Bushfire Kitchen Privacy Policy

California (CCPA)

This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.

Information we collect from you

Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
Internet Activity
Commercial Information, including purchases
Financial Information, including credit or debit card number and bank or other financial account number
Location Information, including precise geolocation and general location data
Physical and Audio Data, including audio recordings, video recordings, and photos
Protected Classifications and Other Personal Characteristics, including age and military or veteran status
Professional and Education Information, including professional information
Consumer Communications, including direct communications with our consumers
Inferences from Other Data, including inferences created from other personal information collected
Other data, including dietary Restrictions

To the extent we process deidentified personal information, we will make no attempt to reidentify such data.

Information from other sources

We may collect personal information about you from third-party sources, including Ad Networks, Data Analytics Providers, Data Brokers, Other consumers (e.g., referrals), and Retail Partners.

How long we keep your data

We do not retain data for any longer than is necessary for the purposes described in this Policy.

We generally retain data according to the guidelines below.

Data Retention
Type of Data	Retention Period
Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity, General location data	We keep as long as necessary to fulfill the purpose for which we collect it. Cookies and on-device data can be deleted at any time by you, the consumer.
Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Purchases, Credit or debit card number, Bank or other financial account number, General location data, Precise geolocation, Age, Military or veteran status, Professional information, Dietary Restrictions	We keep as long as necessary to fulfill the purpose for which we collect it. We may keep data beyond this period in anonymized form.
Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Telephone number, Purchases, Direct communications with our consumers	We keep as long as necessary to fulfill the purpose for which we collect it. We may keep data beyond this period in anonymized form.
Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, Inferences created from other personal information collected	Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications.
Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Purchases, Audio recordings, Photos, Video recordings	We keep as long as necessary to fulfill the purpose for which we collect it. We may keep data beyond this period in anonymized form to help improve our products and services.
Data we collect in connection with privacy requests, including Name, Email address, Telephone number, Online Identifiers	We retain records related to privacy requests as long as necessary to comply with our legal obligations, and for a minimum of 24 months.
Data we collect for security purposes, including Name, Email address, Online Identifiers	We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures.

Why we process your information

We process personal information for the following business and commercial purposes:

Analyzing Data
Conducting Surveys
Creating Customer Profiles
Delivering Targeted Ads
Fulfilling Customer Orders
Improving Our Products & Services
Managing Event & Guest Data
Meeting Compliance & Legal Requirements
Operating Our Website or Mobile Apps
Preventing Fraud
Processing Payments
Providing Customer Support
Sending Promotional Communications
Storing and Managing Data
Tracking Purchases & Customer Data

How we disclose your information

We may disclose personal information about you for business and commercial purposes when you Consumers:

Data Disclosure
Personal Information Category	Categories of Service Providers	Categories of Third Parties
Personal Identifiers	Business Operations Tool, Data Analytics Providers, Governance, Risk & Compliance Software, IT Contractors, Payment Processors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks
Internet Activity	Data Analytics Providers, IT Contractors, Payment Processors, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks
Commercial Information	Data Analytics Providers, IT Contractors, Payment Processors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks and Payment Processors
Financial Information	Payment Processors, Point-of-Sale Platform, and Sales & Marketing Contractors	None
Location Information	Data Analytics Providers, IT Contractors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks
Physical and Audio Data	None	None
Protected Classifications and Other Personal Characteristics	IT Contractors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks
Professional and Education Information	IT Contractors, Point-of-Sale Platform, and Sales & Marketing Tools	None
Consumer Communications	Governance, Risk & Compliance Software, IT Contractors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks
Inferences from Other Data	IT Contractors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	Ad Networks
Custom Data	Business Operations Tool, IT Contractors, Point-of-Sale Platform, Sales & Marketing Contractors, and Sales & Marketing Tools	None

Information “sharing” and “selling”

We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in CCPA.

We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.

Opt-out preference signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Your CCPA rights

Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at admin@bushfirekitchen.com. Alternatively, you can make a request by calling us toll-free at (855) 283 0633.

Right to Access

You have the right to access the specific pieces of personal information we have collected about you.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.

Right to Non-Discrimination

If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

You have the right to opt-out of any selling and sharing of your personal information.

You may exercise your right to opt-out here.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Limit the Use of Sensitive Personal Information

The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.

Request Verification

Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.

Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.

Authorized Agent

A California resident's authorized agent may submit a rights request under the CCPA by emailing us at admin@bushfirekitchen.com. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.

If you have trouble accessing this notice, please contact us at admin@bushfirekitchen.com.

Contact Us

If you have any privacy-related questions or have trouble accessing this notice, please email admin@bushfirekitchen.com.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the California Attorney General’s Office or the California Privacy Protection Agency.

Notice of Financial Incentive

Enrollment

The Rewards Program is offered at our sole discretion to eligible individuals (Section 2) who enroll by creating an account through the Site or App and joining the Rewards Program (each a “Member”). Enrollment is free and no purchase is necessary to enroll. The Rewards Program is intended for personal, non-commercial use only, is subject to all applicable laws and regulations, and is void where prohibited. We may delay enrollment pending verification of eligibility.

New Member Offer. New Members whose first qualifying purchase after enrollment totals fifteen dollars ($15.00) or more (excluding taxes, tips, and fees) will receive a five dollar ($5.00) credit toward their second qualifying purchase of fifteen dollars ($15.00) or more (excluding taxes, tips, and fees). The credit will be added to the Member’s account approximately four (4) hours after the first qualifying purchase and expires fourteen (14) days after it is issued. Limit one (1) New Member Offer per person and per account. The credit has no cash value, may not be combined with other offers, Promo Codes, or Reward redemptions, is not valid on third-party marketplace or catering orders, and may be modified or discontinued for future enrollees at any time.

Earning Points

Members earn ten (10) points (each a “Point”) for every one dollar ($1.00) of eligible spend (excluding taxes, tips, fees, gift card purchases, and donations) on qualifying purchases made through the Site or App while signed into the Member’s account, or in-restaurant where the Member identifies their account at checkout by providing the phone number or email address associated with the account before payment is completed. We may offer additional ways to earn Points — such as bonus promotions, challenges, or milestones — subject to the specific terms presented with each opportunity. Points are typically credited immediately after a qualifying transaction, though posting may occasionally be delayed for verification or technical reasons. To earn Points, qualifying purchases must be paid with cash, a valid credit or debit card, a mobile wallet, or a valid Bushfire Kitchen gift card; amounts paid using promotional currency, Promo Codes, or redeemed Rewards do not earn Points. Each account is limited to three (3) qualifying purchases per day, and multiple menu items purchased in a single transaction count as one qualifying purchase. Points are tracked and allocated by us or our service providers, and our records and good-faith determinations regarding Points and Rewards are final and binding to the fullest extent permitted by law. Eligibility to receive Points is subject to verification at all times.

Missing Points; Verification; Reversals

Points are awarded only when your account is identified at the time of purchase as described in Section 7.2. Purchases made without identifying your account — including guest checkouts and in-restaurant purchases where no account phone number or email is provided before payment — are not eligible for retroactive Point credit. If Points from a qualifying purchase on which your account was identified do not appear within seven (7) days, contact us at customerservice@bushfirekitchen.com with your receipt or order number within thirty (30) days of the transaction; requests received after that window may not be honored. We may require supporting documentation and may delay crediting Points in order to validate a transaction. Points associated with a returned, refunded, cancelled, or disputed transaction will be reversed, and any attempt to earn Points through purchase-and-refund activity is grounds for termination under Section 7.9.

Exclusions

Points are not earned on: orders placed through third-party delivery marketplaces (including DoorDash, Uber Eats, Grubhub or Postmates); catering orders (unless we expressly state otherwise); purchases of alcohol; purchases of gift cards; taxes, tips, service fees, delivery fees, bag fees, or other fees; donations; cancelled or refunded orders; or the portion of any transaction paid using a redeemed Reward, unless we expressly specify otherwise for a given promotion. Points, Rewards, and other Rewards Program benefits may not be redeemed for, applied to, or used to discount alcoholic beverages, in compliance with applicable alcoholic beverage control laws.

Point Expiration; Inactive Accounts

Each Point expires, and is forfeited if unredeemed, three hundred sixty-five (365) days after the date it is credited to your account, regardless of any other activity on your account. In addition, accounts with no qualifying activity for twenty-four (24) consecutive months may be deemed inactive and closed, with any remaining balances forfeited, following notice to the email address on file. All Points are forfeited if your account is closed by you or terminated by us, effective when the closure or termination is processed. Tier status is tracked separately from Points and resets annually as described in Section 7.7.

Redemption

Points may be redeemed only for the reward items we make available from time to time (“Rewards”), each carrying the Point value stated in the Site or App. To redeem, you must affirmatively select a Reward as directed in the Services; Points are not applied to transactions automatically. Unless we state otherwise: one (1) Reward may be redeemed per transaction; Rewards may not be combined with other offers, discounts, or Promo Codes; Rewards must be redeemed by the Member whose account earned the Points; Rewards cannot be redeemed on third-party marketplace orders or catering orders; and the redemption value of a Reward cannot exceed the total price of the order in which it is redeemed (no cash back, credit, or carryover of excess value). Points are redeemed on a first-in, first-out basis. Unless otherwise stated at issuance, Rewards expire if not used within sixty (60) days after they are added to your account. Once Points are redeemed for a Reward they will not be re-credited, and there are no refunds, returns, or exchanges of redeemed Points, even if the Reward goes unused. Rewards may not be redeemed for or applied to alcoholic beverages.

The Reward catalog may include Bushfire Kitchen merchandise or other physical items. Physical Rewards are not shipped: they must be picked up in person by the redeeming Member at a participating Bushfire Kitchen restaurant, within the timeframe stated at redemption (or, if none is stated, within thirty (30) days), after which the Reward is forfeited without re-crediting of Points. Merchandise availability may vary by location, and Reward availability is limited and first-come, first-served. Images of Rewards are for illustration only and actual items may vary, and we reserve the right to substitute any Reward with one of comparable or greater value if a redeemed Reward becomes unavailable.

Membership Tiers

The Rewards Program includes three membership tiers: Ember, Flame, and Family. Members start at the Ember tier upon enrollment. Tier status is based on Points earned on qualifying purchases during each “Tier Year” — the twelve-month period beginning on your enrollment date and on each anniversary of your enrollment date. Members who earn five thousand (5,000) Points during a Tier Year reach the Flame tier, and Members who earn ten thousand (10,000) Points during a Tier Year reach the Family tier. Tier upgrades take effect promptly once the applicable threshold is reached and remain in effect for the rest of that Tier Year. At the start of each new Tier Year, all Members reset to the Ember tier and re-qualify for higher tiers through Points earned during the new Tier Year. Points earned count toward tier qualification whether or not they are later redeemed; however, Points reversed due to refunds, cancellations, or disputed transactions (Section 7.3) reduce tier progress, and tier status obtained through fraud or abuse may be revoked under Section 7.9. The benefits associated with each tier are described in the Site or App and are not fixed: we may add, modify, reduce, or discontinue tier benefits, and may change tier names, qualification thresholds, and reset mechanics, at any time as described in Section 7.10. Tier status and tier benefits are promotional, have no cash value, are not transferable, and confer no vested rights.

Nature of Points and Rewards

Points and Rewards are promotional in nature. They are not cash, property, or gift cards; have no cash value; do not represent a claim on any cash or other property; may not be transferred, exchanged, sold, bartered, auctioned, or assigned (any attempted transfer is void); and confer no vested rights. Accumulating Points does not entitle you to any particular Reward or to the continued availability of the Rewards Program or any Reward. Neither we nor our service providers are responsible for unredeemed, unused, expired, or lost Points or Rewards. If we determine that a Reward was improperly denied, your sole and exclusive remedy is issuance of that Reward or a substantially equivalent replacement.

Fraud; Suspension; Termination of Membership

We may suspend or terminate any Member’s account and/or invalidate Points or Rewards that we determine, in our reasonable discretion, were obtained through fraud, abuse, error, use of multiple accounts, use of any bot, script, macro, or other automated means, purchase-and-refund schemes, resale or other commercial activity, activity by or on behalf of an aggregator or business entity, violation of these Terms, or other conduct inconsistent with the letter and spirit of the Rewards Program. Members whose accounts are terminated for cause forfeit all accumulated Points and Rewards and may not re-enroll without our prior written permission.

Program Changes and Termination

We reserve the right to modify, suspend, or terminate the Rewards Program, in whole or in part — including earn rates, Reward offerings, Point values, expiration periods, and eligibility rules — at any time and in our sole discretion. For material adverse changes or program termination, we will provide reasonable advance notice via the Services or the email address on file where practicable and where required by applicable law. Program changes may affect previously accumulated Points. We will not be liable to you or to any third party for any modification, suspension, or termination of the Rewards Program.

Privacy

Personal information collected in connection with the Rewards Program is handled in accordance with our Privacy Policy, available at Privacy Policy - Bushfire Kitchen and maintained separately from these Terms. Because the Rewards Program provides benefits in exchange for personal information, the Privacy Policy includes the disclosures required for California residents, including a Notice of Financial Incentive describing the program’s material terms, how to opt in, and how to withdraw. You may withdraw from the Rewards Program at any time by closing your account or contacting us at customerservice@bushfirekitchen.com; withdrawal results in forfeiture of accrued Points.

Colorado (CPA)

This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in CPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

CPA Rights

Your CPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the CPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General's Office.

Connecticut (CTDPA)

This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to admin@bushfirekitchen.com.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the CTDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in CTDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Large Language Model Training

We do not process personal data for the purpose of training large language models.

CTDPA Rights

Your CTDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the CTDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Profiling Rights

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.

Delaware (DPDPA)

This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the DPDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to admin@bushfirekitchen.com.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the DPDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in DPDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

DPDPA Rights

Your DPDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the DPDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to List of Third Parties

You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. You can also find that information in our Privacy Policy.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General's Office.

Florida (FDBR)

This section provides additional information for Florida residents under the Florida Digital Bill of Rights (FDBR). The terms used in this section have the same meaning as in the FDBR.

We do not sell your sensitive personal data.

Montana (MCDPA)

This section provides additional information for Montana residents under the Montana Consumer Data Privacy Act (MCDPA). The terms used in this section have the same meaning as in the MCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MCDPA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the MCDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in MCDPA.

Profiling

The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

MCDPA Rights

Your MCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the MCDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.

Minnesota (MNCDPA)

This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in MNCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

MNCDPA Rights

Your MNCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Obtain List of Third Parties

You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:

Apple Pay
Google Ads
Google Pay
Meta Ads

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the MNCDPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Profiling Rights

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.

Iowa (ICDPA)

This section provides additional information for Iowa residents under the Iowa Consumer Data Protection Act (ICDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the ICDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the ICDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in ICDPA.

Sensitive Data

We do not process consumers’ sensitive data.

ICDPA Rights

Your ICDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. We will respond to your request within 90 days, with a possible 45-day extension if reasonably necessary.

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your ICDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the ICDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Sensitive Data:
We do not process consumers’ sensitive data.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Iowa Attorney General's Office.

Indiana (INCDPA)

This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

INCDPA Rights

Your INCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.

Kentucky (KYCDPA)

This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

KYCDPA Rights

Your KYCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.

Nebraska (NDPA)

This section provides additional information for Nebraska residents under the Nebraska Data Privacy Act (NDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to admin@bushfirekitchen.com.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the NDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in NDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

NDPA Rights

Your NDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your NDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the NDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Nebraska Attorney General's Office.

New Hampshire (NHPA)

This section provides additional information for New Hampshire residents under the New Hampshire Privacy Act (NHPA). The terms used in this section have the same meaning as in the NHPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NHPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to admin@bushfirekitchen.com.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the NHPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in NHPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

NHPA Rights

Your NHPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your NHPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the NHPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Hampshire Attorney General's Office.

New Jersey (NJDPA)

This section provides additional information for New Jersey residents under the New Jersey Data Privacy Act (NJDPA). The terms used in this section have the same meaning as in the NJDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NJDPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to admin@bushfirekitchen.com.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the NJDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in NJDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

NJDPA Rights

Your NJDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your NJDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the NJDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Jersey Attorney General's Office.

Maryland (MODPA)

This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.

If you have any questions or wish to contact us regarding this privacy notice, please send an email to admin@bushfirekitchen.com.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in the MODPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

MODPA Rights

Your MODPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.

Right to Obtain List of Categories of Third Parties

You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed or required by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the MODPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.

Rhode Island (RIDTPPA)

This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not sell your data as defined in the RIDTPPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

RIDTPPA Rights

Your RIDTPPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the RIDTPPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agents

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Withdraw Consent

If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.

Nevada (NPICICA)

This section provides additional information for Nevada residents under the Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA), Nevada Revised Statutes Chapter 603A. The terms used in this section have the same meaning as in NPICICA. This section does not apply to data that is not considered "covered information" as defined in the NPICICA.

NPICICA Rights

Your NPICICA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to review any covered information we have collected about you online.

Right to Delete

You have the right to request that we delete any covered information we have collected about you online. We will permanently delete any such covered information from our records and direct our processors to do the same. However, we may retain your covered information if it is necessary for certain purposes, as allowed by law.

Right to Correct

You have the right to correct inaccuracies in any covered information we have collected about you online, taking into account the nature of the data and our purposes for processing it.

Right to Opt-Out

We do not receive monetary consideration in exchange for your covered information and therefore do not sell your covered information as defined in the NPICICA.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.

Third-Party Tracking

We use cookies and other technologies that allow third parties to collect covered information about your online activities over time and across different Internet websites or online services.

Oregon (OCPA)

This section provides additional information for Oregon residents under the Oregon Consumer Privacy Act (OCPA). The terms used in this section have the same meaning as in the OCPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the OCPA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the OCPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you. We do not knowingly process personal data of Oregon residents under the age of 16 for purposes of targeted advertising.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in OCPA.

Profiling

The OCPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

OCPA Rights

Your OCPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Obtain List of Third Parties

You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:

Apple Pay
Google Ads
Google Pay
Meta Ads

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.

Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your OCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the OCPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Oregon Attorney General’s Office.

Tennessee (TIPA)

This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.

Data "Selling" and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in TIPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

TIPA Rights

Your TIPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.

Right to Non-Discrimination

If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the TIPA.

Targeted Advertising:
Exercise your right to opt-out.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.

Texas (TDPSA)

This section provides additional information for Texas residents under the Texas Data Privacy and Security Act (TDPSA). The terms used in this section have the same meaning as in the TDPSA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TDPSA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the TDPSA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in TDPSA.

Profiling

The TDPSA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

TDPSA Rights

Your TDPSA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded, excessive, or repetitive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.

Right to Non-Discrimination

If you exercise your TDPSA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the TDPSA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Texas Attorney General’s Office.

Utah (UTCPA)

This section provides additional information for Utah residents under the Utah Consumer Privacy Act (UTCPA). The terms used in this section have the same meaning as in the UTCPA. This section does not apply to information that is not considered "personal data," such as deidentified, aggregated, or publicly available information as defined in the UTCPA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the UTCPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in UTCPA.

UTCPA Rights

Your UTCPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than once in a 12-month period, or the request is manifestly unfounded or excessive, or it is part of an organized effort to harass, disrupt, or place undue burden on our business, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data you have provided to us. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.

Right to Non-Discrimination

If you exercise your UTCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the UTCPA.

Targeted Advertising:
Exercise your right to opt-out here.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Utah Division of Consumer Protection.

Virginia (VCDPA)

This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.

Data “Selling” and Targeted Advertising

We process personal data for purposes of targeted advertising (as defined in the VCDPA), including Personal Identifiers, Internet Activity, Commercial Information, Location Information, Protected Classifications and Other Personal Characteristics, Consumer Communications, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.

You may opt-out of these data practices here.

We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in VCDPA.

Profiling

We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

VCDPA Rights

Your VCDPA rights are described below. Make a Privacy Request by clicking here.

Right to Access

You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.

If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.

Right to Delete

You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.

Right to Non-Discrimination

If you exercise your VCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.

We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.

Right to Opt-Out

Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.

Targeted Advertising:
Exercise your right to opt-out here.

Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.

Authorized Agent

You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.

Opt-Out Preference Signals

Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.

Right to Correct

You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Authenticating Your Request

Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.

Right to Appeal

If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.

If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Virginia Attorney General’s Office.

Privacy Policy

Introduction

Changes to This Privacy Policy

Information Collection

Information collected from you

Information collected from other sources

How long we keep your data

Why We Process Your Information

How We Disclose Your Personal Information

Cookies & Similar Technologies

Cookies

Do Not Track

Third party analytics tools

California Shine the Light Disclosure

Contact Us

US State Privacy Notices

California (CCPA)

Enrollment

Earning Points

Missing Points; Verification; Reversals

Exclusions

Point Expiration; Inactive Accounts

Redemption

Membership Tiers

Nature of Points and Rewards

Fraud; Suspension; Termination of Membership

Program Changes and Termination

Privacy

Colorado (CPA)

Connecticut (CTDPA)

Delaware (DPDPA)

Florida (FDBR)

Montana (MCDPA)

Minnesota (MNCDPA)

Iowa (ICDPA)

Sensitive Data

Indiana (INCDPA)

Kentucky (KYCDPA)