PRIVACY NOTICE AND POLICY
Last Updated March 25, 2023
We collect information from you both when you provide it voluntarily and automatically when you visit or access our Digital Services. We may also collect Personal Information from other sources, as described below.
We may collect Personal Information from you and any devices (including mobile devices) you use when you: use our Digital Services, register for an account, subscribe to a newsletter, contact Blue Zones via phone, email, postal mail, or other means, connect with Blue Zones’ social media pages, or respond to Blue Zones communications to you (such as surveys or requests for feedback). Please remember that any information that is disclosed in public comments, forums, or other areas enabling other users to submit comments (“Forums”) becomes public information, is not maintained or treated as confidential, and you should exercise caution when deciding to disclose your Personal Information in such Forums.
In addition, we may also collect Personal Information about you from third parties in connection with our Digital Services, including from the following sources:
The following are the types of information we may collect:
Identifiers: Personal Information such as name, telephone number, email address, date of birth, home or business mailing address, and details regarding your mode of payment, e.g., credit/debit card or account information, when you access certain areas of the Digital Service that require registration or payment for products and services, or if you require more information about those services.
Transactions and Communications: Records of transactions and other information you post or otherwise submit to Blue Zones through our Digital Services, including emails or other communications you provide to us. When you open emails from us or communicate with us, we may log and store such information. We may also keep records of various communications regarding the types of products and services that you indicate are of interest to you via your response to email or other interactions with Blue Zones or our Digital Services.
Demographic Data: Data about you such as your business or company information, professional or personal reference contact information, social media URLs, and other data reflecting your preferences for our Digital Services.
Interaction Data: Personal Information and non-Personal Information about you when you are using our Digital Services, this may include: (i) information about your interactions with our Digital Services, which includes the date and time of any information you enter into our Digital Services and your interactions with other users of our Digital Services and what content or features you interacted with; and (ii) technical data which may include URL information, cookie data, web beacons, web pixels, clickstream information collection, and other tracking technology information, your IP address, the types of devices you are using to access or connect to our Digital Services, unique device IDs, device attributes, network connection type (e.g., WiFi, 3G, LTE, Bluetooth) and provider, network and device performance, browser type, language, and operating system. Further details about the technical data that is processed by us can be found below.
At other times, we may collect internet and electronic network activity information that cannot be used to directly identify you, such as browser type, “click stream” data, and similar non-personally identifiable information. We may aggregate other information about you and other patrons who visit certain areas of our Digital Services. Aggregated information will not contain any information that can be linked directly back to you.
We may collect information from you in several different areas on the Digital Services, including those described below:
You may be asked to complete a registration form and provide Personal Information. You may also be asked to choose a username and password in order to take advantage of certain Digital Services features, such as newsletters or Blue Zones content updates. Your decision to register is voluntary and you will have the opportunity to decide whether or not to disclose information to us and what communications you would like to receive; however, please be advised that many services available on the Digital Services require registration and if you elect not to register or provide the required information for such services, you will not be able to take advantage of those services. The first time that you provide us with registration information through our Digital Services, you may be offered the opportunity to subscribe to and receive additional information about our products and services. After your first use, you can make changes to your Personal Information and your initial choices by accessing your account or by contacting customer service at [[email protected]].
Challenges and Community Forums
From time-to-time we may request Personal Information from you in conjunction with participation in voluntary challenges, collaborations, and community forums (collectively, “Collaborations”). Participation is voluntary, and you will have the opportunity to decide whether to disclose information to Blue Zones. At times, you may have to register to take part in Collaborations.
Cookies and Tracking Technology
While we take all reasonable steps to protect the privacy of our Digital Services visitors, we cannot promise that the current limitations of our online applications programming will address every browser setting or honor every personal browser preference. In particular, we have not implemented the necessary program changes to honor “Do Not Track” or “DNT” browser signals. You may opt-out from receiving personalized advertising from some third parties by visiting here. Please note that these choices will not opt you out of receiving advertisements. You will continue to receive generic advertisements.
Third-Party Websites and Vendors
We and/or our vendor will use this information to complete the financial or other transaction that you have requested, such as to deliver the content, products or other services that you request or purchase, and to complete any payments associated with the transaction.
Blue Zones uses the services of independent companies to provide certain services to you, including, without limitation, website hosting services, credit and debit card processing, order fulfilment, context and sweepstakes processing, Internet connectivity services, and promotional partners (“Vendors”).
We may use your Personal Information to contact you via mail, email or through our Mobile Services in order to give you updates about our special events, products and services, or other promotions that may be of interest to you. We also use return email addresses to answer the email we receive from you. We may also use your IP address to help protect us and our Vendors from fraud. Please see our bluezones.com/mobileterms for further information concerning our Mobile Services.
We may also use your Personal Information to allow us to tailor products and services specific to your needs, to help organize and manage your customer relationship and our business, to conduct business, to provide you with support, to perform functions that are described to you at the time of collection, and to enforce our bluezones.com/mobileterms.
We may use anonymized and aggregated information that may be created or derived from your Personal Information or usage of our Digital Services for purposes that include data analysis, improving our Digital Services, advertising, and developing new features and functionality within our Digital Services.
We may disclose your Personal Information to Vendors in order to provide and improve our Digital Services. We may also disclose your Personal Information as necessary to: (a) comply with a subpoena or court order; (b) cooperate with law enforcement or another government agency; (c) establish or exercise our legal rights; (d) protect the property or safety of our company and employees, contractors, and Vendors; (e) defend against legal claims; (f) help with internal and external investigations; (g) detect, prevent, or otherwise address fraud, security, or technical issues,or (h) as otherwise required by law or permitted by law.
We may disclose your information in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
Blue Zones makes reasonable efforts to ensure Blue Zones and our Vendors have implemented physical, electronic, and procedural security measures to assist with safeguarding your Personal Information, and are designed to help protect against unauthorized access and disclosure. Except as otherwise described herein, only our authorized personnel and our Vendors who perform legitimate business functions for Blue Zones are authorized to access your Personal Information.
Notwithstanding our efforts, the Internet and online services have inherent security risks. Blue Zones cannot promise, and you should not expect, that your Personal Information, personal searches, and other communications will always remain secure. Any transmission of Personal Information is at your own risk. By using our Digital Services, you acknowledge and accept these risks. As a result, we cannot guarantee or warrant the security of any information you disclose or transmit to us or that are otherwise provided to us and we cannot be responsible for the theft, destruction, or inadvertent disclosure of information. It is your responsibility to safeguard any passwords, ID numbers, or other special access features associated with your use of the Digital Services. Any transmission of information is at your own risk.
We will retain your information for as long as required for our lawful business purposes, as needed to support your interactions with our Digital Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. If you have further questions about our Personal Information retention practices, please contact us at [email protected].
The Digital Services may make Forums available to you and other users. You are not required to provide any Personal Information when using Forums but you may choose to do so. If you post Personal Information online, it will be publicly available and you may receive unsolicited messages from other parties. By using any Forum features of the Digital Services you acknowledge that your user name may be disclosed. We cannot ensure the security of any information you choose to make public in a Forum.
If you choose to access, visit, and/or use any third-party social networking service(s) that may be integrated with our Digital Services, we may receive your Personal Information and other information about you and your computer, mobile, or other device that you have made available to those social networking services, including information about your contacts through those services. Some social networking services will facilitate registration or enhance or personalize your experience on our Digital Services. This includes if you “follow,” “like,” or link your social networking account to our Digital Services. Your decision to use a social networking service in connection with our Digital Services is voluntary. However, you should make sure you are comfortable with the information your third-party social networking services may make available by reviewing privacy policies of those providers and/or modifying your privacy settings directly with those networking services. Also, we cannot ensure that third parties who have access to such publicly available information will respect your privacy. Please exercise caution when deciding to disclose Personal Information to such third parties.
This California Consumer Privacy Act Notice (“Notice”) provides additional information to California residents (“you, “consumers”) whose Personal Information is processed by Blue Zones pursuant to the California Consumer Privacy Act (“CCPA”) and The California Privacy Rights Act of 2020 (“CPRA”), collectively referred to herein as “California Consumer Privacy Laws”. This Notice also addresses the California Shine the Light Law. This Notice only applies to California consumers.
The California Consumer Privacy Laws define personal information as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“Personal Information”).
Personal Information does not include:
(1) De-identified or aggregated information (Blue Zones does not attempt to re-identify any de-identified information it may collect or process);
(2) information that is lawfully made available from federal, state, or local government records, or information that Blue Zones has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media; or information made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience; and
(3) information excluded from the California Consumer Privacy Laws, such as health or medical information covered under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), medical information governed by the California Confidentiality of Medical Information Act, personal information disclosed pursuant to the Driver’s Privacy Protection Act of 1994 (“DPPA”), financial information covered under the Fair Credit Reporting Act (“FCRA”) or Gramm-Leach Bliley Act (“GLBA”).
Sensitive Personal Information. Sensitive Personal Information (“SPI”) is Personal Information that reveals:
Personal Information Sale and Sharing under CCPA
Blue Zones does not “sell” or make available Personal Information for cross-context behavioral advertising (which is called “sharing” under the CCPA) within the meaning of California Consumer Privacy Laws. In some cases, we may customize messages to you based on information that we have about you. We do allow certain third-party partners to collect information about the users of our Digital Service for the purposes of digital programming measurement and analytics, and for security matters such as fraud detection and reporting. We do not, however, sell or use Personal Information about you for targeted advertising on third-party websites.
Categories of Information We Collect and Disclose
The following chart provides information about the types of Personal Information we collect, the sources of the information, the purposes for which we use the information, and the categories of third parties with whom we have shared this information in the last 12 months for Personal Information shared for a business purpose.
|Category of Personal Information||Category of Source from Which Data is Collected||Purpose of Collection||Category of Third Parties to Whom Data is Disclosed|
|Identifiers and Contact Information. This category includes names, addresses, mobile phone numbers, email addresses, date of birth and other types of Personal Information.||Digital Service users and third-party partners, sponsors, and licensees||Collect and process registration information and verification and authentication of registrants and Digital Service users and facilitating communications with our Digital Service users||Vendors|
|Internet or other electronic network activity information.||Devices to which the Digital Services are connected||To facilitate the efficient and secure use of our systems infrastructure||Vendors|
|Automatically collected information such as IP address, browser type, and device type.||Cookies and other tracking technologies||To analyze and track usage data; to determine the popularity of certain content; to deliver marketing and content targeted to user interests||Vendors|
|Inferences drawn from the Personal Information and personal preferences collected from Digital Services and third-party partners.||Digital Service users and third-party partners, sponsors, and licensees||To analyze and track usage data; to determine the popularity of certain content; to deliver marketing and content based on User preferences||Vendors|
|Sensitive Personal Information
This may include: Social security number, driver’s license, state identification card or passport number; Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership, or contents of mail, email, or text messages where Blue Zones is not the intended recipient.
|Directly from the consumer;
from Vendors, and
|For internal purposes (including employment purposes as applicable, such as to conduct background checks and for other purposes in the ordinary course of employment (e.g., to facilitate onboarding processes, manage pay compensation, provide benefits, review performance, etc.)).||Vendors; Employee benefits providers; and government agencies; and Affiliates|
Your California Consumer Privacy Law Rights
You may have certain rights with respect to Personal Information that we have collected and used under certain circumstances, including the below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law. Certain rights do not apply to household data.
Information. You can request that we provide you the following information regarding our use of your Personal Information:
Access. You can request that we provide you a copy of your Personal Information that we have collected in the past 12 months.
Correction. You can request that we correct any inaccuracies in your Personal Information. Blue Zones will use commercially reasonable efforts to correct the identified inaccurate information upon receiving a verifiable request.
Deletion. You can request that we delete your Personal Information collected in the past 12 months when we no longer need such data in connection with our Digital Services (subject to certain exceptions that may apply under applicable law).
Opt Out of Sale or Sharing. Under California Consumer Privacy Law, you have the right to opt out of the sale or the disclosure of your Personal Information for purposes of cross-context behavioral advertising (“sharing”). For clarity, however, Blue Zones does not “sell” or “share” Personal Information for purposes of California Consumer Privacy Law.
Limit Use of Sensitive Personal Information. You have the right to limit the use and disclosure of your SPI information obtained by Blue Zones. You can make a request to limit the use or disclosure of your SPI information by contacting us at [email protected]
Right to Non-Discrimination. If you choose to exercise your privacy rights under the California Consumer Privacy Laws, we will not charge you different prices or provide different quality of services unless those differences are related to your Personal Information or otherwise permitted by law.
If you are a California resident where one or more of these rights are granted to you under applicable law, and you wish to exercise any such rights listed above, please submit a request, or designate an authorized agent to make a request under the CCPA on your behalf, by contacting us at [email protected], or 800-614-0848. To verify your identity when you submit a request, we will match the identifying information you provide us to the personal information we have about you. If you have an account with us, we will also verify your identity through our existing authentication practices for your account.
Only you, or an agent legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information as described above (“California Consumer Request”). Please understand that we are required to verify your California Consumer Request and may require you to provide some information to enable us to carry out such verification. We will deny requests from agents that do not submit proof of legal authorization to act on your behalf. To verify that an agent has legal authority to act for you, we may require a copy of a power of attorney or require that you provide the agent with written permission and verify your own identity with us. We cannot respond to your California Consumer Request or provide you with Personal Information if we cannot verify your identity or authority to make the California Consumer Request and confirm the Personal Information relates to you.
When you, or someone legally authorized to act on your behalf, make a California Consumer Request, you can expect the following:
We will verify your identity. You will need to provide us with certain information so that we can verify that you are who you say you are. Which information is required may depend on the type and sensitivity of information subject to the California Consumer Request.
We will respond to your California Consumer Request within the legally required amount of time. If necessary, we may need additional time to respond where allowed by law, but we will reply either way within the legally required period and, if we need an extension, we will explain why.
In certain cases, a California Consumer Request may be denied. For example, if we cannot verify your identity or if providing you information could create an unreasonable risk to someone’s security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your California Consumer Request, we will explain why we denied it.
Making a California Consumer Request does not require you to create an account with us. We will only use Personal Information provided in a California Consumer Request to verify the requestor’s identity or authority to make the California Consumer Request.
California Shine the Light Law
If you reside in California, you have the right to ask us one time each year if we have shared Personal Information with third parties for their direct marketing purposes and the identities of any such third parties (“Shine the Light Request”). Only California residents can make a Shine the Light Request. A California resident is a person who currently lives in California, or is domiciled in California but is outside of the state for a temporary or transitory purpose. To make a Shine the Light Request, please send us an email, or write to us at the address listed below in “How to Contact Us”. Indicate in your communication that you are a California resident making a “Shine the Light” inquiry.
Our Digital Services are not created for anyone under the age of 13 (“Children” or “Child”). By using our Digital Services, you represent that you are at least 13 years old. If you do not meet this age requirement, then you must not access or use our Digital Services. We do not knowingly collect personal information from Children, and we do not target our Digital Services to Children. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us though one of the methods listed under [“How to Contact Us”] below. If we become aware that we have collected Personal Information from Children without verification of parental consent, we take reasonable steps to remove that information from our servers.
For more information about the Children’s Online Privacy Protection Act (“COPPA”), which applies to websites that direct their services to children under the age of thirteen (13), please visit the Federal Trade Commission’s website: https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions.
To the extent that you provide or transmit any information, including, but not limited to, any Personal Information and any information that identifies any other individual (including without limitation name, email address and/or telephone number), to Blue Zones or our third-party service or data providers, licensors, or distributors (“Representatives”) through the Digital Services, you warrant that (a) you are providing or obtaining only your own information or the information of others which you are authorized to provide to third parties and/or obtain from third parties on their behalf; and (b) the use of such information by Blue Zones and its Representatives will not infringe upon or misappropriate the intellectual property rights or otherwise violate the rights of any third parties.