Last updated on January 30, 2020
You acknowledge and agree that Grass Roots collects, stores, and uses certain electronic information about you and your account.
1. What We Collect About You and How We Collect It
We automatically collect certain information about your internet and mobile activity, and device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you use the Services, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Services, and information about how you interact with the Services. We may also collect geo-location information about you. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies: - “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org. Please note that is you choose to remove or disable cookies, certain functionality and the availability of the Services may be affected; - “Log files” track actions occurring on the Services, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps; - “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site;
We also collect and use generalized, anonymous information about all users. This information cannot be used to identify or isolate your personal information.
2. How We Use and Disclose Your Information
We use or disclose your information solely for the purpose of providing the Services to you through the operation of the Grass Roots Sites and business, or for legal purposes, all according to the following principles:
To fulfill orders placed through the Services.
As you direct or consent: We may share or use your information when you direct us or consent to us sharing or using your information.
For external processing: We may share your information with third parties who are necessary for us to provide the Services and process information on our behalf (for example: to process payments, shipping, or to ensure compliance with appropriate security and confidentiality measures on our behalf).
To contact you about goods and services: We may use your information to contact you about Services that may be of interest to you, and to enable us to display or direct communications to you; and
For business purposes: We may disclose your information (a) to our current or future parents, affiliates, subsidiaries, and other companies under common control and ownership, or (b) to a buyer or other successor in connection with, or during negotiations, a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding.
We may share your information with third parties to help us use your information for the purposes described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Services -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We may use generalized, anonymous information for any purpose and disclose it to third parties in our sole discretion.
As described above, we may use your information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using the links below:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
4. DO NOT TRACK Please note that we do not alter our data collection and use practices on the Services when we see a Do Not Track signal from your browser,
5. Your Privacy Rights—California Privacy Notice
This California Privacy Notice describes how we as a business collect, use, disclose, and otherwise process personal information of individual residents of the State of California within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).
Under the CCPA, you have a right to know what and how we collect, use, and disclose your personal information over the prior 12 months. Upon verifiable request we will provide you with the following information: (1) specific pieces and categories of personal information we collect about you; (2) categories of sources from which we collect personal information; (3) our business purposes for collecting, using, or selling personal information; (4) categories of third parties with which we share personal information; (5) categories of personal information disclosed about you for a business purpose; and (6) if applicable, categories of personal information sold about you and the categories of third parties to which the personal information was sold. If you would like to exercise your right to know, please contact us with requests by mail (addressed to Grass Roots Farmers’ Cooperative; 245 Quality Drive, Clinton, AR 72031), telephone (501-613-0184) or by email (firstname.lastname@example.org), care of our Data Protection Officer.
You also have a right to request that we delete personal information, subject to certain exceptions. And, you have the right to opt-out of the sale of your personal information to third parties. If you would like to exercise your right to delete or right to opt-out, please contact us with requests by mail (addressed to Grass Roots Farmers’ Cooperative; 245 Quality Drive, Clinton, AR 72031), telephone (501-613-0184) or by email (email@example.com), care of our Data Protection Officer.
If you have questions or concerns, or would like to exercise any of your rights under the CCPA, please contact us by mail (addressed to Grass Roots Farmers’ Cooperative; 245 Quality Drive, Clinton, AR 72031), telephone (501-613-0184) or by email (firstname.lastname@example.org), care of our Data Protection Officer, and we will do our best to address them.
You will not be discriminated against by us for your exercise of your CCPA rights. However, please note that in some instances, exercising certain CCPA right may cause us to be unable to provide you with the Services any longer.
We will need to verify your identity before processing CCPA requests, which may require us to obtain additional information from you. We will use that information only to review and address your requests. We reserve the right to decline or limit requests in certain circumstances – for example, when we are unable to verify your identity or locate information in our systems, or as otherwise permitted by applicable law.
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your CCPA rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
Your Privacy Rights – Europe
If you are an individual European resident, you have certain rights with respect to personal information we collect and hold about you under the General Data Protection Regulation (“GDPR”). This includes, among other rights, the right to be informed and request access to your personal information on the Services, and the right to ask that your personal information be corrected, updated, or deleted. If you have questions or concerns, or would like to exercise any of your rights under the GDPR, please contact us through the contact information below, care of our Data Protection Officer, and we will do our best to address them. However, you may also contact and file a complaint with the data protection authority of your jurisdiction.
SMS/MMS MOBILE MESSAGING MARKETING PROGRAM
We respect your privacy. We will only use information you provide through the SMS/MMS Mobile Messaging Marketing Program to transmit your mobile messages and respond to you, if necessary. This includes, but is not limited to, sharing information with platform providers, phone companies, and other vendors who assist us in the delivery of mobile messages. WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS OR CUSTOMER INFORMATION COLLECTED THROUGH THE PROGRAM TO ANY THIRD PARTY. Nonetheless, we reserve the right at all times to disclose any information as necessary to satisfy any law, regulation or governmental request, to avoid liability, or to protect our rights or property. When you complete forms online or otherwise provide us information in connection with the Program, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in our sole discretion, we believe that any such information is untrue, inaccurate, or incomplete, or you have opted into the Program for an ulterior purpose, we may refuse you access to the Program and pursue any appropriate legal remedies.
Security of Information
Grass Roots cared about the security of user information and has taken reasonable steps to safeguard it. However, Grass Roots cannot guarantee the security of your information. By using the Services, you agree that you provide your personal information and content at your own risk. You are solely responsible for maintaining the security of your account.
When you place an order through the Services, we will maintain your order information for our records unless and until you ask us to delete this information.
Grass Roots uses or may use third-party providers for various aspects of the Services, including the processing of payments and fees. By using the Services, you acknowledge and agree that you will also be subject to the third-party terms and conditions associated with those third-party services. Those terms and conditions may be materially different than our policies, especially with regard to information privacy and security. You acknowledge and understand that the third-party terms and conditions will apply to your account and information, including, but not limited to, financial information collected to enable and process payments on the Services.
Last updated on January 30, 2020