Additional information for California Residents

Levain Bakery is providing the following additional details regarding the categories of personal information about California residents (“consumers” or “you”) that we collected and disclosed in the preceding 12 months. We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this Privacy Policy. We collect personal information, which means information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“personal information”). This California Policy does not apply to personal information we collect when we are acting as a service provider to process information on behalf of our customers to whom we provide services.

For the purposes of this California Policy, personal information does not include:

  • Publicly available information from government records.
  • Deidentified or aggregated consumer information.
  • Information excluded from the CCPA’s scope, such as:
    1. Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data;
    2. Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), andtheDriver’s Privacy Protection Act of 1994.
  • Workforce-related personal information collected from California-based job applicants, team members, contractors, or other Levain Bakery personnel. California job applicants can review Levain Bakery’s Notice at Collection for California Team Members and Applicants for more information.

In particular, we may have collected the following categories of personal information from consumers within the last twelve (12) months:

Category
Examples
Business Purpose
Collected
Source of Collection
A. Identifiers.
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
  • To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.
  • To provide, support, personalize, and develop our website, products, and services.
  • To create, maintain, customize, and secure your account with us.
  • To process your requests, purchases, transactions, and payments and prevent transactional fraud.
  • To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
  • To personalize your website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our website, third-party sites, and via email or text message (with your consent, where required by law).
  • To help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
  • For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
  • As described to you when collecting your personal information or as otherwise set forth in the CCPA.
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our website users/consumers is among the assets transferred.
YES
  • Directly from you. For example, from forms you complete or products and services you purchase.
  • Indirectly from you. For example, from observing your actions on our website.
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
[See Above]
YES
[See Above]
C. Protected classification characteristics under California or federal law.
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
[See Above]
NO
[See Above]
D. Commercial information.
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
[See Above]
NO
[See Above]
E. Biometric information.
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
[See Above]
NO
[See Above]
F. Internet or other similar network activity.
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
[See Above]
YES
[See Above]
G. Geolocation data.
Physical location or movements.
[See Above]
NO
[See Above]
H. Sensory data.
Audio, electronic, visual, thermal, olfactory, or similar information.
[See Above]
NO
[See Above]
I. Professional or employment-related information.
Current or past job history or performance evaluations.
[See Above]
NO
[See Above]
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
[See Above]
NO
[See Above]
K. Inferences drawn from other personal information.
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
[See Above]
YES
[See Above]

No Sale

In the preceding twelve (12) months, Levain Bakery has not sold personal information as defined or as contemplated by the CCPA nor does it sell personal information of minors under the age of 16.

Your California Privacy Rights

As a California resident, you may be able to exercise the following rights regarding the personal information about you that we have collected, subject to limitations per law:

The Right to Access/Know
You have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity:
  • The specific pieces of personal information we have collected about you;
  • The categories of personal information we have collected about you;
  • The categories of sources of the personal information;
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
  • The categories of personal information we have sold about you (if any), and the categories of third parties to whom the information was sold; and
  • The business or commercial purposes for collecting or, if applicable, selling the personal information.
The Right to Request Deletion
You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
The Right to Opt Out of Personal Information Sales
You have the right to direct us not to sell personal information we have collected about you to third parties now or in the future.
If you are under the age of 16, you have the right to opt in, or to have a parent or guardian opt in on your behalf, to such sales.
The Right to Non-Discrimination
You have the right not to receive discriminatory treatment for exercising these rights.
Please note, however, that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner.
“Shine the Light”
California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code §1798.83).

How to Submit a Verifiable Request

Levain Bakery will respond to requests in accordance with the CCPA if it can verify the identity of the individual submitting such request. California Consumers can exercise these rights by email at info@levainbakery.com. We may not be able to comply with your request if we are unable to confirm your identity or connect the information you submit in your request with Personal Information in our possession. If you need to access this Policy in an alternative format due to having a disability, please contact info@levainbakery.com.

Authorized Agents

In certain circumstances, you are permitted to use an authorized agent (as defined by the CCPA) to submit requests on your behalf through the designated methods set forth in this supplemental California Notice where we can verify the authorized agent’s authority to act on your behalf. For consumer requests, we require the following for verification purposes:

  • a power of attorney valid under the laws of California received from you or your authorized agent; or
  • sufficient evidence to show that you have:
    1. provided the authorized agent signed permission to act on your behalf; and
    2. verified your own identity directly with us pursuant to the instructions set forth in this California Notice; or directly confirmed with us that you provided the authorized agent permission to submit the request on your behalf.