Once Upon A Farm Privacy Policy

This Privacy Policy ("Policy") lets you know what information we collect about you or what information you may provide to us, including when you visit our website at www.onceuponafarmorganics.com and related webpages (our "Website"), and our practices for using, disclosing, protecting and sharing that information.

 This Policy was last updated on January 9, 2023

About this Policy

This Policy applies to information that we collect on our Website, in emails or other electronic messages between you and Once Upon A Farm, information you may provide us, including when you visit us, and information you provide to us when you contact us, subscribe to receive updates, or create an account with us.

Please read this Policy carefully to understand our practices regarding your information and how we will treat it.  If you do not agree to the terms of this Policy, you should not use our Website.  We reserve the right to update or modify this Policy from time to time.  Where applicable data protection laws require us, we will provide appropriate notice, and take any necessary action, should we make any material changes to our practices.  We encourage you to review this page periodically for the latest information on our privacy practices.

Children Under the Age of 16.  Our Website is not intended for use by children under the age of 16.  We expect that any use of our Blog, including Storytelling posts, will be accessed and chaperoned by a parent.  We do not knowingly collect, sell, or share personally identifiable information from children under 16.  If you are under the age of 16, do not use or provide any information on our Website.  If we learn we have collected or received personal information from a child under the age of 16 without proper consent, we will delete that information.

Information We Collect
We collect personal information from you in a variety of ways including, for example, when you visit our site, place an order, fill out forms, become a subscriber, or request to receive updates.  This information may include personal information that can be used to identify you.  Personal information as used in this Policy includes sensitive personal information.  Personal information does not include publicly available information from government records or deidentified or aggregated consumer information.

In particular, we have collected the following categories of personal information within the past twelve months:

We collect Identifiers, such as, for example, your name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name or other similar identifiers (such as, for example, when you provide reviews, posts, or other information on our social media pages or that is tied to your social media account).  We collect this information directly from you or from your device.   We use this information for the following business purposes:  (a) auditing/assessing your interaction with us and assessing your concurrent transaction, including counting ad impressions and verifying quality of ad impressions; (b) performing business services, such as, for example, customer service, order fulfillment, payment processing, financing and advertising, marketing, and/or analytic services; (c) undertaking internal research for technological development and demonstration; or other operational or business purposes.  We may also collect your Social Security Number or other government identification number directly from you if you apply for a job with us so that we can perform a background check.  We retain this information until you request deletion of your personal information (and there is no legal or business requirement for us to continue to maintain your information), for as long as necessary to carry out the purposes set forth in this Policy or any other notice provided at the time of data collection, or as required or permitted under applicable law.  For the uses described above, this information is not disclosed to any third party.

We collect Personal Information (e.g., categories of personal information listed in the Customer Records Statute Section 1798.80(e)), such as, for example, your name, postal address, telephone number, and credit or debit card number if you place an order with us.  If you are applying for a position with us, your employment and education history.  (Note:  some information in this category may overlap with other categories).  We collect this information directly from you.  We use this information for the following business purposes: (a) performing business services, such as, for example, customer service, order fulfillment, payment processing, financing and advertising, marketing, and/or analytic services; or (b) other operational or business purposes, such as to fill open employment positions.  We retain this information until you request deletion of your personal information (and there is no legal or business requirement for us to continue to maintain your information), for as long as necessary to carry out the purposes set forth in this Policy or any other notice provided at the time of collection, or as required or permitted under applicable law. This information is not disclosed to any third party.

We collect Protected Classification information, such as, for example, if you choose to include the ages of your child(ren) when you sign-up for our Once Upon a Farm Subscriber Tasting panel.  We collect this information directly from you.  We use this information to build a profile, provide you with information regarding our products, including marketing and promotional materials, and to conduct internal research for improving our products and marketing campaigns. We may collect certain protected classification information as part of our job application process on a voluntary basis as part of our diversity efforts. We retain this information until you request deletion of your personal information (and there is no legal or business requirement for us to continue to maintain your information), for as long as necessary to carry out the purposes set forth in this Policy or any other notice provided at the time of collection, or as required or permitted under applicable law.  This information is not disclosed to any third party.

We collect Commercial Information, such as, for example, records of products purchased or considered purchasing.  We collect this information directly from you and from your device.  We use this information for performing services on behalf of the business such as, for example, customer service, order fulfillment, subscription management, payment processing, financing and advertising, marketing, or analytic services.  We retain this information until you request deletion of your personal information (and there is no legal or business requirement for us to continue to maintain your information), for as long as necessary to carry out the purposes set forth in this Policy or any other notice provided at the time of collection, or as required or permitted under applicable law.  This information is not disclosed to any third party.

We collect Internet or other similar activity, such as for example, your browsing history, search history, and information regarding your interaction with our Website, advertisements and social media.  We collect this information using our own and third-party technologies (e.g., cookies) as well as information provided from social media through your specific interactions (for example if you participate in certain of our campaigns, programs, or surveys or feedback mechanisms) and from your social media profile (including your age, gender, your city and country). We use this information and tools to provide a more personalized shopping experience for you, to allow us to provide you with relevant information when you return or use our Website or social media, to understand what information was accessed, to understand your location, and for our marketing and analytical purposes, including to determine what ads or ad campaigns are effective and how we can improve our products and product offerings. We permit third parties to collect information on our websites using such technologies for retargeting ads and marketing in such third party platforms (such as, for example,  Google, Facebook, Amazon, Meta, Trade Desk and Tiktok).  You can opt out of receiving interest-based advertising by: (i) clicking on the Ad Choices icon (please see youradchoices.com); (ii) for advertisers that are a part of the National Advertising Initiative (please see National Advertising Initiative); (iii) for advertisers that follow the Digital Alliance’s Self-Regulatory Principles for Online Behavioral Advertising (please see WebChoices: Digital Advertising Alliance's Consumer Choice Tool for Web US (aboutads.info).  Some websites, such as Facebook, offer their own opt-out methods and you can refer to those websites for additional information.  Note, however, to opt-out of interest-based advertising, cookies must be enabled in your web browser (see your browser’s instructions for information on cookies, such as, for example, Google Chrome, Internet Explorer, Mozilla Firefox, Safari).  Opting-out will only apply to your current web browser on your current device.  If you use multiple devices, you will need to opt-out on each device.  Also, if you delete your browser’s saved cookies, you will need to opt-out again. 

We collect Geolocation data directly from you and from your device, such as, for example, when you insert your city or zip code to find where we are located near you, when you enter your address for product delivery, or when your location is captured through your IP Address relating to certain of our advertising and marketing campaigns (as explained in the previous paragraph). We may also use this information for performing services on behalf of the business or its service provider, such as customer service, payment processing, financing and advertising, marketing, or analytic services or for other operational or business purposes, such as to fill open employment positions.  The information is retained until you request deletion of your personal information (and there is no legal or business requirement for us to continue to maintain your information), for as long as necessary to carry out the purposes set forth in this Policy or any other notice provided at the time of collection, or as required or permitted under applicable law.

We collect Professional or employment-related information such as, for example, if you apply for a position with us, we may collect your current or past job history including references.  We collect this information directly from you. We use this information to evaluate your candidacy for a position with us.  We retain this information for three years from the time of application or as required by law.  This information is not shared with any third party.

We do not use or disclose sensitive personal information for any purpose other than to:  (i) provide the goods or services; (ii) to prevent, detect, and investigate security incidents; (iii) to resist malicious, deceptive, fraudulent or illegal actions directed at us, including to prosecute those responsible for such actions; (iv) to ensure the physical safety of persons; (v) short-term transient use (e.g., nonpersonalized advertising shown as part of a consumer’s current interaction with the business, where that personal information is not disclosed to a third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction of the business); (vi) to perform services on behalf of the business (e.g., maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage): (vii) to verify or maintain the quality or safety of a service or device that is owned, manufactured, or controlled by us, or to improve, upgrade or enhance such service or device; (viii) for purposes that do not infer characteristics about a consumer.

Additional Uses of Information
We may also use and disclose your personal information for one or more of the following purposes:

• To improve customer service. Your information helps us to more effectively respond to your customer service requests and support needs.
• To personalize your experience. We may use information in the aggregate to understand how our users as a group use the services and resources provided on our Website.  We may also use your information to remember your preferences and personalize your Website experience.
• To improve our Website and advertise our products. We continually strive to improve our Website offerings based on the information and feedback we receive from you.  Through our use of cookies and pixels, we are able to understand how our Website is being used, to measure the effectiveness of our Website, to customize content and advertising, and to use and analyze target markets.
• To fulfill any other purpose for which you provide it, including when you fill out a form requesting information from us.
• To help maintain the safety, security, and integrity of our Website, products and services, and databases and other technology assets and to detect, prevent, or mitigate fraud or security or technical issues.
• To protect against imminent harm to the rights, property or safety of our company, our customers, or the public as required or permitted by law.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• In corporate transactions, we may share your information with a potential buyer or other successor to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets (“transaction”), whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Website users or customers is among the assets being transferred, which may occur prior to consummation of such transaction.

If you are submitting information on behalf of a third party, we expect that you have received appropriate consent, according to applicable privacy laws, before transferring any personal information to us.

We will not collect additional categories of information or use the information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Your State Privacy Rights
If you are a resident of California or Virginia, regulations may provide you with additional rights regarding our use of your personal information.  To learn more about these rights visit Privacy Policy for California and Virginia Residents.

How we protect your information:
We work to adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site.
Sensitive and private data exchange between the Site and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures.  Our Site is also in compliance with PCI vulnerability standards in order to create as secure of an environment as possible for Users.

Changes to this privacy policy
Once Upon A Farm, PBC has the discretion to update this privacy policy at any time.  If we decide to make changes, we will post the updated policy on our Website so you are always aware of what information we collect, how we use it, and the circumstances on how we disclose it.  The date this Policy was last revised is identified at the top of the page.  You are responsible for ensuring that we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and the Policy to check for any changes.  Your continued use of our Website following the posting of changes constitutes acceptance of such changes.  Where required by applicable data protection laws, we will also seek your consent to any material changes that affect how we use your information.

Contacting Us
If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:
Upon A Farm, PBC Berkley, California USA 888.983.1606. care@uponafarm.com     

Privacy Policy for California and Virginia Residents

This Privacy Policy for California and Virginia Residents ("Rights Policy") supplements the information contained in our Policy above and applies solely to all visitors, users, and others who reside in the State of California and Virginia ("consumers" or "you").  We adopt this notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights and Enforcement Act of 2020, (“CCPA”) and the Virginia Consumer Data Protection Act (“VCDPA”) and any terms defined therein have the same meaning when used in this Rights Policy.

Your Rights and Choices
If you are a resident of California or Virginia, privacy regulations provide you with specific rights regarding your personal information.  This section describes those rights and explains how to exercise those rights.

Accessing Your Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information since January 1, 2022, including beyond the 12 month period preceding your request, unless doing so would involve disproportionate effort or is not possible.  Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you;
• The categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting, selling, or sharing that personal information;
• The categories of third parties to whom we disclose that personal information;
• The specific pieces of personal information we collected about you (also called a data portability request);
• If we sold, shared, or disclosed your personal information for a business purpose;
• Sales, identifying the personal information categories that each category of recipient purchased; and
• Disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Requesting Deletion of Information
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions.  Once we receive and confirm your verifiable consumer request, we will delete (and notify our service providers and contractors to delete, [and to the extent possible and within reasonable efforts, notify any third parties to whom we have sold or shared your personal information to delete]) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service that you requested, take actions reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Coe § 1546 et seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research that conforms or  adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the ability to complete such research, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us and compatible with the context in which you provided the information.
• Comply with a legal obligation.

Right to Correct Information

You have the right to request that we correct any inaccurate personal information that we have about you.  Once we receive and confirm your verifiable consumer request, we will use commercially reasonable efforts to correct any inaccurate information and we will instruct our service providers or any contractors to correct such information.  We will also inform you whether or not we have complied with your request, including any basis for denial of the request.

Exercising Access, Data Portability, Correction and Deletion Rights
To exercise the access, data portability, correction, and deletion rights described above, please submit a verifiable consumer request to us by either:

• Calling us toll free at 888.983.1606
• Emailing us at care@uponafarm.com
• Visit the “Contact Us” page on our website and send a message entitled “Exercising Your Privacy Rights”

Only you, or a person registered with the appropriate governmental authority that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.  You may also make a verifiable consumer request on behalf of your minor child.  If you submit a request on behalf of another person, we may require proof of authorization and verification of identity directly from the person for whom you are submitting a request.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period.  The verifiable request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include your name and email address;
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us.  However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing
We will confirm receipt of your request within ten (10) business days.  If you do not receive confirmation within the 10-day timeframe, please contact care@uponafarm.com or 888.983.1606.

We endeavor to respond to a verifiable consumer within 45 days of its receipt.  If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.  If you have an account with us, we will deliver our written response to that account.  If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.  Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt.  The response we provide will also explain the reasons we cannot comply with a request, if applicable.

For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, which may include either a screen shot of the information or a pdf.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Personal Information Sales Opt-Out and Opt-In Rights
If you are 16 years of age or older, you have the right to direct us not to sell your personal information at any time (the "right to opt-out").  To exercise the right to opt-out, including the right to opt out of the processing of your personal information for purposes of targeted advertising, you, or your authorized representative, may submit a request by emailing us at care@uponafarm.com. You will need to provide your First Name, Last Name, Email Address and confirmation of the state in which you reside.

Once you make an opt-out request, we will wait at least 12 months before asking you to reauthorize personal information sales.  However, you may change your mind and opt back in to sharing personal information by filling out a form with the requested information and submitting that form.
You do not need to create an account with us to exercise your opt-out rights.  We will only use your personal information provided in an opt-out request to review and comply with the request.

Non-Discrimination
We will not discriminate against you for exercising any of your rights under any applicable privacy regulation. In particular, unless permitted under the law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives. For example, when you enroll in our Growing Greatness Rewards Program, you can earn SEEDS (or points), which can be used for discounts when you purchase our products. The value of your SEEDS grows as you purchase more products and you may be entitled to additional program benefits (such as exclusive offers or giveaways). Details of the program can be found here. To enroll in the program, you provide your name and email address (and optionally your birthday). We use this information to send you information about new and existing products that you may be interested in, exclusive offers, promotional materials, and information on giveaways or other reward program benefits and information. We value the information from program participants because it enables us to enhance our relationship with you so you can enjoy using more of our products. While we do not assign or calculate a monetary value to the data we collect, the value received from this information is reasonably equal to or greater than the value we receive from the use of this information. Participation in our Growing Greatness Rewards Program requires your prior opt-in consent, which you may revoke at any time by contacting us per our Privacy Policy.

We also may offer you certain incentives if you participate, for example, in our private Facebook Group.  To join the group, we will have access to your name attached to your profile and your response to our questions relating to the age of your child[ren], how did you hear about the group, and what you hope to get out of group participation.  Participation in the group will provide you with early access to product launches, obtain group only discounts, have chances to win free products and prices, and interact or see guests.

Changes to the Privacy Policy
We reserve the right to change this Policy.  If we decide to make changes, we will post the updated policy on our Website so you are always aware of what information we collect, how we use it, and the circumstances, if any, we disclose it.  The date this Rights Policy was last revised is identified at the top of the page.  You are responsible for ensuring that we have an up-to-date active and deliverable email address for you, and for periodically visiting our website and the Policy to check for any changes.  Your continued use of our Website following the posting of changes constitutes acceptance of such changes.  Where required by applicable data protection laws, we will also seek your consent to any material changes that affect how we use your information.

Help
If you need help with unsubscribing, or have questions regarding this Rights Policy, the ways in which we collect, share, and use your information as described in this Policy, your choices and rights regarding such use, or wish to exercise your rights under the law, please contact us at:
Upon A Farm, PBC
Berkley, California USA
888.983.1606
care@uponafarm.com