Under the California Consumer Privacy Act ("CCPA"), the Colorado Privacy Act (“CPA”), and the Virginia Consumer Data Privacy Act (“VDCPA”), residents in these states have additional rights regarding their Personal Information or Personal Data. We have provided a summary of those rights below. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for residents of California, Colorado, and Virginia. Certain capitalized terms not defined in this Policy have the meanings set forth in the CCPA, CPA, or VCDPA.
Your Right to Opt-Out
California residents have the right to opt out of the sale or sharing of their Personal Information at any time. Colorado and Virginia residents may direct us to cease processing their Personal Data for targeted advertising or selling their Personal Data.
California and Colorado residents may opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs
. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
If you do not have a Tiff's Treats online account or if you are not logged into your account, your request to opt out of sale or sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.
If you would like us to make the connection between your browser and your identity, please log into your account while using the GPC or submit an opt-out request through our webform, linked below.
You may submit your opt-out request by:
. If you are a California or Colorado resident using an authorized agent to exercise your rights to opt-out of the sale of Personal Information, please see the section entitled "Authorized Agents" below for the information required when you use an authorized agent.
Right to Know or Access Your Personal Information
California residents have the right to access any of the following which occurred in the previous 12 months:
- The categories and specific pieces of Personal Information that we have collected from you;
- The categories of sources from which the Personal Information was collected;
- The categories of third parties to whom we have disclosed your Personal Information;
- The categories of Personal Information that we Sold/Shared or disclosed for a Business Purpose and the categories of third parties to whom it was disclosed for a Business Purpose; and
- The Business or Commercial Purpose for collecting, sharing, or selling your Personal Information.
Colorado and Virginia residents have the right to confirm whether we are processing your Personal Data and to access such Personal Data.
Your Right to Deletion
California residents have a right to request that we delete Personal Information we collected from you. Colorado and Virginia residents have the right to request that we delete all Personal Data we have collected about you. We will comply with such request, and direct our service providers to do the same, subject to certain exceptions permitted by applicable law.
Right to Correct Your Personal Information
You have a right to request that we correct your inaccurate Personal Information. If you request that we correct inaccurate Personal Information about you, we will use commercially reasonable efforts to correct it. If necessary, we may ask that you provide documentation showing that the information we retained is inaccurate.
Right to Data Portability
You may request a copy of the Personal Information or Personal Data you previously provided to us in a portable and, to the extent technically feasible, readily usable format.
How to Exercise Your Rights of Access, Deletion, Correction, and Portability
To exercise your rights described in this Section, you may submit your request to us by contacting us at any of the following:
Phone (Toll Free):
8310-1 N. Capital of Texas Hwy, Ste 110
Austin, TX 78731
Who May Exercise Your Rights
. You may only make a request to exercise your rights on behalf of yourself. A parent or legal guardian may make a request on behalf of their child. If you are a California or Colorado resident, a person that you authorize to act on your behalf may make requests related to your Personal Information. See the section titled “Authorized Agents” below for more information.
Verifiable Consumer Request.
To verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.
When we receive your request to exercise your rights:
(a) we will acknowledge receipt of your request; (b) we will try to match the information you provide in making the request with information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including personal information, or to log into your existing account with us; (d) we will consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.
We will only use personal information we collect during the verification process for the purpose of verifying your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why.
Colorado and Virginia residents may submit a request to opt out through an authorized agent. California residents also have a right to submit requests to exercise any privacy right through an authorized agent. If you choose to use an authorized agent, you must (a) provide signed permission to that authorized agent to submit requests on your behalf, and (b) verify your identity if submitting a request other than an opt-out request.
When We Will Respond.
We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. For data portability requests, we will select a format to provide your personal information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.
Right to Non-Discrimination.
You have the right to not receive discriminatory treatment for exercising any of their rights under the CCPA. If we choose to offer a financial incentives program in the future, additional terms will apply which may be an exception to this Section.
ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS
Financial Incentive Offerings
We offer product samples, discounts, coupons, survey rewards and sweepstakes or contest rewards from time to time. In exchange, we will collect, use, share and retain certain personal information from you in order for us to ship the sample. We will also maintain and utilize the personal information you provide for future marketing purposes. These product samples, discounts, coupons, survey rewards and sweepstakes or contest rewards may be considered a financial incentive under CCPA. These financial incentives are reasonably related to the value of the data you provide.
We make a reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself and the anticipated revenue generation from brand loyalty and repeat purchases. We calculate the value of the offer and financial incentive by using the expense related to the offer.
Shine the Light
Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your personal information within the past year for direct marketing purposes, and (b) a description of the categories of personal information disclosed, by contacting us at firstname.lastname@example.org.
APPEAL PROCESS FOR COLORADO AND VIRGINIA RESIDENTS
If you disagree with our refusal to take action on your request to exercise your privacy rights, you have the right to ask us to reconsider. You must submit your request within 60 days of your receipt of our denial. You may submit your request to us by:
Once we receive your request, we will acknowledge and start processing your request. Within 60 days of receiving your request, we will inform you in writing of any action taken or not taken in response to your request, including a written explanation of the reasons for our decision.