At Cookworks®, we respect the privacy of our users and customers. This Privacy Policy explains how we collect, use, and protect personal information received through our website and our products and services.
Please take a moment to read this policy carefully. By visiting our website, you agree to the terms of this Privacy Policy.
Collection of Personal Information
We collect personal information in a few different ways:
- Direct collection – When you provide information directly to us, such as creating an account, making a purchase, contacting customer service, or participating in surveys, contests, or promotions.
- Passive collection – We may use tracking tools like browser cookies and web beacons to collect information about your interactions with our website. This helps us improve the performance and customize your browsing experience.
- Social media – If you interact with our social media accounts like Facebook, Instagram, and Twitter, we may collect information available on those platforms depending on your settings.
The types of personal information we collect may include:
- Contact details – Such as name, email address, postal address, and phone number.
- Account credentials – Such as usernames, passwords, and security questions for our website or apps.
- Demographics – Information like age, gender, location, and language preferences.
- Interactions – Details about how you use our website, products, and services.
- Billing and payment data – Payment information like credit/debit card numbers and billing address.
- Other – Information you voluntarily provide, such as diet preferences, household size, or anything mentioned in surveys.
We only collect information relevant to our business relationship with you.
Use of Personal Information
The personal information we collect allows us to provide, improve, and develop our products and services. We may use it for functions like:
- Order fulfillment – Processing orders, shipping products, and providing related customer service.
- Account management – Creating and managing user accounts on our website and apps.
- Communication – Sending product updates or announcements and replying to inquiries.
- Analytics – Understanding how our products, services, and website are being used so we can improve them.
- Advertising – Delivering and measuring the effectiveness of advertisements.
- Security – Detecting, preventing, and responding to fraud and abuse.
- Legal compliance – Complying with applicable laws and corporate policies.
We only process your personal information when we have a valid legal basis to do so, including:
- When you have consented to the processing.
- To fulfill contractual obligations like processing your order.
- To comply with legal requirements.
- To serve our legitimate business interests.
Sharing of Personal Information
We may share your personal information with select third parties, including:
- Service providers and contractors – Such as payment processors, shipping companies, marketing partners, and website hosts, who help us operate our business and website.
- Law enforcement agencies – If required by law or if we believe disclosure is necessary to prevent harm or financial loss.
- Sale or merger of business – If we sell or transfer part or all of our business, we may share information with the acquiring or merging company. We will notify you of any changes in ownership and how your information may be used.
We do not share or sell your personal information to any third parties for their own marketing purposes without your explicit consent.
Protection of Personal Information
We utilize a variety of security technologies and procedures to help protect your personal information from unauthorized access or disclosure. Measures include:
- Encryption of sensitive customer information during transmission and storage.
- Secure servers behind firewalls and threat detection systems.
- Access controls that restrict data access to authorized personnel only on a need-to-know basis.
- Regular testing and auditing to identify potential vulnerabilities and ensure security controls are functioning properly.
However, no system can be 100% secure. We cannot guarantee the absolute security of your information. You play a role too – it is important to maintain the confidentiality of your username, password, and account information. Let us know immediately if you suspect any unauthorized access.
Your Privacy Rights
You have certain privacy rights related to the personal information we hold about you. These include rights to:
- Access your personal data
- Request corrections to inaccurate or incomplete data
- Object to processing of your personal data
- Request erasure of your personal data
- Restrict processing in certain circumstances
- Receive your personal data to transfer elsewhere
If you wish to exercise any of these rights, please contact us using the information below. We will respond to requests in line with applicable law and our policies.
Cookies and Tracking Technologies
The Cookworks® website uses automatic data collection tools like cookies, web beacons, pixels, and other tracking technologies. These help provide and improve our services, customize your browsing experience, monitor site analytics, and deliver relevant advertising.
You can control your cookie preferences through your browser settings and other tools. Declining certain cookies may impact the performance of the website and limit certain features and functionality.
Changes to this Policy
We may change this Privacy Policy from time to time by posting an updated version and revising the effective date. Any changes will become effective when the revised policy is posted. Your continued use of our website, products, or services after any changes constitutes acceptance of the revised policy.
Children’s Privacy
Our website and products are not directed at children under 16. We do not knowingly collect or solicit personal data from children. If we discover personal data from a child, we will promptly delete it, unless we are legally obligated to retain it. Parents may contact us for removal of a child’s data.
International Data Transfers
We are a global company and personal information may be stored and processed in countries where we operate that have less stringent data protection laws than your country of residence. We take measures to ensure adequate safeguards are in place to protect information as required by applicable law.
Addendum for California Residents
This section provides additional details about the personal information we collect and use for California residents, as required under the California Consumer Privacy Act (CCPA).
Right to Know and Delete
California residents have the right to request details about the categories of personal information we collect, use, disclose, and sell. You also have the right to request deletion of personal information we have collected from you.
Right to Non-Discrimination
We will not discriminate against you for exercising your rights under the CCPA. You still have the right to use our services even if you exercise your privacy rights.
Authorized Agent
You can designate an authorized agent to make privacy rights requests on your behalf by providing the agent signed permission to act. We may require verification of authenticity to research requests from agents.
Verification Process
Requests for access to or deletion of personal information will require identity verification to ensure security. We will match at least two data points provided by you with our records to confirm your identity.
Categories of Personal Information
In the past 12 months, we have collected the following categories of personal information about California consumers:
- Identifiers – Such as name, address, email, account usernames, and IP address.
- Demographic information – Such as age, gender, household data.
- Commercial information – Such as products purchased, order history, and payment information.
- Internet activity – Such as browsing history, search history, clicks/interactions with advertisements.
- Geolocation – Physical location information from devices.
- Audio/visual data – Such as call and video recordings for customer service.
- Professional/employment info – Such as company, title, occupation.
- Inferences – Profiles reflecting consumer preferences, characteristics, predispositions.
Sources of Information
We collect the above categories of personal information from:
- Direct consumer interactions – Creating accounts, purchases, product registrations, communications
- Website activity – Information collected automatically from use of the site.
- Public records – Information from government entities and other public sources.
- Social media platforms – When consumers interact with our social media accounts.
- Third-party sources – Information supplied by partners, marketing companies, and advertisers.
Use of Information
The primary uses of collected personal information are:
- Providing, managing, and developing our services.
- Enhancing the customer experience and improving performance.
- Marketing and advertising tailored content.
- Communications, promotions, surveys, and other initiatives.
- Detecting and protecting against malicious activity and abuse.
- Debugging errors and performing analytics.
- Complying with legal obligations.
Sharing and Disclosure
In the past 12 months, we have disclosed the following categories of California resident personal information with third parties for our business purposes:
- Identifiers
- Demographic information
- Commercial information
- Internet activity
We have not sold any California resident personal information in the past 12 months.
Your Rights
California residents have the right to:
- Request details about personal information collected, used, and disclosed over the past 12 months.
- Request deletion of personal information.
- Opt-out of sale/sharing of personal information. (Note: we do not sell data).
- Non-discrimination for exercising CCPA rights.
To make privacy rights requests under the CCPA, please contact us as outlined in the main Privacy Policy or the California Addendum section. We aim to acknowledge requests within 10 days and provide substantive responses within 45 days as required by law.
