CA Privacy Notice
Effective: December 14, 2020
This CA Privacy Notice (the “CA Notice”) supplements the information contained in our policy and applies solely to individual residents of the State of California (“consumers” or “you”). If you partner with us as a delivery partner, please refer to the Driver policy for more information.
This CA Notice describes how we collect, use, disclose, and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).
Unless otherwise expressly stated, all terms in the CA Notice have the same meaning as defined in our Privacy Policy or as defined in the CCPA.
Personal Information Definition
When we use the term “personal information” in this CA Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. The term does not include information relating to job applicants, employees, contractors, delivery partners or other personnel of persianrestaurant.net; publicly available information from government records; deidentified, aggregated or anonymized information that is maintained in a form that is not capable of being associated with or linked to you; or any other information excluded from the CCPA’s scope (e.g. certain types of health or medical information). Any terms defined in the CCPA have the same meaning when used in this CA Notice.
Collection and Use of Personal Information
We collect personal information in connection with our Platform and Services for various purposes. For example, we use personal information to:
- Process your transactions or fulfill your requests
- Communicate with you
- Inform our marketing and advertising activities
- Optimize and improve our products and Services and to develop new products and Services
- For other business, operational and commercial purposes described in our Privacy Policy.
Please review the following sections of the Privacy Policy to learn more about the personal information we collect and the purposes for which we collect it: “Personal Information We Collect” and “How We Use Your Personal Information.”
| Category of Personal Information Collected | Collected | Categories of Sources |
|---|---|---|
| Identifiers, such as your name, address, phone number, email address or other similar identifiers. | X |
|
| California Customer Records (Cal. Civ. Code § 1798.80(e)), such as your name, address, phone number, credit card number or other payment account number (including the three [3] or four [4] digit validation code for your credit card). | X |
|
| Protected Classification Characteristics, such as age, gender or demographic group. | Solely if you participate in a voluntary survey* |
|
| Commercial Information, such as your ordering history, record of shopping or purchasing tendencies, and loyalty status or progress. | X |
|
| Internet/Network Information, such as your browsing history, search history, and information regarding your interaction with the Platform. | X |
|
| Geolocation Data, such as information about your physical location collected from geolocation features on your device, including your IP address and GPS (e.g. latitude and/or longitude). | X |
|
| Sensory Information, such as recorded calls with our customer care teams. | X |
|
| Inferences, including information generated from your use of the Platform reflecting your preferences. | X |
|
*persianrestaurant.net or service providers performing research on our behalf may collect information through voluntary surveys. The surveys may ask about background and behavior, including demographics information, to help us understand how our consumers use our Platform and Services. This data is collected on a voluntary basis. Anyone can decline to participate in our voluntary surveys.
Sharing and Disclosure of Personal Information
As further described in the section called “Our Sharing and Disclosure of Personal Information” in our Privacy Policy, we share personal information with third parties for business purposes, or we may “sell” your personal information to third parties, subject to your right to opt out of those sales (see Exercise Your Right to Opt-out below). The CCPA defines “sell” broadly to include many different types of data disclosures or data sharing to third parties for monetary or other valuable consideration. While persianrestaurant.net may disclose or otherwise share your personal information with select third parties, we do not sell your data to third parties in the traditional sense of the word, including collecting, compiling and then selling your data to data brokers, data resellers or other similar parties.
The categories of third parties to whom we sell or disclose your personal information for a business purpose include:
- Our affiliates
- Restaurant partners
- Third parties in connection with our enterprise customers, including corporate clients and campus food service providers
- Our service providers and contractors, including our delivery partners
- Marketing and promotional partners
- Ad networks and advertising partners
- Analytics providers
- Social networks
We may also disclose personal information to third parties at your direction or upon your request, in connection with a corporate business transaction, or to comply with legal or contractual obligations, as described in our Privacy Policy.
In the last 12 months, we have disclosed for a business purpose all of the categories of personal information we collect, explained in the chart above.
In the last 12 months, we have sold the following categories of personal information to third parties, subject to your settings and preferences and your Right to Opt-out:
- Identifiers, such as your name, email address and similar identifiers
- CA Customer Categories, such as your name, phone number and delivery address
- Commercial Information, such as order history and purchase tendencies
In addition, as is common practice among companies that operate online, we permit third party advertising networks, social media companies and other third party businesses to collect and disclose your personal information (including Internet / Network Information, Geolocation Data, Commercial Information, and Inferences) directly from your browser or device through cookies or tracking technologies when you visit or interact with our websites, use our apps or otherwise engage with us.
A Special Note on Loyalty Programs
From time to time, we may offer financial incentives or “price or service differences” in exchange for your personal information to the extent that doing so is reasonably related to the value of the personal information that we collect in a manner consistent with the non-discrimination requirements of the CCPA. Specifically, in order to participate in certain of our loyalty or rewards program(s) (e.g., through our Ultimate kiosks), you may be asked to provide personal information in exchange for cash, reward points, or other financial incentive, or price or service difference, the amount or nature of which will be specified in each instance at the time the personal information is to be submitted. You can opt into the financial incentive or price or service difference by submitting your personal information. If you wish to opt-out of the financial incentive or price or service difference, do not submit your personal information or, if you previously submitted your personal information to an ongoing loyalty or rewards program, please email Privacy@persianrestaurant.net to opt-out with the subject line “Loyalty Opt-Out.”
Each financial incentive or price or service difference related to submission and use of personal information is based upon our reasonable but sole determination of the estimated value of such information, which takes into consideration, without limitation, estimates regarding the anticipated revenue generated from such information, the anticipated expenses which might be incurred in the collection, storage, and use of such information in the operation of our business, and other relevant factors related to the estimated value of such information to our business, as permitted under the CCPA.
Your California Privacy Rights
As a California resident, you may be able to exercise the following rights (collectively, the “California Privacy Rights”) in relation to the personal information about you that we have collected (subject to certain limitations at law):
| Privacy Right | Description |
|---|---|
| Right to Know | You have the right to request any or all of the following information relating to your personal information we have collected and disclosed in the last 12 months, upon verification of your identity:
|
| Right to Delete | You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions. |
| Right to Opt-out | You have the right to direct us not to sell (as that term is defined by the CCPA) personal information we have collected about you to third parties now or in the future. |
| Right to Non-Discrimination | If you choose to exercise your rights, we will not charge you different prices or provide different quality of services unless those differences are related to your personal information. That is, if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products and Services or engage with you in the same manner. |
| “Shine the Light” | California residents that have an established business relationship with us have the right to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for such third party’s direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties under California’s “Shine the Light” law (Civ. Code § 1798.83). |
How to Exercise Your California Privacy Rights
Exercise Your Right to Know or Right to Delete
You may submit a request to exercise your California Privacy Rights through one of the mechanisms described below. We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account. We will only use personal information provided in connection with a California Privacy Rights request to review and comply with your request. You may also designate an authorized agent to make requests on your behalf. In order to be able to act, authorized agents must submit a request using the email address below and provide sufficient evidence to demonstrate that the requestor is an authorized agent with written permission to act on your behalf.
In certain circumstances, we may decline a request to exercise the Right to Know or Right to Delete described above, particularly where we are unable to verify your identity. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.