Privacy Policy

Rooted in Love Farm (collectively referred to herein as “we,” “us,” “our”), respects your privacy and the importance of the information you entrust to us and about how we collect, use, protect, or otherwise handle your Personally Identifiable Information (PII). With this in mind, we provide you this privacy policy (the “Policy”) to help you understand the kinds of information we may gather about you when you use our online and/or mobile services, website, and/or place an order for products (collectively the “Services”), how we may use and disclose the information, and how you can control, correct and/or update the information. By accessing or using the Services, you are accepting the policies and practices described in this Policy. Each time you visit or use the Services, you agree and expressly consent to our collection, use and disclosure of the information that you provide as described in this Policy. Any capitalized terms not defined herein shall have the meaning as set forth in the Terms of Service.  

Please note that this Policy does not apply to your use of third-party sites, services, or applications you may access through the Services. We encourage you to review the privacy policies of those third parties for more information regarding their privacy practices.

INFORMATION WE MAY COLLECT

  • Information You Provide to Us

This website is hosted by Squarespace, our online store hosting provider, so that they can provide website services to us. We collect information you provide directly to us when using the Services. For example, we collect information when you sign up for an account, complete a form, place an order, participate in any interactive features of the Services, request customer support, or otherwise communicate with us.

 The types of information we may collect includes your name, phone number, email address, mailing and billing address/es, details relating to your purchase, payment information, passwords and usernames to authenticate your access to the Services, records of correspondence and other communications, and any other information you choose to provide.

 For purposes of registering and using the Services, we collect certain PPI that can identify you, such as your name and contact information (email, billing address, shipping address, and phone number). We will never sell, rent, or trade PPI and will only use it, as needed, to provide the Services and/or fulfill the orders requested by you.  If you choose not to provide information that is necessary to provide the Services, you may not be able to use certain aspects or all of the Services. 

  •  Information We Collect Automatically When You Use the Services  

When you access or use the Services, we automatically collect information about you, which may include the following:

·         Log Information: We log information about your use of the Services, including the type of browser you use, access times, pages viewed, your IP address, and the page you visited before navigating to the Services. Publicly available tools can sometimes provide the approximate location for IP addresses.

·         Device Information: We collect information about the computer or mobile device you use to access the Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information.

·         Information Collected by Cookies and Other Tracking Technologies: We use various technologies to collect information, and this may include sending cookies to your computer or mobile device. Cookies are small data files stored in device memory that help us to improve the Services and your experience, see which areas and features of the Services are popular, and count visits. We may also collect information using web beacons (also known as “tracking pixels”). Web beacons are electronic images that may be used in the Services or emails and help deliver cookies, count visits, understand usage and campaign effectiveness, and determine whether an email has been opened and acted upon.  

We also may collect other types of information in the following ways when you use the Services: 

·         Details of how you used and interacted with the Services, such as your search queries and how you responded to certain questions. 

·         Device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL.

·         Server logs that automatically collect information, such as your IP address, your browser type and language, and the date and time of your visit, which helps us track your movements around the Services and understand trends.

  • Information We Collect from Other Sources

We may also obtain information from other sources and combine that with information we collect through the Services. For example, we may collect information about you from third parties who provide services on our behalf, such as maintaining and monitoring usage of the Services and processing payment transactions. We also may receive information about you from the third parties with whom you interact through the Services such as our payment processor, Stripe. Stripe will also collect payment information from you. You can read their privacy policy at Stripe Privacy Policy page.

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

HOW INFORMATION IS USED

We may use the information we collect from you to provide and deliver the products and services you request, process transactions, manage your account and your preferences, and send you related information, or use other site features in the following ways:

  • To improve our website to make it easier to use;

  • To give you a better checkout experience;

  • To give you a better customer service experience;

  • To quickly process payment for Services;

  • To send periodic emails regarding your order or other products and services;

  • Verify your identity and, if applicable, authorization for you to use the Services;

  • To prevent or address service, security, technical issues at your request in connection with customer support matters

  • Respond to your comments, questions, and requests;

  • Send you technical notices and other administrative messages;

  • Communicate with you about products, services, offers, promotions, rewards, and events offered by us or others, and provide news and information we think will be of interest to you;

  • Monitor and analyze trends, usage, and activities in connection with the Services;

  • Conduct research, analysis, and surveys;

  • Personalize and improve the Services and provide content or features that match user profiles or interests;

  • Enforce our Terms;

  • Link or combine with information we get from others in connection with the Services; and

  • Carry out any other purpose for which the information was collected.

 SHARING OF INFORMATION

We may share or transfer information about you as follows or as otherwise described in this Privacy Policy:

  • With third party affiliates, contractors, and other service providers in connection with providing the Services;

  • In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process, or as otherwise required by any applicable law, rule, or regulation;

  • If we believe your actions are inconsistent with the spirit or language of our Terms of Service or policies, or to protect the rights, property, and safety of you, us, or others;

  • In connection with, or during negotiations of, any merger, sale of our assets, financing, or acquisition of all or a portion of our business to another company;

  • With your consent or at your direction, including if we notify you through the Services that certain information you provide will be shared in a particular manner and you provide this information.

 We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.

  •  Payments & Security

When you make a purchase from us on this website, we use Squarespace Payments as our payment solution. Squarespace Payments is a fully integrated, native payment solution provided to us by our online store service provider Squarespace. Squarespace Payments makes use of the following third-party service providers which will also receive your personal information and process it in accordance with their privacy policies:

  • Stripe - payment processing services. You can read Stripe’s privacy policy here.

  • Sift - fraud monitoring and detection services. You can read Sift’s privacy policy here.

  • Third-Party Disclosure

We don't sell, trade, or otherwise transfer to outside parties your PII unless we provide you with advance notice. This doesn't include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information to comply with the law, enforce our site policies, or protect ours or other's rights, property, or safety.

  • Third-Party Links

We don't include or offer third-party products or services on our website. Third-party vendors like Google use first-party cookies (such as the Google Analytics cookies) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.

OTHER WEBSITES

This Policy applies only to information we collect at and through our website or Services.  This website may contain links to or embedded content from third party websites. A link to or embedded content from a third-party website does not mean that we endorse that third party website, the quality or accuracy of information presented on the third-party website or the persons or entities associated with the third-party website. If you decide to visit a third-party website, you are subject to the privacy policy of the third-party website as applicable and we are not responsible for the policies and practices of the third-party website. We encourage you to ask questions before you disclose your information to others.

ANALYTICS SERVICES

We use cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

This website collects personal data to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

We may allow others to provide analytics services in connection with the Services, such as Google Analytics.  These entities may use cookies, web beacons, and other technologies to collect information about your use of the Services, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. We and others may use this information to, among other things, analyze and track data, determine the popularity of certain content, personalize the user experience, and better understand your activity.  

To learn more about Google Analytics and/or to opt out, or how to set preferences for how Google advertises to you using the Google Ad Settings page, please visit https://policies.google.com/privacy.

BLOG COMMENTS

This website includes commenting functionality on some pages which enables you to post a comment. This website collects personal data when you post a comment, including:

  • Your name (which will be displayed as part of your posted comment)

  • Your email address (optional, to let you know if someone replies to your comment)

  • Your website URL (optional)

This website includes “likes” functionality on some blog posts which enables you to “like” a post. This website collects personal data when you like a post to try to prevent the same person from liking the same post during the same visit, including:

  • Information about your browser, network and device

  • Details about the web page or content you shared or proposed to share

  • Your IP address

FONTS

This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:

  • Information about your browser, network, or device;

  • Information about this site and the page you are viewing on it; and

  • Your IP address.

COMMUNICATION & MARKETING

  • Order & Account Emails

We may email you with messages about your order or account activity. For example, we may email you to tell you that you’ve created a customer account, your customer account password has been reset or updated, you’ve made a purchase, and/or your order has shipped.

It’s not possible to unsubscribe from these messages. We share your contact information with Squarespace, our website hosting provider, so they can send these emails to you on our behalf.

  • Marketing Emails

We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with Squarespace, our email marketing provider, so they can send these emails on our behalf.

CALIFORNIA ONLINE PRIVACY PROTECTION ACT

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require a person or company in the United States that operates websites collecting personally-identifiable information from California consumers to post a conspicuous privacy policy on its website stating the exact information being collected, those individuals with whom it is being shared, and to comply with this policy. Learn more here.

According to CalOPPA we agree to the following:

·         Users can visit our site anonymously;

·         Once this Policy is created, we will add a link to it on our website;

·         Our Policy link includes the word 'Privacy,' and it can be easily be found; and

·         Users will be notified of any privacy policy changes on our Privacy Policy page.

Users are able to change their personal information:

·         By logging into their account

·         By notifying us by email at hello@rootedinlove.com

CALIFORNIA PRIVACY RIGHTS AND NOTICES

California law provides California residents (as defined in Section 17014 of title 18 of the California Code of Regulations) (“Consumer”) with specific rights regarding information that identifies, relates to, describes, references, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (some of which may also constitute Personally Identifiable Information). The California Consumer Privacy Act of 2018 (“CCPA”) refers to such information as “personal information”. This section describes the rights that California Consumers have and explains how to exercise those rights, subject in all cases to any limitations set forth in the CCPA.

Rooted in Love Farm shall comply with the California Consumer Privacy Act of 2018, Cal. Civil Code § 1798.100 et seq., (“CCPA”), which may be amended from time to time.  Per the terms of the CCPA, Rooted in Love Farm is a Service Provider and not a Third Party as described in the CCPA. Therefore, we shall not:

    1. Sell the Personal Information.

    2. Retain, use, or disclose the Personal Information for any purpose other than providing the Services or for a Business Purpose. Specifically, Company shall not retain, use, or disclose the Personal Information for a Commercial Purpose.

    3. Retain, use, or disclose the Personal Information outside of the direct business relationship between Rooted in Love Farm and its Users.

Notwithstanding anything in the Terms of Service or any related order form or other document, the parties acknowledge and agree that a User’s provision of Personal Information is not part of and explicitly excluded from the exchange of consideration, or any other thing of value, between the parties.

California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email to hello@rootedinlovefarm.com.

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. However, we may retain personal information that has been de-identified or aggregated. Furthermore, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) in order to perform certain actions set forth under the CCPA, such as detecting security incidents and protecting against fraudulent or illegal activity.

To exercise the access and deletion rights described above, please submit a request to us by emailing us at hello@rootedinlovefarm.com.  Only you, or a person or business entity registered with the California Secretary of State that you authorize to act on your behalf (an “authorized agent”), may make the requests set forth above. The request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide sufficient information that allows us to reasonably verify that you are the person about whom we collected the personal information or an authorized representative of that person.

We will respond to consumer requests in a reasonably timely manner. If we require extra time to respond, we will inform you of the reason and extension period in writing. In order to protect the security of your personal information, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The method used to verify your identity will depend on the type, sensitivity, and value of the information, including the risk of harm to you posed by any authorized access or deletion. Generally speaking, verification will be performed by matching the identifying information provided by you to the personal information that we already have. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request (and will not be made more than twice in a 12-month period). If we cannot comply with a request, or cannot fully comply with a request, the response we provide will also explain the reasons we cannot comply.

We do not sell your Personally Identifiable Information.

CALIFORNIA DO NOT TRACK (“DNT”) NOTICE

Under California law, website and online service operators are required to disclose how they respond to web browser DNT signals or other similar mechanisms that provide consumers the ability to exercise choice regarding the collection of personal information about a consumer's online activities over time and across third-party websites, to the extent the operator engages in that collection.  At this time, we do not track our customers' personal information over time and across third-party websites and therefore this requirement does not apply to us. 

California law also requires website and online service operators to disclose whether third parties may collect personal information about their users' online activities over time and across different sites when the users use the operator's website or service. Third parties that have content or services on our site such as a social feature, analytics service, or an advertising network partner, may obtain information about your browsing or usage habits but this information does not include personal information. We do not knowingly permit such third parties to collect any personal information from our Services unless you directly provide it to us and we provide it to them with your consent.

CHILDREN UNDER THE AGE OF 18

The Services are intended for users who are eighteen (18) years of age and older.  If you are under the age of 18, you are not permitted to submit any PPI to us.  If you believe we might have any information from or about a child under 18, please contact us at hello@Rootedinlovefarm.com.

RETENTION

We will retain your PPI for the period of time that is necessary to fulfil the original purposes for which it has been collected. Please keep in mind that, in certain cases, a longer retention period may be required or permitted by law or to allow us to pursue our business interests, conduct audits, comply with our legal obligations, enforce our agreements or resolve any dispute.  

The criteria used to determine our retention periods include:

  • Time needed to provide you with our Services or to operate our business.

  • Whether your account with us is active.  You may contact us to make your account inactive at any time.  

  • Legal, contractual, or similar obligations to retain your data, such as mandatory data retention laws in the applicable jurisdiction, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of contract or litigation. 

Please note that we are not responsible for storing any information that you provide to us or for any content or information that we provide to you. You are solely responsible for retaining backup files of any information and content that you provide or receive in connection with the website or Services.

GENERAL DATA PROTECTION REGULATION (GDPR)

The GDPR requires businesses to protect the personal data and privacy of European Union citizens for transactions that occur within EU member states. It also regulates exportation of personal data outside the EU.

If the GDPR applies to you because you are in the European Union, you have rights under data protection laws in relation to your personal data:

  • The right to be informed

  • The right of access

  • The right to rectification

  • The right to erasure

  • The right to restrict processing

  • The right to data portability

  • The right to object

  • Rights in relation to automated decision making and profiling

These rights are subject to certain rules around when you can exercise them. Learn more about the GDPR here.

OPTIONS

Your Information

We use reasonable processes to ensure compliance with this privacy policy and periodically verify that the policy is accurate. We encourage you to raise any concerns by contacting us at hello@Rootedinlovefarm.com, and we will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of information. Unless legal restrictions apply, you have the right to access the information we hold about you free of charge. You may update, correct or delete your information at any time by contacting us at hello@Rootedinlovefarm.com. You can help us maintain the accuracy of your information by notifying us of any changes.  To avoid delays in obtaining your information, please provide sufficient detail to permit us to identify you and the specific information that you are requesting.  We will respond to your request within thirty (30) days of receipt, unless we inform you that it will take longer, as permitted by law under certain circumstances.  Please note that there may be instances where access may be restricted as permitted or required by law. We will advise you of the reasons for restricting access subject to any legal or regulatory limitations. In addition, please note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period.  Please note that we are not responsible for storing any information that you provide to us or a third party or for any content or information that we or a third party provide to you. You are solely responsible for retaining backup files of any information and content that you provide or receive in connection with the Services.

PRIVACY POLICY CHANGES

ROOTED IN LOVE FARM reserves the right to change, modify, add, or remove portions of this Policy at any time and without prior notice, and any changes will become effective immediately upon being posted unless we advise you otherwise. However, we will not use your PPI in a way that is materially different than the uses described in this Policy without giving you an opportunity to opt out of such differing uses. Your continued use of the Services after this Policy has been amended shall be deemed to be your continued acceptance of the terms and conditions of the Policy, as amended. We encourage you to review this Policy regularly. 

Non-Discrimination

We will not discriminate against you because you elect to exercise any of the rights related to your PPI, including but not limited to:

  • Denying you products or Services;

  • Charging you different prices or rates for Services, including through the use of discounts or other benefits or imposing penalties on you;

  • Providing a different level or quality of Services to you; or

  • Suggesting that you will receive a different price or rate for Services or a different level or quality of Services.

OTHER STATES

Notice of Colorado, Connecticut, Montana, Oregon, Texas, Virginia and Utah Privacy Rights

The section relates solely to residents of the States of Colorado, Connecticut, Virginia and Utah, and provides you with information about your privacy rights under the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CDPA), the Montana Consumer Data Privacy Act (MCDPA), the Oregon Consumer Privacy Act (OCPA), the Texas Data Privacy and Security Act (TDPSA), the Virginia Consumer Data Protection Act (VCDPA) and the Utah Consumer Privacy Act (UCPA).

This section shall be effective for the residents of those States on the dates set forth below:

  • Effective January 1, 2023, for residents of the State of Virginia

  • Effective July 1, 2023, for residents of the States of Colorado and Connecticut

  • Effective December 31, 2023, for residents of the State of Utah

  • Effective July 1, 2024 for residents of the State of Oregon

  • Effective July 1, 2024 for residents of the State of Texas

  • Effective October 1, 2024 for residents of the State of Montana

 For purposes of this section, "residents", "consumers" or "you" means individuals of those states who are acting in their individual or household context. This section does not apply to individuals acting in their commercial or employment context.

  • Personal Information we collect

You have a right to know the categories and types of personal information we collect about you. We make this information available to you in the INFORMATION WE MAY COLLECT section of our Privacy Policy.

  • Categories of sources from which we collect personal information

You have the right to know the categories of sources from which we collect your personal information. We make this information available to you in the INFORMATION WE MAY COLLECT section of our Privacy Policy.

  • Our processing of your personal information

You have the right to know how we process and use your personal information. We make this information available to you in the HOW INFORMATION IS USED section of our Privacy Policy.

*For residents of the State of Virginia, to the extent that we maintain de-identified data, we take reasonable measures to ensure that de-identified data cannot be associated with a natural person, we publicly commit to maintaining and using de-identified data without attempting to re-identify the data, and we contractually obligate any recipient of the data to comply with the same obligations.

  • Disclosure of Personal Information

You have the right to know if we share your personal information with any third parties. We make this information available to you in the HOW INFORMATION SHARED section of our Privacy Policy.

  • No Sale of Data or Use of Data for Targeted Advertising

We do not sell your personal information and we do not use your data for targeted advertising (as that term is defined by your applicable state law). We may send you advertising in response to your request for information or feedback or based on your activities with our Services, including your search queries and visits to our Services. However, we will not send you targeted advertising based on your activities across non-affiliated websites, applications or platforms to predict your preferences or interests. 

  • Your Rights

  1. Where we act as the Controller of your personal information (as opposed to a Processor as those terms are defined in your applicable State law), you have the right to submit a request to us for the following:

  • Right to access. You have the right to know if we process your personal information and have access to such information and certain details of how we use it.

  • Right to correct. We take reasonable steps to ensure that information we hold about you is accurate and complete. However, you have the right to request that we correct any inaccurate personal information that we have about you.

  • Right to delete. You may have the right to request that we delete your personal information where we act as a controller. This right is subject to several exceptions and we may deny your deletion request if retaining the information is necessary for us or our processors to:

    • Complete the transaction for which we collected the personal information and take actions reasonably anticipated within the context of our ongoing business relationship with you or our client;

    • Detect bugs or errors in our Services, detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;

    • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;

    • Comply with a legal obligation; or

    • Make other internal and lawful uses of that information as permitted by law or that are compatible with the context in which we collected it.

  • Right to restriction of processing (opt-out). You have the right to opt-out of processing your personal information for purposes of profiling in furtherance of any automated processing of your data that produce legal or similarly significant effects concerning you. (This right only applies to residents of the States of Colorado, Connecticut and Virginia.)

  • Right to data portability. You have the right to obtain a copy of your data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to a third party.

  • Right to non-discrimination and no retaliation. We will not discriminate or retaliate against you for exercising any of your rights, including but not limited to, by denying you goods or services, charging you different prices for goods or services, or providing you a different level or quality of goods or services.

  • Right to restrict the processing of sensitive information
    Unless we are processing your sensitive information pursuant to any of the legal exemptions listed in Section 8 (Exemptions) below or as otherwise allowed by law:

  • For residents of the States of Connecticut, Virginia and Colorado, we will not process your sensitive information without first obtaining your consent; and

  • For residents of the State of Utah, we will not process your sensitive personal information without providing you with notice and an opportunity to opt out. 

  1. Exercising Your Rights

You may exercise your rights to know, delete and correct as described above by submitting a verifiable request to us by emailing us at hello@Rootedinlovefarm.com

  1. Authentication Process

We will only fulfill request when we can verify your identify and confirm that you are authority to make such a request.  Only you, you as the parent or legal guardian on behalf of your minor child, or your authorized agent, guardian or conservator may make a request related to personal information. If an authorized agent, legal guardian or conservator submits the request, we may require your written permission to do so and may require additional information to authenticate your identity. We may deny a request by an authorized agent, legal guardian or conservator who does not submit proof of authorization to act on your behalf.  We will only use the personal information you provide in a request to verify your identity or authority to make the request.

  1. Response Timing and Format

We will respond to an authenticated request within forty- five (45) days of its receipt, and will notify you within those forty-five (45) days if we require more time to respond and the reasons for the additional time.  If you have an Account with us, we will deliver our written response to that Account. If you do not have an Account with us, we will deliver our written response by mail or electronically, at your option.  If we cannot comply with a request or a portion of the request, we will include the reasons in our response.

*For residents of the States of Colorado, Connecticut and Utah, you may make one request within a twelve-month period at no charge.

*For residents of the State of Virginia, you may make a request up to two (2) times within a twelve (12) month period at no charge. We reserve the right to charge a fee to process or respond to any request that we consider excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

  • Right to Appeal

You have the right to appeal our decision within a reasonable period of time after receipt of our response. You may appeal our decision by sending us an email at hello@Rootedinlovefarm.com. We will respond to your appeal within 60 days of receipt (45 days of receipt for residents of Colorado) and will inform you of any decisions and the reasons for such decisions.

* Please note that in certain cases we may collect your personal information as a processor (as opposed to a controller, as those terms are defined in your applicable state privacy law) pursuant to a contract we have with a commercial client (the controller) to provide a service. In such a case, we are required to collect and process your information only based on the instructions received from the controller. Should you direct your requests to exercise your rights to us, we may be required to share your request with the controller, who is the party responsible under your applicable state privacy law for receiving, authenticating and responding to your requests.

  • Exemptions

This section (Notice of Colorado, Connecticut, Montana, Oregon, Texas, Virginia and Utah Privacy Rights) does not apply to certain entities and data that are exempt from your applicable state privacy law, including but not limited to the following: covered entities, business associates and protected health information governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH); financial institutions and personal information subject to the Gramm-Leach-Bliley Act (GLBA); and personal information collected, processed, sold, or disclosed pursuant to certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Family Educational Rights and Privacy Act, the Farm Credit Act and the Driver's Privacy Protection Act of 1994 (DPPA).

HOW TO CONTACT US

If you have any questions about this Policy, or our information practices, please contact us by email at hello@rootedinlovefarm.com.