Last Updated: June 16, 2021
Categories of Personal Information we collect
We may collect the following categories of Personal Information from or about you:
- Information commonly used to identify you, such as your name, user name, physical address, email address, phone numbers, and other similar identifiers.
- Information about your usage of or other interaction with our websites, apps, blogs, or other digital properties (our “Sites”). This information includes actions taken, date and time, frequency, duration, quantity, and performance information related to logins, clicks, messages, how you reached our Sites, and other website and feature usage information.
- Information about your Olura subscription, purchases or receipt of meal ingredients or other products we offer, or your use of our Sites (collectively, our “Services”). This information includes:
- delivery and dietary preferences
- information related to returns, refunds and cancellations, and
- information about gift orders and referrals
- information about your interactions with technical and/or customer support
- General information about your product and service preferences, including your interest in products or services offered by third parties, and your demographics, behavior, and predispositions.
- Information about your device, network, and internet connection, such as your IP address(es), MAC address, other device ID (UDID), device type, operating system type and version, and client version.
- Basic account information related to your Facebook, Apple, or other third party account if you choose to register and log in using such an account. This information includes your username and information from the third party service about whether you entered your password correctly. (These services are designed so that Olura doesn’t see your actual password for these services – just whether you got the password right or wrong.)
- Limited payment information. (When you pay for a Olura Service, your payment information goes directly to a payment processing company who is responsible for keeping your info safe. We never get your full credit card information. More info below.)
- Employment-related information from Olura personnel and or an applicant for personnel positions.
- Other information you upload, provide, or create while using the Sites or our Services.
How we collect Personal Information
We collect many of the categories of Personal Information listed above when you affirmatively give it to us or transact business with us. You may always choose not to provide that Personal Information to Olura, but note that you may be unable to access certain services or features if they require Personal Information that you have not provided.
We also collect information automatically when you interact with our Sites. You can adjust certain settings, such as by turning off cookies in your browser or adjusting privacy settings in our apps, to reduce the amount of Personal Information we passively collect from you when you use our Services. Because we use these features to enhance your user experience (such as using cookies to remember your user name when you visit our Sites or by using push notification in our Apps to let you know the status of your Olura orders), disabling such features may impact our Sites’ functionality.
We may also collect some Personal Information from third-party partners, who may actively or passively collect information on our behalf when you use our Sites. We may also receive Personal Information that third parties collect in other contexts, such as when you visit other websites that are unaffiliated with Olura and information collected from you offline.
More about active collection
Here are some more specific examples of categories of Personal Information we gather through active collection.
- Account Information: Name, email, password, address, phone number, subscription status, and dietary preferences.
- Transaction Information: Information about the Services you purchase, shipping and delivery information and information related to returns, refunds and cancellations. We may also collect and store limited payment information from you, such as payment card type and expiration date and the last four digits of your payment card number; however, we do not collect or store full payment card numbers and all transactions are processed by our third party payment processors. At present, Olura uses Shopify Payments and Apple Pay to process payments. Information collected directly by Stripe and Apple Pay, including your full payment card information, is governed by rigorous data protection standards that apply to the payment card industry, which you can read in full here: https://www.shopify.com/legal/terms-payments-us and here: https://support.apple.com/en-us/HT203027.
- Other Information You Choose to Provide, such as when you communicate with us using social media; participate in a survey, contest, promotion or interactive area of the Sites; or when you request technical or customer support.
More about passive collection
Olura and our third-party service providers automatically collect some information about you when you use our Sites, using methods such as cookies and tracking technologies (further described below). Information automatically collected includes Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and operate the Sites.
In addition, when you use some of our Sites, network information is transmitted back to us such as Site usage information. This information is transmitted back to us, so we can determine how users are interacting with our Sites, to assist us with improving our Sites and Services, and to correct any problems that may occur.
Olura and the vendors we work with – including web analytics vendors and companies that help us market Olura Services – use various tracking technologies, including cookies and web beacons, to collect information about you when you interact with our Sites, including information about your browsing and purchasing behavior. Cookies are small data files stored on your hard drive or in device memory that help us improve the Sites and your experience, see which areas and features of the Sites are popular, and count visits. Web beacons are electronic images that may be used on the Sites or in emails and help deliver cookies, count visits and understand usage and campaign effectiveness. Vendors we work with may combine the personal information they collect when you use our Sites with information that they collect from other sources.
When you visit our Sites from a mobile device, we collect information about the mobile device you use to access or use the Sites, including the hardware model, operating system and version, unique device identifiers, mobile network information and information about your use of our mobile applications. With your consent, we may also collect information about the location of your device and access and collect information from certain native applications on your device (such as your device’s camera, photo album and phonebook applications) to facilitate your use of certain features of the Sites.
We may also collect information about you from other Olura users. For example, a Olura user can use our referral program to tell a friend about our Services, providing the friend’s name and email address in the process. A particularly generous Olura user might send a friend a gift or gift certificate, providing the friend’s name, email address, and mailing address. Olura users are responsible for obtaining any necessary consent from you before submitting your Personal Information to us.
Why we collect Personal Information
We collect and use the categories of Personal Information listed above in order to get you delicious meals and otherwise provide our Services, to communicate with you about your subscription and our Services, to provide customer support and troubleshooting, to improve our business, for security purposes, for other legitimate business purposes, or as required by law.
We restrict our use of employment-related information that we collect from Olura personnel and or an applicant for personnel positions solely for hiring, human resources management, and other employment-related purposes or as required by law.
Our disclosure of Personal Information
Second, we also share Personal Information with a limited number of other businesses that aren’t service providers. These businesses offer services to Olura, like serving advertisements on our behalf across the Internet, serving personalized ads on our website, and providing analytics services. Unlike with our service providers, these businesses have not promised to use Personal Information that we provide solely in connection with Olura’s Sites and Services, and they may use your Personal Information for other purposes.
Under the California Consumer Protection Act, this sharing of Personal Information may qualify as the “sale” of Personal Information by Olura, even though Olura does not get money in exchange for giving a third party access to your Personal Information. Olura does not knowingly collect or sell information from or about children under 16 without sufficient legal authorization. For more information about opting out of the “sale” of your Personal Information, go to the Consumer Rights section below.
Third, we also may disclose your Personal Information when you voluntarily use a Site feature that requires sharing of Personal Information in order to work properly. For example, if you “Like,” “Tweet,” “Pin,” or share content using the social sharing features or other integrated tools on our Sites, you should be aware that the relevant social media company may access Personal Information from you, and any information that you post may be made broadly available, depending on your privacy settings for your social media account.
Last, we disclose Personal Information to courts, law enforcement, and other appropriate third parties when the disclosure is required or authorized by law or reasonably necessary for the protection of our property or legal rights.
More about our sharing with service providers
For example, service providers may get access to Personal Information so they can help with:
- Managing your account and sending you related information, including confirmations, updates, technical notices, security alerts and support and administrative messages
- Fulfilling Service requests
- Protecting against, investigating, and deterring fraudulent, harmful, unauthorized or illegal activity
- Providing reports to you based on information collected from your use of our Services
- Processing your orders and delivering the Services that you have ordered
- Providing support and assistance in connection with your use of our Services
- Providing the ability to contact you and provide you with shipping and billing information and other Sites, Services, recipes, services, offers, surveys, events and other news and information we think may be of interest to you
- Facilitating contests, sweepstakes and promotions and processing and delivering entries and rewards
- Enhancing your experience with our Sites
- Responding to your comments, questions and requests and providing customer service
- Complying with our contractual and legal obligations, resolving disputes with users, enforcing our agreements
- Monitoring and analyzing trends, usage and activities in connection with the Sites
- Linking or combining Personal Information from our various sources of Personal Information (described above) to help us understand your needs and provide you with a better experience
More about “sale” of Personal Information
More about social media integrations
Controls over your Personal Information
We encourage you to read this section in full.
Now onto the full explanation: We do our best to give you reasonable controls over the Personal Information we collect from or about you as set forth below. If you reside in California, you may have legal rights with respect to your Personal Information, including those set forth under the California Consumer Privacy Act (“CCPA”). In order to protect the privacy of all Olura customers and potential customers from across the United States, we will make our best effort to honor requests made non-California residents. Here are the types of requests you can make:
You may request to opt out of the “sale” of personal information. Whether or not you opt out of the “sale” of personal information, Olura doesn’t allow marketing companies, advertisers, or anyone else to access to your Personal Information in exchange for payment. But some of Olura’s information sharing practices may qualify as the “sale” of personal information, as “sale” is defined in the California Consumer Privacy Act. If you opt out of “sale,” we will change these information sharing practices.
You may request access to the Personal Information that Olura has collected about you during the previous 12 months, for a copy of Personal Information in a portable format, that Olura delete Personal Information it has about you, and to opt-out of the sale of Personal Information.
Before we disclose or delete Personal Information in response to any of these requests, we will need to verify your identity. If you have an account with Olura, we will verify your identity by having you log-in to your Olura account. If you do not have an account with us, please provide your email address. Depending on the nature of your request, we may contact you for further information if appropriate to verify your identity. Note, however, that Olura will never ask you for sensitive personal or financial information when verifying your identity, and no Olura employee will ask you to tell them your password.
Under certain circumstances, we will not be able to fulfill your request, such as if it prevents us from completing a transaction you initiated, interferes with our regulatory obligations, affects legal matters including a Olura user’s rights to data contained in their account, we cannot verify your identity, or compliance with your request is not legally required and would involve disproportionate cost or effort. But in any event we will respond to your request within a reasonable timeframe and provide you with an explanation.
Olura will not discriminate against anyone that makes a request to access, delete, or limit our use or sale of Personal Information, but in some cases we will not be able to provide our Services to you without that information.
More about the types of privacy rights requests you can make
Access: You can request more information about Olura’s processing of your Personal Information during the previous 12 months. Your request can include:
- the categories and specific pieces of Personal Information we collected from you,
- why we collected that information,
- the categories of third parties from which we received Personal Information about you,
- the categories of third parties with whom we shared that information, and/or
- the categories of third parties to whom we may have sold that information during the previous 12 months.
Portability: You can request a copy of your Personal Information that we have collected about you in a machine-readable format. You can also request that we transmit the data to another entity where technically feasible.
Deletion: You can request that we erase some or all of your Personal Information from our systems.
Please be aware that your request to delete Personal Information may not cover all of the Personal Information in Olura’s possession. We will continue to retain Personal Information that we use to provide our Services to you, preserve the security and functionality of our Services, protect our legal rights, and internally for other legitimate business purposes that are consistent with the reason why you provided us with the Personal Information and reasonable expectations.
We may send you communications (including emails, phone calls, text messages, push notifications, and snail mail) to your account and transactions initiated by you (such as order status updates and billing receipts). We need the ability to send you these communications to offer the Services, so we do not allow you turn them off entirely. But you can let us know if you have a preferred method for receiving these communications by changing the Notification Settings in your account, disabling push notifications as described below, or contacting us. We try our best to honor your reasonable preferences about communications.
We may also send additional communications about the Services, such as newsletters and additional options that may be of interest to you. We do our best to only send this type of communication to people who want to receive it. If you would like to discontinue receiving these communications, you can update your preferences by using the “Unsubscribe” link found in such emails or by contacting us using the information in the “Contact Us” section of this policy.
More about disabling push notifications
Note that discontinuing push messages typically requires you to change your settings on your device. Each type of device operates differently, so please check your user manual if you’re having trouble.
How long we retain your Personal Information depends on the type of data and the purpose for which we process the data. We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.
Security of your Personal Information
Olura is committed to protecting the Personal Information you share with us. We utilize a combination of industry-standard security technologies, procedures, and organizational measures to help protect your Personal Information from unauthorized access, use, or disclosure. When we transfer credit card information over the Internet, we protect it using Transport Layer Security (TLS) encryption technology.
We recommend you take every precaution in protecting your Personal Information when you are on the Internet. For example, change your passwords often, use a combination of upper and lower-case letters, numbers, and symbols when creating passwords, and make sure you use a secure browser.