy Policy -
https://www.freshworks.com/privacy/
Legal Ground for Data Transfer: Standard Data Protection Clauses.
Classification of Personal Data Gathered in Accordance with CCPA: Identifiers.
This Processing Constitutes: A Sale per CCPA, VCDPA, CPA, CTDPA, and
UCPA.
Bing Ads Remarketing
Bing Ads remarketing service is rendered by Microsoft Inc.
Opting out of interest-based Bing Ads can be accomplished by adhering to their
instructions: https://advertise.bingads.microsoft.com/en-
us/resources/policies/Personalized-ads
Further understanding of Microsoft's privacy practices and policies can be acquired by
visiting their Privacy Policy page: https://privacy.microsoft.com/en-us/PrivacyStatement
Klaviyo CRM (Klaviyo Inc.)
Klaviyo CRM is a User database management service provided by Klaviyo Inc. Klaviyo
CRM can also be used as a medium for communications, either through email or
through messages within this website. To take advantage of the service provided by
Klaviyo, the Owner typically shares information about (purchasing) Users, such as for
example contact details and shopping histories. Check the indication at “Personal Data
processed“ below for an explanation of the extent of the sharing.
Personal Data processed: city; company name; country; date of birth; email address;
first name; gender; last name; phone number; physical address; profession; purchase
history; state; Trackers; Usage Data; username; various types of Data.
Place of processing: United States – Privacy Policy.
Category of personal information collected according to the CCPA: identifiers;
commercial information; internet information; employment-related information.
This processing constitutes:
a sale according to the CCPA, VCDPA, CPA, CTDPA, and UCPA
a sharing according to the CCPA
targeted advertising according to the VCDPA, CPA, CTDPA, and UCPA
Twitter
Twitter's remarketing service is facilitated by Twitter Inc.
Opting out of interest-based ads from Twitter can be accomplished by adhering to their
instructions: https://support.twitter.com/articles/20170405
Further understanding of Twitter's privacy practices and policies can be acquired by
visiting their Privacy Policy page: https://twitter.com/privacy
Pinterest
Pinterest's remarketing services are facilitated by Pinterest Inc.
Opting out of interest-based ads from Pinterest can be accomplished by enabling the
"Do Not Track" functionality of your web browser or by adhering to Pinterest's
instructions: http://help.pinterest.com/en/articles/Personalization-and-data
Further understanding of Pinterest's privacy practices and policies can be acquired by
visiting their Privacy Policy page: https://about.pinterest.com/en/privacy-policy
AdRoll
AdRoll's remarketing service is facilitated by NextRoll, Inc.
Opting out of AdRoll remarketing can be accomplished by visiting the AdRoll Advertising
Preferences webpage: http://info.evidon.com/pub_info/573?v=1&nt=1&nw=false or the
Opt-Out of Personalized Advertising webpage: https://help.adroll.com/hc/en-
us/articles/216599538-Opting-Out-of-Personalized-Advertising
If you are a resident of California, please peruse the "Information For California
Residents Only" section in the Privacy Policy of NextRoll, Inc.:
https://www.nextroll.com/privacy#service-13
Further understanding of AdRoll's privacy practices can be acquired by visiting the
NextRoll, Inc. Privacy Policy webpage: https://www.nextroll.com/privacy
Perfect Audience
Perfect Audience's remarketing service is facilitated by NowSpots Inc.
Opting out of Perfect Audience remarketing can be accomplished by visiting these
pages: Platform Opt-out (http://pixel.prfct.co/coo) and Partner Opt-out
(http://ib.adnxs.com/optout).
Further understanding of Perfect Audience's privacy practices can be acquired by
visiting the Perfect Audience Privacy Policy & Opt-out webpage:
https://www.perfectaudience.com/privacy/
AppNexus
AppNexus's remarketing service is facilitated by AppNexus Inc.
Opting out of AppNexus remarketing can be accomplished by visiting the
Privacy & the AppNexus Platform webpage: https://www.appnexus.com/platform-
privacy-policy
Further understanding of AppNexus's privacy practices can be acquired by visiting the
AppNexus Platform Privacy Policy webpage: https://www.appnexus.com/platform-
privacy-policy
Information on Opting Out of Interest-Based Advertising
In addition to the opt-out mechanisms provided by the aforementioned services, Users
can explore general opt-out procedures for interest-based advertising in the dedicated
section of the Cookie Policy.
User Rights
Subject to legal limitations, Users have certain rights in relation to their Data processed
by the Owner:
1. Consent Withdrawal: Users may revoke the consent previously given for
processing their Personal Data.
2. Processing Objection: Users may object to the processing of their Data if such
processing is predicated on a legal basis other than consent.
3. Data Access: Users may ascertain if the Owner is processing their Data, request
specifics of such processing, and obtain a copy of the Data undergoing
processing.
4. Verification and Rectification: Users may verify the accuracy of their Data and
request rectification of inaccuracies or updates.
5. Processing Restriction: Users may restrict the processing of their Data. In this
case, the Owner will refrain from processing their Data beyond storage.
6. Erasure: Users may demand the deletion of their Data by the Owner.
7. Data Transfer: Users may receive their Data in a commonly utilized, machine-
readable format and, if technically viable, have it transferred to another controller
without hindrance.
8. Lodge a Complaint: Users may lodge a complaint with their competent data
protection authority.
FACEBOOK PAGE
DATA CONTROLLER FOR THE FACEBOOK PAGE
The Company, as the operator of the Facebook Fan Page
https://www.facebook.com/ZNaturalFoods, along with the social network Facebook, acts
as Joint Controllers of Your Personal Data collected during the use of the Service.
The Company has entered into certain agreements with Facebook that establish the
terms of use for the Facebook Fan Page. These agreements largely align with the
Facebook Terms of Service: https://www.facebook.com/terms.php
Please refer to the Facebook Privacy Policy https://www.facebook.com/policy.php for
additional details on Facebook's Personal data management practices. Alternatively,
you may contact Facebook online or via mail: Facebook, Inc. ATTN, Privacy Operations,
1601 Willow Road, Menlo Park, CA 94025, United States.
FACEBOOK INSIGHTS
In accordance with the GDPR, we utilize the Facebook Insights function in connection
with the operation of the Facebook Fan Page to procure anonymized statistical data
about Our users.
To this end, Facebook deploys a Cookie on the user's device when visiting our
Facebook Page. Each Cookie comprises a unique identifier code and remains operative
for two years unless it is deleted before the conclusion of this period.
Facebook receives, records, and processes the Information stored in the Cookie,
particularly when the user visits the Facebook services, services provided by other
members of the Facebook Fan Page, and services offered by other companies using
Facebook services.
For more information on the privacy practices of Facebook, please visit the Facebook
Privacy Policy here: https://www.facebook.com/privacy/explanation
PRESONAL DATA COLLECTED THROUGH SOURCES OTHER THAN THE USER
The Owner of this website may have legitimately collected Personal Data relating to
Users without their knowledge by reusing or sourcing them from third parties on the
grounds mentioned in the section specifying the legal basis of processing. Where the
Owner has collected Personal Data in such a manner, Users may find specific
information regarding the source within the relevant sections of this document or by
contacting the Owner.
RIGHT TO OPT-OUT OF SALE OF PERSONAL INFORMATION
Opt-Out Right: You have the right to opt-out of the sale of your Personal
Information.
Opt-Out Procedure: Procedures for opting out are detailed for Website and
Mobile Devices, including specific platforms and settings.
Browser-Specific Opt-Out: Opt-out is browser-specific and may require re-opting
if browsers or cookies are altered.
LEGAL INFORMATION AND COMPLIANCE
Compliance: This privacy statement complies with multiple legislation provisions,
including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection
Regulation).
Jurisdiction: Country pertains to Florida, United States.
Exclusivity: This privacy policy exclusively applies to this Website unless stated
otherwise.
CONCLUSION AND CONTACT INFORMATION
This Privacy Policy is crafted in alignment with our commitment to transparency,
security, and compliance with applicable laws and regulations. Throughout our site, we
provide email links that allow you to contact us directly with any inquiries or comments
you may have. We endeavor to respond promptly to every message received. The
Information you dispatch to us is used to respond directly to your questions and
comments. We also retain your email correspondence on file to better serve you should
you have additional questions in the future. With your explicit consent, your Personal
Information is shared solely with third parties (including manufacturers).
For inquiries concerning this Privacy Policy, you may contact us:
By email: orders@papaboost.com
By visiting this page on our website: https://www.papaboost.com/pages/contact-
support
By phone number: 1-888-123-4567
When you use our Site, Service, Service Providers, place an order, or contact us, you
are acknowledging that you have read, understand, and agree to be bound by all of our
Policies referenced and/or published on this site, collectively referred to as TOU,
which includes our Legal Notice Disclaimer, Privacy Policy, Content Policy, Information
& Security Policy, GDPR Statement, California Prop 65 Notice, Accessibility
Statement, Bot Crawler Access Terms of Use Policy, Advertising Analytics
Policy, Product Reviews Policy, Mobile Terms of Service, Shipping Policy, Return
Policy, Cookie Policy, Data Collection opt-out, DMCA Compliance Statement, and Terms
of Use Policy. Any disagreements must be settled with binding arbitration.
