As used in this policy, the terms "using" and "processing" information include using cookies on a computer, subjecting the information to statistical or other analysis and using or handling information in any way, including, but not limited to, collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our company or among our affiliates within the United States or internationally.
Information Collection and use
Our primary goals in collecting information are to provide and improve our Site, services, features and content, to administer your use of the Site and to enable users to enjoy and easily navigate the Site (collectively, the "Service").
Personally Identifiable Information
When you register with us through the Site, when you join our mailing list or when you make a purchase via the Site, we will ask you for personally identifiable information. This refers to information about you that can be used to contact or identify you ("Personal Information"). Personal Information includes, but is not limited to, your name, phone number, email address, and postal address. If you choose to make a purchase via the Site, our third party payment processor service providers may also collect billing information such as your credit card number or billing address. We use the Personal Information you provide mainly to provide the Service, process your transactions and administer your inquiries.
In order to access additional functionality of the Site, you may be required to create an account for your use of the Service ("Account"). You may create an Account directly via the Site or by logging into your account with certain third party social networking sites ("SNS") (including, but not limited to, Facebook and Twitter) via our Service. If you decide to create an Account by logging into an SNS via our Service, we will obtain the Personal Information you have provided to the SNS (such as your "real" name, profile picture, email address and other information you make publicly available via the applicable SNS) from the account you have with such SNS and use that information to create your Account. The information we obtain may depend on the privacy settings you have with the SNS. When you create an Account, you will become a "Member" of the Service.
We also collect the other information that you provide as part of account registration and your use of the Service (e.g., without limitation, zip code (on its own) and individual preferences) ("Non-Identifying Information").
We use your Personal Information (in some cases, in conjunction with your Non-Identifying Information) mainly to provide the Service, complete your transactions, and administer your inquiries.
Certain Non-Identifying Information would be considered a part of your Personal Information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. But the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other non-identifying information. We may combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other Le Mini Macaron Users (defined below) to attempt to provide you with a better experience, to improve the quality and value of the Service and to analyze and understand how our Site and Service are used. We may also use the combined information without aggregating it to serve you specifically, for instance to deliver a product to you according to your preferences or restrictions.
We also use your Personal Information (like your email or postal address) to contact you with marketing and promotional materials and other information that may be of interest to you (some of which may be sent by a third party service provider). If you decide at any time that you no longer wish to receive such communications from us, please follow the unsubscribe instructions provided in any of the communications or if you do not want us to share your Personal Information with these third party service providers, contact us at firstname.lastname@example.org with "Privacy" as the subject line of the email. (See "Changing or Deleting Your Information," below.)
When you visit the Site, our servers automatically record information that your browser sends whenever you visit a website ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type or the webpage you were visiting before you came to our Site, pages of our Site that you visit, the time spent on those pages, information you search for on our Site, access times and dates, and other statistics. We use this information to monitor and analyze use of the Site and the Service and for the Site's technical administration, to increase our Site's functionality and user-friendliness, and to better tailor it to our visitors' needs. We also use this information to verify that visitors to the Site meet the criteria required to process their requests.
Cookies and Pixel Tags
We may also use "pixel tags," "web beacons," "clear GIFs" or similar means (individually or collectively "Pixel Tags") in connection with our Service to collect usage, demographic and geographical location data. A Pixel Tag is an electronic image, often a single pixel that is ordinarily not visible to users and may be associated with cookies on a user's hard drive. Pixel Tags allow us to count users who have visited certain pages of the Site, to deliver branded services and to help determine the effectiveness of promotional or advertising campaigns.
Sending Emails Via The Service
As part of the Service, Members may communicate with third parties through use of their Accounts. When a Member selects the option of adding one or more email addresses to an online form, the message they create in the corresponding template will be sent from Le Mini Macaron to those email addresses on their behalf. These email addresses will be used only for the purpose of sending the email communication to the addressee.
Identity theft and the practice currently known as "phishing" are of great concern to Le Mini Macaron. Safeguarding information to help protect you from identity theft is a top priority. We do not and will not, at any time, request your credit card information, your login information, or national identification numbers in a non-secure or unsolicited e-mail or telephone communication. For more information about phishing, visit the Federal Trade Commission's website.
Information Sharing and Disclosure
SNS. The Service gives you the option to share information contained in your Account with certain social networking services (i.e. Twitter and Facebook). Le Mini Macaronwill not share your Account information, which may contain your Personal Information, with such social networking services unless you expressly authorize such disclosure.
Aggregated Information and Non-Identifying Information. We may share aggregated information that does not include Personal Information and we may otherwise disclose Non-Identifying Information and Log Data with third parties for industry analysis, demographic profiling, and to deliver targeted advertising about other products and services. Any aggregated information shared in these contexts will not contain your Personal Information.
Service Providers. We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Site-related services (e.g., without limitation, maintenance services, database management, payment processors, web analytics and improvement of the Site's features) or to assist us in analyzing how our Site and Service are used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Compliance with Laws and Law Enforcement. Le Mini Macaron cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of Le Mini Macaron or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical or legally actionable activity.
Business Transfers. Le Mini Macaronmay sell, transfer or otherwise share some or all of its assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy.
Changing or Deleting Your Information
All Members may review, update, correct or delete the Personal Information in their registration profile by contacting us or by making edits via the "My Account" section of the Site. If you completely delete all such information, then your account may become deactivated. If you would like us to delete your account in our system, please contact us at email@example.com with "Privacy" as the subject line of the email with a request that we delete your Personal Information from our database. We will use commercially reasonable efforts to honor your request. We may retain an archived copy of your records as required by law or for legitimate business purposes.
Le Mini Macaronis very concerned with safeguarding your information, but no method of transmission over the Internet, or method of electronic storage, is 100% secure. When you enter sensitive information (such as credit card number) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). In some cases, we also encrypt sensitive information where it is stored on our systems.
We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored "personal data" (as defined in applicable state statutes on security breach notification) to you via email or conspicuous posting on this Site in the most expedient time possible and without unreasonable delay, insofar as consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
Links To Other Sites
Our Site contains links to other websites. If you choose to visit an advertiser by "clicking on" a banner ad or other type of advertisement, or click on another third party link, you will be directed to that third party's website. The fact that we link to a website or present a banner ad or other type of advertisement is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other websites may follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit.
Our Policy Towards Children
This Site is not directed to persons under 18. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at firstname.lastname@example.org with "Privacy" as the subject line of the email. If we become aware that a child under 13 has provided us with Personal Information, we will delete such information from our files.
The CCPA provides California residents with the following rights:1. Access to information: You have the right to request that we disclose certain information to you about the personal information we collected, used, disclosed, and sold about you in the past 12 months. This includes a request to know any or all of the following: The categories of Personal Information we collected. The categories of sources for the Personal Information we collected. Our business purpose for collecting Personal Information. The categories of third parties with whom we share that Personal Information. The specific Personal Information we collected about you.
2. Data Portability: You have the right to request a copy of personal information we hold about you.
3. Deletion: You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. We may deny a deletion request where retaining the information is necessary for us or our service providers. For example, data may need to be kept to:
- Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between our business and you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity.
- Debug to identify and repair errors that impair existing intended functionality.
- Track consumer complaints or product issues
- Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent.
- To enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us.
- Comply with a legal obligation. - Otherwise use the personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
4. Timing: We will use best efforts to respond to a verified consumer request within 45 days. If we require more time, we will inform you of the reason and extension in writing.
5. Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services. - Suggest that you my receive a different price or rate for goods or services or a different level or quality of goods or services.
Some of our Services, however, may require your personal information. If you choose not to provide your personal information that is necessary to provide any aspect of our Services, you may not be able to use those Services. In addition, as described in the section captioned “Your Choices” in the Privacy Statement, it is possible to change your browser settings to block the automatic collection of certain information.
Submitting a Verified Consumer RequestTo exercise your Right to Know, Data Portability, and Right to Delete, you must provide us with sufficient information to allow us to verify your identity, and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. Once we receive the information you provide to us, we will review it and determine if more information is necessary to verify your identity as required by law, and we may request additional information in order to do so.
To exercise your California privacy rights described above, please submit a verifiable request to us by:
-Visiting our Data Request Form
-Emailing us at email@example.com
The verifiable consumer request must: Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Given the sensitivity of your personal information that we collect and retain, we will need to verify your identity with at least 2 pieces of information, such as Name, Address or Customer Email. Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We may deny your request if we are unable to verify your identity or have reason to believe that the request is fraudulent.
Consumer Request by an Authorized Agent
If any authorized agent submits a consumer request on your behalf, in order to confirm that person or entity’s authority to act on your behalf and verify the authorized agent’s identity, we require an email be sent to privacy firstname.lastname@example.org, along with the below items: To verify your authorization to request on behalf of a California resident, provide one or more of the following:
1) California Secretary of State authorization,
2) written permission from the California resident
3) power of attorney.
To verify your identity, provide evidence of your identity. To verify the identity of the California resident for whom the request is being made, provide the information set forth above for the verification of the consumer request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
Making a verifiable consumer request does not require to create an account with us. However, if you do have an existing login, we will require you to log in to submit a request. We will only use personal information provided in a verifiable consumer request to verify the request’s identity or authority to make the request.
We will respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
For Data Portability requests, we will provide the responsive information in a portable and, to the extent technically feasible, in a readily usable format that allows you to transmit the information to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.