I. PERSONAL INFORMATION WE COLLECT

A. Information You Provide Directly

When you register for an account on the Site, we collect certain information from you, including your name, employee identification number, birthday (month and date only), and email address.  We refer to this information as “Account Information.”  This information will be saved while you are an employee or until you delete your account, if you wish do to so.

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information”.  This information will be used to place and fulfill orders; however, only the last four digits of your credit card, card type, and expiration will be visible to Site administrators, and all payments will be processed by Shopify.  Your Order Information it will only be stored if you choose to save it. If you choose to save your Order Information, this information will be stored while you have an account or until you delete the information or your account. 

B. Other Ways We Collect Information

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are small text files that are stored locally on your on your device or computer and often include an anonymous unique identifier. The information that may be collected, through automated means, including cookies, includes:

• Recording and remembering your consent to cookies and other tracking technology
• IP addresses and other details of devices you use to connect with Amy’s
• Details about your interaction with the Website, social media platforms or other connected services
• Operating, evaluating and improving our business, our websites, and other products and services we offer
• Geolocation data
• Preferred language

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons”, “tags”, and “pixels” are electronic files used to anonymously track information about how you browse the Site.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

II. HOW WE USE YOUR PERSONAL INFORMATION

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping or pickup, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to communicate with you about your order.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

III. HOW WE PROTECT YOUR INFORMATION

Amy’s takes precautions to protect your personal information.  We have measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure.  Any payment information is encrypted and is not visible to any individual within Amy’s.

IV. SHARING YOUR PERSONAL INFORMATION

We may share your Personal Information with trusted parties to assist us us in our business, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

V. DO NOT TRACK

Please note that Shopify does not alter the Site’s data collection and use practices when it sees a Do Not Track signal from your browser.

VI. LINKS TO OTHER WEBSITES

This website contains links to other sites, such as Facebook, Twitter, and other third parties, that are not owned or controlled by Amy’s or Shopify.  Please be aware that we are not responsible for the privacy practices of such other sites.  We encourage you to be aware when you leave our site and to read the privacy policies of such other sites so that you understand what Personal Information is being collected from you and how it will be used.

VII. YOUR RIGHTS

The California Consumer Privacy Act (CCPA) provides privacy rights to California residents with respect to Personal Information. Those rights include, with certain qualifications:

• the right to access (including disclosure of the categories of Personal Information collected, categories of sources from which Personal Information is collected, the business purpose, the categories of third parties with which the business shares Personal Information and the specific pieces of Personal Information processed);
• the right to opt out of the sale of their Personal Information to third parties (note that Amy’s does not sell Personal Information to third parties);
• the right to request deletion; and
• the right not to receive discriminatory treatment by Amy’s for exercising any of the privacy rights mentioned in this Policy.

If you wish to exercise any of these data subject rights or have questions regarding our privacy policy or practices, please contact us (see the Contact Us section below) or visit our Data Subject Access Request portal here. In the event we need additional information to verify your request, we will contact you at the phone number you provide or by email.

You may designate an authorized agent to make a request pursuant to this policy on your behalf in accordance with the CCPA. We may require that you provide the authorized agent with written permission to act on your behalf and that the authorized agent verify their identity directly with us.

VIII. MINORS

The Site is intended for use by Amy’s employees only, and therefore, is not intended for individuals under the age of 16.

IX. CHANGES

We may update Amy's privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.  When we do, we will notify you via email at the email address you provide when creating your account. Your continued use of this website, after the effective date of the change notice, will mean you accept any such changes. To ensure you are reviewing the most current version of this Policy, we will post the effective date at the top of the page.

X. CONTACT US

If you have any questions or suggestions regarding this Policy, please contact 1-800-643-0570 or email us at privacy@amys.com.