Galaxy Desserts

Privacy Policy

 

 

Date Privacy Policy Last Modified/Reviewed: 01-01-2020

 

INTRODUCTION

Galaxy Desserts (“Company” or “We”) respects your privacy and are committed to protecting your personal information through our compliance with this Privacy Policy. 

 

This Policy will inform you as to how we look after your personal information, your privacy rights, how the law protects you, and our practices for collecting, using, maintaining, protecting and disclosing your personal information when you visit our website (our “Website”) or transact with us (collectively, the Website and our services are referred to as the “Services”)

 

Please read this Policy carefully to understand our policies and practices regarding your personal information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services because we will not be able to perform the Services. 

 

By accessing or using our Services, you agree to this Privacy Policy, and if you are under age 16, you have your parent or legal guardian’s permission to use our Services and your parent/legal guardian has agreed to this Privacy Policy.

 

1.       IMPORTANT INFORMATION

 

PURPOSE OF THIS PRIVACY NOTICE

This Privacy Policy will inform you how Galaxy Desserts collects and processes your personal information through your use of the Services. This Policy applies to Personal Information we collect:

·         Directly from you when you visit our website or communicate with us or our representatives (whether electronically, by telephone or paper forms;

·         From third parties such as service providers, and

·         Automatically from you as you browse our Website.

 

CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat Personal Information, we will notify you through a notice on the Website home page or by sending an email to the email address you provided to us. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes to our Privacy Policy.

 

If you provide your e-mail address to us, you are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically visiting our Services and this privacy policy to check for any changes. It is important that the Personal Information, and importantly, the contact information we hold about you is accurate and current.  Please keep us informed if your contact information changes during your relationship with us.

 

The date the privacy policy was last revised is identified at the top of this page.

 

 

2.       THE PERSONAL INFORMATION WE COLLECT

We collect types of information which identify, relate to or is capable of being associated with a particular individual (“Personal Information”).  In the last twelve (12) months, Galaxy Desserts has collected the following categories of Personal Information:

 

Category

Examples of Information Under This Category

(*Not all of this information is collected by Galaxy Desserts)

Whether this Information is Collected

A. Identifiers

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, government issued identification number, or other similar identifiers.

We may collect Personal Information within this category.

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code section 1798.80(e))

A name, signature, Social Security number, physical characteristics or description, address ,telephone number, government issued identification number,  driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number  or any other financial information, medical information or health insurance information. 
 

We may collect Personal Information within this category.

C. Protected classification characteristics under California or federal law

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
 

We do not collect any Personal Information within this category.

D. Commercial information

Records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies.
 

We may collect Personal Information within this category.

E. Biometric information

Genetic, physiological, behavioral, and biological characteristics,  fingerprints,  face prints and voiceprints,.
 

We do not collect any Personal Information within this category.

F. Internet or other similar network activity

Browsing history, search history, information on a consumer’s interaction with a website, application or advertisement.
 

We may collect any Personal Information within this category.

G. Geolocation data

Physical location.
 

We may collect any Personal Information within this category.

H. Sensory data

Audio, electronic, visual, thermal, of Olfactory,  or similar information.
 

We do not collect any Personal Information within this category.

I. Professional or employment-related information

Current or past job history.

 

We may collect Personal Information within this category.

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.W. Section 1232g, 34 C.F.R. Part 99)

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

We do not collect Personal Information within this category.

K. Inferences drawn from other personal information

Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We do not collect any Personal Information within this category.

 

Personal Information does not include publicly available information from government records, de-identified or aggregated consumer information, or other information specifically exempted by statute (such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other sector-specific privacy laws (including the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the California Financial Information Privacy Act, and the Driver’s Privacy Protection Act of 1994).

 

3.       HOW PERSONAL INFORMATION IS COLLECTED

We use different methods to collect this information from you and about you including:

         Direct interactions.  You may give us your Personal Information by filling in forms or by corresponding with us by mail, phone, email or otherwise. 

         Third-Party Use of Cookies and Other Tracking Technologies:   As you interact with our Services, we may automatically collect Personal Information about your equipment, browsing actions and patterns. Information collected automatically may include usage details, IP addresses and information collected through cookies.  The technologies we use may include Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer.  These third parties and online technologies may use this information to provide you with interest-based (behavioral) advertising or other targeted content.  We do not control these third-party websites or their privacy practices, and are not responsible for their privacy statements/notices.  When you leave our Services (including the Website), we encourage you to read the privacy notice of every website you visit and application you use.

         Third parties or publicly available sources.  We may receive Personal Information about you from various third parties and public sources as set out below:

         Analytics providers (such as, Google);

         Providers of payment processing services submitted by you detailing the transactions you carry out through our Services and of the fulfillment of your orders.

 

4.       HOW WE USE PERSONAL INFORMATION

 

We may use information that we collect about you or that you provide to us, including your Personal Information for the following purposes:

         To fulfill or meet the reason you provided the information.

         To process your requests, purchases, transactions, and payments and prevent transactional fraud.

         To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.

         To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets and business.

         To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

         As described to you when collecting your Personal Information.

         To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Company’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Company about our Website users is amount the assets transferred.

 

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

 

5.       SHARING YOUR PERSONAL INFORMATION

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

 

We may disclose your Personal Information to affiliated companies and external parties for business purposes, and when we do so, the parties are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them.  We may also share your Personal Information with the following categories of third parties: Service Providers (such as technology service providers and financial service providers).

 

·         Disclosures of Personal Information for a Business Purpose.  In the preceding twelve (12) month period, we have disclosed information within the following categories of Personal Information for a business purpose:

o   Category A: Identifiers

o   Category B: California Customer Records personal information categories

o   Category D: Commercial information

o   Category G: Geolocation data

In the preceding twelve (12) month period, we disclosed Personal Information for a business purpose to the following categories of third parties:

o   Service providers

 

·         Sales of Personal Information. Galaxy Desserts does not sell any categories of Personal Information to any external parties that are considered to be a “third party” as such term is defined under California Civil Code section 1798.140, and Galaxy Desserts has not sold any Personal Information in the preceding twelve (12) months.

 

6.       CHILDREN AND PRIVACY

Our Website and Services are not intended for children under the age of 16 and we do not knowingly collect, use, disclose or sell Personal Information from children under age 16. If you know or suspect that your child has submitted Personal Information to us and you would like to request that such information be removed, you may do so by contacting us at the address listed below in the Contact Information section.

 

7.       INTERNATIONAL TRANSFER

If you are located in a province, country, or other government jurisdiction outside of the United States, and if you choose to provide your Personal Information to the Company through our Services, please be aware that your personal information will be transferred to and maintained on computers located in the United States and the applicable US privacy laws may not be as protective as those in your jurisdiction. 

 

8.       DATA SECURITY

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure.  We also limit access to Personal Information to those employees, agents, contractors, and other third parties who have a business need to know.  These individuals will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of the data transmitted to or through our Services. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

9.       DATA RETENTION

 

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure.  We also limit access to Personal Information to those employees, agents, contractors, and other third parties who have a business need to know.  These individuals will only process your Personal Information on our instructions and they are subject to a duty of confidentiality.

 

10.   YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION  

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

 

         Cookies, Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent.  If you disable or refuse cookies, please note that some parts of this Website may then be inaccessible or not function properly.  Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website. 

         Disclosure of Your Information for Third-Party Advertising. We do not share your Personal Information with any unaffiliated third parties for advertising purposes.

         Targeted Advertising. We do not use Personal Information to perform targeted advertising.

 

11.   YOUR CALIFORNIA PRIVACY RIGHTS

 

Consumer Requests: Your Rights and Choices About Personal Information Under California Law

The California Consumer Privacy Act (“CCPA”) provides California residents with specific rights regarding their Personal Information unless an exception applies. This section describes your CCPA rights and how to exercise those rights by submitting a consumer request (“Consumer Request”).

 

·         Access to Specific Information and Data Portability Rights

You have the right to request that Galaxy Desserts disclose certain or all of the following information to you about our collection and use of your Personal Information over the past twelve (12) months.  Once we receive a verifiable Consumer Request, we will be able to disclose to you any of the following information if we have it:

o   The categories of Personal Information we collected about you.

o   The categories of sources for the Personal Information we collected about you.

o   Our business or commercial purposes for collecting or selling that Personal Information.

o   The categories of third parties to whom we disclosed that Personal Information.

o   The specific pieces of Personal Information we collected about you (also may be called a data portability request).

o   If we sold or disclosed your Personal Information for a business purposes, we will provide you with two lists disclosing (if applicable):

§  Sales, identifying the Personal Information categories that each category of recipient purchased; and

§  Disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.

 

·         Deletion Request Rights

You have the right to request that we delete any or all of your Personal Information that we collected from and about you, subject to certain statutory exceptions.  Once we receive a verifiable Consumer Request, we will identify the Personal Information, confirm that you want that Personal Information deleted, and then delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

 

We may be unable to comply, or may deny, your deletion request if retaining the Personal Information is necessary for us or our service provider(s) to:

o   Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract(s) with you.

o   Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

o   Debug products to identify and repair errors that impair existing intended functionality.

o   Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.

o   Comply with the California Electronic Communications Privacy Act (Cal. Penal Code section 1546 et. seq.)

o   Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.

o   Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

o   Comply with a legal obligation.

o   Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

 

·         Non-Discrimination

We will not discriminate against you for exercising any of your legal rights regarding your Personal Information, unless permitted by law.  We will not take any of the following actions solely because you chose to exercise any of your legal rights regarding your Personal Information:

o   Deny you goods or services.

o   Charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties.

o   Provide you a different level or qualify of goods or services.

o   Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

 

·         Disclosures for Direct Marketing

California Civil Code Section § 1798.83 permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please e-mail us at the address listed in the Contact Information section below.

 

How to Submit a Consumer Request

To exercise your access, data portability, and deletion rights, please submit a Consumer Request to the contact information below.  The Consumer Request must describe the request with sufficient detail that allows us to properly understand, evaluate and respond to it.  Please specify if your Consumer Request pertains to all specific pieces of your Personal Information, or only with respect to the categories of Personal Information.  You may only make a Consumer Request for access or data portability twice within a twelve (12) month period. 

 

How We Will Verify Consumer Requests

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a Consumer Request related to your Personal Information.  To designate an authorized agent, we will ask you provide us with legal documentation (such as power of attorney documentation) or written permission and the agent will need to verify their own identity with us.

 

We reserve the right to require you to provide additional information to enable us to reasonably verify that you are the person about whom the Personal Information pertains in order to release the requested information to you (or your authorized representative).  If you have an account with us, you will be asked to use the standard authentication procedures to access your account.  If you do not have an account with us, you will be asked to verify certain pieces of your Personal Information.  If we are unable to verify your identity, we may be unable to provide you with information responsive to the request. 

 

How We Will Respond to Consumer Requests

We endeavor to respond to verifiable Consumer Requests within forty-five (45) days after receipt.  If we require more time (up to 45 days) we will inform you of the reason and extension in writing.  If you have an account with us, we will deliver our written response(s) to that account.  If you do not have an account with us, we will deliver our written response(s) by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding receipt of the Consumer Request.  If we deny (or cannot comply with) the Consumer Request, we will explain why.  For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity.  We do not charge a fee to process or respond to your Consumer Request unless such request is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why and provide you with a cost estimate before completing your request.

 

12.   CONTACT INFORMATION

Contact for General Inquiries, Consumer Requests, and Requests to Change Information

 

If you provided us with Personal Information and would like to exercise your access, data portability, deletion or other disclosure rights, change your information, or unsubscribe from an e-mail subscription, please just contact us in one of the following methods.

 

E-mail: brioche@galaxydesserts.com

Telephone: +1 (800) 894-2881

Mail: 1100 Marina Way South – Suite D  RICHMOND,CA 94804

Attn: Customer Service