Your information at CGB.

About this policy

Custom Grocery Bags (CGB, “we”, “us” or “our”) operates CustomGroceryBags.com, referred to here as the Service. This policy describes personal information collected through the Service, how it is used and disclosed, and the choices available to you. Using the Service means you agree to the collection and use of information described here. Read it alongside our terms and conditions.

What the terms mean

• Personal data: information that identifies a living individual, by itself or with other information available to us.
• Usage data: information collected automatically about the Service and its use, such as the duration of a visit.
• Cookies: small files stored on a computer or other device.
• Data controller: the person or organization deciding why and how personal data is processed. CGB is the controller for the personal data covered by this policy.
• Processors or service providers: parties that process data for the controller.
• Data subject or user: an individual using the Service whose personal data is processed.

Information we collect

Information you provide

We may ask for your email address, first and last name, telephone number and address, including city, state or province, postal code and country. Cookies and usage data can also relate to you. We may use contact information for newsletters, marketing and other information that could interest you; you can unsubscribe using the link or instructions in those messages.

Usage and location

Usage information can include IP address, browser type and version, visited pages, visit dates and times, time spent, device identifiers and diagnostic data. With your permission, we may use and store location information to provide, improve or customize features. You can enable or disable location services through your device settings.

Cookies and similar technologies

We use cookies, beacons, tags and scripts to operate the Service, remember preferences, maintain security and understand use. Examples include session, preference and security cookies. You can refuse cookies or request browser notifications, although some parts of the Service may then be unavailable.

How we use information

We use information to operate and maintain the Service, provide customer support, enable interactive features, communicate changes, analyze and improve the website, monitor use, and identify or prevent technical problems. Unless you opt out, we may also send news or offers about goods, services and events similar to those you purchased or asked about.

Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from sharing with any third parties.

Legal bases for EEA users

For people in the European Economic Area, the basis depends on the data and context. Processing may be necessary to perform a contract, based on your consent, in our legitimate interests where your rights do not override them, needed for payment processing, or required by law.

Retention

We retain personal data only as long as needed for the purposes in this policy, including legal requirements, resolving disputes and enforcing agreements. Usage data is normally retained for less time for internal analysis, unless it supports security, improves functionality or must be kept longer by law.

Transfers and disclosure

Processing in the United States

Information may be stored or processed outside your state, province or country, where data laws can differ. If you provide data from outside the United States, it is transferred to and processed in the United States. Consent to this policy followed by submitting information represents agreement to that transfer. We take reasonably necessary steps to protect it and require adequate controls before transferring personal data to another organization or country.

Business changes

Personal data may transfer in a merger, acquisition or asset sale. We will provide notice before it becomes subject to another privacy policy.

Legal and protective disclosures

We may disclose data when required by law or valid public-authority requests, or in good faith to meet legal obligations, protect our rights or property, investigate wrongdoing, protect users or the public, or address legal liability.

Security and Do Not Track

We use commercially acceptable measures to protect personal data, but no internet transmission or electronic storage method is completely secure, and absolute security cannot be guaranteed. The Service does not support browser Do Not Track signals. You can manage the preference in your browser settings.

Your data choices and rights

EEA residents have rights in certain circumstances to access, update or delete data, correct inaccuracies, object to processing, restrict use, receive a portable copy in a structured machine-readable format, or withdraw consent where processing relies on consent.

Where account settings allow it, you can make changes there. Otherwise, contact us for assistance or to ask what personal data we hold. We may verify your identity before responding. You can also complain to your local data protection authority in the EEA.

Service providers

We may use companies and individuals to operate the Service, provide services, fulfill orders or analyze use. They may access personal data only for those tasks and must not disclose or use it for unrelated purposes. We do not sell personal information.

Analytics

We may use Google Analytics to understand traffic and website activity. Google can share this information with its other services and use it to contextualize and personalize advertising. You can use the Google Analytics opt-out browser add-on to prevent the Analytics scripts from sharing visit activity. See Google’s privacy policy for its practices.

Payments

Payments are handled by third-party payment providers. We do not collect or store your payment card details; you provide them directly to the processor, whose privacy policy applies. Payment processors follow PCI-DSS standards for handling card information. For payments handled by Stripe, see the Stripe privacy policy.

Other websites

Links may take you to websites operated by other parties. Review their privacy policies; CGB does not control and is not responsible for their content or privacy practices.

Children

The Service is not intended for people under 18. We do not knowingly collect their personal data. A parent or guardian who believes a child has supplied data should contact us. If we learn that such information was collected without verified parental consent, we take steps to remove it.

Policy updates

We may update this policy by posting a revised version here. Before a change takes effect, we will notify you by email or a prominent notice on the Service and update the effective date shown with the change. Check this page periodically; changes take effect when posted.

Contact CGB

For privacy questions or requests, email [email protected] or use our contact form.