Last Updated: September 14th, 2022
Your information is controlled by Lunchbox, and you hereby authorize us to use your information anywhere we operate.
Information Collection and Use
User-Provided Information:Through accessing our Sites, using our Services, and/or buying our Products, you will provide certain personal information required for us to provide the Services or sell the Products. Such information includes, but is not limited to, your full name, email address, phone number, date of birth, business name (where applicable), social media information, physical address, property ownership information, information necessary to process a payment, and any other information required for providing the Services, selling our Products, and/or facilitating a transaction. You understand that failing to provide any information requested may result in us being unable to provide the Services or sell our Products.
Third Parties: Lunchbox may receive information about you from third parties, such as if someone else purchases a Product to send as a gift.
Log Data: When you use our Sites, we may receive information (“Log Data”) such as your IP address, browser type, operating system, the referring web page, pages visited, location, your mobile carrier, device information (including device and application IDs), search terms, and cookie information. We receive Log Data when you interact with our Sites. We may also receive Log Data when you click on, view or interact with links on our Sites , including links to third-party Sites, or purchase Products.
Geolocation Data: We may collect data related to your physical location while you are using the Sites.
Commerce Services: All payments made for any Lunchbox Service or product are handled by third-party payment services, who receive and handle your payment information directly. Lunchbox does not have access to or store the entirety of your payment information, but rather only has access to your full name, email address, physical address, and any other data required by our third-party payment processer, which Lunchbox shall keep as confidential.
Use.Lunchbox will generally only use your data as necessary for providing Services, selling Products, communication with you, and support related to the Services and Sites, improving the way we provide Services and the functionality of the Sites, communicating with you, marketing and promotion purposes, and for investigative or legal purposes.
Information Sharing and Disclosure
We do not disclose your private personal information except in the limited circumstances described here.
User Consent or Direction: We may share or disclose your information at your direction, such as when you authorize a third-party web client or application to access your account or information. We also will disclose or use your information as reasonably necessary to provide you Services or sell you Products.
Other Third Parties: We will share your information as necessary to third parties as necessary to provide the Services, sell our Products, or to carry out other activities related to the Services, Products, and/or Sites.
California Privacy Rights
Under the California Consumer Privacy Act (“CCPA”) California residents have certain rights and privileges. You can exercise any of the following rights by notifying us as described below:
Disclosure Request. Upon request and when possible, we will disclose the categories and specific pieces of personal information we have collected about you. Additionally, you may also obtain the categories of information about you that we have sold, the categories of third parties to whom the information was sold, and the categories of personal information that we disclosed about you for a business purpose. You may submit these requests via email to firstname.lastname@example.org. When such a request cannot be honored, we will advise you accordingly.
Deletion. If you should wish to cease use of our Sites and have your personal data deleted from our Sites, then you may submit a request by emailing us at email@example.com. Upon receipt of a verifiable request for deletion, we will confirm receipt and will confirm once your personal data has been deleted. To exercise this right via email, simply type the words “Personal Data Deletion” in the subject line of your email.
Right to Sue for Security Breaches. You also have the right to sue in the event your nonencrypted or nonredacted personal information, is subject to an unauthorized access and exfiltration, theft, or disclosure as a result of our violation of the duty to implement and maintain reasonable security procedures and practices. Prior to exercising this right, you must provide us with 30 days’ written notice by emailing us at firstname.lastname@example.org. and providing us with an opportunity to fix this violation.
We reserve the right to ask for information verifying your identity and residency prior to disclosing any information to you or acting on your request. Should we ask for verification, the information you provide to verify your identity and residency will be used only for that purpose, and all copies of this information in our possession will be destroyed when the process is complete. We strive to respond to your request within 45 days of receiving a verifiable consumer request however, we reserve the right to respond within 90 days when reasonably necessary.
Except as provided herein, we will not disclose or share your personal information with third parties for the purposes of third-party marketing to you without your prior consent.
Our Policy Towards Children
Our Services are not directed to persons under 18. If you become aware that your child has provided us with personal information without your consent, please contact us here. In compliance with the Children’s Online Privacy Protection act of 1998, we do not knowingly collect personal information from children under 18 without parental consent. If we become aware that a child under 18 has provided us with personal information, we will take steps to remove such information and terminate the child’s account.
EU Safe Harbor Framework
Lunchbox strives to comply with the U.S.-E.U. and U.S.-Swiss Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, please visithttps://www.ftc.gov/business-guidance/privacy-security/us-eu-safe-harbor-framework.
Changes to this Policy