Healthy Food Kitchen Inc. hereby presents this Privacy Policy ("Policy") for the purpose of elucidating the collection, utilization, disclosure, and general processing of your personal information when you engage with our online platform, accessible via https://eatralphs.com (referred to as the "Site"), our mobile application ("Application"), or any of the various services offered through our Site or Application (collectively referred to as the "Services"). In the event that you are a resident of California, we kindly request your attention to our supplementary California Notice at Collection outlined below for your reference.
WHAT DATA IS GATHERED AND THE RATIONALE BEHIND IT?
We obtain data from your interactions with our Site, Application, and Services, encompassing the subsequent categories:
Information Provided Voluntarily by You: Our data collection encompasses details obtained when you engage with our Site, Application, or Services, including but not limited to the following circumstances: placing an order, joining our Email Club, participating in contests, offering feedback (e.g., through surveys), seeking information from us, or engaging in other forms of communication. The nature of the information sought varies depending on the specific Service but may involve, for instance, your name, postal address, email address, credit or debit card data (if applicable to an order), gender, birthdate, mobile phone number, and any additional information you willingly furnish. Certain Services, such as order placement, may provide the option to create an account with us. In such cases, we will collect your name, postal code, email address, telephone number, username, password, and your preferences regarding Ralph's restaurant locations. In instances involving the use of our Application, we will seek your authorization to collect your present location to facilitate the identification of the nearest Ralph's restaurant.
Data Procured from Third-Party Sources: Our data collection processes extend to include information we obtain from third-party providers of demographic data. These third-party entities may furnish us with details either individually or in an aggregated format, which can include, but is not limited to, your name, address, gender, age, ethnicity, estimated income, interests (e.g., sports, movies, music, concerts, etc.), and consumer behaviors (e.g., shopping, dining, vehicles, etc.). It is important to note that in cases involving residents of California, Colorado, Connecticut, Utah, or Virginia, we explicitly request third-party vendors not to provide us with demographic data related to your gender, age, ethnicity, or national origin.
Information Gathered via Facebook: It is possible to utilize your Facebook account to log into our Site and Application. It is important to note that we do not retain your Facebook login credentials. If you opt to log in through Facebook, we will seek your authorization to access and collect your fundamental Facebook information. This comprises details such as your name, profile picture, gender, network associations, user IDs, friend list, date of birth, email address, and any other information that you have made publicly accessible on your Facebook account. Should you grant Ralph's permission to access this information, we will retain access to these details, even if you have decided not to make them publicly visible.
To gain an understanding of how Facebook might share your information, encompassing any information you decide to make public, we recommend referring to the Facebook Privacy Policy. It's crucial to note that we lack influence over how Facebook utilizes or reveals the personal information you furnish to them. We do, however, retain the information we acquire from Facebook, and it is consolidated with other data that we collect from or receive about you.
At times, we conduct contests through the Facebook platform and obtain information from participants when they enter these contests. For further insights into our data handling procedures concerning contests, please consult the official contest rules.
Information that We Collect About You from Google: You have the option to log into our Site and Application using your Google account. We do not collect your Google login credentials. When you log in via Google, we will seek your permission to access and collect your basic Google account information, which may encompass details such as your name, profile picture, gender, date of birth, email address, and any other information you have chosen to make public on your Google account. If you grant Ralph's permission to access this information, we will retain it, even if you have designated it as non-public.
For details about how Google may divulge your information, including any publicly shared data, please refer to the Google Privacy Policy. It is important to note that we lack control over how Google employs or discloses the personal information you provide to them. The information received from Google is stored in conjunction with other data we collect from or about you.
Information that We Collect About You from Apple ID: You have the option to log into our Site and Application using your Apple ID. We do not collect your Apple ID login credentials. When you log in via Apple ID, we will seek your permission to access and collect your basic Apple ID information, which may encompass details such as your name, profile picture, gender, date of birth, email address, and any other information you have chosen to make public on your Apple ID account. If you grant Ralph's permission to access this information, we will retain it, even if you have designated it as non-public. For details about how Apple may divulge your information, including any publicly shared data, please refer to the Apple Privacy Policy. It is important to note that we lack control over how Apple employs or discloses the personal information you provide to them. The information received from Apple is stored in conjunction with other data we collect from or about you.
To understand how Apple may disclose your information, including any publicly shared data, please refer to the Apple Privacy Policy. It's important to recognize that we lack the ability to influence how Apple utilizes or reveals the personal information that you provide to them. The information received from Apple is retained alongside other data collected from or pertaining to you.
Information We Collect Automatically: We employ cookies, web beacons, and similar automated technologies to gather information regarding your usage of our Site, Application, and Services. Please consult Section "COOKIES AND OTHER TRACKING MECHANISMS" for a detailed account of this data collection and our utilization of such information.
COOKIES AND OTHER TRACKING MECHANISMS
We, along with certain service providers, employ cookies and similar online tracking mechanisms to monitor your usage of our Site, Application, and Services. This data may encompass details such as your domain name, browser type, operating system, viewed web pages, clicked links, IP address, interactions within the Application, duration of visits to our Site and Application, and the referring URL that directed you to our Site. Moreover, information concerning your use of the Application, including device ID, location, language preferences, device name and model, operating system details, interactions within the Application, and login duration, may also be collected. We and our designated service providers utilize the information derived from cookies and online tracking mechanisms to enrich your overall experience on our Site, Application, and Services. This enhancement may involve expediting the login process and offering more captivating, personalized information, promotions, and advertisements. We strictly prohibit our service providers from using online tracking mechanisms on our Site, Application, and Services for their own purposes or on behalf of third parties. Additionally, we mandate our service providers to present our advertisements based solely on your activities across our Services.
FOR WHAT INTENTIONS DO WE UTILIZE YOUR DATA?
We employ the information we acquire about you for the subsequent objectives:
Delivering Assistance and Services: This encompasses fulfilling your orders or delivering our Site, Application, and Services to you. It also includes communication with you, processing contest entries, addressing your inquiries, and other activities pertaining to customer service. If you participate in a contest, the utilization and disclosure of your information will be subject to the contest rules.
Customizing Content and Enhancing Experiences: We use your information to customize the content and information we send or display to you. This personalization enhances your experiences while using our Site, Application, or Services.
Evaluating and Enhancing Services and Operations: Our goal is to enhance our Site, Application, and Services. We achieve this by providing personalized experiences, customizing based on your location, offering personalized help and guidance, and gaining a better understanding of how users access and use our offerings.
Marketing, Advertising and Promotional Purposes: Within the bounds of legal requirements, we may employ your information for marketing and promotional activities. This could involve delivering more pertinent advertisements to you and evaluating, measuring, and enhancing the effectiveness of our advertising campaigns. For instance, both we and our marketing partners may use your information, such as your email address, to email you with news, newsletters, special offers, and promotions. Importantly, we do not allow our marketing partners to use your information for their own purposes or on behalf of other third parties. We may also use the insights we gain about you to determine the most suitable platforms for advertising our Services on third-party websites. The purposes described in this section and those discussed below guide our use of this information.
Ensuring and Safeguarding Our Business: Protecting and securing our business operations, assets, Site, Application, Services, network, information and technology resources is paramount. This also involves investigating, preventing, detecting, and responding to fraud, unauthorized access, situations with potential threats to the rights or safety of individuals or third parties, or any other unauthorized activities or misconduct.
Protecting our Legal Rights: In managing and responding to real or potential legal disputes and claims, we work to establish, defend, or safeguard our rights or interests. This includes situations tied to ongoing or expected litigation with third parties.
Conducting Audits, Reporting, Managing Corporate Governance, and Overseeing Internal Operations: This category involves financial, tax, and accounting audits, as well as assessments of our operations, privacy, security, financial controls, risk, and compliance with legal obligations. It also relates to our general business, accounting, record-keeping, and legal functions. Furthermore, this encompasses activities related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy, or restructuring of our business, in whole or in part.
Complying with Legal Obligations: We use your information to abide by the law, our legal obligations, and legal processes such as warrants, subpoenas, court orders, and requests from regulatory or law enforcement authorities. This helps ensure compliance with our obligations under the law.
UNDER WHAT CONDITIONS DO WE SHARE PERSONAL INFORMATION?
We shall exclusively divulge your personal information in the ensuing manner and in strict compliance with relevant legal statutes:
Franchisees: A substantial proportion of Ralph's restaurants are independently owned and managed (i.e., by franchisees). We may reveal your information to a specific franchisee (or multiple franchisees) with the intention of executing your order (wherein the franchisee solely processes your personal information as our agent) or addressing your customer service requests (in which scenario, we will exclusively share your personal information with the franchisee upon your directive).
Service Providers: We reserve the right to divulge the information acquired from you to third-party vendors, service providers, contractors, or agents engaged in the execution of specific functions on our behalf. This encompasses third parties tasked with addressing your inquiries and managing online ordering systems. Additionally, this extends to third parties that deliver advertising services to us, solely contingent on data gathered from your interactions across our Services.
Business Transfers: In the event of an acquisition, merger, substantial asset transfer to another corporate entity, or as a component of bankruptcy proceedings, we reserve the right to transfer the data we have amassed from you to the acquiring or successor company.
In Compliance with Legal Obligations: We may also divulge the data we gather from you as required by legal mandates, judicial proceedings, court orders, or any other legal processes, including, but not limited to, complying with a court order or responding to a subpoena.
To Safeguard Ralph's and Others: We may also reveal the data obtained from you when we deem it essential to investigate, prevent, or initiate actions in response to unlawful activities, suspected fraudulent behavior, potential threats to the safety of any individual, or violations of our Terms of Use or this Policy.
Aggregate and De-Identified Data: We may disseminate summarized or de-identified data pertaining to users to third parties for marketing, advertising, research, or analogous objectives.
DURATION OF PERSONAL INFORMATION RETENTION
As a standard practice, we retain your personal information for the duration necessary to fulfill the purposes for which it was initially collected and to adhere to relevant legal requirements. When determining the appropriate retention period for your data, we take into consideration the following factors:
§ Your Account or Business Relationship: If you maintain an account or other business association with us, we typically retain your personal information for the duration of your account or business relationship to ensure the ongoing provision of our services to you.
§ Legal Obligations: We abide by any legal obligations mandating the retention of personal information, which may include laws that prescribe the preservation of transaction records for a specified timeframe before their deletion.
§ Safeguarding Legal Interests: We may also keep your personal information when necessary to safeguard our legal interests or exercise our legal rights, particularly in the context of legal proceedings.
ENSURING THE SECURITY OF INFORMATION
We have established safeguards with the intention of preserving the confidentiality, availability, and integrity of personal information. These measures may encompass, as deemed suitable, the utilization of password protection, encryption, and SSL to fortify our Site and Application, thereby shielding the information we gather from potential risks including loss, misuse, unauthorized access, disclosure, alteration, and destruction.
WHAT RIGHTS DO YOU HAVE?
Legal privacy rights: Pursuant to relevant laws, you may possess certain rights to access, rectify, transfer, or erase specific personal information held by us, gain insights into the processing of your personal information, or impose limitations or objections on particular activities related to your personal information. Should you hold these rights and your request aligns with the criteria set forth in relevant laws, we will uphold your rights in accordance with legal mandates.
Amending your account details: You retain the ability to revise any personal information you have furnished to your Ralph's account by accessing your account and updating your profile data. It is important to note that copies of the information you have altered, revised, or deleted may continue to be visible within cached and archived pages on the Site or Application for a certain duration. Should you wish to manage your Facebook, Google, or Apple profile details or customize the categories of information we acquire from Facebook, Google, or Apple, you must make the necessary adjustments directly through your Facebook, Google, or Apple account settings. Our control over the manner in which Facebook, Google, or Apple shares your data with us or other third parties is limited. The information you provide to Facebook, Google, or Apple is subject to the privacy policies of Facebook, Google, or Apple.
Exercising Your Email Marketing Preferences: We may periodically dispatch promotional or informative emails to your address. You possess the option to opt out of these communications by adhering to the opt-out directives provided within the email. Kindly be aware that the processing of opt-out requests may require up to 10 days. If you choose to opt out of receiving emails concerning recommendations or other content we believe may be of interest to you, please be advised that we may continue to send emails related to your account or any Services you have sought or obtained from us.
SMS Notifications: When utilizing our Services for order placement, you may receive an SMS message utilizing automated technology, including a survey link. It is at your discretion to decide whether you wish to furnish any information when responding to, or refraining from responding to, the survey. You will not receive any further SMS messages until a subsequent order is placed through our Services. In the event that you use our Services for delivery order placement, you may receive SMS messages employing automated technology from our third-party provider, DoorDash, Grubhub, UBEREATS, which will furnish details regarding your order. DoorDash, Grubhub, UBEREATS, exclusively employs your information to transmit messages pertaining to your order.
We will address your requests to exercise your privacy rights in compliance with relevant laws. Verification of your identity and the completion of your request may necessitate the provision of additional information from you. If your request is declined, we will furnish an explanation for the denial. In certain states, you retain the right to challenge our denial by responding to the message we send, indicating your intention to appeal our decision. Under these circumstances, we will reevaluate your request and subsequently apprise you of our determination.
CHILDREN UNDER 13
Our Site, Application, and Services are not intended for individuals under the age of 13. We do not intentionally gather information from individuals under 13 years of age. If we become aware that a child under 13 has furnished us with their personal information, we will expunge such data from our systems.
CALIFORNIA NOTICE AT COLLECTION
This California Notice at Collection applies to you only if you use our Services and reside in California. This notice does not reflect our practices where an exception or exemption applies under the California Consumer Privacy Act (CCPA). Please see Section " WHAT DATA IS GATHERED AND THE RATIONALE BEHIND IT?" above for information about the categories of personal information we collect about you. The categories of personal information we collect correspond with the following categories under the CCPA’s definitions of “personal information” and “sensitive personal information” (in the following bullets, a “consumer” means a California resident):
Categories of “personal information” as defined by the CCPA:- Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
- Any information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including credit card number and debit card number.
- Characteristics of protected classifications under California or federal law, including age, national origin and sex.
- Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement.
- Geolocation data.
- Audio, electronic, visual, or similar information.
- Professional or employment-related information
- Inferences drawn from any personal information to create a profile about a consumer reflecting the consumer’s preferences.
Categories of “sensitive personal information” as defined by the CCPA:- A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.
- A consumer’s precise geolocation.
We only use your sensitive personal information for purposes referred to under Subsection 1798.121(a) of the CCPA or for purposes not subject to the CCPA, namely to: (i) perform the services or provide the goods reasonably expected by average California residents who request those goods or services; (ii) prevent, detect and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information; (iii) resist malicious, deceptive, fraudulent or illegal actions directed at us and to prosecute those responsible for those actions; (iv) perform services on behalf of us; (v) verify or maintain the quality or safety of our services and products; (vi) improve, upgrade, or enhance our services and products; and (vii) perform functions that are required under laws that apply to us.
Please see Section "FOR WHAT INTENTIONS DO WE UTILIZE YOUR DATA?" above for information about the purposes for which we collect California residents’ personal information. We do not “sell” or “share” personal information, as these terms are defined in the CCPA. Please see Section "DURATION OF PERSONAL INFORMATION RETENTION" above for the criteria we consider in determining how long to retain each category of personal information. You can access our CCPA Privacy Policy
CALIFORNIA CONSUMER PRIVACY ACT PRIVACY POLICY
Last updated: January 1, 2023
Healthy Food Kitchen Inc. issues this California Consumer Privacy Act Privacy Policy ("CCPA Privacy Policy") to elucidate the manner in which we collect, employ, disclose, and otherwise manage the personal information of California residents, and to expound upon the rights conferred upon California residents by the CCPA. It is imperative to note that this CCPA Privacy Policy is exclusively applicable to California residents. Moreover, this CCPA Privacy Policy should not be misconstrued as encompassing our treatment of personal information belonging to California residents in situations where the CCPA has delineated exceptions.
1. Our Data Handling Practices in the Past 12 MonthsThe chart below delineates the categories of "personal information" and "sensitive personal information" (in accordance with CCPA definitions) that we have gathered from California residents in the previous 12 months. It also specifies the sources from which this information was obtained and details regarding the parties to whom we may have disclosed it, along with the associated purposes. Following the chart is an explication of the objectives for which we utilized such data concerning: (1) users of our online services; (2) representatives of our corporate clients and vendors; and (3) our potential, current, and former employees and other personnel, collectively referred to as "Employees." It should be noted that we do not engage in the "sale" or "sharing" of personal information, as defined by the CCPA.