Privacy policy


MAGNOLIA BAKERY PRIVACY POLICY


Last Updated: December 6, 2021


This Privacy Policy explains how Magnolia Operating, LLC and its subsidiaries and affiliated companies (“Company,” “we,” or “us”) collects, uses, and discloses information about you. This Privacy Policy applies when you use our websites, mobile applications, and other online products and services that link to this Privacy Policy and to our products available in our retail stores (collectively, our “Services”), shop in our stores, contact our customer service team, engage with us on social media, or otherwise interact with us.
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

CONTENTS
Collection of Information
Use of Information
Sharing of Information
Advertising and Analytics
Transfer of Information to the United States 
Your Choices
Your California Privacy Rights
Contact Us

COLLECTION OF INFORMATION
Information You Provide to Us
We collect information you provide directly to us. For example, you share information directly with us when you create an account, fill out a form, submit or post content through our Services, make a purchase, communicate with us via third-party platforms, participate in a contest or promotion, request customer support, or otherwise communicate with us. The types of personal information we may collect include your name, email address, postal address, phone number, credit card and other payment information, and any other information you choose to provide.
Information We Collect Automatically When You Interact with Us
When you access or use our Services or otherwise transact business with us, we automatically collect certain information, including:
  • Activity Information: We collect information about your activity on our Services, such as products you have looked at on our website and products you have purchased.
  • Transactional Information: When you make a purchase or return, we collect information about the transaction, such as product details, purchase price, and the date and location of the transaction.
  • Device and Usage Information: We collect information about how you access our Services, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, browser type, and app version. We also collect information about your activity on our Services, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Services.
  • Location Information: In accordance with your device permissions, we may collect information about the precise location of your device. You may stop the collection of precise location information at any time (see the Your Choices section below for details).
  • Information Collected by Cookies and Similar Tracking Technologies: We (and our service providers) use tracking technologies, such as cookies and web beacons, to collect information about you. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that we use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness. For more information about cookies and how to disable them, see the Your Choices section below.

Information We Collect from Other Sources
We obtain information from third-party sources. For example, we may collect information about you from identity verification services, advertising networks, data analytics providers, mailing list providers, operating systems and platforms, social networks and data brokers. Additionally, if you create or log into your Company account through a third-party social media or other platforms, we will have access to certain information from those platforms in accordance with the authorization procedures determined by such platform.


Information We Derive
We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your location based on your IP address, infer that you are looking to purchase certain products based on your browsing behavior and past purchases or to deliver the products and services you request and customize your experience with us.


USE OF INFORMATION
We use the information we collect to infer that you are looking to purchase certain products based on your browsing behavior and past purchases or to deliver the products and services you request and customize your experience with us.  We also use the information we collect to:

  • Provide, maintain, and improve our products and services;
  • Process transactions, fulfill your order and send you related information, including confirmations, receipts, invoices, customer experience surveys, and recall notices;
  • Maintain and service your account;
  • Verify your information;
  • Personalize and improve your experience on our Services;
  • Send you technical notices, security alerts, and support and administrative messages;
  • Respond to your comments and questions and provide customer service;
  • Communicate with you about products, services, and events offered by the Company and others and provide news and information that we think will interest you (see the Your Choices section below for information about how to opt out of these communications at any time);
  • Monitor and analyze trends, usage, and activities in connection with our Services;
  • Personalize the advertisements you see on third-party platforms and websites (for more information, see the Advertising and Analytics section below);
  • Audit interactions with you;
  • Detect, investigate, and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of the Company and others;
  • Debug to identify and repair errors in our Services;
  • Comply with our legal and financial obligations; and
  • Carry out any other purpose described to you at the time the information was collected.
SHARING OF INFORMATION
We share personal information in the following circumstances or as otherwise described in this policy:
  • We share personal information with vendors, service providers, and consultants that need access to personal information in order to perform services for us, such as companies that assist us with web hosting, shipping and delivery, payment processing, fraud prevention, customer service, and marketing and advertising.
  • If you submit a product review or post content in another public area of our Services, we share this information publicly on our Services.
  • If you choose to use integrations we offer on our Services, we may share certain information with the integration partners.
  • We may disclose personal information if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
  • We may share personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of the Company, our users, the public, or others.
  • We share personal information with our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
  • We may share personal information in connection with, or during negotiations concerning, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
  • Personal information is shared between and among the Company and our current and future parents, affiliates, and subsidiaries and other companies under common control and ownership.
  • We share personal information with your consent or at your direction.

We also share aggregated or de-identified information that cannot reasonably be used to identify you.

ADVERTISING AND ANALYTICS
We allow others to provide analytics services and serve advertisements on our behalf across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used by the Company and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices or change your settings using the consent management tool on our Services (see the Your Choices section). Your device may also include a feature (“Limit Ad Tracking” on iOS or “Opt Out of Interest-Based Ads” or “Opt Out of Ads Personalization” on Android) that allows you to opt out of having certain information collected through mobile apps used for behavioral advertising purposes.
We also work with third parties to serve ads to you as part of customized campaigns on third-party platforms. As part of these ad campaigns, we or the third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms to allow us to learn about your interests and serve you advertising that is customized to your interests. Note that the third-party platforms may offer you choices about whether you see these types of customized ads.

TRANSFER OF INFORMATION TO THE UNITED STATES
The Company is headquartered and we have operations in the United States. Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

YOUR CHOICES
Account Information
You may update and correct certain account information at any time by logging into your account or emailing us at hello@magnoliabakery.com. If you wish to delete your account, please log into your account, but note that we may retain certain information as required by law or for our legitimate business purposes.


Cookies
Most web browsers are set to accept cookies by default. If you prefer, you can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of our Services.


Communications Preferences
You may opt out of receiving promotional emails and text messages from the Company by following the instructions in those email and text message communications, by clicking the opt-out preference link in the communications you received or managing your communication preferences in your account settings menu. If you opt out of email communications, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.


Mobile Push Notifications
With your consent, we may send push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.
YOUR CALIFORNIA PRIVACY RIGHTS
The California Consumer Privacy Act or “CCPA” (Cal. Civ. Code § 1798.100 et seq.) affords consumers residing in California certain rights with respect to their personal information. If you are a California resident, this section applies to you.


California Consumer Privacy Act
In the preceding 12 months, we have collected the following categories of personal information: (A) identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers; (B) unique identifier and unique personal identifier such as Cookies, Beacons, Pixel tags, User alias, Phone numbers, Customer number, Unique pseudonym, and Mobile aid identifiers or similar technology; (C) [characteristics of protected classifications under California or federal law;] (D) commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies; (E) Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement; (F) geolocation data; (G) [professional or employment-related information;] (H) [education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99);] and (I) Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. For details about the precise data points we collect and the categories of sources of such collection, please see the Collection of Information section above. We collect personal information for the business and commercial purposes described in the Use of Information section above. In the preceding 12 months, we have disclosed the following categories of personal information for business purposes to the following categories of recipients:

Category of Personal Information  Categories of Recipients
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, payment processors, social networks, auditors, and data brokers.
Unique identifier and unique personal identifier such as Cookies, Beacons, Pixel tags, User alias, Phone numbers, Customer number, Unique pseudonym, and Mobile aid identifiers or similar technology.  
Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, payment processors, social networks, auditors, and data brokers
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, payment processors, social networks, auditors, and data brokers.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, social networks, auditors, and data brokers.
Geolocation data. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, social networks, auditors, and data brokers.
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. Advertising networks, internet service providers, data analytics providers, social networks and data brokers.

California law requires that we provide transparency about personal information we “sell,” which, for the purposes of the CCPA, broadly means scenarios in which the Company has shared personal information with third parties in exchange for valuable consideration. We “sell” personal information for the following commercial purposes: to advertise and market our products to you, to provide customer service to you and to fulfill our orders. In the preceding 12 months, we have “sold” the following categories of personal information to the following categories of third parties:
Category of Personal Information  Category of Third Parties 
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, payment processors, social networks, auditors, and data brokers.
Unique identifier and unique personal identifier such as Cookies, Beacons, Pixel tags, User alias, Phone numbers, Customer number, Unique pseudonym, and Mobile aid identifiers or similar technology. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, payment processors, social networks, auditors, and data brokers.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, payment processors, social networks, auditors, and data brokers.  
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement. Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, social networks, auditors, and data brokers.  
Geolocation data.  Advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, customer service providers, fulfillment services, social networks, auditors, and data brokers.
Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. Advertising networks, internet service providers, data analytics providers, social networks and data brokers.  



You have the right to opt out of these sales at any time by visiting our “Do Not Sell My Personal Information” https://privacyportal.onetrust.com/webform/ed1ead2d-fad6-4702-97d2-cdd7cd154276/774c96db-a49a-4eeb-9fe4-123f4b67b060 webpage . We do not knowingly sell personal information about consumers under the age of 16.
Subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, disclose, and sell, (2) request deletion of your personal information, (3) opt out of any “sales” of your personal information that may be occurring, and (4) not be discriminated against for exercising these rights. You may make these requests by calling 855-mbakery or submitting consumer requests to hello@magnoliabakery.com. We will verify your request by asking you to provide information related to your recent interactions with us, such as your email address and your order confirmation number.  We will not discriminate against you if you exercise your rights under the CCPA.
If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us.

CONTACT US
If you have any questions about this Privacy Policy, please contact us at hello@magnoliabakery.com.