Privacy
Grocery Outlet Inc. Privacy Policy
Grocery Outlet Inc.® (“Grocery Outlet” or “we”) respects your privacy and is committed to protecting it through our compliance with this Privacy Policy (“Policy”). We understand that you care about how we collect, use, and share information. This Policy applies to Grocery Outlet and our websites, loyalty program (either through our mobile application or by signing up on our website), social media sites and handles, and emails we send, as well as the information we collect when you interact with us through other online services, social media, and email, visit one of our locations, or attend an event sponsored by us (collectively our “Services”). This Policy explains:
- the categories of Personal Information we collect through our Services
- the categories of sources from which we collect Personal Information
- the categories of Personal Information we sold or shared to third parties
- the categories of third parties who we may sell or share your Personal Information with
- our purposes for selling or sharing Personal Information
- the categories of Personal Information that we disclosed for our business purposes
- the categories of parties we have disclosed Personal Information to for our business purposes
- how we use and protect that information
- the choices you have regarding our collection, use, and sharing practices
- details regarding our use of third-party cookies and other tracking technologies
We also include specific disclosures for residents of California.
This Policy applies to any official Grocery Outlet web site or social media. It does not apply to websites and mobile applications owned or operated by third parties and are not branded with Grocery Outlet logos; please review the privacy policies on those websites and applications directly to understand their privacy practices.
Definitions
“Personal Information” means any information that identifies, relates to, describes, or is reasonably capable of being associated, linked or linkable with a particular individual or household, including any information that is subject to applicable data protection laws.
“Process” or “processing” means any operation or set of operations performed, whether by manual or automated means, on personal data or on sets of personal data, such as the collection, use, storage, disclosure, analysis, deletion, or modification of personal data.
“Targeted advertising” or “Cross-context behavioral advertising” means displaying advertisements to a consumer where the advertisement is selected based on personal data obtained from that consumer’s activities over time and across nonaffiliated websites or online applications to predict such consumer’s preferences or interests.
“Sale” or “Sell” means renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.
“Share,” “shared,” or “sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, Personal Information to a third party for cross-context behavioral advertising.
“Profiling” means any form of automated processing of personal information to evaluate certain personal aspects relating to a natural person and in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Information We Collect
The following is a description of our data collection practices, including the categories of Personal Information we collect, the sources of that information, the purposes for which we collect the information, and whether we disclose that information to other companies. We retain this Personal Information for as long as necessary to complete the purpose for which it was collected, unless otherwise instructed by consumer, or unless otherwise disclosed at the time of collection.
Category | Purpose |
---|---|
Personal Identifiers We collect information such as name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers |
Provide, maintain, and improve Services Administer loyalty program Notify you about changes to our Services Provide customer support Analyze use of Services Monitor usage of Services Contact you about the Services |
Protected Classifications We collect your age, date of birth, gender, and other similar data when you chose to provide it to us as part of your profile, or when using Services or website features. |
Provide, maintain, and improve Services Administer loyalty program Analyze use of Services |
Commercial Information We collect information such as products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies |
Provide, maintain, and improve Services Administer loyalty program Provide customer support Analyze use of Services Monitor usage of Services |
Internet or Other Electronic Network Activity Information We collect details of your visits to our site and information generated in the course of using our site (including the timing, frequency and pattern of service use) including, but not limited to, traffic data, location data, weblogs and other communication data, the resources that you access, and how you reached our site. We also collect details regarding the device you use to access our Services, including, but not limited to, your IP address, operating system and browser type |
Provide, maintain, and improve Services Administer loyalty program Analyze use of Services Monitor usage of Services |
Geolocation Data We collect information as described above, we collect your IP address automatically when you use our Services. We may be able to determine your general location based on the IP address. We collect your precise location (i.e., your GPS coordinates). |
Administer loyalty program Provide, maintain, and improve Services |
Audio, electronic, visual, thermal, olfactory, or similar information: We collect video surveillance at our stores. Otherwise, we do not collect this information. |
|
Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics: We analyze your purchases, preferences, or other interactions and may create a profile for you to suggest other products you may be interested in. |
Provide, maintain, and improve Services Administer loyalty program Analyze use of Services Monitor usage of Services |
Categories of Sources of Personal Information
Directly from you: Most of your Personal Information we collect from you, such as when you provide the information directly to us while visiting our store or using our app. This includes:
- Contact and demographic information when registering to use our Services.
- Payment information and associated contact information when engaging in a transaction on our site.
- Email address information when subscribing to our email bulletins.
- Any information or data you provide by interacting in our online forums and chatrooms, or by commenting on content posted on our Services. Please note that these comments are also visible to other users of our Services and may be visible to anyone else on the internet.
- Information you provide when you complete a survey administered by us or a service provider acting on our behalf.
- Information you provide when participating in a charity event or offering a donation.
- Information you provide when you participate in a contest or sweepstakes.
- If you contact us, we may keep a record of that correspondence and any contact information provided.
Information We Collect Automatically: When you interact with the Services, certain information about your use of our Services is automatically collected. Much of this information is collected through cookies, web beacons, and other tracking technologies, as well as through your web browser or device. This includes:
- Details of your visits to our site and information generated in the course of using our site (including the timing, frequency and pattern of service use) including, but not limited to, traffic data, location data, weblogs and other communication data, the resources that you access, and how you reached our site.
- Details regarding the device you use to access our Services, including, but not limited to, your IP address, operating system, and browser type.
- Information about how you interact with our ads and newsletters, including whether you open or click links in any correspondence.
- Information that you make available to us on a social media platform (such as by clicking on a social media icon linked from our Services), including your account ID or username and other information included in your posts.
Categories of Personal Information Sold or Shared to Third Parties
In the preceding 12 months, we have sold Personal Information for valuable consideration or shared Personal Information for purposes of targeted or behavioral advertising with the following categories of third parties and for the following business purposes:
Category of Personal Information | Purpose of Sale/Sharing | Category of Third Parties with whom we Share or Sell Personal Information |
---|---|---|
Identifiers | Marketing | Data analytics providers Social Networks |
Commercial information | Marketing | Data analytics providers Social Networks |
Internet or other similar network activity | Marketing | Data analytics providers Social Networks |
Geolocation data | Marketing | Data analytics providers Social Networks |
Categories of Personal Information Disclosed to Service Providers
We disclose Personal Information to certain third parties to enable them to provide services to us. The personal information provided to our service providers is limited to that Personal Information which is necessary for them to provide the services and our service providers have contractually agreed not to use your Personal Information other than as necessary to provide the applicable services to us. In the preceding 12 months, we have disclosed the following categories of Personal Information with the following categories of service providers and for the following business purposes:
Category or Personal Information | Purpose of Disclosure | Category of Service Providers to Who We Disclose Personal Information |
---|---|---|
Identifiers | Provide, maintain, and improve Services Administer loyalty program Notify you about changes to our Services Provide customer support Analyze use of Services Monitor usage of Services Contact you about the Services Marketing Security |
Data analytics providers; Government Entities; Internet Service Providers; Non-profit organizations; Social Networks; and Cybersecurity Providers; |
Protected classification characteristics under state or federal law | Provide, maintain, and improve Services Administer loyalty program Provide customer support Analyze use of Services |
Data analytics providers; Government Entities; and Social Networks; |
Commercial information | Provide, maintain, and improve Services Administer loyalty program Provide customer support Analyze use of Services Monitor usage of Services Marketing |
Data analytics providers; Social Networks; and Cybersecurity Providers; |
Internet or other similar network activity | Provide, maintain, and improve Services Administer loyalty program Analyze use of Services Monitor usage of Services Marketing |
Data analytics providers; Internet Service Providers; Social Networks; and Cybersecurity Providers; |
Geolocation data | Provide, maintain, and improve Services Administer loyalty program Analyze use of Services Monitor usage of Services Marketing |
Data analytics providers; Internet Service Providers; Social Networks; and Cybersecurity Providers; |
Audio, electronic, visual, thermal, olfactory, or similar information | Provide, maintain, and improve Services Analyze use of Services Monitor usage of Services Security |
Data analytics providers; Internet Service Providers; and Cybersecurity Providers; |
Inferences drawn from other personal information | Provide, maintain, and improve Services Administer loyalty program Notify you about changes to our Services Provide customer support Analyze use of Services Monitor usage of Services Contact you about the Services Marketing Security |
Data analytics providers; Government Entities; Internet Service Providers; Non-profit organizations; Social Networks; and Cybersecurity Providers; |
Sensitive Personal Information | Provide, maintain, and improve Services Administer loyalty program Provide customer support Analyze use of Services |
Data analytics providers; Government Entities; and Social Networks; |
Our Sharing of Your Information
-
- Service Providers: We engage vendors to perform functions on our behalf such as: website, software, and data storage, content management, database management, technical integration, marketing automation, analytics, site optimization, conducting customer surveys, and payment processing.
There are circumstances in which the service provider collects data directly from you when their privacy policies may also apply.
- Social Media Platforms: Where you choose to interact with us through social media, your interaction with these programs typically allows the social media company to collect some information about you through digital cookies they place on your device and other tracking mechanisms. In some cases, the social media company may recognize you through its digital cookies even when you do not interact with their application. Please visit the social media companies’ respective privacy policies to better understand their data collection practices and controls they make available to you.
- Third parties involved in advertising: We partner with third parties who assist us in serving advertising regarding the Services to others who may be interested in the Services. We also partner with third parties who use cookies to display interest-based advertising to you on the Services. These third parties may use tracking technologies on our website to collect or receive information from the Services and elsewhere on the internet and use that information to provide measurement services and target ads. While Grocery Outlet will not share information that identifies you by name with unaffiliated third parties for their own uses, such third parties may, with sufficient data from other sources, be able to personally identify you.
- Corporate Affiliates: We may share data with other members of our group of companies.
Additional Information About our Data Collection and Sharing Practices
Sensitive Personal Information: We only use your Sensitive Personal Information for the purpose for which it was collects (as disclosed in the table above).
Sharing of Aggregated Data: We may create and use aggregated or de-identified data at our discretion, such as by sharing it with marketing agencies, media agencies and analytics providers.
Combination of Information: We may combine Personal Information from the Services together and with other information we obtain from our business records. Additionally, information collected about you from a particular browser or device may be linked to information collected from another computer or device that we believe relates to you.
Change of Ownership or Corporate Organization: We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Policy.
Cross-border Transfer of Data: If you use our Services outside of the United States, you understand that we may collect, process, and store your personal information in the United States and other countries. The laws in the U.S. regarding Personal Information may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law. By using the Services, you consent to the collection, international transfer, storage, and processing of your data.
Our Practices Regarding Information Belonging to Children: The Services are intended for users age sixteen and older. Grocery Outlet does not knowingly collect Personal Information from children. If we discover that we have inadvertently collected Personal Information from anyone younger than the age of sixteen, we will delete that information. We do not sell Personal Information for valuable consideration or share the Personal Information for behavioral or targeted advertising of any individual we know to be under the age of 16.
Text Messages: If you choose to sign up for our marketing text messages, we may send you periodical text messages about products we think you may be interested in or promotional offer available to you. Message and data rates may apply. We will only send you text messages if you first provide your consent. Your consent is voluntary and is not required to complete any purchase. You can opt out of receiving our marketing text messages at any time by replying “STOP”.
Additional Information About Our Use of Tracking Technologies and Interest-Based Advertising
Grocery Outlet relies on partners to provide many features for our sites and services using data about your use of Grocery outlet and other sites. We use cookies for the following purposes:
- Site Operations: Enabling features that are necessary for providing you the services on our site, such as identifying you as being signed in, tracking content views, remembering your preferences and the number of times you have been shown an advertisement.
- Analytics: Allowing us to understand how our services are being used, track site performance, and make improvements.
- Personalized Advertising: Delivering tailored advertising based on your preferences or interests across services and devices, and measuring the effectiveness of the ads.
- Social Media: Enabling the sharing of content from our services through social networking and other sites.
Below is a list of some of these partners with links to more information about their use of your data and how to exercise your options regarding tracking.
Partner | Category | Further Information |
---|---|---|
Personalized Advertising and Social Media | Data Policy | |
Yahoo and Exchange (Verizon) | Personalized Advertising | Privacy Center |
Analytics | How Google uses information from sites or apps that use our services | |
Social Media | Privacy Policy | |
Social Media | Privacy Hub |
Most web browsers automatically accept cookies but, if you prefer, you can usually modify your browser setting to disable or reject cookies. If you delete your cookies or if you set your browser to decline cookies, some features of the Services may not be available, work, or work as designed. You may also be able to opt out of or block tracking by interacting directly with the third-parties who conduct tracking through our Services.
You can learn more about ad serving companies and the options available to limit their collection and use of your information by visiting the websites for the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Digital Advertising Initiative. Similarly, you can learn about your options to opt-out of mobile app tracking by certain advertising networks through your device settings and by resetting the advertiser ID on your Apple, Android, or other mobile device.
Please note that opting-out of advertising networks services does not mean that you will not receive advertising while using our Services or on other websites, nor will it prevent the receipt of interest-based advertising from third parties that do not participate in these programs. It will, however, exclude you from interest-based advertising conducted through participating networks, as provided by their policies and choice mechanisms. If you delete your cookies, you may also delete your opt-out preferences.
How We Secure the Information We Collect from or About You
We use a combination of physical, technical, and administrative safeguards to protect the information we collect through the Services. While we use these precautions to safeguard your information, we cannot guarantee the security of the networks, systems, servers, devices, and databases we operate or that are operated on our behalf. We are not responsible for the circumvention of any privacy settings or security measures contained on or concerning this Website.
Do Not Track
We do not currently recognize browser signals regarding tracking mechanisms, which include “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Third parties may be able to collect information, including Personal Information, about your online activities over time and across different websites or online services when you use the Services. You may opt out of online behavioral ads at http://www.aboutads.info/choices/. You also may limit certain tracking by disabling cookies in your web browser.
Global Privacy Signal
We receive and process Global Privacy Signals (“GPC Signal”) for requests to opt-out of sale or sharing. We process the commonly used and industry standard GPC Signals but because this is new technology and new providers may offer solutions, we will do our best to recognize, process, and honor a GPC Signal that meets the legal standards and is widely adopted in the industry.
Your Privacy Rights
Persons with disabilities may obtain this notice in alternative format upon request by contacting us at privacyrequest@cfgo.com or calling 1-888-501-1217.
The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of Personal Information, as well as the following rights:
Right to Know and to Access
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. This information is disclosed in the “Information We Collect” Section of this Policy.
You also have the right to request access to Personal Information collected about you and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. You may submit such a request as described below. To protect our customers’ Personal Information, we are required to verify your identify before we can act on your request.
Right to Portability
You have the right to request that we provide a copy of the Personal Information we have collected about you, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. Once we receive your request and confirm your identity, we will provide to you a copy of your data as required under the applicable data protection laws. We may provide this data to you through your user account with us, or via email to the email address you have provided with your request.
Right to Delete
Subject to certain exceptions, you have the right to request that we delete any of your Personal Information. Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We will delete or deidentify Personal Information not subject to one of these exceptions from our records and will direct our service providers to take similar action.
Right to Correct
Subject to certain exceptions, you have the right to request that we correct inaccurate Personal Information that we have collected about you. Once we receive your request and confirm your identity, we will review your request, taking into account the nature of the personal information and the purposes of the processing of the personal information to see if we can correct the data. We may also request additional information showing that the information you want to correct is inaccurate.
Right to Limit the Use or Disclosure of Sensitive Personal Information
You have the right to request that we limit the use of your Sensitive Personal Information to only the purposes for which it was collected. We only use Sensitive Personal Information for the purpose for which it was collected and we do not use it to infer characteristics about you.
Right to Opt-out
You have the right to opt-out of the Sale or Sharing of your Personal Information. We use your Personal Information for the purposes describe in the “Information We Collect” section above, some of which may be considered to be a Sale or Sharing under applicable privacy laws and you may have the right to request to opt-out of such data uses. To exercise this right, please visit our Do Not Sell or Share My Personal Information webpage, call us at 1-888-501-1217, or set your browser Global Privacy Controls to send this signal when you visit our Services.
Please note that your right to opt out does not apply to the disclosure of personal information to our service providers, who are parties we engage to perform a function on our behalf and are contractually obligated to use the personal information only for that function.
We may also disclose information to other entities who are not listed here when required by law or to protect us or other persons, as described in this Policy.
How to Submit a Privacy Request
You may submit a request to exercise your rights through one of two means:
- By filling out a Consumer Data Request Form available here.
- By calling us at 1-888-501-1217.
We will endeavor to respond to your request within the time required under the CCPA. If we require more time, we will inform you of the reason and extension period in writing. Please note that additional information may be requested from you to confirm your identity. This is to ensure that your personal information is not disclosed to a person who does not have a right to receive it. We will only use Personal Information you provide in connection with your request to review and comply with your request. Depending on your request, we may ask for information such as your name, the last item you purchased from us, or the date of your last purchase from us.
Non-Discrimination
We will not discriminate against you for exercising any of your data privacy rights.
Verification Procedures
In order to process your request to exercise your rights, we must first verify it. We may do this by asking you to:
- Provide personal identifiers we can match against information we may have collected from you previously; and/or
- Confirm your request using the email and/or telephone account stated in the request.
We will not collect additional Personal Information from you for the sole purpose of your exercising your rights under the data protection laws. Similarly, we will not require you to create an account with us, solely for the purpose of exercising your rights under the data protection laws.
Authorized Agent
In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We may require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us.
If you are an authorized agent submitting a request on behalf of an individual, you must attach a copy of the signed permission.
California Shine the Light
Although we do not currently share your information for other companies’ direct marketing purposes, residents of the State of California have the right to request information from us regarding other companies to whom we have disclosed certain categories of information during the preceding year for the other companies’ direct marketing purposes. If you are a California resident and would like to make such a request, please email privacyrequest@cfgo.com or write to us at:
Grocery Outlet Inc.
5650 Hollis Street
Emeryville, CA 94608
Phone: 1-888-501-1217
Email: privacyrequest@cfgo.com
Notice of Financial Incentive
We offer customers the opportunity to participate in Loyalty and Email Programs (the “Program(s)”), which may provide benefits, including a coupon or automatic entry into sweepstakes. Those benefits are described along with other material terms and conditions here. Any financial incentive we offer will be reasonably related to the value of your Personal Information. Participation in the Program requires your prior opt-in consent, which you may revoke at any time.
To opt-in to the Program, please [click here/other instructions].
To opt-out of the Program, please [click here/other instructions].
We will not discriminate against you for exercising any of your CCPA rights in connection with the Program including by:
- Denying you goods or services;
- Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
- Providing you a different level or quality of goods or services;
- Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
We estimate the value of personal information we request from customers in our Programs by comparing the amount spent by customers in one or both of our Programs to similarly situated customers who do not participate in one or both of our Programs over a 12-month period. This estimate is not specific to any individual consumer and varies per consumer. We have based this good-faith estimate on the value that arises from our commercial relationships and the collection and retention of the Personal Information of consumers who have voluntarily signed up and chosen to remain in the Program. The value of Program benefits to members varies significantly as individual members take advantage of Program benefits to varying degrees.
Special Information for Nevada Residents
Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, Grocery Outlet does not engage in such sales. If you are a Nevada resident and would like more information about our data sharing practices, please email privacyrequest@cfgo.com.
Changes to This Policy
We may make changes to this Policy from time to time. We will post any changes, and such changes will become effective when they are posted. Your continued use of our Services following the posting of any changes will mean you accept those changes.
For questions about our privacy practices, contact us at:
Grocery Outlet Inc.
5650 Hollis Street
Emeryville, CA 94608
1-888-501-1217
privacyrequest@cfgo.com