Gluten Free on a Shoestring (“Website”) is governed by the following Privacy Policy.

We respect your privacy and are committed to protecting it. The purpose of this Privacy Policy is to inform you what personally identifiable information we may collect and how it may be used. This Privacy Policy applies to this Website.

INFORMATION WE COLLECT
The Website collects information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”). The Website has collected the following categories of Personal Information from you:

Identifiers:
This category includes your: real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (“IP”) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

The Website does collect information in this category.

Personal Information as Described in California Customer Records Statute (CA Code 1798.80):
This includes your: name, signature, social security number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

The Website does collect information in this category.

Protected Classification Characteristics (under California or federal law).
This includes: Age (over age 40), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental health disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, or genetic information.

The Website does not collect information in this category.

Commercial Information:
This includes records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

The Website does collect information in this category.

Biometric Information:
This includes: an individual’s physiological, biological or behavioral characteristics, including an individual’s DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity.

The Website does not collect information in this category.

Internet or Other Electronic Network Activity Information:
This includes, but is not limited to, browsing history, search history, and information regarding a consumer’s interaction with the Website, application, or advertisement.

The Website does collect information in this category.

Geolocation Data:
This includes your physical location or movements.

The Website does not collect information in this category.

Audio, Electronic, Visual, Thermal, Olfactory, or Other Similar Information:

The Website does not collect information in this category.

Professional or Employment-related information:
This may include your current or past employment history or other information related thereto.

The Website does not collect information in this category.

Education Information:
This is defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act, which includes: records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, schedule, student identification codes, student financial information, or student disciplinary records.

The Website does not collect information in this category.

Inferences Drawn from Personal Information:
This includes inferences drawn from the Personal Information collected by the Website to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

The Website does collect information in this category.

INFORMATION WE DISCLOSE FOR A BUSINESS PURPOSE
From time to time, the Website uses your personal information for business purposes. A “business purpose” is defined as the use of personal information for the business’ or a service provider’s operational purposes, or other notified purposes, provided that the use of personal information shall be reasonably necessary and proportionate to achieve the operational purpose for which the personal information was collected or processed or for another operational purpose that is compatible with the context in which the personal information was collected. The Website has collected the following categories of Personal Information for a business purpose in the past twelve months:

Please refer to the definitions above for each category.

Identifiers: The Website has disclosed information in this category in the past twelve months for a business purpose. We have used the following information when voluntarily entered: name, address, and email address. This information may be used for those making purchases to enroll in the Membership or for subscriptions to newsletters. We have used the following information, which has been automatically collected or obtained through cookies: IP address. This is used to track user behavior.

Personal Information as Described in California Customer Records Statute: The Website has disclosed information in this category in the past twelve months for a business purpose. We have used the following information when voluntarily entered: name.

Protected Classification Characteristics: The Website has not disclosed information in this category in the past twelve months for a business purpose.

Commercial Information: The Website has disclosed information in this category in the past twelve months for a business purpose. We have used the following information when voluntarily entered: purchase information for those enrolled in the Membership.

Biometric Information: The Website has not disclosed information in this category in the past twelve months for a business purpose.

Internet or Other Electronic Network Activity Information: We have used the following information in the past twelve months for a business purposes, which are collected or obtained through cookies: browsing history and information regarding your interaction with the Website. This allows us to improve your user experience.

Geolocation Data: The Website has not disclosed information in this category in the past twelve months for a business purpose.

Audio, Electronic, Visual, Thermal, Olfactory, or Other Similar Information: The Website has not disclosed information in this category in the past twelve months for a business purpose.

Professional or Employment-related information: The Website has not disclosed information in this category in the past twelve months for a business purpose.

Education Information: The Website has not disclosed information in this category in the past twelve months for a business purpose.

Inferences Drawn from Personal Information: The Website has not disclosed information in this category in the past twelve months for a business purpose.

INFORMATION WE SELL
From time to time, the Website may sell your Personal Information. A “sale” is defined as “selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration. The Website has sold the following categories of Personal Information for a business purpose in the past twelve months:

Identifiers: We have not sold any information in this category in the past twelve months.

Personal Information as Described in California Customer Records Statute: We have not sold any information in this category in the past twelve months.

Protected Classification Characteristics: We have not sold any information in this category in the past twelve months.

Commercial Information: We have not sold any information in this category in the past twelve months.

Biometric Information: We have not sold any information in this category in the past twelve months.

Internet or Other Electrnic Network Activity Information: We have sold information in this category in the past twelve months through display ads. More information provided below.

Geolocation Data: We have not sold any information in this category in the past twelve months.

Audio, Electronic, Visual, Thermal, Olfactory, or Other Similar Information: We have not sold any information in this category in the past twelve months.

Professional or Employment-related information: We have not sold any information in this category in the past twelve months.

Education Information: We have not sold any information in this category in the past twelve months.

Inferences Drawn from Personal Information: We have sold information in this category in the past twelve months through display ads. More information is provided below.

HOW WE COLLECT INFORMATION ABOUT YOU

• Information You Voluntarily Submit to the Website: We may collect personal information from you such as your name or email address, as described above. This information is all voluntarily submitted by you at the time the information is collected. For example, you may voluntarily submit information to the Website by leaving a comment, subscribing to a newsletter, or submitting a contact form. In addition, we may ask you to create a user profile, which would allow you to create a username and password. We will store the username, but your password will not be visible in our records.

• Information We Collect from Others: We may receive information about you from other sources. For example, if you use a third-party software through the site, they may transfer information to us for fulfillment.

• Automatically-Collected Information: We automatically collect certain information about you and the device with which you access the Website. For example, when you use the Website, we will log your IP address, operating system type, browser type, referring website, pages you viewed, and the dates/times when you accessed the Website. We may also collect information about actions you take when using the Website, such as links clicked.

• Cookies: We may log information using cookies, which are small data files stored on your browser by the Website. We may use both session cookies, which expire when you close your browser, and persistent cookies, which stay on your browser until deleted, to provide you with a more personalized experience on the Website.

HOW YOUR INFORMATION MAY BE USED

We may use the information collected in the following ways:
• To operate and maintain the Website;
• To create your account, identify you as a user of the Website, and customize the Website for your account;
• To send you promotional information, such as newsletters. Each email promotion will provide information on how to opt-out of future mailings;
• To send you administrative communications, such as administrative emails, confirmation emails, technical notices, updates on policies, or security alerts;
• To respond to your comments or inquiries;
• To market products through display or affiliate advertisements;
• To provide you with user support;
• To track and measure advertising on the Website;
• To process payment for purchases you make through the Website; or,
• To protect, investigate, and deter against unauthorized or illegal activity.

THIRD-PARTY USE OF PERSONAL INFORMATION

We may share your information with third parties when you explicitly authorize us to share your information. The companies listed below are “Service Providers,” which are defined as “a sole proprietorship, partnership, limited liability company, corporation, association, or other legal entity that is organized or operated for the profit or financial benefit of its shareholders or other owners, that process information on behalf of a business and to which the business discloses a consumer’s personal information for a business purpose pursuant to a written contract, provided that the contract prohibits the entity receiving the information from retaining, using or disclosing the personal information for any purposes other than for the specific purpose of performing the services specified in the contract for the business” or “retaining, using, or disclosing the personal information for a commercial purpose other than providing the services specified in the contract with the business.”
The Website may use third-party service providers to service various aspects of the Website. Each third-party service provider’s use of your personal information is dictated by their respective privacy policies. The Website currently uses the following third-party service providers:
• Stripe – this service is used to serve our ecommerce platform. If you purchase something from the Website, your Personal Information will be shared with this Service Provider. At no time is your banking information passed back from the payment processor to the Website. We receive only information used for order fulfillment.
• ConvertKit – this service is used for delivery of email updates and newsletters. We store your name and email address for purposes of delivering such communications. ConvertKit will also track information regarding your interaction with our emails, such as whether they have been opened or you have clicked on a particular link.
• Popup Ally – this service is used as for marketing purposes. Popup Ally is connected to ConvertKit to transfer your email address when you subscribe to a newsletter.
• Slickstream – this service is used to track behavior to improve website performance. This will collect information related to your IP address. It is not sold to third parties.
• Google Analytics 4 – please see a discussion of this service below under the heading “Website Analytics”
• Hotjar – this service provides the Website with the use of its behavior analytics software to help us gain a better understanding of how users interact with the site. You can read about Hotjar’s approach to privacy here.
• Font Awesome – this service is used to provide icon images on the website. You can read about their data collection and privacy safeguards on their website here.

At this time, your personal information is not shared with any other third-party applications. This list may be amended from time to time in the Website’s sole discretion.
Except when required by law, we will not sell, distribute, or reveal your email addresses or other personal information without your consent; however, we may disclose or transfer personal information collected through the Website to third parties who acquire all or a portion of our business, which may be the result of a merger, consolidation, or purchase of all or a portion of our assets, or in connection with any bankruptcy or reorganization proceeding brought by or against us.

WEBSITE ANALYTICS
This Website uses Google Analytics 4 to analyze traffic to the Website. In order to track usage, Google Analytics places a cookie with a randomly generated Client ID on your browser. Google does use your personal information such as your IP address in order to capture reporting for the Website regarding usage. You may opt-out of Google Analytics through a Browser Add-on, which is available here.

ANONYMOUS DATA
From time to time, we may use anonymous data, which does not identify you alone, or when combined with data from other parties. This type of anonymous data may be provided to other parties for marketing, advertising, or other uses. Examples of this anonymous data may include analytics or information collected from cookies.

PUBLICLY VISIBLE INFORMATION
If you create a user profile on the Website or leave a comment, certain information may be publicly visible.

COOKIES

The Website uses cookies to store visitors’ preferences, record user-specific information on what pages users access or visit, ensure that visitors are not repeatedly sent the same banner ads, customize Website content based on visitors’ browser type or other information that the visitor sends. Cookies may also be used by third-party services, such as Google Analytics, as described herein.

Users may, at any time, prevent the setting of cookies, by the Website, by using a corresponding setting of your internet browser and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. However, if users deactivate the setting of cookies in your Internet browser, not all functions of our Website may be entirely usable.

ADVERTISING

Display Ads

We may use third-party advertising companies to serve content and advertisements when you visit the Website, which may use cookies or provide other personal information.

Mediavine Programmatic Advertising

The Website uses Mediavine to manage all third-party advertising on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website. The cookie may collect information relating to your use of the Website, information about your device such as the device’s IP address and browser type, demographic data and, if you arrived at the Website via a link from a third-party site, the URL of the linking page.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The “help” feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at www.allaboutcookies.org/manage-cookies/.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site.

The Website may collect IP addresses and location information to serve personalized ads and pass it to Mediavine. If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit https://www.networkadvertising.org/managing/opt_out.asp. You may also visit https://optout.aboutads.info/#/ and https://optout.networkadvertising.org/# to learn more information about interest-based advertising. You may download the AppChoices app at https://www.aboutads.info/appchoices to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

Mediavine partners with the following data processors:

  1. Pubmatic. You may find Pubmatic’s privacy policy through this link. The data collected on the Website may be transferred to Pubmatic and its demand partners for interest-based advertising. Statistical information and other non-cookie technologies (such as eTags and web or browser cache) may be used by third parties on this Website. Browser settings that block cookies may have no effect on these technologies, but you may clear your cache to delete such trackers. Data collected from a particular browser or device may be used with another computer or device that is linked to the browser or device on which such data was collected.
  2. Criteo. You may find Criteo’s privacy policy through this link. The data collected on the Website may be transferred to Criteo and its demand partners for interest-based advertising. Criteo may collect, access, and use non-identifying data to improve the Criteo Technology and other Criteo products, programs, and/or services. This non-identifying data may include on-site user behavior and user/page content data, URLs, statistics, or internal search queries. The non-identifying data are collected through the ad call and stored with a Criteo cookie for a maximum period of 13 months.
  3. Pulsepoint. You may find Pulsepoint’s privacy policy through this link.
  4. LiveRamp. You may find LiveRamp’s privacy policy through this link. When you use the Website, we share information that we may collect from you, such as your email (in hashed, de-identified form), IP address or information about your browser or operating system, with LiveRamp Inc, and its group companies (‘LiveRamp’). LiveRamp may use a cookie on your browser and match your shared information to their on- and offline marketing databases and those of its advertising partners to create a link between your browser and information in those other databases. This link may be shared by our partners globally for the purpose of enabling interest-based content or advertising throughout your online experience (e.g. cross device, web, email, in-app, etc.) by third parties unaffiliated with our website. These third parties may in turn link further demographic or interest-based information to your browser. To opt out of LiveRamp’s targeted advertising, please go here: https://liveramp.com/opt_out/
  5. RhythmOne. You may view RhythmOne’s privacy policy through this link. RhythmOne uses cookies and similar tracking technologies (such as mobile device identifiers and digital fingerprinting) to provide its services. RhythmOne may use aggregated information (not including your name, address, email address or telephone number) about your visits to this and other Websites in order to provide advertisements about goods and services of interest to you. If you would like more information about this practice and to know your choices about not having this information used by these companies, please visit the following webpage: https://www.networkadvertising.org/managing/opt_out.asp.
  6. District M. You may find District M’s privacy policy through this link.
  7. YieldMo. You may find YieldMo’s privacy policy through this link. If you want to opt out of receiving interest based ads from Yieldmo or exercise your right under the California Consumer Privacy Act (“CCPA”) to opt-out of the sale of your personal information, you may do so through this link.
  8. The Rubicon Project. You may find Rubicon’s privacy policy through this link. If you want to opt out of receiving interest based ads from Rubicon or exercise your right under the California Consumer Privacy Act (“CCPA”) to opt-out of the sale of your personal information, you may do so through this link. You may also utilize the Network Advertising Initiative’s opt-out page, the Digital Advertising Alliance’s opt-out page, or the European Interactive Digital Advertising Alliance’s opt-out page.
  9. Amazon Publisher Services. You may find Amazon Publisher Services’ privacy policy through this link.
  10. AppNexus. You may find the AppNexus privacy policy through this link.
  11. OpenX. You may find OpenX’s privacy policy through this link.
  12. Verizon Media formerly known as Oath. You may find Verizon Media’s privacy policy through this link. You may also utilize the Network Advertising Initiative’s opt-out page, the Digital Advertising Alliance’s opt-out page, or the European Interactive Digital Advertising Alliance’s opt-out page to opt-out of the use of cookies for interest-based advertising.
  13. TripleLift. You may find TripleLift’s privacy policy through this link. To opt out of receiving interest-based advertising (including retargeting) from TripleLift’s services through the use of cookies in your current browser and for more information on what it means to opt-out, please go to www.triplelift.com/consumer-opt-out.
  14. Index Exchange. You may find Index Exchange’s privacy policy through this link. You may also utilize the Network Advertising Initiative’s opt-out page, the Digital Advertising Alliance’s opt-out page, or the European Interactive Digital Advertising Alliance’s opt-out page to opt-out of the use of cookies for interest-based advertising.
  15. Sovrn. You may find Sovrn’s privacy policy through this link.
  16. GumGum. You may find GumGum’s privacy policy through this link. GumGum may (i) use place and use cookies on end users’ browsers or use web beacons to collect information about end users who visit such Publisher Websites and (ii) link such collected end user information to other end user information provided by third parties in order to deliver targeted Advertisements to such end users.
  17. Digital Remedy. You may find Digital Remedy’s privacy policy through this link.
  18. MediaGrid. You may find MediaGrid’s privacy policy through this link. MediaGrid may collect and store information about end-user interactions with this website through cookies, advertising IDS, pixels and server-to-server connections. MediaGrid was receive the following information: the page an End-User has requested and the referring/exit pages; Timestamp information (i.e., the date and time the End-User has visited the page); IP address; mobile device identifier; device model; device operating system; browser type; carrier; gender; age; geolocation (including GPS coordinates); clickstream data; cookie information; first-party identifiers’; and hashed email addresses; demographic and inferred interest information; and post-conversion data (from both online and offline behaviour). Some of this data is gathered from this website and others is gathered from advertisers. MediaGrid uses this data to provide its services. You may also utilize the Network Advertising Initiative’s opt-out page, the Digital Advertising Alliance’s opt-out page, or the European Interactive Digital Advertising Alliance’s opt-out page to opt-out of the use of cookies for interest-based advertising or review their privacy policy for more information.
  19. RevContent – You may find RevContent’s privacy policy through this link. RevContent may collect information about your browser or device, including browser type, IP Address, device type, user agent string, and operating system. RevContent also collects information about the websites you visit through their services, such as date and time of access and specific pages accessed and the content and ads you click on. You may opt-out of any personalization track by opting-out of RevContent’s data collection.
  20. Centro, Inc. – You may find Centro’s privacy policy through this link. You may find opt-out information for Centro’s services through the privacy policy link.
  21. 33Across, Inc. – You may find 33Across’s privacy policy through this link. To opt-out of personalized advertising, please visit https://optout.networkadvertising.org/?c=1.
  22. Conversant. LLC – You may find Conversant’s privacy policy through this link. Conversant uses information that does not directly identify you, such as information about your browser type, time and date of visit, your browsing or transaction activity, the subject of advertisements clicked or scrolled over, and a unique identifier (such as a cookie string, or a unique advertising identifier provided by your mobile device) during your visits to this and other websites and apps in order to provide advertisements about goods and services likely to be of greater interest to you. Conversant may use technologies such as cookies and other tracking technologies to collect this information. To learn more about interest-based advertising, or to opt-out, you can visit www.youronlinechoices.eu or https://www.networkadvertising.org/.

Mediavine Programmatic Advertising

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The “help” feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at https://www.allaboutcookies.org/manage-cookies/.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address
  • Operating System type
  • Operating System version
  • Device Type
  • Language of the website
  • Web browser type
  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visitOpt Out – NAI: Network Advertising Initiative. You may also visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/# to learn more information about interest-based advertising. You may download the AppChoices app atYourAdChoices.com | AppChoicesto opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please click here.

To opt out of display advertising, visit https://optout.networkadvertising.org/.

Affiliate Program Participation

The Website may engage in affiliate marketing, which is done by embedding tracking links into the Website. If you click on a link for an affiliate partnership, a cookie will be placed on your browser to track any sales for purposes of commissions.

Gluten Free on a Shoestring LLC is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and links to Amazon.com. As part of this Amazon Associates program, the Website will post customized links, provided by Amazon, to track the referrals to their website. This program utilizes cookies to track visits for the purposes of assigning commission on these sales.

Newsletters

On the Website, you may subscribe to our newsletter, which may be used for advertising purposes. All newsletters sent may contain tracking pixels. The pixel is embedded in emails and allows an analysis of the success of online marketing campaigns. Because of these tracking pixels, we may see if and when you open an email and which links within the email you click. Also, this allows the Website to adapt the content of future newsletters to the interests of the user. This behavior will not be passed on to third parties.

NEWSLETTER SPONSORSHIPS

We engage others to serve newsletter advertisements and perform related services across the web and in mobile applications. You can learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance, by visiting www.aboutads.info/choices.

Opting Out of Targeted Advertising, Sharing, and Sales. We process personal information to understand and improve your experience with our Services and to serve you targeted advertisements. Some of these activities may be considered “sales” or “sharing” of your personal information or “targeted advertising” under certain privacy laws. To opt out of preference-based advertising, use the form linked below. Note, this will not stop you from seeing sponsorships or advertisements in our newsletters, but those ads will be selected randomly rather than based on your known preferences.

https://convertk.it/opt-out-preference-based#newsletter_source=glutenfreeonashoestring.com

SENSITIVE PERSONAL INFORMATION
At no time should you submit sensitive personal information to the Website. This includes your social security number, information regarding race or ethnic origin, political opinions, religious beliefs, health information, criminal background, or trade union memberships. If you elect to submit such information to us, it will be subject to this Privacy Policy.

CHILDREN’S INFORMATION
The Website does not knowingly collect any personally identifiable information from children under the age of 16. If a parent or guardian believes that the Website has personally identifiable information of a child under the age of 16 in its database, please contact us immediately at EMAIL ADDRESS and we will use our best efforts to promptly remove such information from our records.

GDPR – RIGHTS RELATED TO YOUR PERSONAL INFORMATION
If you are within the European Union, you are entitled to certain information and have certain rights under the General Data Protection Regulation (“GDPR”). Throughout this policy, we have disclosed what information we collect and how it is used. Under GDPR, you also have the following rights:

Right to Opt-out – You may opt-out of future email communications by following the unsubscribe links in our emails. You may also contact us at the email below to be removed from our mailing list.
Right to Access – You may access the personal information we have about you by submitting a request.
Right to Amend – You may contact us to amend or update your personal information.
Right to Be Forgotten – In certain situations, you may request that we erase or forget your personal data.
You may exercise any of these rights by emailing list@glutenfreeonashoestring.com.
Please note that we may need to retain certain information for recordkeeping purposes or to complete transactions, or when required by law. Unless you exercise such rights, we reserve the right to retain your data.

CCPA – RIGHTS RELATED TO YOUR PERSONAL INFORMATION
If you are a resident of California, you are entitled to certain information and have certain rights under the California Consumer Protection Act (“CCPA”). Throughout this policy, we have disclosed what information we collect, how it is used, and the types of third parties that may receive your information.

Under CCPA, you also have the following rights:

Right to Access – You have the right to request that we disclose certain information to you about the personal information we collect and how it has been used over the past 12 months. After we receive and confirm your verifiable consumer request, we will disclose the following:
• The categories of your personal information we collected;
• The categories of your personal information we sold;
• The categories of any third parties to whom we have sold your personal information;
• A list of which categories of your personal information we sold to each party; and,
• The categories of your personal information we disclose for business purposes.

Right to Deletion – You have the right to request that we delete your personal information. Please note that this right does not apply when we need to retain your personal information in order to do the following:
• Provide goods or services to you;
• Detect or resolve security or functionality-related issues;
• Comply with the law;
• Conduct research in the public interest;
• Safeguard the right to free speech; or,
• Carry out any actions for internal purposes that you might reasonably expect.

Right to Non-Discrimination – You have the right not to be discriminated against for exercising your rights under CCPA. In particular, we may not:
• Deny you goods or services;
• Charge you different prices for goods or services, whether through denying benefits or imposing penalties;
• Provide you with a different level or quality of goods or services; or,
• Threaten you with any of the above.

How to submit a verifiable consumer request

To exercise these rights, you must submit a verifiable consumer request to us by contacting us at list@glutenfreeonashoestring.com.

Please note that only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a request on behalf of a minor child.

You may only make a request under these rights twice in a twelve-month period. Your verifiable consumer request must:
• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information (or that it is an authorized representative acting on your behalf);
• Describe your request with sufficient detail that allows us to properly understand and respond to it.

NEVADA PRIVACY OF INFORMATION COLLECTED ON THE INTERNET FROM CONSUMERS ACT
Pursuant to the Nevada Privacy of Information Collected on the Internet from Consumers Act (“NPICICA”), Nevada residents may opt out of the sale of any personal information. As described above, your personal information may be shared with third-party service providers/operators in order to fulfill purchased products or to communicate with you. We do not sell (which is defined in the NPICICA as “the exchange of covered information for monetary consideration by the operator to a person for the person to license or sell the covered information to additional persons”) your covered information

CONTACT INFORMATION
At any time, please contact us at list@glutenfreeonashoestring.com for questions related to this Privacy Policy.
Last updated: July 2020