Privacy Policy
Last Updated: Aug 10, 2026
MUSH PRIVACY NOTICE
Last Updated: 7/24/2026
Welcome to MUSH. MUSH sells refrigerated, ready-to-eat oats and protein snacks, including overnight oats, protein overnight oats, and protein bars. This Privacy Notice explains how MUSH Foods, Inc. (collectively referred to as “MUSH,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with our websites and online store, including eatmush.com, our products, promotions, wholesale program, store locator, email marketing, and other online or offline services that link to this Privacy Notice.
This Privacy Notice does not address our privacy practices relating to MUSH job applicants, employees, contractors, or other work-related individuals, nor information that is not subject to applicable U.S. privacy laws, such as deidentified or publicly available information. This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.
Our Collection and Use of Personal Information
The categories of personal information we collect depend on how you interact with us and our services. For example, you may provide personal information directly when you create an account, make a purchase, manage a subscription, request wholesale access, use our store locator, sign up for our mailing list, participate in a promotion, upload a receipt for a rebate or similar offer, contact us, or otherwise interact with us.
We also collect personal information automatically when you interact with our websites and other services and may also collect personal information from other sources and third parties.
Personal Information Provided by Individuals
We collect the following categories of personal information individuals provide us:
- Contact Information, including first and last name, email address, mailing address, shipping address, and communication preferences. We use this information primarily to fulfill your request or transaction, communicate with you, provide customer support, and send marketing communications in accordance with your preferences.
- Wholesale and Business Contact Information, including name, email address, company name, job title, business contact details, and information about your business or wholesale request. We use this information primarily to evaluate and respond to wholesale inquiries, administer business relationships, and communicate with you in your business capacity.
- Account and Subscription Information, including name, email address, account credentials, order history, products or services you are interested in, purchased, or have otherwise used, and subscription preferences. We use this information primarily to create and administer your account, provide our products and services, process and manage purchases and subscriptions, communicate with you regarding your account, and provide customer support.
- Order and Transaction Information, including products purchased, quantities, flavor selections, shipping details, billing details, order notes, purchase history, delivery information, returns, refunds, and customer service records. We use this information primarily to process, fulfill, deliver, service, and improve purchases and related transactions.
- Payment Information, including payment card information, billing address, and other payment details. We use third-party payment providers and e-commerce providers, including Shopify, to process payments made to us. We do not retain full payment card numbers you provide to these third-party providers in connection with payments. Instead, payment information is provided directly to our payment providers, and their use of personal information is governed by their privacy notices.
- Promotion, Survey, and Receipt Information, including information provided when you enter a contest or promotion, complete a survey, submit a testimonial, upload a purchase receipt, or request a rebate or similar offer. We use this information primarily to administer promotions and offers, verify eligibility, provide reimbursements or other benefits, communicate with you, conduct market research, and improve our products and services.
- Preferences and Marketing Information, including product preferences, subscription preferences, newsletter sign-up information, email engagement information, and marketing communication preferences. We use this information primarily to personalize your experience, send product drops, recipes, promotions, and other marketing communications, and improve our marketing and advertising.
- Feedback and Support Information, including the contents of messages you send through forms, email addresses, customer service channels, social media, reviews, or other contact methods we make available. We use this information primarily to investigate and respond to inquiries, provide customer support, communicate with you, and improve our products and services.
If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal information we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.
Personal Information Automatically Collected
We, and our third-party partners, automatically collect information about how you access and use our websites, online store, emails, advertisements, and other online services when you engage with us. We typically collect this information through cookies and related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies, and logging technologies. Information we collect automatically may be combined with other personal information we collect directly from you or receive from other sources.
We, and our third-party partners, use automatic data collection technologies to automatically collect the following data when you use our services or otherwise engage with us:
- Information About Your Device and Network, including device type, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network, such as cookies or advertising IDs. We use this information primarily to operate our website and online store, maintain security, understand how visitors use our services, and support analytics and advertising.
- Information About the Way Individuals Use Our Services and Interact With Us, including the site from which you came, the site to which you go when you leave our services, pages and products viewed, searches, links and ads clicked, emails opened, purchase activity, and other browsing or interaction information. We use this information primarily to understand and improve our services, personalize your experience, measure marketing performance, and support targeted advertising.
- Information About Your Location, including general location that we or our third-party providers may derive from your IP address, as well as precise geolocation when you grant permission through your browser or device settings to use features such as our store locator. We use this information primarily to help you find nearby stores that sell MUSH products and to support website functionality, analytics, and advertising.
All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your experience, monitor and improve our products and services, and improve the effectiveness of our offers, advertising, communications, and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) diagnose or fix technology problems; and (g) otherwise plan for and enhance our products and services.
For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below. For additional details about the cookies and related technologies we use on our websites, and to adjust your preferences where available, please use the “Cookie Settings,” “Your Privacy Choices,” or similar preference-management link made available on our websites.
Personal Information from Other Sources and Third Parties
We may receive the same categories of personal information as described above from the following sources and other parties:
- Affiliates and Related Entities: We may receive personal information from our affiliates and related entities for purposes and uses that are consistent with this Privacy Notice.
- Wholesale Customers and Business Contacts: We may receive personal information from the company you represent, from representatives of wholesale or food service customers, or from other business contacts in connection with wholesale access requests and business relationships.
- Social Media: When you interact with us through social media networks, such as when you follow us, tag us, or share our content, we may receive information that you permit the social network to share with us. The information we receive depends on your privacy settings with the social network.
- Advertisers, Influencers, and Publishers: We may receive personal information from advertising partners, influencers, publishers, and similar partners in connection with our advertising and marketing efforts, including information about whether an advertisement or campaign led to engagement with MUSH.
- Retailers, Business Partners, and Promotion Partners: We may receive personal information from retailers, delivery platforms, wholesale partners, reimbursement partners, or other business partners in connection with product availability, store-locator functionality, promotions, rebates, purchases, or customer support.
- Service Providers: Our service providers that perform services on our behalf, such as e-commerce, payment, fulfillment, shipping, analytics, marketing, email, privacy compliance, customer support, and security providers, may collect personal information and share some or all of this information with us.
- Other Sources: We may also collect personal information about you from other sources, including publicly available sources, third-party data providers, brand partnerships, or through transactions such as mergers and acquisitions.
- Inferences: We may generate inferences or predictions about your interests and preferences based on the other personal information we collect and the interactions we have with you, such as product preferences or likely interests in MUSH products, promotions, or content.
Additional Uses of Personal Information
In addition to the primary purposes for using personal information described above, we may also use personal information we collect to:
- Fulfill or meet the reason the information was provided, such as to process orders, facilitate payment, ship products, manage subscriptions, administer promotions, respond to wholesale requests, or provide requested products and services;
- Manage our organization and its day-to-day operations;
- Communicate with you, including via email, customer support channels, social media, and, where applicable, telephone or text message;
- Facilitate the relationship we have with you and, where applicable, the company you represent, including wholesale relationships;
- Request you provide us feedback about our product and service offerings;
- Address inquiries or complaints made by or about an individual in connection with our products or services;
- Create and maintain accounts for our users;
- Verify your identity and entitlement to our products and services;
- Register you for and provide you access to events, contests, sweepstakes, and surveys;
- Market our products and services to you, including through email, online advertising, social media, and other marketing channels in accordance with your preferences and applicable law;
- Administer, improve, and personalize our products and services, including by recognizing you and remembering your information when you return to our products and services;
- Develop, operate, improve, maintain, protect, and provide the features and functionality of our products and services, including by using artificial intelligence, machine learning, or similar technologies to support customer service, marketing, analytics, fraud prevention, security, and other business operations;
- Identify and analyze how you use our products and services;
- Infer additional information about you from your use of our products and services, such as your interests.
- Create aggregated or de-identified information that cannot reasonably be used to identify you, which information we may use for purposes outside the scope of this Privacy Notice;
- Conduct research and analytics on our user base and our products and services, including to better understand the demographics of our users;
- Improve and customize our products and services to address the needs and interests of our user base and other individuals we interact with;
- Test, enhance, update, and monitor the products and services, or diagnose or fix technology problems;
- Help maintain and enhance the safety, security, and integrity of our property, products, services, technology, assets, and business;
- Defend, protect, or enforce our rights or applicable contracts and agreements (including our Terms of Service), as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
- Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of MUSH and others;
- Facilitate business transactions and reorganizations impacting the structure of our business;
- Comply with contractual and legal obligations and requirements;
- Fulfill any other purpose for which you provide your personal information, or for which you have otherwise consented.
Our Disclosure of Personal Information
We disclose or otherwise make available personal information in the following ways:
- To Affiliates and Related Entities: We may disclose personal information to our affiliates and related entities for purposes and uses that are consistent with this Privacy Notice.
- To Marketing Providers: We coordinate and share personal information with marketing providers, including email marketing providers, to advertise and communicate with you about MUSH products, promotions, recipes, product drops, and other content.
- To Ad Networks and Advertising Partners: We work with third-party ad networks and advertising partners to deliver advertising and personalized content on our services and on other websites and services. These parties may collect information automatically from your browser or device through cookies and related technologies. This information is used to provide and inform targeted advertising, as well as advertising-related services such as reporting, attribution, analytics, and market research.
- To Business Partners: We may disclose personal information to business partners, such as retailers, wholesale partners, reimbursement partners, and other partners involved in product availability, wholesale access, promotions, rebates, purchases, or customer support.
- To Service Providers: We engage service providers to perform services on our behalf, including e-commerce hosting, payment processing, order fulfillment, shipping, customer support, privacy compliance, email delivery, marketing, analytics, advertising, security, and technology services. Depending on the applicable services, these service providers may process personal information on our behalf or have access to personal information while performing services for us.
- To Other Businesses as Needed to Provide Services: We may disclose personal information to third parties you engage with through our services or as needed to fulfill a request or transaction, including payment processing, shipping, reimbursement, and retailer-related services.
- In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a business transaction or reorganization, such as a merger, acquisition, joint venture, financing, or sale of company assets. We may disclose, transfer, or assign personal information to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, personal information may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
- To Facilitate Legal Obligations and Rights: We may disclose personal information to third parties, such as legal advisors and law enforcement:
- in connection with the establishment, exercise, or defense of legal claims;
- to comply with laws or to respond to lawful requests and legal process;
- to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
- to detect, suppress, or prevent fraud;
- to reduce credit risk and collect debts owed to us;
- to protect the health and safety of us, our customers, or any person; or
- as otherwise required by applicable law.
- With Your Consent or Direction: We may disclose your personal information to certain other third parties or publicly with your consent or direction. For example, with your permission, we may post your testimonial on our websites or social media pages.
Your Privacy Choices
The following privacy choices are made available to all individuals with whom we interact. You may also have additional choices regarding your personal information depending on the U.S. state in which you reside. Please refer to the Additional U.S. State Privacy Disclosures section below for information about additional privacy choices that may be available to you.
Communication Preferences
- Email Communication Preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe” link provided in any of our email communications. Please note you cannot opt-out of service-related email communications (such as, account verification, transaction confirmation, or service update emails).
Withdrawing Your Consent
Where we have your consent for the processing of your personal information (e.g., when you opt in to receive certain types of marketing communications from us), you may withdraw your consent by following the instructions provided when your consent was requested or by contacting us as set forth in the Contact Us section below.
Automatic Data Collection Preferences
Certain of our services may provide you the ability to adjust your preferences regarding our use of automatic data collection technologies. For example, where available, a “Cookie Settings,” “Your Privacy Choices,” or similar preference-management link on our websites may allow you to adjust preferences for certain automatic data collection technologies on the specific website, device, and browser you are using at that time.
Where a MUSH-specific preference manager or privacy setting is not available, you may be able to utilize third-party tools and features to further restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.
Modifying or Deleting Your Personal Information
If you have any questions about reviewing, modifying, or deleting your personal information, you can contact us directly at hello@eatmush.com. We may not be able to modify or delete your personal information in all circumstances.
Partner-Specific Preferences
Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal information, or automatically impose limitations on the way we can use personal information in connection with the services they provide:
- Device-Specific / Platform-Specific Preferences: The browser, device, and/or platform you use to interact with us may provide you additional choices with regard to the information you choose to share with us. For example, many browsers and devices allow you to change permissions to prevent websites from accessing certain types of information, such as precise geolocation, and many social media platforms allow you to change your platform permissions. Please refer to your browser, device, or platform provider’s user guides for additional information about implementing available platform-specific choices.
- Google Analytics: Google Analytics allows us to better understand how our customers interact with our services. For information on how Google Analytics collects and processes information, as well as how you can control information sent to Google, review Google's website here: www.google.com/policies/privacy/partners/. You can learn about Google Analytics’ currently available opt-outs, including the Google Analytics Browser Add-On here: https://tools.google.com/dlpage/gaoptout/. We may also utilize certain forms of display advertising and other advanced features through Google Analytics. These features enable us to use first-party cookies and third-party cookies together to inform, optimize, and display ads based on your past visits to our services. You may control your advertising preferences or opt out of certain Google advertising products by visiting the Google Ads Preferences Manager, currently available at https://myadcenter.google.com/?ref=help-center.
Children’s Personal Information
Our services are not directed to, and we do not intend to knowingly collect or solicit personal information from, children under the age of 13. If an individual is under the age of 13, they should not use our services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 13, we will promptly delete that personal information.
Security of Personal Information
We have implemented reasonable physical, technical, and organizational safeguards designed to protect your personal information. However, despite these controls, we cannot completely ensure or warrant the security of your personal information.
Retention of Personal Information
We will usually retain the personal information we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal information for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.
To determine the appropriate duration of the retention of personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.
Once retention of the personal information is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal information or, if that is not possible (for example, because personal information has been stored in backup archives), we will securely store the personal information and isolate it from further active processing until deletion or deidentification is possible.
Third-Party Websites and Services
Our services may include links to third-party websites, plug-ins, applications and other services. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal information practices of third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.
Updates to This Privacy Notice
We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
Contact Us
If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please contact us at hello@eatmush.com or MUSH Foods, Inc., 440 N Wells St., Chicago, IL 60657.
ADDITIONAL U.S. STATE PRIVACY DISCLOSURES
These disclosures supplement the information contained in our Privacy Notice by providing additional information about the privacy rights available to residents of certain U.S. states and our personal information processing practices relating to those individuals. For a detailed description of how we collect, use, disclose, and otherwise process personal information, please read our Privacy Notice.
If you are a resident of a U.S. state with a comprehensive consumer privacy law, the following supplementary disclosures may apply to you, depending on your state of residency and subject to applicable legal limitations and exceptions.
Personal Information Disclosures, Sales and Targeted Advertising
We disclose all of the categories of personal information we collect to the categories of recipients set forth in the Our Disclosure of Personal Information section of our Privacy Notice. We do not sell personal information for money. However, our use of certain cookies and related technologies for targeted advertising may be considered a “sale,” “sharing,” or processing for targeted advertising under certain U.S. state privacy laws.
Our disclosure of personal information to ad networks and advertising partners may qualify as the sale of personal information or the sharing or processing of personal information for the purpose of displaying advertisements that are selected based on personal information obtained or inferred over time from an individual’s activities across non-affiliated businesses, websites, applications, or other services, also known as targeted advertising or cross-context behavioral advertising.
Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal information or the processing of personal information for purposes of targeted advertising (as described in the Your Additional U.S. Privacy Choices section below).
Please note we do not knowingly sell the personal information of individuals under 16 years of age or share such information for targeted advertising purposes.
Sensitive Personal Information
The following personal information we collect may be classified as “sensitive” under certain privacy laws:
- Precise geolocation data, when you grant permission through your browser or device settings for features such as our store locator.
We use sensitive personal information for the purposes set forth in the Our Collection and Use of Personal Information section of our Privacy Notice, including to provide store-locator functionality when you choose to use it. We do not sell sensitive personal information or share sensitive personal information for targeted advertising purposes.
Deidentified Information
We may at times receive, or process personal information to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.
Your Additional U.S. Privacy Choices
Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:
- Right to Know: The right to confirm whether we are processing personal information about you and, for residents of California and Oregon only, to obtain certain personalized details about the personal information we have collected about you, including:
- The categories of personal information collected;
- The categories of sources of the personal information;
- The purposes for which the personal information was collected;
- The categories of personal information disclosed to third parties (if any), and the categories of recipients to whom this personal information was disclosed;
- The categories of personal information shared for targeted advertising purposes (if any), and the categories of recipients to whom the personal information was disclosed for these purposes;
- The categories of personal information sold (if any) and the categories of third parties to whom the personal information was sold; and
- For Oregon residents only, a list of specific third parties to whom personal information has been disclosed.
- Right to Access & Portability: The right to obtain access to the personal information we have collected about you and, where required by law, the right to obtain a copy of the personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
- Right to Correction: The right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right to Control Over Sensitive Personal Information: The right to exercise control over our collection and processing of certain sensitive personal information.
- Right to Opt-Out of Targeted Advertising: The right to direct us not to use or share personal information for certain targeted advertising purposes.
- Right to Opt-Out of Sales: The right to direct us not to sell personal information to third parties, including the right to opt out of disclosures that may be considered a sale or sharing because they support targeted advertising.
- Right to Deletion: The right to have us delete personal information we maintain about you.
Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.
Submitting Privacy Rights Requests
Please submit a request specifying the right you wish to exercise by:
- Completing our online privacy request form; or
- Contacting us at hello@eatmush.com.
To exercise your right to opt out as it relates to the use of cookies and related technologies that involve the sale of personal information or the use of personal information for targeted advertising purposes, please use the “Cookie Settings,” “Your Privacy Choices,” or similar link made available on our websites and adjust your preferences accordingly. If you are visiting our site with the Global Privacy Control enabled, any cookies that constitute sales or are used for targeted advertising should be turned off automatically if our preference-management tool recognizes that signal. Please note this opt-out tool is website, device, and browser specific, so you may need to change your preferences on each device and browser you use to interact with our websites.
Before processing your request to exercise certain rights, including the Right to Know, Access & Portability, Correction, and Deletion, we will need to verify your identity and confirm you are a resident of a state that offers the requested right(s). To verify your identity, we may require successful authentication of your account or matching sufficient information you provide to information we maintain about you in our systems. As a result, we may ask you to provide information such as your first and last name, email address, state of residency, and information about your most recent transaction or interaction with us.
In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or where you are not a resident of one of the eligible states.
Submitting Authorized Agent Requests
In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. To verify the authorized agent’s authority, we may require evidence of a valid power of attorney, signed permission, or other documentation demonstrating authority to act on your behalf. Depending on the evidence provided and your state of residency, we may still need to separately contact you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.
Submitting Parental Requests
If you wish to submit a privacy request on behalf of your minor child in accordance with applicable law, you must provide sufficient information to allow us to reasonably verify your child is the person about whom we collected personal information and that you are authorized to submit the request on your child’s behalf.
Appealing Privacy Rights Decisions
Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.
Additional California-Specific Disclosures
The following disclosures only apply to residents of the State of California.
California Categories of Personal Information
California law requires we provide disclosures to you about what personal information we collect by reference to the enumerated categories of personal information set forth within California law. To address this obligation, we have identified the relevant enumerated California personal information category for the personal information described in the Our Collection and Use of Personal Information section of our Privacy Notice below:
- Identifiers, such as name, email address, mailing address, shipping address, account identifiers, IP address, cookie identifiers, and other online identifiers.
- Customer records, such as name, contact information, billing information, shipping information, payment-related information, and customer service records.
- Commercial information, such as products purchased, obtained, or considered, order history, subscription preferences, product preferences, promotion participation, receipt-upload information, and other purchasing or consuming histories or tendencies.
- Internet / network information, such as device and browser information, IP address, cookie identifiers, pages viewed, links clicked, emails opened, and other information about interactions with our websites, emails, advertisements, and online services.
- Geolocation data, such as general location derived from IP address and precise geolocation when you grant permission through your browser or device settings to use features such as our store locator.
- Professional / employment information, such as company name, job title, business contact information, and other information provided in connection with wholesale or business inquiries.
- Sensitive personal information, such as precise geolocation when you grant permission through your browser or device settings to use features such as our store locator.
- Other Personal Information, such as information you provide in messages, inquiries, reviews, surveys, promotions, receipt uploads, or other communications with us.
- Inferences, such as product preferences, subscription preferences, and interests in MUSH products, promotions, recipes, or other content.
California’s “Shine the Light” Law
California's "Shine the Light" law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. It is company policy that we do not disclose personal information to third parties for their direct marketing purposes if a consumer has exercised their right to opt out. To opt out of having your personal information disclosed to third parties for their direct marketing purposes, please follow the instructions for opting out of targeted advertising and personal information sales above or contact us at hello@eatmush.com.
Notice of Financial Incentives
We may provide programs and other offerings intended to provide benefits to eligible participants that may qualify as financial incentives or loyalty programs under certain privacy laws. For example, we may offer promotions, discounts, rebates, free product offers, early access to product drops, recipes, or other benefits in exchange for personal information or participation in a program.
To participate in these programs and offerings, we may ask to collect or share personal information such as name, email address, account information, purchase information, receipt information, reimbursement details, product preferences, and marketing preferences. The categories of third parties that may receive personal information in connection with these programs include service providers, marketing providers, retailers, promotion partners, and reimbursement providers. We have determined that the value of these programs and offerings is reasonably related to the value of the personal information we receive and otherwise process in connection with the program or offering, based on our reasonable but sole determination. We estimate the value of the personal information we receive and otherwise process by considering the expenses we incur in collecting and processing the information and facilitating the program or offering.
The terms applicable to each program or offering, as well as any applicable program partners, are provided at the time an eligible individual is offered an opportunity to participate. Interested individuals can opt in to these programs and offerings by following the instructions presented at the time the offer is made. Participating individuals may withdraw from our programs and offerings at any time by following the instructions provided in connection with each offering or by contacting us at hello@eatmush.com.
Information you provide to us
We collect the personal information you provide to us when you purchase our products or visit our website. The categories of information we may collect include:
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Location Information, including general location data
- Inferences from Other Data, including inferences created from other personal information collected
Browser Cookies
We use cookies to create a better experience for you on our site. For example, cookies prevent you from having to login repeatedly, and they help us remember items you've added to your cart. We also use third-party cookies, which are cookies placed by third parties for advertising and analytics purposes. You can control these cookies through your browser settings.Information from other sources
We may collect personal information about you from third-party sources, including Sales & Marketing Tools.
The categories of information we may collect include:
Sales & Marketing Tools
- Personal Identifiers, including Name, Email address, Postal address, and Telephone number
- Internet Activity
- Commercial Information, including Purchases
- Inferences from Other Data, including Inferences created from other personal information collected
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity | We delete or anonymize data concerning your use of our website within 10 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, Credit or debit card number | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 10 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Postal address, Telephone number, Purchases | We keep customer feedback and correspondence with our customer service for up to 10 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Telephone number, Online Identifiers, Internet Activity, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Telephone number, Online Identifiers, Internet Activity | We retain review, survey, and feedback data for up to 10 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests for a minimum of 24 months following the completion of the request. |
| Data we collect for security purposes, including Online Identifiers, Internet Activity | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Conducting Surveys
- Creating Customer Profiles
- Data Storage
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Improving our Products & Services
- Internal Business Operations
- Marketing Our Products & Services
- Meeting Compliance & Legal Requirements
- Operating Our Website or Mobile Apps
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Sending Promotional Communications
- Tracking Purchases & Customer Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you purchase our products or visit our website:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Customer Support Tools, Data Analytics Providers, Governance, Risk & Compliance Software, Sales & Marketing Tools, and Web Hosting Services | Ad Networks and Sales & Marketing Tools |
| Internet Activity | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Data Analytics Providers, Sales & Marketing Tools, and Web Hosting Services | Ad Networks and Sales & Marketing Tools |
| Commercial Information | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, and Sales & Marketing Tools | Ad Networks, Payment Processors, and Sales & Marketing Tools |
| Financial Information | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, and Sales & Marketing Tools | Payment Processors and Sales & Marketing Tools |
| Inferences from Other Data | Business Operations Tool, Customer Support Tools, and Sales & Marketing Tools | Ad Networks and Sales & Marketing Tools |
US State Privacy Notices
California (CCPA)
This section provides additional information for California residents under the California Consumer Privacy Act (CCPA). The terms used in this section have the same meaning as in the CCPA. This section does not apply to information that is not considered "personal information," such as anonymous, deidentified, or aggregated information, nor does it apply to publicly available information as defined in the CCPA.
Information we collect from you
- Personal Identifiers, including name, email address, postal address, telephone number, and online Identifiers
- Internet Activity
- Commercial Information, including purchases
- Financial Information, including credit or debit card number
- Location Information, including general location data
- Inferences from Other Data, including inferences created from other personal information collected
To the extent we process deidentified personal information, we will make no attempt to reidentify such data.
Information from other sources
We may collect personal information about you from third-party sources, including Sales & Marketing Tools.
How long we keep your data
We do not retain data for any longer than is necessary for the purposes described in this Policy.
We generally retain data according to the guidelines below.| Type of Data | Retention Period |
|---|---|
| Cookies and online data we collect while you use our website, including Online Identifiers, Internet Activity | We delete or anonymize data concerning your use of our website within 10 years of collecting it. |
| Data we collect in order to process and ship orders you place with us, including Name, Email address, Postal address, Telephone number, Online Identifiers, Internet Activity, Purchases, Credit or debit card number | We keep personal information related to products and services you purchase for as long as the personal data is required for us to fulfill our contract with you, and for 10 years from your last purchase with us. We may keep data beyond this period in anonymized form. |
| Data we collect when you contact us for customer support and other inquiries, including Name, Email address, Postal address, Telephone number, Purchases | We keep customer feedback and correspondence with our customer service for up to 10 years to help us respond to any questions or complaints. We may keep data beyond this period in anonymized form. |
| Data we collect when you sign up for promotional and marketing communications, including Name, Email address, Telephone number, Online Identifiers, Internet Activity, Inferences created from other personal information collected | Where you have signed up to receive promotional and marketing communications from us, we will retain any data collected until you opt out or request its deletion. We may keep data beyond this period in anonymized form. We will further retain a record of any opt-outs in order to prevent sending you future communications. |
| Data we collect when you review our products, answer surveys, or send feedback, including Name, Email address, Telephone number, Online Identifiers, Internet Activity | We retain review, survey, and feedback data for up to 10 years following your last contact with us. We may keep data beyond this period in anonymized form to help improve our products and services. |
| Data we collect in connection with privacy requests, including Name, Email address, Online Identifiers | We retain records related to privacy requests for a minimum of 24 months following the completion of the request. |
| Data we collect for security purposes, including Online Identifiers, Internet Activity | We retain security-related data as long as necessary to comply with our legal obligations and to maintain and improve our information security measures. |
Why we process your information
We process personal information for the following business and commercial purposes:
- Conducting Surveys
- Creating Customer Profiles
- Data Storage
- Delivering Targeted Ads
- Fulfilling Customer Orders
- Improving our Products & Services
- Internal Business Operations
- Marketing Our Products & Services
- Meeting Compliance & Legal Requirements
- Operating Our Website or Mobile Apps
- Preventing Fraud
- Processing Payments
- Providing Customer Support
- Sending Promotional Communications
- Tracking Purchases & Customer Data
How we disclose your information
We may disclose personal information about you for business and commercial purposes when you Consumers:
| Personal Information Category | Categories of Service Providers | Categories of Third Parties |
|---|---|---|
| Personal Identifiers | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Customer Support Tools, Data Analytics Providers, Governance, Risk & Compliance Software, Sales & Marketing Tools, and Web Hosting Services | Ad Networks and Sales & Marketing Tools |
| Internet Activity | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, Data Analytics Providers, Sales & Marketing Tools, and Web Hosting Services | Ad Networks and Sales & Marketing Tools |
| Commercial Information | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, and Sales & Marketing Tools | Ad Networks, Payment Processors, and Sales & Marketing Tools |
| Financial Information | Business Operations Tool, Collaboration & Productivity Tools, Commerce Software Tools, and Sales & Marketing Tools | Payment Processors and Sales & Marketing Tools |
| Inferences from Other Data | Business Operations Tool, Customer Support Tools, and Sales & Marketing Tools | Ad Networks and Sales & Marketing Tools |
Information “sharing” and “selling”
We “share” certain personal information with third party ad networks for purposes of behavioral advertising, including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in CCPA.
We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.
Opt-out preference signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Your CCPA rights
Your privacy rights under the CCPA are described below. Make a Privacy Request by clicking here or by emailing us at privacy@eatmush.com.
Right to Access
You have the right to access the specific pieces of personal information we have collected about you.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal information about you that you have provided to us. Subject to certain limitations, we will delete your personal information from our records and notify our service providers, contractors, and third parties that you have requested deletion of your personal information.
Right to Non-Discrimination
If you exercise your CCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
You have the right to opt-out of any selling and sharing of your personal information.
You may exercise your right to opt-out here.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Limit the Use of Sensitive Personal Information
The Right to Limit does not apply because we do not use your sensitive personal information to infer characteristics about you.
Request Verification
Before we can respond to a privacy request, we will verify that you are the consumer who is the subject of the CCPA request. Requests to Opt-Out or Limit the Use of Sensitive Data (if applicable) do not require verification.
Typically, identity verification will require you to confirm certain information about yourself based on information we have already collected. For example, we will ask you to verify that you have access to the email address we have on file for you. If we cannot verify your identity based on our records, we cannot fulfill your CCPA request.
Authorized Agent
A California resident's authorized agent may submit a rights request under the CCPA by emailing us at privacy@eatmush.com. Requests submitted by an authorized agent will still require verification of the consumer who is the subject of the request in accordance with the process described above. We will also ask for proof that the consumer who is the subject of the request authorized an agent to submit a privacy request on their behalf by either verifying their own identity with us directly or directly confirming with us that they provided the authorized agent permission to submit the request. An authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 may also submit proof of statutory power of attorney, which does not require separate consumer verification.
If you have trouble accessing this notice, please contact us at privacy@eatmush.com.
Contact Us
If you have any privacy-related questions or have trouble accessing this notice, please email privacy@eatmush.com.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the California Attorney General’s Office or the California Privacy Protection Agency.
Notice of Financial Incentive
Consumers who sign up for our marketing emails/SMS texts receive a 10% discount on their first purchase. To opt in, a consumer must enter their email address/phone number into the form and consent to receive emails in exchange for a discount provided via coupon code. A consumer may unsubscribe from our marketing emails by using the unsubscribe link in the email footer/replying STOP via text at any time. We calculate the value of the offer and financial incentive by using the expense related to the offer.
Colorado (CPA)
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in CPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
CPA Rights
Your CPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the CPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General's Office.
Connecticut (CTDPA)
This section provides additional information for Connecticut residents under the Connecticut Data Privacy Act (CTDPA). The terms used in this section have the same meaning as in the CTDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CTDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@eatmush.com.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the CTDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in CTDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Large Language Model Training
We do not process personal data for the purpose of training large language models.
CTDPA Rights
Your CTDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CTDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the CTDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Connecticut Attorney General’s Office.
Delaware (DPDPA)
This section provides additional information for Delaware residents under the Delaware Personal Data Privacy Act (DPDPA). The terms used in this section have the same meaning as in the DPDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the DPDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@eatmush.com.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the DPDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in DPDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
DPDPA Rights
Your DPDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your DPDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the DPDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to List of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed your personal data. You can also find that information in our Privacy Policy.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Delaware Attorney General's Office.
Florida (FDBR)
This section provides additional information for Florida residents under the Florida Digital Bill of Rights (FDBR). The terms used in this section have the same meaning as in the FDBR.
We do not sell your sensitive personal data.
Montana (MCDPA)
This section provides additional information for Montana residents under the Montana Consumer Data Privacy Act (MCDPA). The terms used in this section have the same meaning as in the MCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MCDPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the MCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in MCDPA.
Profiling
The MCDPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MCDPA Rights
Your MCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the MCDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Montana Attorney General’s Office.
Minnesota (MNCDPA)
This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in MNCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MNCDPA Rights
Your MNCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- Amazon Advertising
- Amazon Pay
- Google Ads
- Meta Ads
- Ourcart
- PayPal - Pay with PayPal, Venmo, Pay Later
- ShareASale
- Tiktok Ads
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the MNCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.
Iowa (ICDPA)
This section provides additional information for Iowa residents under the Iowa Consumer Data Protection Act (ICDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the ICDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the ICDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in ICDPA.
Sensitive Data
We do not process consumers’ sensitive data.
ICDPA Rights
Your ICDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller. We will respond to your request within 90 days, with a possible 45-day extension if reasonably necessary.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your ICDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the ICDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Sensitive Data:
We do not process consumers’ sensitive data.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Iowa Attorney General's Office.
Indiana (INCDPA)
This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
INCDPA Rights
Your INCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.
Kentucky (KYCDPA)
This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
KYCDPA Rights
Your KYCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.
Nebraska (NDPA)
This section provides additional information for Nebraska residents under the Nebraska Data Privacy Act (NDPA). The terms used in this section have the same meaning as in the ICDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@eatmush.com.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the NDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in NDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NDPA Rights
Your NDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the NDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Nebraska Attorney General's Office.
New Hampshire (NHPA)
This section provides additional information for New Hampshire residents under the New Hampshire Privacy Act (NHPA). The terms used in this section have the same meaning as in the NHPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NHPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@eatmush.com.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the NHPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in NHPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NHPA Rights
Your NHPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NHPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the NHPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Hampshire Attorney General's Office.
New Jersey (NJDPA)
This section provides additional information for New Jersey residents under the New Jersey Data Privacy Act (NJDPA). The terms used in this section have the same meaning as in the NJDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the NJDPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@eatmush.com.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the NJDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in NJDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
NJDPA Rights
Your NJDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your NJDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the NJDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the New Jersey Attorney General's Office.
Maryland (MODPA)
This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@eatmush.com.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in the MODPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MODPA Rights
Your MODPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Obtain List of Categories of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed or required by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the MODPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.
Rhode Island (RIDTPPA)
This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not sell your data as defined in the RIDTPPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
RIDTPPA Rights
Your RIDTPPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the RIDTPPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.
Nevada (NPICICA)
This section provides additional information for Nevada residents under the Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA), Nevada Revised Statutes Chapter 603A. The terms used in this section have the same meaning as in NPICICA. This section does not apply to data that is not considered "covered information" as defined in the NPICICA.
NPICICA Rights
Your NPICICA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to review any covered information we have collected about you online.
Right to Delete
You have the right to request that we delete any covered information we have collected about you online. We will permanently delete any such covered information from our records and direct our processors to do the same. However, we may retain your covered information if it is necessary for certain purposes, as allowed by law.
Right to Correct
You have the right to correct inaccuracies in any covered information we have collected about you online, taking into account the nature of the data and our purposes for processing it.
Right to Opt-Out
We do not receive monetary consideration in exchange for your covered information and therefore do not sell your covered information as defined in the NPICICA.Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Third-Party Tracking
We use cookies and other technologies that allow third parties to collect covered information about your online activities over time and across different Internet websites or online services.
Oregon (OCPA)
This section provides additional information for Oregon residents under the Oregon Consumer Privacy Act (OCPA). The terms used in this section have the same meaning as in the OCPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the OCPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the OCPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you. We do not knowingly process personal data of Oregon residents under the age of 16 for purposes of targeted advertising.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in OCPA.
Profiling
The OCPA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
OCPA Rights
Your OCPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- Amazon Advertising
- Amazon Pay
- Google Ads
- Meta Ads
- Ourcart
- PayPal - Pay with PayPal, Venmo, Pay Later
- ShareASale
- Tiktok Ads
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your OCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the OCPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Oregon Attorney General’s Office.
Tennessee (TIPA)
This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in TIPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TIPA Rights
Your TIPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the TIPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.
Texas (TDPSA)
This section provides additional information for Texas residents under the Texas Data Privacy and Security Act (TDPSA). The terms used in this section have the same meaning as in the TDPSA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TDPSA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the TDPSA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary or other valuable consideration in exchange for your data and therefore do not "sell" your data as defined in TDPSA.
Profiling
The TDPSA gives consumers the right to opt out of automated profiling that produces legal or similarly significant effects, such as approval for a loan, employment, or insurance.
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TDPSA Rights
Your TDPSA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded, excessive, or repetitive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your TDPSA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the TDPSA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Texas Attorney General’s Office.
Utah (UTCPA)
This section provides additional information for Utah residents under the Utah Consumer Privacy Act (UTCPA). The terms used in this section have the same meaning as in the UTCPA. This section does not apply to information that is not considered "personal data," such as deidentified, aggregated, or publicly available information as defined in the UTCPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the UTCPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in UTCPA.
UTCPA Rights
Your UTCPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or the request is manifestly unfounded or excessive, or it is part of an organized effort to harass, disrupt, or place undue burden on our business, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data you have provided to us. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your UTCPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the UTCPA.
Targeted Advertising:
Exercise your right to opt-out here.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Utah Division of Consumer Protection.
Virginia (VCDPA)
This section provides additional information for Virginia residents under the Virginia Consumer Data Protection Act (VCDPA). The terms used in this section have the same meaning as in the VCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the VCDPA.
Data “Selling” and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the VCDPA), including Personal Identifiers, Internet Activity, Commercial Information, and Inferences from Other Data. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not "sell" your data as defined in VCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
VCDPA Rights
Your VCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. Subject to certain limitations, we will permanently delete any such personal data from our records and direct our processors to do the same.
Right to Non-Discrimination
If you exercise your VCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the VCDPA.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Virginia Attorney General’s Office.
