Privacy Policy

Thanks for visiting Chunk’d Cookies!

Chunk’d Cookies (“Chunk’d”, “Chunk’d Cookies”, “we”, “us” or “our”) respects your privacy. When it comes to your personal information, we believe in transparency. That’s why we’ve set out what personal information we collect, what we do with it and your choices and rights.

By using any of Chunk’d Cookies Services, you confirm you have agreed to the Terms of Service and read and understood this Privacy Policy. 

1. Some key terms

In our Privacy Policy, when we refer to “Users”, we mean our customers who use our Services, including visitors to our sites. When we say “Squarespace” (or “they”), we mean our website provider, Squarespace, Inc. You can see their specific Privacy Policy and Terms of Service on their website here. 

2. How does this Privacy Policy apply?

This Privacy Policy describes what we do with personal information that we collect and use for our own purposes, such as your personal, payment, billing and shipping information and information about how you use and interact with our Services. This Privacy Policy does not apply to personal information of our employees or job applicants (except to the extent employees or job applicants are Users).

3. Personal information we collect

We collect various personal information. This includes the following:

  • Information you provide to place an order, specifically email address, first name, last name, phone number, billing and shipping address and payment information.

  • The emails and other communications that you send us or otherwise contribute, such as customer support inquiries or posts to our customer message boards. Please be aware that information on public parts of our sites is available to others.

  • Information you share with us in connection with surveys, contests or promotions.

  • Information from your use of the Services or Users’ sites. This includes: IP addresses, preferences, web pages you visited prior to coming to our or our Users’ sites, information about your browser, network or device (such as browser type and version, operating system, internet service provider, preference settings, unique device IDs and language and other regional settings), information about how you interact with the Services and our Users’ sites (such as timestamps, clicks, scrolling, browsing times, searches, transactions, referral pages, load times, and problems you may encounter, such as loading errors).

  • Information we get from our partners to support our marketing initiatives, improve our Services and better monitor, manage and measure our ad campaigns, such as details about when a partner of ours shows you one of our ads on or via its advertising platform.

  • Other information you submit to us directly or through Third Party Services if you use a Third Party Service.

4. How we collect personal information

We obtain personal information from various sources:

  • You provide some of it directly (such as by ordering from our website).

  • We receive some of it from third parties (like when you register for an account using a Third Party Service or when you make payments to us using our payment processor or via a mobile app store).

  • If you make a payment directly with us, we obtain limited information about your payment card from our payment processor, such as the last four digits, the country of issuance and the expiration date. Currently, our payment processor is Stripe. Stripe uses and processes your complete payment information in accordance with Stripe’s privacy policy.

5. How we use your personal information

We use the personal information we obtain about you for the following purposes:

  • Provision of the Services. Create and process your order.

  • Communicating with you. Communicate with you, including by sending you emails about your transactions and Service-related announcements.

  • Surveys and contests. Administer surveys, contests and other promotions.

  • Promotion. Promote our Services and send you tailored marketing communications about products, services, offers, programs and promotions of Chunk’d Cookies.

  • Advertising. Analyze your interactions with our Services and third parties’ online services so we can tailor our advertising to what we think will interest you.

  • Customizing the Services. Provide you with customized services.

  • Security. Ensure the security and integrity of our Services.

  • Third party relationships. Manage our vendor and partner relationships.

  • Enforcement. Enforce our Terms of Service and other legal terms and policies.

  • Protection. Protect our and others’ interests, rights and property.

  • Complying with law. Comply with applicable legal requirements, such as tax and other government regulations and industry standards, contracts and law enforcement requests.

We process your personal information for the above purposes when:

  • Consent. You have consented to the use of your personal information in a particular way.

  • Performance of a contract. We need your personal information to provide you with services and products requested by you, or to respond to your inquiries. In other words, so we can perform our contract with you or take steps at your request before entering into one. For example, we need your email address so you can be sent details about your order.

  • Legal obligation. We have a legal obligation to use your personal information, such as to comply with applicable tax and other government regulations or to comply with a court order or binding law enforcement request.

  • Legitimate interests. We have a legitimate interest in using your personal information. In particular, we have a legitimate interest in the following cases:

    • To analyze and improve the safety and security of our Services - we do this as it is necessary to pursue our legitimate interests in ensuring Chunk’d is secure, such as by implementing and enhancing security measures and protections and protecting against fraud, spam and abuse.

    • To provide and improve the Services, including any personalized services - we do this as it is necessary to pursue our legitimate interests of providing an innovative and tailored offering to our Users on a sustained basis.

    • To comply with a court order or binding law enforcement request.

    • To anonymize and subsequently use anonymized information.

  • Protecting you and others. To protect your vital interests, or those of others.

6. How we share your personal information

We share personal information in the following ways:

  • Affiliates. We share personal information with our affiliates when it is reasonably necessary or desirable, such as to help provide services to you or analyze and improve the services we or they provide.

  • Domain registration partners. If required to comply with ICANN, registry, ccTLD or registrar policies, we share your domain registration information with such domain registration partners.

  • Business partners. We may share personal information with business partners. For example, we may share your personal information when our Services are integrated with their Third Party Services, but only when you have been informed or would otherwise expect such sharing.

  • Third Party Plugins and Social Networks. We may share personal information with website plugins, social media platforms or similar Third Party Services to improve your experience, at your direction, or when you intentionally interact with the plug-in. For example, when you use a Third Party Service to create or log in to your Account, we may share your personal information with that Third Party Service.

  • Service providers. We share personal information with our service providers that perform services on our behalf. For example, we may use third parties to help us provide customer support, manage our advertisements on other sites, send marketing and other communications on our behalf or assist with data storage.

  • Process payments. We transmit your personal information via an encrypted connection to our payment processor.

  • Following the law or protecting rights and interests. We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others’ rights, property or interests (such as enforcing our Terms of Service) or prevent fraud or abuse of Chunk’d or End Users.

  • Advertising. We may share personal information with third parties so they and we can provide you with tailored advertising and measure and monitor its effectiveness.

7. Your rights and choices

Where applicable law requires (and subject to any relevant exceptions under law), you may have the right to access, update, change or delete personal information.

You can access, update, change or delete personal information (or that of your End Users) by contacting us at chunkdcookies@gmail.com to request the required changes.

Please note that, for technical reasons, there is likely to be a delay in deleting your personal information from our systems when you ask us to delete it. We also will retain personal information in order to comply with the law, protect our and others’ rights, resolve disputes or enforce our legal terms or policies, to the extent permitted under applicable law.

You may have the right to restrict or object to the processing of your personal information or to exercise a right to data portability under applicable law. You also may have the right to lodge a complaint with a competent supervisory authority, subject to applicable law.

Additionally, if we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, this will not affect the lawfulness of the processing before your consent withdrawal.

8. How we protect your personal information

While no service is completely secure, Squarespace has a security team dedicated to keeping personal information safe. They maintain administrative, technical and physical safeguards that are intended to appropriately protect against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse and any other unlawful form of processing, of the personal information in our possession. They employ security measures such as using firewalls to protect against intruders, building redundancies throughout our network and testing for and protecting against network vulnerabilities.

9. How we retain your personal information

We retain personal information regarding you or your use of the Services for as long as needed to provide you with the Services. We also retain personal information for as long as necessary to achieve the purposes described in this Privacy Policy, for example, to comply with our legal obligations, to protect us in the event of disputes and to enforce our agreements and to protect our and others’ interests. 

10. Data transfers

Personal information that you submit through the Services may be transferred to countries other than where you live, such as, for example, to our servers in the U.S. We also store personal information locally on the devices you use to access the Services.

Your personal information may be transferred to countries that do not have the same data protection laws as the country in which you initially provided the information.

Our website provider, Squarespace, relies upon a number of means to transfer personal information which is subject to the European General Data Protection Regulation (“GDPR”) in accordance with Chapter V of the GDPR.  These include:

  • Standard data protection clauses. We transfer, in accordance with Article 46 of the GDPR, personal information to recipients that have entered into the European Commission approved contract for the transfer of personal data outside the European Economic Area.

  • Other means. We may, in accordance with Articles 45 and 46 of the GDPR, transfer personal information to recipients that are in a country the European Commission or a European data protection supervisory authority has confirmed, by decision, offers an adequate level of data protection, pursuant to an approved certification mechanism or code of conduct, together with binding, enforceable commitments from the recipient to apply the appropriate safeguards, including as regards data subjects’ rights, or to processors which have committed to comply with binding corporate rules.

11. Privacy Shield

While Squarespace no longer relies upon the EU-U.S. or Swiss-U.S. Privacy Shield Frameworks (each individually and jointly, the “Privacy Shield”) to provide a legal basis for transfers to the US, Squarespace, Inc. has certified its compliance to the Privacy Shield, which continues to apply.

Squarespace is committed to treating personal information received from the European Economic Area, Switzerland and the United Kingdom pursuant to the Privacy Shield in accordance with the applicable Principles. You can find our certification here and you can learn more about the Privacy Shield and Principles by visiting https://www.privacyshield.gov/.

Squarespace accountability for personal information they receive and subsequently transfer to a third party is described in the Privacy Shield Principles. In particular, they may use third parties to process data on our behalf as described in this Privacy Policy, and they remain liable if they do so in a manner inconsistent with the Privacy Shield Principles, unless they prove that they are not responsible for the event giving rise to the damage.

12. Payment information 

Your payment information may be processed via third party eCommerce Payment Processors with which we integrate our website, in accordance with such eCommerce Payment Processors’ terms and policies. Squarespace transmits your complete payment information when you initially provide or update it only so that Squarespace can pass it along to the eCommerce Payment Processors Chunk’d agrees to use.

13. Updates to this Privacy Policy

We’ll update this Privacy Policy from time to time to reflect changes in technology, law, our business operations or any other reason we determine is necessary or appropriate.

We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit.  This will help ensure you better understand your relationship with us, including the ways we process your personal information.

14. How to contact us

If you have questions, comments or complaints about this Privacy Policy or our privacy practices or if you would like to exercise your rights and choices, please email us at chunkdcookies@gmail.com