California Privacy Notice

Effective date: May 01, 2022

This California Privacy Notice provides notice at collection to residents of the State of California (“California Consumers”), disclosures about our collection and treatment of California Consumer Personal Information, and a description of the privacy rights afforded to California Consumers under the California Consumer Privacy Act (“CCPA”) and other California laws and regulations.

This California Privacy Notice is a supplement to the Bob’s Red Mill Privacy Policy and is governed by our Terms and Conditions. In this notice, the term “Personal Information” has the definition given in the CCPA. Unless otherwise defined below, terms used in this notice have the same meanings as our Privacy Policy and Terms and Conditions.

Notice at Collection and Disclosure of Privacy Practices

Categories of Personal Information

During the preceding 12 months, we have collected Personal Information from these categories: identifiers, commercial history, and internet and similar activity.

Sources of Personal Information

During the preceding 12 months, we have collected Personal Information from these sources: from you with your consent or indirectly from your use of our Services, in some cases with your consent and otherwise with a legitimate interest.

Purpose of Collection

We collect this Personal Information for business or commercial purposes including to provide you with the products and services you request, market our products and services to you according to your preferences or analyze and improve our Services. Please see our Privacy Policy for more details.

Children’s Privacy

Bob’s Red Mill does not knowingly collect any Personal Information from individuals under the age of 16. If we learn that we have inadvertently collected Personal Information from someone younger than 16 we will promptly delete that information from our systems.

Disclosed Personal Information

During the preceding 12 months, we have disclosed the following categories of Personal Information for a business or commercial purpose: identifiers, commercial history, and internet and similar activity. We disclosed this Personal Information to our service providers, affiliate businesses, advertising providers, law enforcement, or for certain business transition purposes as described in our Privacy Policy.

Personal Information Retention

Bob’s Red Mill retains Personal Information for the minimum period necessary to achieve our purposes. Please see our Privacy Policy for details.

Shared or Sold Personal Information

Some of our Services may involve sharing your Personal Information for cross-contextual behavioral advertising purposes or selling your Personal Information to third parties. During the last 12 months we may have shared or sold all categories of Personal Information that we collected about a California Consumer. We engage in these practices to market our products and services to existing and potential new customers. To opt-out of sharing or selling your Personal Information, please follow the Do Not Sell or Share My Personal Information link on our website homepage or email [email protected].

Notice of Privacy Rights

If you are a California Consumer, you have the following rights over your Personal Information:

Right to Correct

You have the right to request that we correct inaccurate Personal Information about you on our systems. If you become aware that the Personal Information that we hold about you is incorrect or no longer current, please inform us and we will update our records.

Right to Deletion

You have the right to request that we delete any of your Personal Information that we collected from you and retained, with certain exceptions. If you request deletion, we may permanently delete, deidentify, or aggregate the Personal Information as a response. We will confirm the Personal Information to be deleted prior to its deletion, and we will notify you when your request is complete.

Right to Access

You have the right to receive a copy of your Personal Information on our systems in a portable and readily usable format. You can access some of your Personal Information through the Services, and we will assist you with your other access needs. You may also request details about the types of Personal Information we process, why we process it, and any third parties we work with to collect your Personal Information on our behalf.

Note that your request is limited to specific pieces of Personal Information we have collected about you over the past 12 months, and we are only required to respond to two such requests within a 12-month period. We are legally prohibited from disclosing copies of certain pieces of Personal Information (e.g., government identification numbers, financial account information, and passwords or security questions and answers) because the disclosure would create a substantial, articulable, and unreasonable risk to the security of the information, our business systems, or your account.

Right to Disclosure

You have the right to request that we disclose information to you about our collection and use of your Personal Information over the past 12 months, such as (i) the categories of Personal Information we have collected about you; (ii) the categories of sources for the Personal Information we have collected about you; (iii) our business purpose for collecting or selling that Personal Information; (iv) the categories of third parties with whom we share that Personal Information; and (v) if we sold or disclosed your Personal Information for a business purpose, two separate lists stating (a) for sales, the Personal Information categories that each category of recipient purchased; and (b) for disclosures, the Personal Information categories that each category of recipient obtained. We are only required to respond to a certain number of disclosure requests within a 12-month period.

Limited Use and Disclosure of Sensitive Personal Information

We do not seek to collect sensitive Personal Information from any consumer. If you choose to provide us with sensitive Personal Information, we will only use it to provide you with the products and services you request. In no case do we disclose any sensitive Personal Information for the purpose of inferring characteristics about you. If this ever changes in the future, we will update this notice and provide you with methods to limit our use and disclosure of your sensitive Personal Information.

Right to Opt-Out of Automated Processing

Bob’s Red Mill does not use automated processing of Personal Information or “profiling” to provide the Services. If this changes in the future, we will update this notice and provide you with a method to opt-out.

Do Not Sell or Share My Personal Information

Some of our Services may involve the sale of Personal Information to a third party or sharing your Personal Information for cross-contextual behavioral advertising purposes. To opt-out of sharing or selling your Personal Information, please follow the Do Not Sell or Share My Personal Information link on our website homepage or email [email protected].

Right to Nondiscrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by law, we will not: (i) deny you goods or services; (ii) charge you different prices or rates for goods or services; (iii) provide you a different level or quality of goods or services; (iv) retaliate against you as an employee, applicant for employment, or independent contractor for exercising your privacy rights; or (v) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, because you exercised a right under the CCPA.

Right to Disclosure of Marketing Information

Under California’s Shine the Light Act (CA Civ. Code sections §§ 1798.83-1798.84), you are entitled to request certain disclosures regarding Personal Information sharing with affiliates and/or third parties for marketing purposes.

California Consumers can exercise these rights by submitting a request to [email protected] or through our online form.

Bob’s Red Mill may only legally fulfill a request when we have sufficient information to verify that the requester is the person or an authorized representative of the person about whom we have collected Personal Information, and to properly understand, evaluate, and respond to the request. We do not charge a fee to process or respond to a verifiable request unless we have legal grounds to do so, such as requests that are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Contact Bob’s Red Mill

California Consumers may exercise their privacy rights, submit a complaint, or ask questions about our privacy practices by: