Effective Date: 2018-07-30
Introduction
Roni’s Kitchen is committed to preserving your privacy and safeguarding your sensitive information.
This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally Identifiable Information’ (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.
What personal information do we collect from the people who visit our website?
When ordering or registering on our site, as appropriate, you may be asked to enter your name, email address, mailing address, phone number, shipping address or other details to help you with your experience.
When do we collect information?
We collect information from you when you register on our site, place an order or enter information on our site.
How do we use your information?
We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features to process your transactions and keep you informed of news and events.
How do we protect your information?
Our website server and software are scanned on a regular basis for security holes, malware, and known vulnerabilities in order to make your visit to our site as safe as possible.
All page requests and e-commerce transactions are encrypted by a trusted Transport Layer Security (TLS) certificate, often referred to as a Secure Sockets Layer (SSL) certificate. While we process payment information through a secure, PCI compliant third party (Square), securing the site with SSL data encryption provides an extra layer of protection for your Personally Identifiable Information, in-line with industry best practices and the latest privacy legislation. Your card data is not stored on our servers, but rather encrypted and sent directly to Square for processing.
Note: Your browser’s advanced settings may allow adjusting your support for the different versions of TLS and SSL. Most browsers will default to the latest and most secure version of TLS, which is TLS 1.2 as of this posting. Some browsers however will leave less-secure, older protocols enabled as a convenience feature, and it is worth taking a look at these settings to improve your security. It is recommended that you disable all versions of SSL and disable TLS 1.0, as these older versions of site encryption are not as secure as TLS 1.1 and TLS 1.2. This may break sites that have not updated to the latest standards; contact their support if you have concerns about their security protocols.
Do we use ‘cookies’?
Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. For instance, we use cookies to help us remember and process the items in your shopping cart. They are also used to help us understand and save your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is a little different, look at your browser’s Help Menu to learn the correct way to modify your cookies.
If users disable cookies in their browser:
If you turn cookies off, some features will be disabled. Some of the features that make your site experience more efficient may not function properly.
Third-party disclosure
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, so long as those parties agree to keep this information confidential. We may also release information when it’s release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property or safety.
However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Third-party links
We do not include or offer third-party products or services on our website.
We, along with third-party vendors such as Google, use first-party cookies (such as the Google Analytics cookies) to analyze website traffic and monitor website performance for internal purposes only
Opting out:
Users can opt out of Google Analytics tracking behaviour by using the Google Analytics Opt Out Browser add on.
You will be notified of any Privacy Policy changes:
- On our Privacy Policy Page
You can change your personal information:
- By logging in to your account
How does our site handle Do Not Track (DNT) browser requests?
We honor DNT signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is in place.
Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe, including in Canada where we provide the bulk of our services. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.
In order to be in-line with Fair Information Practices and current privacy legislation, we will inform our clients via email and a notification posted on our site, should a data breach occur. We will provide such notification in-line with the most secure privacy standards, currently a 72-hour period as per the General Data Protection Regulation of the European Union, 2018.
We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.
CAN-SPAM Act
The CAN-SPAM Act is an American law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations when doing business in the United States of America. CAN-SPAM has been the standard in North America for data protection and commercial best practices since 2003, and has influenced privacy legislation around the world. As per the CAN-SPAM regulations:
We collect your email address in order to:
- Send information, respond to inquiries, and/or other requests or questions
- Process orders and to send information and updates pertaining to orders
- Send you additional information related to your product and/or service
- Market to our mailing list or continue to send emails to our clients after the original transaction has occurred
To be in accordance with CAN-SPAM, we agree to the following:
- Not use false or misleading subjects or email addresses
- Identify the message as an advertisement in some reasonable way
- Include the physical address of our business or site headquarters
- Monitor third-party email marketing services for compliance, if one is used
- Honor opt-out/unsubscribe requests quickly
- Allow users to unsubscribe by using the link at the bottom of each email
If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email and we will promptly remove you from ALL correspondence.
General Data Protection Regulation (GDPR)
The GDPR was passed in the European Union in 2018, setting a new standard for civilian and consumer privacy protection across the Internet. The GDPR legislates privacy by default rather than by request, with a strong enforcement policy to protect European citizens in all digital transactions. The GDPR applies to all Personally Identifiable Information of any European citizen, regardless of the geographic location of the transaction, or the relevant site’s country of registration.
To be in accordance with the GDPR, we agree to the following:
- To provide notification of any data breach that might involve your Personally Identifiable Information within 72 hours
- To never share your Personally Identifiable Information with another party without your expressed request, except where required by law
- To secure your personal data such that it is not available publicly or to third parties without your expressed consent
- To provide a full report of your Personally Identifiable Information stored in our system on your request (after verification of your identity)
- To remove your Personally Identifiable Information from our system on your request (after verification of your identity)
Contacting Us
If there are any questions regarding this privacy policy, you may contact us using the information below.
info@roniskitchen.com
CALGARY, Alberta, Canada
