ComplianceKitchen Privacy Policy

1. Information We Collect

1.1 Personal Data You Provide

We may collect personally identifiable information that you voluntarily provide to us when you register for the Service, contact us, or otherwise interact with the Site or Service. This may include:

• First and last name
• Email address
• Business name and address
• Phone number
• Payment and billing information (processed by third-party payment processors; we do not store full payment card details)
• Employee information you enter into the Service for compliance tracking purposes
• Any other information you choose to provide

1.2 Automatically Collected Data

When you access the Site or Service, certain information is automatically collected by our systems, including:

• Internet Protocol (IP) address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed, time spent on pages, and other usage statistics
• Device identifiers
• Cookie data and similar tracking technologies (see Section 5 below)

1.3 Data from Third Parties

We may receive information about you from third-party sources, such as analytics providers, advertising partners, and payment processors, and combine this with information we collect directly from you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and provide the Service;
• To process transactions and send related information, including purchase confirmations and invoices;
• To send administrative information, such as updates to our terms, conditions, and policies;
• To respond to your inquiries and provide customer support;
• To send you marketing and promotional communications (you may opt out at any time);
• To monitor and analyze usage and trends to improve the Site and Service;
• To detect, prevent, and address technical issues, fraud, and security breaches;
• To comply with applicable legal obligations;
• To enforce our Terms of Service and other agreements.

3. Disclosure of Your Information

We may share your information in the following circumstances:

• Service Providers: We may share your information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting, customer service, and marketing assistance. These third parties are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Legal Requirements: We may disclose your information where required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency), including to meet national security or law enforcement requirements.
• Protection of Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.
• With Your Consent: We may disclose your information for any other purpose with your consent.

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties for their own marketing purposes.

4. Data Retention Practices

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need your personal data, we will securely delete or anonymize it.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Cookies are small data files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Site or Service.

We use the following types of cookies:

• Essential Cookies: Necessary for the operation of the Site and Service.
• Analytics Cookies: Allow us to recognize and count visitors and see how they move around the Site. This helps us improve the way the Site works.
• Functionality Cookies: Used to recognize you when you return to the Site and to personalize content.

Website Visitor Identification

When you visit our marketing sites (compliancekitchen.org and compliancekitchen.ai), we use cookies and similar technologies from third-party visitor-identification providers to understand how businesses find and use our site. Our current provider is Leadsy. If Instantly Website Visitor Identification is configured on the Site, Instantly is also a provider. This applies to our marketing website only, not the ComplianceKitchen app.

What we collect

• Usage information: pages you view, time on page, links clicked, the site that referred you, and visit dates and times.
• Device information: IP address, browser type, operating system, and cookie or device identifiers.
• Business contact information: our providers may match a visit with information from their own business data sources and third-party data partners. That can include your name, business email, job title, company, LinkedIn profile, and general location (city or state). This matching only applies to visits from the United States.

How we use it

We use this information to understand which restaurants and food businesses are interested in ComplianceKitchen and to occasionally contact business visitors about our products and services by email. We do not use it to make decisions that have legal or similarly significant effects on you.

Sale and sharing

Under the California Consumer Privacy Act, as amended by the CPRA, combining website activity with third-party data for outreach or cross-context behavioral advertising may count as “selling” or “sharing” personal information. We do not sell personal information for money. To the extent this activity counts as a sale or sharing, you have the right to opt out.

Your choices

Click “Do Not Sell or Share My Personal Information” in our website footer to opt out of visitor identification. We also honor Global Privacy Control (GPC) browser signals as an opt-out request. Email hello@compliancekitchen.org with the subject “Opt Out” to opt out, ask what we hold about you, or ask us to delete it. We will not discriminate against you for using these rights. You can unsubscribe from any email we send using the link or instructions in that email. You can also block or delete cookies in your browser settings.

We keep visitor information only as long as we need it for these purposes. We require our providers to process it only on our behalf, under written data processing agreements.

6. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties. Therefore, we cannot guarantee complete security if you provide personal information to us.

7. Your Privacy Rights Under California Law

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing: To the extent website visitor identification counts as a sale or sharing under CCPA/CPRA, you may opt out via the “Do Not Sell or Share My Personal Information” link in our footer, by emailing us, or through a Global Privacy Control (GPC) signal. See Website Visitor Identification.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to certain purposes.

To exercise these rights, please contact us at hello@compliancekitchen.org. We will respond to your request within 45 days as required by law.

8. Children’s Privacy

The Site and Service are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to remove that information from our servers.

9. Links to Third-Party Websites

The Site and Service may contain links to third-party websites. We are not responsible for the privacy practices or the content of those websites. We encourage you to review the privacy policies of any third-party websites you visit.

10. Contact Us for Privacy

If you have questions or comments about this Privacy Policy, or wish to exercise your privacy rights, please contact us at:

ComplianceKitchen
Email: hello@compliancekitchen.org
Website: compliancekitchen.ai