ROB’S BACKSTAGE POPCORN
Last Modified: April 20, 2022
What information do we collect from you?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address, and email address. This personal information is required to provide our products and services to you. If you do not provide personal information we ask for, it may delay or prevent us from providing certain services or products to you. We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information.
With your express consent, we also collect your computer’s internet protocol (IP) address to provide us with information that helps us learn about your browser and operating system. We may send you emails about our store, new products, and other updates. You will be provided the option to unsubscribe from these emails at any time.
How do we use your information?
We use information that we collect about you or that you provide to us, including any personal information:
- To present our Site and its contents to you.
- To provide you with information, products, or services that you request from us.
- To fulfill any other purpose for which you provide it.
- To provide you with notices about your account, purchases, refunds, or support requests.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
- To notify you about changes to our Site or any products or services we offer or provide though it.
- In any other way we may describe when you provide the information.
- For any other purpose with your consent.
We may also use your information to contact you about goods and services that may be of interest to you. If you do not want us to use your information in this way, please contact our Support team directly.
How do you get my consent?
We can only use your personal information if we have a proper reason for doing so (e.g. to comply with laws, provide our services to you, for our legitimate interests or those of a third party, or where you have given consent), and then only if that reason is not superseded by your own rights and interests. When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we collect your personal information and use it for that specific commercial reason only.
If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your express consent.
How do I withdraw my consent?
If you opt-in and later change your mind, you may withdraw your consent for us to contact you or for the continued collection, use, or disclosure of your information, at any time, by contacting us at firstname.lastname@example.org.
What laws impact your confidential information?
We collect, use and are responsible for certain personal information about you. When we do so we may be subject to various laws in the United States and the General Data Protection Regulation, which applies across the European Union (including in the United Kingdom), and we are responsible as “controller” of that personal information for the purposes of those laws.
Who may receive access to your personal information?
We routinely share personal information with our affiliates, service providers we use in connection with delivering our products to you (payment processors, warehouses, and delivery companies), other third parties that help run our business (marketing agencies and website hosts), approved third parties (social media sites you choose to link to your email address), our insurers, and our banks.
We may also disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
We may also disclose your personal information for enforcement purposes if you violate these Terms.
In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies with respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, please remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
If you do not want us to share your personal information with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by emailing email@example.com.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by these Terms.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements and policies.
Our store is hosted on Shopify. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
How long will we retain your personal information?
We will keep your personal information while you have an account with us or while we are providing products to you. Thereafter, we will keep your personal information for as long as is necessary to (i) respond to any questions, complaints or claims made by you or on your behalf, (ii) to show that we treated you fairly, or (iii) to keep records required by law. We will not retain your personal information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information.
Transferring your personal information out of the EEA.
To deliver services to you, it is often necessary for us to share your personal information outside the European Economic Area (EEA) (e.g. with our offices outside the EEA, with your and our service providers located outside the EEA, if you are based outside the EEA, or where there is an international dimension to the products we are providing to you).
Non-EEA countries do not have the same data protection laws as the United Kingdom and EEA. We will, however, ensure the transfer complies with data protection law and all personal information will be secure.
Your rights under the GDPR.
Right to Access
The right to be provided with a copy of your personal information (the right of access)
Right to Rectification
The right to require us to correct any mistakes in your personal information
Right to be Forgotten
The right to require us to delete your personal information in certain situations
Right to Restriction of Processing
The right to require us to restrict processing of your personal information - in certain circumstances, e.g. if you contest the accuracy of the data
Right to Data Portability
The right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party in certain situations
Right to Object
The right to object:
¾ at any time to your personal information being processed for direct marketing (including profiling);
¾ in certain other situations to our continued processing of your personal information, e.g. processing carried out for the purpose of our legitimate interests.
Right Not to be Subject to Automated Individual Decision-Making
The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you
For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.
Your rights under the CCPA.
You may have the right under the California Consumer Privacy Act of 2018 (CCPA), if applicable to you, and certain other privacy and data protection laws, as applicable, to exercise free of charge:
Disclosure of Personal Information We Collect About You
You have the right to know:
· The categories of personal information we have collected about you;
· The categories of sources from which the personal information is collected;
· Our business or commercial purpose for collecting or selling personal information;
· The categories of third parties with whom we share personal information, if any; and
· The specific pieces of personal information we have collected about you.
Please note that we are not required to:
· Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
· Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or
· Provide the personal information to you more than twice in a 12-month period.
Personal Information Sold or Used for a Business Purpose
In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:
The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and
The categories of personal information that we disclosed about you for a business purpose.
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
· Delete your personal information from our records; and
· Direct any service providers to delete your personal information from their records.
Please note that we may not delete your personal information if it is necessary to:
· Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
· Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
· Debug to identify and repair errors that impair existing intended functionality;
· Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
· Comply with the California Electronic Communications Privacy Act;
· Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
· Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
· Comply with an existing legal obligation; or
· Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Protection Against Discrimination
You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:
· Deny goods or services to you;
· Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
· Provide a different level or quality of goods or services to you; or
· Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
Please note that we may charge a different price or rate or provide a different level or quality of goods to you, if that difference is reasonably related to the value provided to our business by your personal information.
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
Pages of the Site may contain small electronic files known as “Web Beacons” (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
We do not collect personal information automatically, but we may tie this information to personal information about you that we collect from other sources or you provide to us.
Age of Consent
Our Site is not intended for children under 18 years of age. No one under age 18 may provide any personal information to or on the Site without providing affirmative, parental opt-in consent. We do not knowingly collect personal information from children under 18 without such consent. If you are under 18, do not use or provide any information on this Site, without providing affirmative, parental opt-in consent. If we learn we have collected or received personal information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at directly on the Contact Us page.
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
SMS/MMS MOBILE MESSAGE MARKETING PROGRAM TERMS AND CONDITIONS
User Opt In: The Program allows Users to receive SMS/MMS mobile messages by affirmatively opting into the Program, such as through online or application-based enrollment forms. Regardless of the opt-in method you utilized to join the Program, you agree that this Agreement applies to your participation in the Program. By participating in the Program, you agree to receive autodialed or prerecorded marketing mobile messages at the phone number associated with your opt-in, and you understand that consent is not required to make any purchase from Us. While you consent to receive messages sent using an autodialer, the foregoing shall not be interpreted to suggest or imply that any or all of Our mobile messages are sent using an automatic telephone dialing system (“ATDS” or “autodialer”). Message and data rates may apply.
User Opt Out: If you do not wish to continue participating in the Program or no longer agree to this Agreement, you agree to reply STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any mobile message from Us in order to opt out of the Program. You may receive an additional mobile message confirming your decision to opt out. You understand and agree that the foregoing options are the only reasonable methods of opting out. You also understand and agree that any other method of opting out, including, but not limited to, texting words other than those set forth above or verbally requesting one of our employees to remove you from our list, is not a reasonable means of opting out.
Duty to Notify and Indemnify: If at any time you intend to stop using the mobile telephone number that has been used to subscribe to the Program, including canceling your service plan or selling or transferring the phone number to another party, you agree that you will complete the User Opt Out process set forth above prior to ending your use of the mobile telephone number. You understand and agree that your agreement to do so is a material part of these terms and conditions. You further agree that, if you discontinue the use of your mobile telephone number without notifying Us of such change, you agree that you will be responsible for all costs (including attorneys’ fees) and liabilities incurred by Us, or any party that assists in the delivery of the mobile messages, as a result of claims brought by individual(s) who are later assigned that mobile telephone number. This duty and agreement shall survive any cancellation or termination of your agreement to participate in any of our Programs.
YOU AGREE THAT YOU SHALL INDEMNIFY, DEFEND, AND HOLD US HARMLESS FROM ANY CLAIM OR LIABILITY RESULTING FROM YOUR FAILURE TO NOTIFY US OF A CHANGE IN THE INFORMATION YOU HAVE PROVIDED, INCLUDING ANY CLAIM OR LIABILITY UNDER THE TELEPHONE CONSUMER PROTECTION ACT, 47 U.S.C. § 227, et seq., OR SIMILAR STATE AND FEDERAL LAWS, AND ANY REGULATIONS PROMULGATED THEREUNDER RESULTING FROM US ATTEMPTING TO CONTACT YOU AT THE MOBILE TELEPHONE NUMBER YOU PROVIDED.
Program Description: Without limiting the scope of the Program, users that opt into the Program can expect to receive messages concerning the marketing and sale of digital and physical products, services, and events.
Cost and Frequency: Message and data rates may apply. The Program involves recurring mobile messages, and additional mobile messages may be sent periodically based on your interaction with Us.
Support Instructions: For support regarding the Program, text “HELP” to the number you received messages from or email us at firstname.lastname@example.org. Please note that the use of this email address is not an acceptable method of opting out of the program. Opt outs must be submitted in accordance with the procedures set forth above.
MMS Disclosure: The Program will send SMS TMs (terminating messages) if your mobile device does not support MMS messaging.
Our Disclaimer of Warranty: The Program is offered on an "as-is" basis and may not be available in all areas at all times and may not continue to work in the event of product, software, coverage or other changes made by your wireless carrier. We will not be liable for any delays or failures in the receipt of any mobile messages connected with this Program. Delivery of mobile messages is subject to effective transmission from your wireless service provider/network operator and is outside of Our control.
Participant Requirements: You must have a wireless device of your own, capable of two-way messaging, be using a participating wireless carrier, and be a wireless service subscriber with text messaging service. Not all cellular phone providers carry the necessary service to participate. Check your phone capabilities for specific text messaging instructions.
Age Restriction: You may not use of engage with the Platform if you are under eighteen (18) years of age. By using or engaging with the Platform, you acknowledge and agree that you are not under the age of eighteen (18) years or are of adult age in your jurisdiction, as applicable. By using or engaging with the Platform, you also acknowledge and agree that you are permitted by your jurisdiction’s Applicable Law to use and/or engage with the Platform.
Prohibited Content: You acknowledge and agree to not send any prohibited content over the Platform. Prohibited content includes:
- Any fraudulent, libelous, defamatory, scandalous, threatening, harassing, or stalking activity;
- Objectionable content, including profanity, obscenity, lasciviousness, violence, bigotry, hatred, and discrimination on the basis of race, sex, religion, nationality, disability, sexual orientation, or age;
- Pirated computer programs, viruses, worms, Trojan horses, or other harmful code;
- Any product, service, or promotion that is unlawful where such product, service, or promotion thereof is received;
- Any content that implicates and/or references personal health information that is protected by the Health Insurance Portability and Accountability Act (“HIPAA”) or the Health Information Technology for Economic and Clinical Health Act (“HITEC” Act); and
- Any other content that is prohibited by Applicable Law in the jurisdiction from which the message is sent.
Dispute Resolution: In the event that there is a dispute, claim, or controversy between you and Us, or between you and any third-party service provider acting on Our behalf to transmit the mobile messages within the scope of the Program, arising out of or relating to federal or state statutory claims, common law claims, this Agreement, or the breach, termination, enforcement, interpretation or validity thereof, including the determination of the scope or applicability of this agreement to arbitrate, such dispute, claim, or controversy will be, to the fullest extent permitted by law, determined by arbitration in Chicago, IL before one arbitrator.
The parties agree to submit the dispute to binding arbitration in accordance with the Commercial Arbitration Rules of the American Arbitration Association (“AAA”) then in effect. Except as otherwise provided herein, the arbitrator shall apply the substantive laws of the Federal Judicial Circuit in which the principal place of business of Rob’s Backstage Popcorn LLC is located, without regard to its conflict of laws rules. Within ten (10) calendar days after the arbitration demand is served upon a party, the parties must jointly select an arbitrator with at least five years’ experience in that capacity and who has knowledge of and experience with the subject matter of the dispute. If the parties do not agree on an arbitrator within ten (10) calendar days, a party may petition the AAA to appoint an arbitrator, who must satisfy the same experience requirement. In the event of a dispute, the arbitrator shall decide the enforceability and interpretation of this arbitration agreement in accordance with the Federal Arbitration Act (“FAA”). The parties also agree that the AAA’s rules governing Emergency Measures of Protection shall apply in lieu of seeking emergency injunctive relief from a court. The decision of the arbitrator shall be final and binding, and no party shall have rights of appeal except for those provided in section 10 of the FAA. Each party shall bear its share of the fees paid for the arbitrator and the administration of the arbitration; however, the arbitrator shall have the power to order one party to pay all or any portion of such fees as part of a decision. The parties agree that the arbitrator shall have the authority to award attorneys’ fees only to the extent expressly authorized by statute or contract. The arbitrator shall have no authority to award punitive damages and each party hereby waives any right to seek or recover punitive damages with respect to any dispute resolved by arbitration. The parties agree to arbitrate solely on an individual basis, and this agreement does not permit class arbitration or any claims brought as a plaintiff or class member in any class or representative arbitration proceeding. Except as may be required by law, neither a party nor the arbitrator may disclose the existence, content, or results of any arbitration without the prior written consent of both parties, unless to protect or pursue a legal right. If any term or provision of this Section is invalid, illegal, or unenforceable in any jurisdiction, such invalidity, illegality, or unenforceability shall not affect any other term or provision of this Section or invalidate or render unenforceable such term or provision in any other jurisdiction. If for any reason a dispute proceeds in court rather than in arbitration, the parties hereby waive any right to a jury trial. This arbitration provision shall survive any cancellation or termination of your agreement to participate in any of our Programs.
Miscellaneous: You warrant and represent to Us that you have all necessary rights, power, and authority to agree to these Terms and perform your obligations hereunder, and nothing contained in this Agreement or in the performance of such obligations will place you in breach of any other contract or obligation. The failure of either party to exercise in any respect any right provided for herein will not be deemed a waiver of any further rights hereunder. If any provision of this Agreement is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this Agreement will otherwise remain in full force and effect and enforceable. Any new features, changes, updates, or improvements of the Program shall be subject to this Agreement unless explicitly stated otherwise in writing. We reserve the right to change this Agreement from time to time. Any updates to this Agreement shall be communicated to you. You acknowledge your responsibility to review this Agreement from time to time and to be aware of any such changes. By continuing to participate in the Program after any such changes, you accept this Agreement, as modified.
THE INFORMATION ON THIS SITE IS PROVIDED ON AN "AS IS," "AS AVAILABLE" BASIS. YOU AGREE THAT USE OF THIS SITE IS AT YOUR SOLE RISK. ROB’S BACKSTAGE POPCORN LLC DISCLAIMS ALL WARRANTIES OF ANY KIND, INCLUDING BUT NOT LIMITED TO ANY EXPRESS WARRANTIES, STATUTORY WARRANTIES, AND ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. TO THE EXTENT YOUR JURISDICTION DOES NOT ALLOW LIMITATIONS ON WARRANTIES, THIS LIMITATION MAY NOT APPLY TO YOU. YOUR SOLE AND EXCLUSIVE REMEDY RELATING TO YOUR USE OF THE SITE SHALL BE TO DISCONTINUE USING THE SITE.
UNDER NO CIRCUMSTANCES WILL ROB’S BACKSTAGE POPCORN LLC BE LIABLE OR RESPONSIBLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL (INCLUDING DAMAGES FROM LOSS OF BUSINESS, LOST PROFITS, LITIGATION, OR THE LIKE), SPECIAL, EXEMPLARY, PUNITIVE, OR OTHER DAMAGES, UNDER ANY LEGAL THEORY, ARISING OUT OF OR IN ANY WAY RELATING TO THE SITE, YOUR SITE USE, OR THE CONTENT OF THE SITE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR SOLE REMEDY FOR DISSATISFACTION WITH THE SITE AND/OR CONTENT IS TO CEASE ALL OF YOUR SITE USE.
How to exercise your rights, Support, and Contact Information.
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Privacy Compliance Officer at email@example.com.
Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period.
If you choose to contact directly by email, you will need to provide us with:
- Enough information to identify you (e.g., your full name, address and customer or matter reference number);
- Proof of your identity and address (e.g., a copy of your driver’s license or passport and a recent utility or credit card bill); and
- A description of what right you want to exercise and the information to which your request relates.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person’s behalf.
Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
Records and copies of your correspondence (including email addresses) will be retained by us if you choose to contact us.
Rob’s Backstage Popcorn LLC
2250 Union Street
San Francisco, CA 94123
We hope that we can resolve any query or concern you raise about our use of your information. The General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.