Special Privacy Notice for California Residents

 

If you are a California resident, please read the following Privacy Policy (“Policy”).

 

This Policy describes how information obtained from California consumers, including visitors to the pieology.com website (“Website”), Pieology's mobile application(s) (“Application”), and Pieology company-owned and franchised-locations, where applicable (“Locations”) is collected, used, and disclosed by The Little Brown Box Pizza, LLC and its parents, subsidiaries, franchisees and affiliates, and their respective employees, agents, successors and assigns (collectively, “Pieology,” “we,” “us,” or “our”). This Policy also explains how you can make requests of Pieology to know about your personal information and delete your personal information. Please note that this Policy applies to information collected by Pieology and/or independently owned and operated franchised locations, where applicable, and supplements the information contained in Pieology's Privacy Policy, available here.

 

 

California’s Consumer Privacy Act

 

  1. California Residents’ Rights Under the California Consumer Privacy Act
  2. Categories of California Consumers’ Personal Information Collected, Sold, or Disclosed
  3. Methods for Submitting CCPA Requests
  4. Verification Process
  5. Authorized Agents
  6. Response Timing and Format
  7. Do Not Sell My Personal Information
  8. Children Under the Age of 13
  9. Contact Us for More Information

 

CALIFORNIA’S CONSUMER PRIVACY ACT

 

Definitions Specific to this Policy

The California Consumer Privacy Act of 2018, California Civil Code sections 1798.100 et seq. (“CCPA”) includes definitions for terms specific to this California Privacy Policy that do not apply to Pieology's Privacy Policy.

 

  1. California Residents’ Rights Under the California Consumer Privacy Act

If you are a California resident, you have certain rights regarding information that is treated as Personal Information under the CCPA.

 

The right to know what categories of Personal Information are being collected, sold, or disclosed and the categories of sources of that Personal Information.

You have the right to know what categories of Personal Information we collect, sell, or disclose about you. These categories are described below in the “Categories of California Consumers’ Personal Information Collected, Sold, or Disclosed” section below.

The right to access collected Personal Information

You have the right to request that we provide a copy of your Personal Information that we collected, sold, or disclosed in the preceding twelve (12) months. Only you, or someone you legally authorize to act on your behalf, may make a request related to your Personal Information. You may submit a maximum of two requests in a 12-month period.

 

 

 

 

After receiving and verifying your request, we will provide the following information (depending on your request):

  • The categories of Personal Information collected about you in the preceding twelve (12) months.
  • The sources of that Personal Information by category.
  • The business or commercial purpose(s) for collecting or selling that Personal Information.
  • The categories of third parties with whom we shared that Personal Information.
  • The specific pieces of Personal Information collected about you.

 

See the “Methods for Submitting a CCPA Request” and “Authorized Agents” sections below for information on how you can exercise your right to access collected Personal Information. For more information, see also the “Response Timing and Format” section below.

The right to request deletion of Personal Information

With certain exceptions, you have the right to request that we and our service providers delete Personal Information we or our service provider collected or maintained. Once we receive and verify your request, we will delete and instruct any applicable service providers to delete your Personal Information from our records, unless an exception applies.

 

We and our service providers may deny a verified deletion request if we must maintain your Personal Information to:

  • Complete the transaction or provide a good or service requested by you for which we collected the Personal Information, or otherwise perform a contract between us.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity.
  • Debug to identify and repair errors that impair existing intended functionality of our systems.
  • Exercise a legal right provided for by law, including exercising or ensuring free speech rights.
  • Comply with the California Electronic Communications Privacy Act (California Penal Code sections 1546 to 1546.4).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest if:
    • the research adheres to all other applicable ethics and privacy laws;
    • deleting the Personal Information is likely to make the research impossible or seriously impair it; and
    • you provided informed consent during the initial data collection.
  • Enable our internal use in a manner that you would reasonably expect based on your relationship with us.
  • Comply with our legal obligations.
  • Otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.

See the “Methods for Submitting CCPA Requests” section below for information on how you can exercise your right to delete collected Personal Information.

The right to opt-out of the sale of Personal Information

CCPA provides you with the right to opt-out of the “sale” of your Personal Information to other businesses or third parties. The CCPA defines “sell,” “selling, “sale”, and “sold” to include selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means. Pieology does not sell Personal Information to other businesses or third parties.

 

The rights of California consumers who are less than 16 years of age

We do not intend to provide goods or services to, or collect information from, California consumers who are less than 16 years of age. We do not sell the personal information of consumers who we actually know are less than 16 years of age (or any consumers).

The right to be free from discrimination

You have the right to equal service, and we will not discriminate against you if you exercise your rights under the CCPA. However, under certain circumstances, we may offer you special discounts or other incentives for the right to continue to collect, use, or sell your Personal Information. In that event, we will notify you of the relevant program’s material terms and obtain your voluntary opt-in consent to the program.

 

  1. Categories of California Consumers’ Personal Information Collected, Sold, or Disclosed

We collect a variety of categories of Personal Information about California consumers, their household, and/or their devices from both online and offline sources. We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without first updating this Policy.

 

In particular, we have collected the types of Personal Information indicated in the chart below in the last twelve (12) months, including from customers and applicants for jobs:

 

 

Categories of Personal Information We Collect To Whom We Disclose Personal Information for a Business Purpose
Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, social security number, driver’s license number, passport number or other similar identifiers. ·        Advertising networks

·        Affiliates or subsidiaries

·        Business partners

·        Data analytics providers

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service providers

·        Joint marketing partners

·        Operating systems and platforms

·        Other Service Providers

·        Payment processors and financial institutions

·        Professional services organizations, this may include auditors and law firms

·        Social networks

Additional categories of personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) – this may include signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information. ·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Operating systems and platforms

·        Other Service Providers

·        Payment processors and financial institutions

·        Professional services organizations, this may include auditors and law firms

 

Characteristics of protected classifications – this may include age, sex, race, ethnicity, physical or mental handicap, etc. ·        Affiliates or subsidiaries

·        Business partners

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service

·        Operating systems and platforms

·        Professional services organizations, this may include auditors and law firms

·        Other Service Providers

Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. ·        Advertising networks

·        Affiliates or subsidiaries

·        Business partners

·        Data analytics providers

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service providers

·        Joint marketing partners

·        Operating systems and platforms

·        Other Service Providers

·        Payment processors and financial institutions

·        Professional services organizations, this may include auditors and law firms

·        Social networks

Internet or other electronic network activity information – this may include browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement. ·        Advertising networks

·        Affiliates or subsidiaries

·        Business partners

·        Data analytics providers

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service providers

·        Joint marketing partners

·        Operating systems and platforms

·        Other Service Providers

·        Payment processors and financial institutions

·        Professional services organizations, this may include auditors and law firms

·        Social networks

Geolocation data ·        Advertising networks

·        Affiliates or subsidiaries

·        Business partners

·        Data analytics providers

·        Data brokers

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service providers

·        Joint marketing partners

·        Operating systems and platforms

·        Other Service Providers

·        Professional services organizations, this may include auditors and law firmsSocial networks

Audio, electronic, visual, thermal, olfactory, or similar information  

·        Affiliates or subsidiaries

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service providers

·        Operating systems and platforms

·        Other Service Providers

 

Professional or employment-related information  

·        Affiliates or subsidiaries

·        Business partners

·        Government entities, as may be needed to comply with law or prevent illegal activity

·        Internet service providers

·        Operating systems and platforms

·        Other Service Providers

·        Professional services organizations, this may include auditors and law firms

Inferences drawn from any of the information listed above  

 

 

 

  1. Methods for Submitting CCPA Requests

You have the right to submit a verifiable request to us using the following methods:

  • Email

You may submit a request by writing to us at privacy@pieology.com.

 

  • Toll-Free Telephone Call

You may submit requests by calling our dedicated, toll-free number designated for CCPA requests at (833) 714-6344.

A member of our team will acknowledge your request and guide you through the verification process within fifteen (15) days.

 

  • In-Store Form

For consumers who do not wish to submit their CCPA request via email to privacy@pieology.com or by contacting us at our dedicated, toll-free number designated for CCPA requests at (833) 714-6344, you may request a copy of this Policy at any Pieology location in California and submit your CCPA request to a managerial member of staff at the Pieology location in California.

 

  1. Verification Process

You must provide sufficient information to enable us to reasonably verify your identity or that of your authorized agent. We will only use the Personal Information provided in your request to verify your identity or that of your authorized agent. Please note that we cannot provide any Personal Information in response to a request if we cannot verify your or your authorized agent’s identity, or your authorized agent’s authority to make the request on your behalf, and/or if we cannot confirm that the collected Personal Information relates to you.

 

 

Once we receive a request to know or to delete, we must verify your identity before we can respond. You may be required to provide the some or all of the following information for verification purposes:

  • Your first and last name
  • Your e-mail address
  • Your telephone number

 

If you submit either a request to know specific pieces of Personal Information collected, or a request to delete sensitive, irreplaceable, or otherwise valuable Personal Information, you (or your authorized agent, if applicable) will be required to provide a signed declaration affirming your identity (or your authorized agent’s identity, if applicable).

 

  1. Authorized Agents

 

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf.  We will require verification that you provided the authorized agent permission to make a request on your behalf.  You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.  If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:

  1. A completed Authorized Agent Designation Form indicating that you have authorization to act on the consumer’s behalf.
  2. If you are a business, proof that you are registered with the Secretary of State to conduct business in California.

If we do not receive both pieces of information, the request will be denied.

 

  1. Response Timing and Format

 

  • Acknowledgement of receipt of request

We will confirm receipt of a request from you within ten business (10) days. This confirmation will provide information about how we will process the request, including a description of our verification process and an approximation of when we will send you a substantive response.

 

  • Substantive Response

We will respond to a verifiable request from you within forty-five (45) days. If we cannot respond in that time, we will notify you in writing that we need an additional forty-five (45) days and explain the reason for the needed additional time.

 

If you have an account with us, we will respond to that account. If you do not have an account with us, we will deliver the written response by mail or e-mail, at your option.

Any disclosures we provide will cover only the 12-month period preceding our receipt of your verifiable request. If we cannot comply with your request, we will explain why. If you have requested to know specific Personal Information we collected (for data portability requests) we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

 

We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why and provide you with a cost estimate before completing the request.

 

  • Acting upon opt-out requests

We will act upon an opt-out as soon as commercially reasonable, but no later than fifteen business (15) days from the date we receive the request.

 

  1. Do Not Sell My Personal Information

You have the right to direct us not to sell your Personal Information. Pieology has not sold Personal Information in the preceding twelve (12) months.

 

  1. Children Under the Age of13

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any Personal Information on the Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use this Website, provide any information on this Website. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at privacy@pieology.com.

 

California residents over 13 but under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see “The rights of California consumers who are less than 16 years of age” section above for more information.

 

  1. Contact Us for More Information

California consumers who have questions or concerns about our privacy policies and practices may contact a Pieology Privacy Representative through one of the following methods:

When contacting us please include in the communication or have available the information listed under the “Verification Process” section above. If using an authorized agent, please include in the communication or have available proof of authorization.

 

Effective Date: January 1st, 2020