This Privacy Policy explains how Picnic Portland (“the Company,” “we,” “us,” or “our”) collects, stores, protects, and uses user data. We are committed to safeguarding the privacy of our users while ensuring compliance with international data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This policy also describes users’ rights to their data, including access, correction, deletion, and objection to processing, as well as details about our data security measures and third-party data sharing.
1. Collection and Use of Personal Data
We only collect personally identifiable information (PII) that is voluntarily provided by users for specific purposes. PII refers to any data that may identify an individual, such as their name, email address, or phone number. We use such information solely for the purpose for which it was provided, including but not limited to:
- Providing the requested products, services, or information
- Responding to inquiries or contact requests
- Personalizing and improving user experience
- Performing statistical analysis and marketing research
- Complying with legal obligations
- Sending periodic promotional and newsletter emails with opt-out options
- Any other purpose with the user’s consent
2. Data Storage and Protection
We store user data on secure servers and implement appropriate security measures to ensure its confidentiality, integrity, and availability. The data is retained only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
We strive to protect user data against unauthorized access, use, alteration, or disclosure. However, please note that no method of transmission or storage over the internet is completely secure, and we cannot guarantee the absolute security of any information provided to us.
If we become aware of a data breach that poses a high risk to individuals’ rights and freedoms, we will notify affected users promptly, in compliance with applicable data protection laws. Additionally, we will cooperate with relevant authorities when required by law.
3. Users’ Rights to Their Data
Our users have certain rights regarding their personal data, including:
Access and Rectification
Users can request access to their personal data held by us and rectify any inaccurate or incomplete information.
Erasure
Users may request the deletion of their personal data, and we will comply unless prevented by legal obligations or legitimate interests.
Objection to Processing
Users may object to the processing of their personal data based on specific circumstances, including when it is used for direct marketing purposes or results in automated decision-making.
To exercise these rights or obtain further information, individuals can Contact Us using the information provided at the end of this policy.
4. Data Security Measures
We employ various technical and organizational security measures to protect user data, including:
- Regular system updates and monitoring to mitigate vulnerabilities
- Restricted access controls and data encryption
- Periodic data backups and secure disposal procedures
- Staff training on data protection and privacy matters
5. Third-Party Data Sharing
We may engage third-party service providers or business partners to assist in operating our website, delivering services, or conducting business operations. Such third parties may have access to user data solely for the purpose of performing their functions on our behalf, and they are bound by contractual obligations to adequately protect the data and use it only as instructed by us.
Moreover, we use Google Analytics, a web analytics service provided by Google, to collect traffic data and usage patterns. Google Analytics employs cookies and similar technologies to track and evaluate user interaction with the website. The information generated by cookies about website usage (including IP addresses) is anonymized and transmitted to Google’s servers in anonymous form. Google may use this information to compile statistical reports on website activity for us. Users can choose to opt-out of Google Analytics through browser settings or using Google’s Opt-Out Browser Add-on.
We do not sell, trade, or otherwise transfer user data to external parties without obtaining explicit consent, except when required or permitted by law.
6. International Data Transfers
By using our services, users acknowledge and agree that their data may be transferred to and stored on servers located outside of their country, where data protection laws may differ from those of their jurisdiction.
7. Children’s Privacy
Our services are not intended for individuals under the age of 13, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided personal data without your consent, please contact us, and we will promptly delete such information.
8. Changes to this Policy
We reserve the right to update or modify this Privacy Policy at any time, primarily to reflect changes in our practices, legal requirements, or in response to user feedback. We encourage users to review this policy periodically for any updates. The updated policy will be effective as soon as it is published on our website.
9. Contact Us
If you have any questions, concerns, requests, or comments about this Privacy Policy or our data handling practices, please contact us by email at [email protected] or by mail at:
Picnic Portland Privacy 123 Main Street Portland, OR 97204 United States