YOUR CALIFORNIA PRIVACY RIGHTS

Hopdoddy Burger Bar, Inc.: CCPA Consumer Privacy Notice

Last Updated Dec 28th, 2020
‍
This California Privacy Notice (“Notice”) applies to “Consumers” as defined by the California Consumer Privacy Act (“CCPA”) as a supplement to other privacy policies or notices issued by Hopdoddy Burger Bar, Inc. (“Hopdoddy” “us” “we” our”). In the event of a conflict between any other Hopdoddy policy, statement, or notice and this Notice, this Notice will prevail as to California Consumers and their rights under the CCPA.

In accordance with the CCPA’s requirements, this Notice covers the calendar year 2020 and describes our collection, use, disclosure, and “Sale” of California Consumers’ “Personal Information” or “PI” as defined by the CCPA, as well as the rights California Consumers have under the CCPA. Terms defined in the CCPA that are used in this Notice have the same meanings as in the CCPA.

Consistent with the CCPA, job applicants, current and former employees and contractors, and subjects of certain business-to-business communications acting solely in their capacity as representatives of another business, are not considered Consumers for purposes of this Notice or the rights described herein.

COLLECTION AND USE OF PERSONAL INFORMATION

Identifiers

Examples of PI Collected

Name, postal address, Internet Protocol address, email address, telephone number, MAC Address

Sources of PI

• Direct from Consumer
• Cookies
  
• Web Server Logs
  
• Connecting to Restaurant WiFi
  
• Conducting contests and processing prizes;
  
• Monitoring and analyzing trends, usage, and activities of users of the Services;
  

Purposes for PI Collection

• Facilitating and personalizing your user experience
• Responding to your requests, inquiries
  
• Processing your transactions
  
• Enabling delivery orders
  
• Communicating or marketing to you
  
• Conducting contests and processing prizes
  
• Monitoring and analyzing trends, usage, and activities of visitors and users of the Site
  
• Improving the Site
  
• Complying with applicable laws, regulations, or legal process as well as industry standards and our company policies
  
• Preventing, investigating, identifying, or taking any other action with regard to any suspected or actual fraudulent or illegal activity, or activity that violates our policies
  
• Management of our customer loyalty program
  

Categories of Recipients

• Ad networks
• Analytics and Service Providers
• Operating systems and platforms
• Social networks

Customer / Individual Records

Examples of PI Collected

Name, address, telephone number, email address, subset of payment card details

Sources of PI

• Direct from Consumer
• Cookies
  
• Loyalty partner
  

Purposes for PI Collection

• Facilitating and personalizing your user experience
• Responding to your requests, inquiries
  
• Processing your transactions
  
• Enabling delivery orders
  
• Communicating or marketing to you
  
• Conducting contests and processing prizes
  
• Monitoring and analyzing trends, usage, and activities of visitors and users of the Site
  
• Improving the Site
  
• Complying with applicable laws, regulations, or legal process as well as industry standards and our company policies
  
• Preventing, investigating, identifying, or taking any other action with regard to any suspected or actual fraudulent or illegal activity, or activity that violates our policies
  
• Management of our customer loyalty program
  

Categories of Recipients

• Analytics and Service Providers
• Operating systems and platforms
• Social networks

Internet Usage Information

Examples of PI Collected

Browsing history, information regarding interactions with our website or advertisements

Sources of PI

• Web analytics tool (anonymized to unique user ID)
• Website Cookies
  
• Web server logs
  

Purposes for PI Collection

• Facilitating and personalizing your user experience
• Communicating or marketing to you
  
• Monitoring and analyzing trends, usage, and activities of visitors and users of the Site
  
• Improving the Site
  
• Complying with applicable laws, regulations, or legal process as well as industry standards and our company policies
  
• Preventing, investigating, identifying, or taking any other action with regard to any suspected or actual fraudulent or illegal activity, or activity that violates our policies
  

Categories of Recipients

• Analytics and Service Providers
• Operating systems and platforms
• Social networks
• Ad networks

Geolocation Data

Examples of PI Collected

Precise physical location

Sources of PI

• Direct from Consumer
• Third party tools and Technology within website and mobile application to detect IP address to determine geolocation
  

Purposes for PI Collection

• Facilitating and personalizing your user experience
• Enabling online ordering
  
• Enabling delivery orders
  
• Providing closest restaurant location
  
• Communicating or marketing to you
  
• Monitoring and analyzing trends, usage, and activities of visitors and users of the Site
  
• Complying with applicable laws, regulations, or legal process as well as industry standards and our company policies
  
• Preventing, investigating, identifying, or taking any other action with regard to any suspected or actual fraudulent or illegal activity, or activity that violates our policies
  
• Management of our customer loyalty program
  

In addition, we may collect, use, and disclose your PI as required or permitted by applicable law. We do not treat “Deidentified” data or “Aggregate Consumer Information” as PI, and we reserve the right to convert, or permit others to convert, your PI into Deidentified data or Aggregate Consumer Information. We may share your PI with certain business partners, service providers, vendors (including those that facilitate interest-based advertising and other advertising and marketing), and other parties as described in the table above.

CALIFORNIA PRIVACY RIGHTS

Under the CCPA, California Consumers have certain rights which they may exercise independently or through an authorized agent. CCPA rights requests are subject to an identification and verification process. We will not fulfill a CCPA request unless we have been provided sufficient information for us to reasonably verify the identity of the requestor and the validity of the request.

Some PI we maintain about Consumers (e.g., clickstream data) is not sufficiently associated with enough PI about the Consumer for us to be able to verify that it is a particular Consumer’s PI. Accordingly, we will not include such information in response to Consumer requests. If we cannot comply with a request, we will explain the reasons in our response. You are not required to create an account with us to make a verifiable request, but you may use your account to do so. We will use PI provided in your request to verify your identity or authority to make the request and to track and document request responses, unless you also provided the PI to us for another purpose.

Your California Consumer privacy rights are described below. To make a request, please fill out the form below and provide following information:

• First Name
• Last Name
  
• Email address
  
• Telephone number
  

or call us at 888-603-0257.

In order to verify your identity, you must contact us from the email or phone number associated with your request. We will then follow-up with an outbound communication to you where you may be required to take further action to confirm your identity. Please follow the instructions above and promptly respond to any follow-up inquires. Once your identify has been verified, if you have requested that we provide you with specific pieces of information which Hopdoddy has about you, we will promptly respond.

For requests through an authorized agent, contact us via phone, or you may send mail to:

Attention: Legal Counsel, Hopdoddy Burger Bar, Inc., 512 East Riverside Drive, Suite 150, Austin, TX 78704.

Authorized agents must provide either a valid Power of Attorney or proof that you have registered with the California Secretary of State to act on behalf of the identified individual.

We may collect, use, and disclose your PI as required or permitted by applicable law. Please note we are not obligated to comply with Consumer requests to the extent that doing so would infringe on our, or any other person’s or party’s, rights, or conflict with applicable law.

Disclosure Rights

You have the right to request that we disclose the following information about your PI that we have collected and are maintaining for the 12-month period prior to your request date. Consumer requests of this nature may be made no more than twice in a 12-month period.

• The categories of PI we have collected about you
  
• The categories of sources from which we collected your PI
  
• The business or commercial purposes for collecting or Selling your PI
  
• The categories of third parties to whom we have shared your PI
  
• The specific pieces of PI we have collected about you
  
• A list of the categories of PI disclosed for a business purpose in the prior 12 months, or that no disclosure occurred
  
• A list of the categories of PI Sold about you in the prior 12 months, or that no Sale occurred. If we Sold your PI, we will explain:
  
• The categories of your PI we have Sold
  
• The categories of third parties to which we Sold PI, by categories of PI Sold for each third party
  

You have the right to obtain a transportable copy of your PI that we (1) collected in the 12 months prior to the request date, and (2) currently are maintaining. Please note that we retain PI for various time periods in accordance with applicable law and our internal recordkeeping policies and procedures.

“Do Not Sell” Rights

While there is not yet a consensus, data practices of third-party cookies and tracking technologies associated with our websites and mobile app may constitute a “Sale” of your PI as defined by the CCPA. You can exercise control over browser-based cookies by adjusting the settings on your browser, and mobile devices may offer ad limitation choices. In addition, third party tools may enable you to search for and opt-out of some of these trackers, such as the Ghostery browser plug-in available at www.ghostery.com. You can learn more about your choices regarding certain kinds of online interest-based advertising in our privacy policy. We do not represent that these third party tools, programs or statements are complete or accurate, clearing cookies or changing settings may affect your choices and you may have to opt-out separately via each browser and other device you use.

Some browsers have signals that may be characterized as do not track signals, but we do not understand them to operate in that manner or to represent a “do not sell” request by you; accordingly, currently we do not view these signals as a do not sell request. We understand that various parties are developing do not sell signals and we may recognize certain such signals if we conclude such a program is appropriate.

We do not knowingly Sell the PI of Consumers. All consumers, regardless of age, may opt out of our promotional emails by clicking the ‘unsubscribe’ link.

Deletion Rights

Except to the extent we have a basis for retention under CCPA, you may request that we delete your PI that we have collected directly from you and are maintaining. Our retention rights include, without limitation, to complete transactions and service you have requested, for security purposes, for legitimate internal business purposes, including maintaining business records, to comply with law, to exercise or defend legal claims, and to cooperate with law enforcement

Other California Notices

California’s “Shine the Light” law permits California residents to request certain information regarding our disclosure of PI to third parties for their own direct marketing purposes.

We do not share personal information with third parties for their direct marketing purposes without either obtaining your consent or giving you the ability to opt-out. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us privacy@hopdoddy.com or by sending a letter to

Attention: Legal Counsel, Hopdoddy Burger Bar, Inc., 512 East Riverside Drive, Suite 150, Austin, TX 78704.

Any such request must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, ZIP code, email address and telephone number. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address or mail address.

Please note that “Shine the Light” rights and CCPA rights are established under different legal regimes and must be exercised separately.

contact us

For more information regarding your California privacy rights, you may contact us at 888-603.0257. You may also write to us at:

Attention: Legal Counsel, Hopdoddy Burger Bar, Inc., 512 East Riverside Drive, Suite 150, Austin, TX 78704.