Privacy Policy
Effective Date: September 5th, 2024
1. Introduction. This Privacy Policy describes how, along with our subsidiaries and affiliates (collectively referred to as “My Hot Lunchbox,” “we,“ “us,” or “our“), My Hot Lunchbox processes Personal Information when we provide services or when you use our websites, mobile, and other online applications and products and services (collectively, the “My Hot Lunchbox Sites”). We are committed to ensuring the privacy and integrity of the Personal Information you share with us or we otherwise collect as we provide these Services. Throughout this Privacy Policy, “Personal Information” means any information relating to an identified or identifiable individual.
2. Information We Collect. Information is gathered from the My Hot Lunchbox Sites by us, our service providers, advertisers, sponsors and partners. The My Hot Lunchbox Sites are not intended for children under 13 years of age. No one under age 13 may provide any information to or on My Hot Lunchbox Sites. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website through any of its features, register on the Website, make any purchases through the Website, or use any of the interactive or public comment features of this Website. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at info@myhotlunchbox.com.
California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.
3. Information You Provide. We may collect information that you choose to provide on the My Hot Lunchbox Sites in a variety of ways, such as when you:
- register for one of our products or services. This information may include your name, address, telephone number, email address, and credit information;
- make information available to us via social networking logins, such as Facebook, Instagram, or Twitter;
- express an interest in communicating or collaborating with participants in a business process or solutions offered by My Hot Lunchbox;
- participate in chats, web forums, or other interactive sessions;
- provide payment card information for one of our products or services;
- subscribe to newsletters, access podcasts, or provide feedback; and
- participate in surveys, sweepstakes or other promotions.
4. Automated Information. Information regarding your use of the My Hot Lunchbox Sites may be collected and/or aggregated through the use of automated means. This automatically collected information may include information such as:
- your IP address, the type of browser and operating system used;
- date and time you access the My Hot Lunchbox Sites and pages you visit, and if you linked from or to another website, the address of that website;
- email you open and links you click on within those email;
- your ISP or mobile carrier, and the type of handheld or mobile device that you used; and
- your behavior while using our site, including the time you spend on portions of the site and how you interact with various aspects of the site.
5. Data Technologies.
- Various technologies are used to automatically collect information, such as cookies, local shared objects, and web beacons (generally referred to as “Data Technologies”). “Cookies” are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. “Local shared objects,” sometimes known as Flash Cookies, may be used to store your preferences or display content based upon what you have viewed on various websites to personalize your visit. A “web beacon,” also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies. Anonymous advertising identifiers are increasingly being used on mobile devices and otherwise in a manner similar to Cookies. When we refer to Data Technologies, we are including all current and similar future technologies.
- One or more Data Technologies may be used on the My Hot Lunchbox Sites and other websites and mobile applications (that may not be the My Hot Lunchbox Sites) by us, by another party on our behalf, or by third parties in accordance with their privacy policies. Data Technologies may be used by us and others, on our behalf and on their own behalf, to transmit information to you or about you and connect information about you from different sources, websites, devices, and mobile applications.
6. Photos and Videos. We may target and track the photos and videos you view on the Sites. You consent to our tracking of your photo and video viewing through the My Hot Lunchbox Sites or third party social media for up to two years or as permitted by applicable law.
7. Location Information. When you download or use the My Hot Lunchbox Sites, we may collect physical location information that is sufficiently precise to allow us to locate a specific person or device (“Location Information”). We only collect Location Information with your permission (e.g., such as when you agree to provide it to us after you initially access or download the My Hot Lunchbox Sites). We may use Location Information and provide it to third parties to provide you with content and services that are relevant to a particular location, such as search results and direction, to evaluate and improve the My Hot Lunchbox Sites, or to provide you with relevant content and services relevant.
8. Publicly Posted Information. Information that you make available to us and others via social media networks, forums, blogs, list serves, chat rooms or similar functionality is public information that we or others may share or use in accordance with the law.
9. Combined Information and Information from Other Sources. We may combine information that you provide to us with information we receive from our affiliates and other sources, as well as with other information that is automatically collected. The combined information may include information about your use of the My Hot Lunchbox Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.
10. How We May Use the Information We Collect. We may use information we collect for the following purposes:
- for everyday business purposes, such as establishing and managing your user account, providing products and services you request, processing and collecting payments and providing customer support;
- to offer our other products or services and/or the products or services of others to you;
- to communicate about, and administer your participation in, special events, programs, surveys, contests, sweepstakes and other offers or promotions;
- to enable you to interact with My Hot Lunchbox and our users and others through various means, such as through our message boards, blogs and social media;
- to evaluate and improve our business, including developing new products and services and analyzing the effectiveness of products, services, applications and websites;
- to provide or sell to third parties to allow them to market or advertise their products or services to you;
- to diagnose and address technical and service problems;
- to perform data analyses, including market and Consumer research, trend analysis, demographic analysis and financial analysis;
- to deliver content correlating to your interests and browsing and usage history, both within the My Hot Lunchbox Sites and on other websites and applications;
- to comply with applicable legal requirements and our policies; and
- to contact you via telephone, text or chat. We will obtain your consent to contact you when and in the manner required by law.
11. Information We Share. We do not sell or otherwise share information about you that we collect or receive, except as described below:
- Affiliates. We may share information about you, including Personal Information, with our corporate affiliates, who will use it in accordance with their privacy policies.
- Our Service Providers. We may engage third parties to provide the services offered through or in connection with the My Hot Lunchbox Sites on our behalf. We require such providers to maintain information about you as confidential and to use the information only to perform the services specified by us in a manner consistent with this Privacy Policy.
- Co-Sponsored Promotions. In the event that you participate in a survey, sweepstakes, contest or other promotion that is co-sponsored by My Hot Lunchbox and a third party, we may share information collected in conjunction with the survey, sweepstakes, contest or promotion, including Personal Information, with that third party. After the information is provided to those third parties, the subsequent use or disclosure of such information is subject to their privacy policies and practices. Surveys, sweepstakes and other promotions conducted on behalf of My Hot Lunchbox and a third party will include branding from both My Hot Lunchbox and the third party.
- Promotions on behalf of Third Parties. Periodically, third parties may conduct surveys, contests, sweepstakes and other promotions for their own purpose on the My Hot Lunchbox Sites. Information you provide in response to those activities is governed by their privacy policies. Surveys, sweepstakes and other promotions conducted solely for the purpose of a third party will include only the third party’s branding.
- Corporate and Asset Transactions. If we sell all or substantially all of our business or sell or transfer all or a material part of our assets, or are otherwise involved in a merger or transfer of all or a substantial part of our business, we may transfer all information we have collected and stored, including Personal Information, to the party or parties involved in the transaction as part of that transaction.
- Other. We may access or disclose information, including Personal Information, to:
- protect or defend our interests and the legal rights or property of My Hot Lunchbox and our affiliates;
- protect the rights, interests, safety and security of users of the My Hot Lunchbox Sites or members of the public;
- protect against fraud or for risk management purposes; or
- comply with prudent legal practice as we may determine, and applicable law or legal process.
12. Data Retention and Deletion. We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the purposes for which we process it, and whether we can achieve those purposes through other means. We also consider applicable legal requirements. In some circumstances, we will anonymize your personal data so that it can no longer be associated with you. We reserve the right to retain and use such anonymous data indefinitely without further notice to you. Once we no longer need to use your personal data for the purposes set out in this Privacy Policy, we will delete it from our systems. You may have certain rights to request deletion of your personal data. We will comply with such request unless we have a lawful basis for retaining your data, such as for compliance with a legal obligation or for the establishment, exercise or defense of a legal claim. We may retain your personal data where retention is necessary for compliance with a legal obligation to which we are subject or in order to protect your vital interests or the vital interests of another natural person.
13. Protection Mechanism for Sensitive Data.
- We consider certain types of personal data to be sensitive and therefore require special precautions for its collection, storage, use, and disclosure. Sensitive data may include information related to demographic data, location information, and financial information. We take appropriate technical and organizational measures to ensure the security of sensitive data, including:
- Encryption of sensitive data during transmission and while at rest;
- Access controls to limit access to sensitive data only to authorized personnel on a need-to-know basis;
- Regular testing and evaluation of the effectiveness of security measures;
- Special contractual obligations for third-party service providers who may access sensitive data;
- Prompt incident response and breach notification procedures in case of any unauthorized access to sensitive data.
- Individuals may have the right to object to the processing of their sensitive personal data, subject to applicable legal restrictions. Requests can be in accordance with the terms herein.
- This section is subject to applicable data protection laws and may need to be revised when the legal framework evolves.
14. Your Choices. You are entitled to make certain choices about how we communicate with you.
- You may choose not to provide Personal Information, even though that might impact your ability to register or receive a particular product or service.
- If you do not want to receive marketing email from us, you can follow the unsubscribe link provided in those emails.
- If you do not want to receive interest-based advertisements, you can opt out by contacting us as described in this policy.
- You have a number of choices regarding certain Data Technologies. Most web browsers automatically accept cookies, but you can usually modify your browser’s setting to decline cookies if you prefer. You may also render some web beacons unusable by rejecting their associated cookies and disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on’s settings or the website of the technology provider. If you choose to decline Cookies or similar technologies, however, please note that certain features may not function properly or at all as a result. You may be able to adjust the use of advertising identifiers on mobile devices through the settings on your device. Finally, if you do not want to use a uniquely generated telephone number, you may choose to not call us.
- If you do not want us to use Location Information, you can decline our initial invitation to provide that information, or opt out by changing the location services settings on your mobile device. However, please note that certain features may not function properly or at all as a result if you opt out.
15. California Addendum – California Consumer Privacy Rights. If you are a California consumer, the following provisions apply to our processing of information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“California Personal Information”). For California consumers, the provisions of this California Addendum prevail over any conflicting provisions in other sections of this Privacy Policy. We do not sell, and in the past 12 months we have not sold, California Personal Information. Additionally, we do not sell or share, and in the past 12 months we have not sold or shared, California Personal Information of individuals we know to be under 16 years of age. We use for internal business purposes customer records information, commercial information, Internet or other network activity information, and geolocation data.
We have collected the following categories of California Personal Information within the last 12 months from the sources listed below:
- Identifiers such as name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.
- Customer records information (such as name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit/debit card number, other financial information, medical or health insurance information).
- Internet or other similar network activity, including, but not limited to, browsing history, search history, browser settings like language preference, and information regarding a consumer’s interaction with a website, application, or advertisement. This category of information is collected from you and your devices.
We retain each category of California Personal Information as described in this Privacy Policy. For each of the above categories, we use the California Personal Information for a variety of business purposes such as:
- Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
- Helping to ensure security and integrity to the extent the use of a consumer’s personal information is reasonably necessary and proportionate for these purposes;
- Debugging to identify and repair errors in our systems;
- Short-term, transient use including contextual non-personalized advertising shown as part of a consumer’s current interaction with us;
- Providing services on our behalf or on behalf of another, including maintaining or servicing accounts, providing customer service, fulfilling transactions, verifying identity information, processing payments, and other services;
- Conducting internal research to develop and demonstrate technology;
- Conducting activity to verify, enhance, and maintain the quality or safety of services or devices which we may own, control, or provide;
- Other business purposes described in the “How We May Use The Information We Collect” Section.
We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide you additional notice, or for purposes compatible with the context in which the California Personal Information was collected.
Within the last 12 months, we have disclosed California Personal Information for our business purposes. To learn more about the categories of third parties with whom we share such information, please see the “Information We Share” Section.
Your California Privacy Rights
If you are a California consumer, you have certain rights related to your California Personal Information, including:
- The Right to know what California Personal Information we have collected about you, including the categories of personal information, the categories of California Personal Information, the categories of sources from which the California Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing California Personal Information, the categories of third parties to whom we disclose California Personal Information, and the specific pieces of California Personal Information we have collected about you.
- The right to correct inaccurate California Personal Information that we have collected about you.
- The right to delete California Personal Information that we have collected from you, subject to certain exceptions.
- The right to opt out of the sale or the sharing of California Personal Information.
- The right to limit the use or disclosure of your sensitive personal information.
- We do not use or disclose sensitive personal information for purposes that, under applicable law, require us to support the right to limit the use or disclosure of sensitive personal information.
- The right not to receive discriminatory treatment by the business for the exercise of privacy rights conferred by applicable law, including the right not to be retaliated against for the exercise of your rights.
You may request to exercise these rights by emailing us at info@myhotlunchbox.com.
As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, last name, email address, the amount of your last transaction and the date of your last transaction to verify your identity in response to exercising requests of the above type. We may limit our response to your exercise of the above rights as permitted under applicable law. When you submit a request to exercise your rights above, we will use the information you provide to process your request and to maintain a record of your request and our response, as permitted under applicable law.
Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. We will require the agent to provide proof of that written permission. To the extent permitted by law, we may require you to verify your own identity in response to a request, even if you choose to use an agent.
California Do Not Track
California Business & Professions Code Section 22575(b) (as amended effective January 1, 2014) provides that California residents are entitled to know how we respond to “Do Not Track” browser settings. We do not currently take actions to respond to Do Not Track signals because a uniform technological standard has not yet been developed. However, we respond to the GPC signals as the opt out preference signal.
This California-specific addendum was last reviewed and updated as of January 1, 2024.
16. Your State Privacy Rights. Colorado, Connecticut, Virginia, and Utah each provide their state residents with rights to:
- Confirm whether we process their personal information.
- Access and delete certain personal information.
- Data portability.
- Opt-out of personal data processing for targeted advertising and sales.
Colorado, Connecticut, and Virginia also provide their state residents with rights to:
- Correct inaccuracies in their personal information, taking into account the nature of the personal data and the purposes of the processing of the consumer’s personal data.
- Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise any of these rights or to appeal a decision regarding a consumer rights request, please email info@myhotlunchbox.com.
Nevada provides its residents with a limited right to opt-out of certain personal information sales. Residents who wish to exercise this sale opt-out rights may submit a request to this designated address: info@myhotlunchbox.com. However, please know we do not currently sell data triggering that statute’s opt-out requirements.
17. Disputes. If you choose to visit the My Hot Lunchbox Sites, your visit and any dispute regarding privacy is subject to this Privacy Policy and our Terms of Use Agreement, including limitations on damages, resolution of disputes, and application of the law of the state of Delaware.
18. Updates to this Privacy Policy. We may update this Privacy Policy to provide clarification or notice of changes to our practices. If we make changes, we will revise the date at the top of this Privacy Policy. We will provide you with additional notice of material changes by posting notice of the changes for thirty (30) days before we implement those changes.
19. How to Contact Us. If you have any questions or comments about this Privacy Policy, or if you would like us to update information we have about you or your preferences, please contact us by email at info@myhotlunchbox.com or by phone at 1-888-894-8295.