Last revised and effective: 15 November 2023

We respect your rights to privacy and protection of your personal information.

International Coffee & Tea, LLC and Super Magnificent Coffee Company Ireland Ltd d/b/a The Coffee Bean & Tea Leaf® (“Company”, “we” or “us”) apply this Privacy Policy (“Policy”) to information we collect when you use our websites, mobile applications and other online products and services (collectively, the “Services”) or when you otherwise interact with us. This Policy does not apply to websites or services that are not owned by us and are operated by third parties.

This Policy applies to all users accessing our Services and may be modified from time to time. If our information practices change, we will notify you by revising the date at the top of the Policy and, in some cases, we may provide you with additional notice, such as adding a statement to our homepage or sending you an email notification. We encourage you to review the Policy whenever you access the Services or otherwise interact with us to stay informed about our information practices and the ways you can help protect your privacy. If you have a question about how your personal information is being used, you can contact us through the methods provided in the “Contact Us” section at the end of this Policy.

Please note that this Privacy Policy does not apply to personal information processed by our franchisees’ websites located at http://cofeebeanhawaii.com/ and https://www.coffeebeanlv.com/. Please review their privacy policies to learn more about their information practices.

Notice at Collection

We may collect or process various categories of personal information. The sections titled “Information We Collect” and “Personal Information Disclosure for California, Connecticut, Colorado, Utah and Virginia Residents” contain information on the categories of personal information collected and our disclosure practices. As an overview, we collect identifiers; financial information; commercial information; internet or other electronic network activity information; audio, electronic, visual, or similar information; inferences created using categories of personal information we have collected; and sensitive personal information such as precise geolocation information from your mobile device, and account log-in information. We collect this information to provide, maintain and improve our Services, including your in-store and online ordering experience, and for other reasons listed in the “Use of Information” section below. We may also collect certain personal information from job applicants and franchise applicants for the purposes of evaluating your application, some of which may be considered sensitive personal information, such as your employment, financial information, education, health and disability, government or state ID, or information obtained from references. We only collect sensitive personal information to provide our Services or review your job application or franchise partner application, and we delete this information as soon as those purposes are complete. In order to provide you with more personalized and relevant content, we partner with third party advertising and analytics partners, which may be considered a “sale” or “sharing” as those terms are defined under applicable privacy laws. We may sell or share identifiers, commercial information, employment information, financial information, internet or other electronic network activity information, sensitive personal information, and inferences drawn from any of the information listed above. To exercise your right to ask that we do not sell or share your personal information or sensitive personal information, or to exercise any rights relating to our processing of your personal information, please click the “Your Privacy Choices Link” here, which will direct you to our Webform. We only keep personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

Information We Collect

Information You Provide to Us

We collect information you provide directly to us. We may collect personal information, which is defined as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, device, or household. For example, we may collect your name, email address, postal address, phone number, credit card number, gender, day and month of birth, personal interests, and other such information when you visit our Services, place an order online or by phone, contact us with a question or participate in a contest, promotion or survey. We maintain a record of your product interests and the purchases you make online or by phone or in-store. If you are a job applicant, we may collect certain personal information from job applicants for the purposes of evaluating your application, some of which may be considered sensitive personal information, such as your employment, education, health and disability, government or state ID, or information obtained from references.
We have a legitimate interest in providing account related functionalities to our users as well as receiving, and acting upon, your feedback or issues. Accounts can be used for easy checkout and to save your preferences and transaction history. If you create an account with us, you are responsible for maintaining the security of your password at all times. You are also responsible for activity that occurs while logged into your account. We also have a legitimate interest in contacting our clients and communicating with them concerning normal business administration such as projects, services, and billing. If you participate in a promotion or survey, we have a legitimate interest in using this information to operate the survey and to understand your preferences.
You have choices about the information we collect. When you are asked to provide personal information, you may decline. However, if you choose not to provide information that is necessary to provide a product or Service, you may not be able to use some of our products or Services.

Information We Collect Automatically When You Use the Services

We may combine all of this information with information about you that we acquire from our marketing partners or unrelated third parties. When you access or use our Services, we automatically collect certain information, including, but not limited to:

Transaction Information: When you place an order or make a purchase, we collect information about the transaction, such as the items ordered, the transaction amount, the payment information, the delivery address, and the order date. We use your information to perform our contract to provide you with products or services.
Log Information: We collect log information about your access and use of our Services, such as your domain name, the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to our Services. We have a legitimate interest in monitoring our networks and the visitors to our websites. Among other things, it helps us understand which of our services is the most popular.
Device Information: We collect information about the computer or mobile device you use to access our Services, such as the hardware model, operating system and version, unique device identifiers, mobile network information, and browsing behavior. We have a legitimate interest in identifying unique visitors and understanding how users interact with us on their devices.
Precise Geolocation Information: We may collect information about the precise location of your device or computer each time you access or use our Services, or otherwise consent to the collection of this information. For more details, please see “Your Rights and Choices” below. We have a legitimate interest in understanding our users and providing tailored services. In some contexts, our use is also based upon your consent to provide us with precise geolocation information.
Information Collected by Cookies and Other Tracking Technologies: We and our service providers use various technologies, including cookies and web beacons, to collect information about you and your interaction with our Services, including information about your browsing and purchase behavior. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience on these Services, see which areas and features of our Services are popular, and count visits. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits and understand usage and campaign effectiveness. For more information about cookies, and how to disable them, please see the "Cookies and Advertisements" section below. We have a legitimate interest in making sure our website operates efficiently, engaging in behavior-based advertising, and capturing website analytics.

Information We Collect From Other Sources

We may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources, and link or combine that with information we collect about you. For example, if you create or log into your account through a social media site or if you associate your social media account with your Company account or with your employment application with us, we will have access to certain information from that site, such as your name, account information and friends lists, in accordance with the authorization procedures determined by such social media site. For a more detailed overview of the information we collect, please visit the “Personal Information Disclosure for California, Colorado, Connecticut, Utah, and Virginia Residents” section of this Policy.

Additional Information Collected from Franchise Partners and Franchise Applicants

In addition to the information outlined above, we will collect information directly from you regarding your desired location, development site, previous restaurant owner experience, and whether you have the required liquidity per unit required. We will also collect your contact information; demographic information, such as age and gender; employment information, such as information about your employer or business, including any brands you currently operate; financial information, such as bank account information; total net worth, available liquid capital, and credit history.

Use of Information

In addition to the purposes and uses described above, we use personal information for the following business and commercial purposes to:

Provide, maintain and improve our Services, including your in-store and online ordering experience;
Provide and deliver the products and services you request, process orders, transactions and send you related information, including confirmations and receipts;
Send you technical notices, updates, security alerts and support and administrative messages;
Investigate and prevent fraudulent transactions and other illegal activities;
Link or combine with information we get from others to help understand your needs and provide you with better service;
Assess and respond to employment applications;
Carry out any other purpose for which the information was collected;
Respond to your comments, questions, requests and provide customer service;
Communicate with you about products, services, offers, promotions, rewards, and events offered by us and others, and provide news and information we think will be of interest to you (for information about how to manage promotional communications, please see “Your Rights and Choices” below);
Monitor and analyze trends, usage and activities in connection with our Services;
Personalize and improve the Services and provide advertisements, content or features that match user profiles or interests; and/or
Process and deliver contest and promotion entries and rewards.

Information We Disclose

We may disclose information about you with third parties for the following purposes or as otherwise described in this Policy, and where permitted by applicable law:

With third-party vendors, consultants and other service providers who need access to such information to carry out work on our behalf, pursuant to written contracts we have with them;
In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule or regulation;
If we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of Company or others;
In connection with, or during negotiations of, any merger, sale of Company assets, financing or acquisition of all or a portion of our business by another company; and
With your consent or at your direction.

We may also disclose aggregated or de-identified information, which cannot reasonably be used to identify you. We maintain and use all de-identified information in de-identified form. We do not attempt to reidentify it except to ensure our deidentification processes are in compliance with applicable law.

We may also “sell” or “share” your personal information as those terms are defined under applicable privacy laws, unless you have opted out. Please see here for more information.

Social Media Disclosures

The Services may offer social media disclosure features and other integrated tools (such as the Facebook “Like” button), which let you disclose actions you take on our Services with other media, and vice versa. Your use of such features enables the disclosure of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social media disclosure features, please visit the privacy policies of the entities that provide these features.

How We Respond to “Do Not Track” and Opt-Out Preference Signals

Some website browsers have a “Do Not Track” technology that transmits a “Do Not Track” header to the websites you visit with information indicating that you do not want to be tracked. The information collection and disclosure practices and the choices that we provide to you will continue to operate as described in this privacy policy regardless of whether a Do Not Track signal is received. We currently do not recognize opt-out preference signals, such as the Global Privacy Control. To download the Global Privacy Control, you may visit www.globalprivacycontrol.org. Note that any signals will be device or browser-specific.

Consent to Transfer

Company is based in the United States and Ireland, and the information we collect is governed by U.S., European Union, and Irish law. Because we are a global company, the data that we collect from you may be transferred to, and stored at, a destination outside the United States. Data we collect may also be processed by staff operating outside the United States who work for us or for one of our suppliers or service providers. Such staff may be engaged in, among other things, the fulfillment of your order, the processing of your payment details and the provision of support services. By submitting your personal information, you agree to this transfer, storing or processing. We will take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

If you are visiting our Site from a location outside of the U.S., your connection may be through and to servers located in the U.S. Any information you provide during your visit will be processed and maintained on our server and other internal systems located within the U.S. or otherwise as described above. You acknowledge you understand that by providing your personal information to us, your personal information (i) will be used for the uses identified above in accordance with this Privacy Policy, and (ii) may be transferred to the U.S. as indicated above, in accordance with applicable law. Where this is the case, we will take appropriate measures to protect information about you in accordance with this Policy. For example, where personal information is transferred from the European Economic Area, the United Kingdom, or Switzerland to areas which have not been determined to have an adequate level of protection, we primarily use European Union Commission Standard Contractual Clauses. For transfers between other jurisdictions, we may rely on other legal mechanisms for international transfer, as appropriate under the relevant law. Please contact us for more information and to receive a copy of the Standard Contractual Clauses we may utilize.

Please contact us for more information.

Cookies and Advertisements

Our website uses “cookies,” which are small data files that are stored on your computer when you visit a website. Cookies enable you to shop on our website and may be used in a variety of ways to enhance or personalize your online browsing and shopping and email communication experience. We also use cookies to help determine which of our ads are shown to you on other websites.

You can set your browser not to accept cookies or to notify you when you are sent a cookie, giving you the opportunity to decide whether or not to accept it. If you do not accept cookies, however, you will not be able to access your account information or make purchases on our Services.

Advertising and Analytics Services Provided by Others

We may allow others to serve advertisements on our behalf across the Internet and to provide analytics services. These entities may use cookies, web beacons and other technologies to collect information about your use of the Services and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked and conversion information. This information may be used by Company and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit the Digital Advertising Alliance’s website at www.aboutads.info/choices. You can also use the mobile app to control interest-based advertising on apps on your mobile device, available on the Apple Store, Google Play, and Amazon’s Appstore. Mobile app guidance is available at https://digitaladvertisingalliance.org/app. Additionally, you may remove yourself from the targeted advertising of companies within the Network Advertising Initiative by visiting https://optout.networkadvertising.org/?c=1.

To help facilitate the delivery of relevant content, we use Google Analytics. Google Analytics uses cookies to report on user interactions on our and others’ websites. We use the information collected for optimizing marketing, refining advertising, and/or programming strategies, and generally improving user experience. For more information about Google Analytics and how it collects and processes information, please visit: https://policies.google.com/technologies/partner-sites and instructions on opting out of Google Analytics using a specific plug-in is available at the following link: https://tools.google.com/dlpage/gaoptout. Note that this opt-out is specific to Google activities and does not affect the activities of other ad networks or analytics providers that we may use.

We may also work with third parties to serve you ads as part of a customized campaign on third-party platforms (such as Facebook, Google, or Twitter). As part of these ad campaigns, we may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms to allow us to learn about your interests and to serve you advertisements customized to your interests. Note that the third-party platforms may offer you choices about whether you see these types of customized advertisements. We do not endorse and are not responsible in any way for the privacy practices of these third-party platforms.

Financial Incentives

We may offer various financial incentives from time to time, primarily requesting identifiers and contact information as part of an offer, though we may also request information from your customer records. The terms of the financial incentive, including the personal information requested in connection with the offer, will be provided at the time you sign up for the financial incentive. We have calculated the value of the financial incentive by using the expense related to the offer, and the value of your data is the value of the offer presented to you. You may withdraw from any of the financial incentives at any time. For offers involving your e-mail, you may unsubscribe. For all other offers, you may follow the instructions provided with the offer.

Your Rights and Choices

For Residents of California, Colorado, Connecticut, Utah, and Virginia

Depending on your state of residence or, you may have the rights and choices below regarding your personal information. In addition to these choices/rights, please visit the “Personal Information Disclosure for California, Colorado, Connecticut, Utah and Virginia Residents Disclosure” section below.

Right to Know and Access Your Personal Information. Upon reasonable request by residents of California, Colorado, Connecticut, Utah and Virginia, we will grant you access to the categories or specific pieces of personal information that we have about you, subject to certain exceptions and limitations pursuant to applicable law. You may be entitled to ask us for a notice describing what categories of personal information (if any) we sell, share, or disclose with third parties or affiliates for direct marketing. You may also be entitled to request a copy of your information in a portable format (the right to data portability).

Right to Request Deletion Of Your Personal Information. Typically we retain your personal information for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Residents of California, Colorado, Connecticut, Utah or Virginia may request that we delete your personal information by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.

Right to Request Correction of Your Personal Information. Residents of California, Colorado, Connecticut, or Virginia have the right to challenge the accuracy or completeness of your personal information and request that it be amended or rectified. You can review and change personal information related to your use of our Services (such as your name and contact information). To access your information in the mobile application, simply sign-in to your account using your email address and password, and you will be able to edit your personal information in your account profile. You may also contact us at coffeebean.com/contact-us for assistance with your account profile. Note that we may keep historical information in our backup files as permitted by law

Right to Opt-out of the Sale, Sharing, and Targeted Advertising. We may “sell” or “share” your personal information or sensitive personal information as those terms are defined under applicable privacy laws. If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you may have the right to opt-out of the sale or sharing of your personal information to third parties. We do not knowingly sell or share the personal information of individuals who we know are younger than 16 years old.

Right to Opt-out of Profiling Using Automated Decision-making Technology. Residents of California, Colorado, Connecticut or Virginia have the right not to be subject to a decision based solely on profiling by automated means, except under certain exceptions under local law.

Rights Concerning Your Sensitive Personal Information.

Residents of California have the right to limit the use and disclosure of their sensitive personal information if we use such sensitive personal information to infer characteristics about you. We only use sensitive personal information for the purposes for which it was provided; therefore, we already limit our use of such sensitive personal information to those purposes, and we do not offer a specific right to limit. Note that for precise geolocation information collected through a mobile device, if you do not wish to provide that information to us, you will need to update your settings. To do this on an iPhone, (1) go to Settings > Privacy > Location Services > and choose an app; (2) Select the app > tap on “location;” (3) Scroll down and slide the “Precise Location” toggle to Off. To do this on an Android, (1) go to Location Services > Google Location Accuracy; and (2) Toggle Improve Location Accuracy to Off.
Colorado, Connecticut, and Virginia residents are provided the right to opt-in to the collection/processing of sensitive personal information.
Please note that if you exercise your right to delete or limit our use of sensitive personal information, it may limit our ability to provide the Services where such information is necessary and will be subject to the limitations referenced in the “Right to Request Deletion of Your Personal Information” above.

Right to Non-Discrimination. We do not discriminate against individuals who exercise any of their rights described in this Policy.

Right to Withdraw Consent. In most situations our processing is not based upon your affirmative, opt-in consent. Residents of California, Colorado, or Connecticut have the right to withdraw consent to the continued use and disclosure of their personal information, subject to legal or contractual restrictions and reasonable notice. Please address written requests and questions about your rights to coffeebean.com/contact-us. You may submit a copy of the personal information that we hold about you through the “Your Privacy Choices Link”

To exercise any of these rights, you may submit a request using the “Your Privacy Choices Link” or by contacting us below.

Note that, as required by law, we will require you to prove your identity. We may verify your identity by asking you to provide personal identifiers that we can match against information we may have collected from you previously. We may need to follow up with you to request more information to verify identity. We may also ask you to provide a signed declaration confirming your identity. We will not use personal information we collect in connection with verifying or responding to your request for any purpose other than responding to your request.

Following a request, we will use reasonable efforts to honor your rights within the timeframe required under applicable law. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response. Residents of Colorado, Connecticut, and Virginia have the right to appeal a denial of their request by contacting us as described in the notice of denial. You can exercise this right by contacting us in the “Contact Information” section below. Residents of Colorado, Connecticut, or Virginia may designate an authorized agent to submit requests to exercise certain privacy rights on their behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us. If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of a completed Authorized Agent Designation Form indicating that you have authorization to act on the consumer’s behalf. If we do not receive both pieces of information, the request will be denied.

Additional Rights For California and Nevada Residents

California’s Shine the Light Law. If you are a California resident and would like more information concerning the categories of personal information (if any) we share with third parties or affiliates for those parties to use for direct marketing, please submit a written request to us using the information in the “Contacting Us” section below.

Nevada Residents. Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to third parties for commercial purposes; however, we do not sell the personal information of Nevada residents to third parties at this time.

Rights for Individuals Located in the European Economic Area (“EEA”), the United Kingdom (“U.K.”), or Switzerland

We process “personal data,” as that term is defined in the European Union’s General Data Protection Regulation (“GDPR”). If you are located in the EEA, U.K., or Switzerland, you have the following rights:

Right to Access Your Personal Information. You have the right to access information about the categories of personal information that we have about you, subject to certain exceptions and limitations pursuant to applicable law.

Right to Request Correction of Your Personal Information. You have the right to challenge the accuracy or completeness of your personal information and request that it be amended or rectified. You can review and change personal information related to your use of our Services (such as your name and contact information). To access your information in the mobile application, simply sign-in to your account using your email address and password, and you will be able to edit your personal information in your account profile. You may also contact us at coffeebean.com/contact-us for assistance with your account profile. Note that we may keep historical information in our backup files as permitted by law.

Right to Erasure. You have the right to request erasure of your personal information when such information is no longer necessary for the purpose for which it was collected, when you withdraw consent and no other legal basis for processing exists, or when you believe that your fundamental rights to data privacy and protection outweigh our legitimate interest in continuing the processing.

Right to Restrict Our Processing of Your Personal Information. This right applies if: there is a dispute about the accuracy of the data; the processing is unlawful; the processing is no longer necessary for the purposes for which it was collected but is needed by you for the establishment, exercise, or defense of legal claims; or if your request to object to processing is pending evaluation.

Right to Object to Processing of Your Personal Information. You may object to our processing of your personal information in the legitimate interests of ourselves or third parties by contacting us at the address described below.

Right to Obtain Information about Data Transfers. You have the right to obtain information about, and a copy of, the safeguards we use to transfer personal information across borders.

Right to Revocation Of Consent. In most situations our processing is not based upon your consent. That said, if we rely on your consent to process your personal information, you may revoke your consent to such processing.

Please address written requests and questions about your rights to coffeebean.com/contact-us. You may submit a copy of the personal information that we hold about you through our “Your Privacy Choices” link. You have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available here.

Additional Choices to Control Your Personal Information

Account Information. You may update, correct or delete information about yourself at any time by logging into your Company account on our mobile application. Please note, however, that we may retain certain information that you provide through our Services as required by law or for legitimate business purposes. We also may retain cached or archived copies of information about you for a certain period of time.

Promotional Emails. We want to communicate with you online if you want to hear from us. If you prefer not to receive promotional information, such as information about special offers and sales events, you can let us know by “unsubscribing” from any email communication or modifying your account. Additionally, you may contact us at 1.800.832.5323.

Mobile Application Users.

Text Messages. We sometimes distribute promotional text messages to devices of guests who have requested this information via an opt-in request. If you opt-in, you agree to receive recurring autodialed text messages from or on behalf of Company about promotions, special offers, and discounts at the phone number provided. Your consent is not required and is not a condition of any purchase. Further, we may send you transactional messages, such as payment confirmation and other informational messages, if you provide us your telephone number. Message and data rates apply. To opt-out of Company mobile messaging, reply “stop” to text messages. This will opt you out of all Company text message campaigns.
Push Notifications. You may at any time opt-out from further allowing Company to send you push notifications by adjusting the permissions in your mobile device.
Precise Geolocation. You may at any time opt- out from further allowing Company to access location data by adjusting the permissions in your mobile device.

Uninstall the Company Mobile Application. You can stop all further collection of information by the Company mobile application by uninstalling the Company mobile application. You may use the standard uninstall process available as part of your mobile device or via the mobile application marketplace or network. Note: If you uninstall the mobile application from your device, the Company unique identifier associated with your device will continue to be stored. If you re-install the application on the same device, Company will be able to re-associate this identifier to your previous transactions and activities.

Security

We take reasonable measures, including administrative, technical, and physical safeguards, to protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure due to the inherent risks of data transmission over the Internet. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you understand that any information that you transfer to us is done at your own risk. In the event that we are required by law to inform you of a breach to your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law. By using the Services or providing personal information to us, you agree that we can communicate with you regarding security, privacy, and administrative issues relating to your use of the Services.

Contacting Us

For questions about this Policy, to make choices about receiving promotional communications, to update your personal information or to place an order, you can contact us at:

coffeebean.com/contact-us
Privacy Web form

If you are not satisfied with our response to processing of your personal information by Super Magnificent Coffee Company Ireland Ltd, you have a right to lodge a complaint with our supervisory authority, Ireland’s Data Protection Commission – www.dataprotection.ie.

This Policy may be accessed using your browser’s audio readers.

Personal Information Disclosure for California, Colorado, Connecticut, Utah and Virginia Residents

Applicable law indicates that organizations should make certain disclosures, such as the categories of personal information collected, sold or transferred for “monetary or other valuable consideration,” shared, or disclosed for an organization’s “business purpose” (as those terms are defined under Applicable Law). The table below indicates the categories of personal information we collect and disclose in a variety of contexts. Please note that because this list is comprehensive, it may refer to types of information that we collect, share, and disclose about people other than yourself. For example, while we transfer credit card or debit card numbers for our business purpose in order to process payments for orders placed with us, we do not collect or transfer credit card or debit card numbers of individuals that submit questions through our website’s “contact us” page.

Personal Information Collected, Disclosed for a Business Purpose, or Sold About California, Colorado, Connecticut, Utah and Virginia Residents

Categories of Personal Information We Collect	Sources of Collection	To Whom We Disclose Personal Information for the Business and Commercial Purposes Outlined in the “Use of Information” Section Above
A. Identifiers – this may include real name, alias, postal address, unique personal identifier, online identifier, email address, account name, phone number, month/day of birth, driver’s license number, or other similar identifiers.	We collect this information directly from you when you visit our Services, place an order online or by phone, contact us with a question or participate in a contest, promotion, or survey.	Advertising networks Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Internet service providers Joint marketing partners Operating systems and platforms Other Service Providers Payment processors and financial institutions Professional services organizations, this may include auditors and law firms Social networks
B. Financial information – such as bank account number, credit or debit card number, or other financial information. Franchise applicants or partners: We may also collect information about your total net worth, available liquid capital, and ability to meet the liquidity per unit requirement.	We collect this information directly from you when you place an order online or by phone, contact us with a question or participate in a contest, promotion, or survey. We collect additional financial information to evaluate your franchise application or as part of your franchise partner relationship.	Affiliates or subsidiaries Other Service Providers Payment processors and financial institutions Professional services organizations, this may include auditors and law firms Government entities, as may be needed to comply with law or prevent illegal activity Data analytics partners Advertising networks
C. Commercial information – this may include information about products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. This may also include transaction information, as mentioned in the “Information We Collect” section.	We collect this information directly from you when you place an order online or by phone, contact us with a question or participate in a contest, promotion, or survey. We also collect this information indirectly from you by observing your actions on the Services.	Advertising networks Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Joint marketing partners Other Service Providers Payment processors and financial institutions Professional services organizations, this may include auditors and law firms Social networks
D. Internet or other electronic network activity information – this may include browsing history, search history, information regarding an individual’s interaction with an internet website, application, or advertisement, and device and log information, as mentioned in the “Information We Collect” section.	We collect this information indirectly from you by observing your actions on the Services.	Advertising networks Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Internet service providers Joint marketing partners Operating systems and platforms Other Service Providers Payment processors and financial institutions Professional services organizations, this may include auditors and law firms Social networks
E. Audio, electronic, visual, thermal, olfactory, or similar information	We collect this information directly from you when you visit the Services. We also collect this information indirectly from you by observing your actions on the Services	Other Service Providers Professional services organizations, this may include auditors and law firms Government entities, as may be needed to comply with applicable law or prevent illegal activity
F. Inferences drawn from any of the information listed above – this may include personal interests	We collect this information indirectly from you by observing your actions on the Services.	Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Internet service providers Joint marketing partners Operating systems and platforms Other Service Providers Professional services organizations, this may include auditors and law firms
G. Health Information – this may include disability information or vaccination status	We collect this information directly from you when you apply for a job with us.	Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Operating systems and platforms Other Service Providers Professional services organizations, this may include auditors and law firms
H. Professional or Employment Information – including current employer and job title, or any businesses you own or brands you manage.	We collect this information directly from you or from third party platforms (such as LinkedIn) when you apply for a job with us.	Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Operating systems and platforms Other Service Providers Professional services organizations, this may include auditors and law firms
I. Education Information – such as education history or level of education	We collect this information directly from you or from third party platforms (such as LinkedIn) when you apply for a job with us.	Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Operating systems and platforms Other Service Providers Professional services organizations, this may include auditors and law firms
J. Content of Communications – such as emails, texts, or phone calls	We collect this information directly from you when you contact us.	Affiliates or subsidiaries Business partners Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Operating systems and platforms Other Service Providers Professional services organizations, this may include auditors and law firms
K. Sensitive Personal Information – such as social security number, precise geolocation information, and content from your mobile device, and account log-in information	We collect this information directly from you or through third parties when you apply for a job with us or when you complete a franchise application or become a franchise partner.	Affiliates or subsidiaries Advertising networks Data analytics providers Government entities, as may be needed to comply with law or prevent illegal activity Operating systems and platforms Other Service Providers Professional services organizations, this may include auditors and law firms

Retention: We only keep the listed categories of personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

Selling or Sharing: We may “sell” or “share” the personal information outlined in sections A, B, C, D, F, J, and K as those terms are defined under applicable privacy law. We do not knowingly sell or share personal information of individuals who we know are younger than 16 years old, as we understand that term to be defined by applicable law