Privacy Policy

Breadstand Privacy Policy
Effective as of May 1st, 2018

  1. Introduction
  2. Key highlights of what you’re consenting to
  3. The information we collect
  4. How we use the information we collect
  5. Sharing information
  6. Security
  7. Children
  8. Accessing and updating user information
  9. Changes to the Privacy Policy
  10. Information about cookies, other technologies, and third-party data collection


Hello, and welcome to our Privacy Policy. This Privacy Policy helps you to make informed decisions about your relationship with us, so please read it carefully.

1. Introduction

Thank you for choosing to work with us. This is our Privacy Policy. Before getting into the details, we’d like to highlight some of the key principles behind it. These principles are important to us because we know they’re important to you.

The Privacy Policy is here to do three things:

Explain the way we use information that you share with us in order to build a great product and give you a great experience with it;

Ensure that you understand what information we collect with your permission, and what we do — and do not do — with it;
Hold us accountable for protecting your rights and your privacy under this policy.
All the information we collect is related to providing Breadstand’s service and its features.

Broadly speaking, there are two categories of information we collect: 1) information that we must have in order for you to use our service; and 2) information that we can use to provide additional features and improved experiences if you choose to share that information.

The first category includes:

Registration information, including your name, birth date, address, and other information you provide when you sign up with Breadstand.

Broad, non-specific location, which we derive from your IP address. This helps us deliver our services more effectively and do things like reduce shipping expenses, expedite shipping, ensure a higher quality of product delivery.

The messages and photos you write so we can print effectively. Technical and sensor information necessary to operate Chocolate Mail. This includes the type of browser and device you use, data from the touchscreen, and information from your device’s accelerometer and gyroscope sensors. This enables you to control Breadstand and allows us to do simple things like rotate text.
The second category includes information that enables us to offer you additional features.

We never receive any of the following information unless you expressly choose to share it with us. It’s as simple as that. Here are some examples:

Your specific location. We will never gather or use your specific device location without first getting your explicit permission.

Your photos: We will only access images that you specifically choose, and we will never scan or import your photo library or camera roll. This allows you to choose individual pictures to change your profile picture or create cover art for a playlist. You can stop sharing photos and revoke access at any time.

Your contacts: We will never scan or import your contacts unless you ask us to. If you choose to do so, we will only use your contact information to help you find friends or contacts who use Breadstand.

Your microphone: We will never access or use your microphone unless you give us explicit permission. This could enable you to control Chocolate Mail with your voice, and you will always have the ability to disable access to the microphone.

The distinction between these two categories is important. Information in the first category is information you must provide in order to use Chocolate Mail and Breadstand. When you agree to our Privacy Policy, you give us the right to collect this information and use it for the purposes described. Information in the second category is information we will only collect if you explicitly give us permission to do so in the future. For this second category of information, we will ask for your permission before first accessing it, we will describe how we will use it if you give us permission, we will only use the information for the purpose we described, and you will always have the ability to change your mind and revoke that permission. Acceptance of our Privacy Policy does not mean you have granted us permission to access or use information in the second category; we’re just explaining to you that one day we might ask you for that permission.

We will be clear with you about how and when we might share information.

We hope this helps you to understand our privacy commitments to you. Now, the details await you below, but please remember that this Introduction is part of the Privacy Policy itself — it’s our promise to you. If you ever have any questions or concerns, then please let us know at privacy@breadstand.com.

Throughout this Privacy Policy we refer to Service, Chocolate Mail, and Breadstand. These terms are defined in our Terms and Conditions of Use (the “Terms and Conditions of Use”).

2. Key highlights of what you’re consenting to

By using or interacting with Service, you are consenting to:
  • the use of cookies and other technologies;
  • the transfer of your information outside of the country where you live;
  • the collection, use, sharing, and other processing of your information, including for advertising-related purposes (as described in the rest of this Privacy Policy, so please keep on reading!); and
  • the public availability of your information and the controls over such information as described in Sharing information.
  • In each case, you consent to the processing of data by the entities described in this Privacy Policy, including the Breadstand entity, as data controller, indicated at the bottom of this document (collectively, “Breadstand”, “we”, “us”, “our”). In the Your Preferences section, we describe the controls and relevant settings associated with your Breadstand account. If you don't agree with the terms of this Privacy Policy, then please don't use the Service.

3 The information we collect

We may collect and store the following information—

3.1 Registration data

When you sign up for the Service, we may ask you for information such as your username, password, email address, date of birth, gender, address, postal code, and country. If you connect to the Service using credentials from a Third Party Application (as defined in the Terms and Conditions of Use) (e.g., Apple), you authorise us to collect your authentication information, such as your username and encrypted access credentials. We may also collect other information available on or through your Third Party Application account, including, for example, your name, profile picture, country, hometown, email address, date of birth, gender, friends’ names and profile pictures, and networks.

You may also choose to voluntarily add other information to your profile, such as your mobile phone number and mobile service provider.

3.2 Usage, log data & cookies

When you use or interact with the Service, we may use a variety of technologies that collect information about how the Service is accessed and used. This information may include:

  • information about User Content (as defined in the Terms and Conditions of Use) you post to the Service including messages you send and/or receive via the Service;
  • technical data, which may include URL information, cookie data, your IP address, the types of devices you are using to access or connect to the Service, unique device ID, device attributes, network connection type (e.g., WiFi, 3G, LTE) and provider, network and device performance, browser type, language, information enabling digital rights management, operating system, and Breadstand application version.
  • motion-generated or orientation-generated mobile sensor data (e.g., accelerometer or gyroscope).

3.3 Your mobile device

We may provide features that rely on the use of additional information on your mobile device or require access to certain services on your mobile device that will enhance your experience but are not required to use the Service. (In other words, information that falls in the second category described in the Introduction to this Policy.) For example, we might allow you to upload photos to your profile, connect with friends, or let you use voice commands to control the Service. Granting us access does not mean you are granting us unlimited access to that information or that we will access specific information without your permission. To the contrary, for each type of information listed in this section, before we access this information or these features of your mobile device, we will ask for your permission. If you provide such permission, we will collect the information for the specific purposes explained at the time we ask for your permission. You do not have to give us such permission in order to use Breadstand, and acceptance of this Privacy Policy does not mean you have granted us permission to access this information.

In particular:

  • Photos and Camera: We will not access your photos or camera without first getting your explicit permission and we will never scan or import your photo library or camera roll. If you give us permission to access photos or your camera, we will only use images that you specifically choose to share with us. (You may use our application to select the photo or photos you choose to share, but we will never import the photos you review except those you explicitly share.).
  • Location: We will not gather or use the specific location of your mobile device (by using, for example, GPS or Bluetooth) without first getting your explicit permission. And if you choose to share location information but later change your mind, you will always have the ability to stop sharing. Please note that this does not include IP address. We will continue to use your IP address as described in Section 3.2 above, to determine, for example, what country you are in and comply with our licensing agreements.
  • Voice: We will not access your microphone without first getting your explicit permission. You will always have the ability to disable microphone access.
  • Contacts: We will not scan or import your contacts stored on your phone without first getting your explicit permission. We will only use the contact information to help you find friends or contacts who use Breadstand if you choose to do so, and we will not use contact information for any other purpose without first getting your separate explicit permission. Local law may require that you seek the consent of your contacts to provide their personal information to Breadstand, which may use that information for the purposes specified in this Privacy Policy.

3.5 Payment data

If you sign up, your credit or debit card information (such as card type and expiration date) and other financial data that we need to process your payment may be collected and stored by us and/or the payment processors with which we work. We may also collect some limited information, such as your postal code, mobile number, and details of your transaction history, all of which are necessary to provide the Service. In addition, the payment processors generally provide us with some limited information related to you, such as a unique token that enables you to make additional purchases using the information they’ve stored, and your card’s type, expiration date, and certain digits of your card number.

If you choose to pay by invoice, Breadstand may need to collect and store additional information, like your name, date of birth, and phone number, and provide it to payment processors we work with to issue invoices, to enable credit checks and to send you invoices.

BY ACCEPTING THE PRIVACY POLICY, YOU EXPRESSLY AUTHORISE BREADSTAND TO USE AND SHARE WITH OTHER COMPANIES IN THE BREADSTAND GROUP, AS WELL AS CERTAIN TRUSTED BUSINESS PARTNERS AND SERVICE PROVIDERS, WHICH MAY BE LOCATED OUTSIDE OF THE COUNTRY OF YOUR RESIDENCE (INCLUDING COUNTRIES WHICH DO NOT PROVIDE THE SAME LEVEL OF PROTECTION FOR THE PROCESSING OF PERSONAL DATA AS THE COUNTRY OF YOUR RESIDENCE), THE INFORMATION PROVIDED BY YOU TO BREADSTAND, EVEN IF SUCH INFORMATION IS COVERED BY LOCAL BANKING SECRECY LAWS. YOU ACKNOWLEDGE AND AGREE TO THE IMPORTANCE OF SHARING SUCH INFORMATION FOR THE PROVISION OF THE BREADSTAND SERVICE AND ALSO AGREE THAT, BY ACCEPTING THIS PRIVACY POLICY, WHERE APPLICABLE AND TO THE EXTENT PERMITTED BY APPLICABLE LAW, YOU EXPRESSLY WAIVE YOUR RIGHTS UNDER SUCH BANK SECRECY LAWS WITH REGARD TO Breadstand, ANY COMPANY IN THE Breadstand GROUP, AND ANY TRUSTED BUSINESS PARTNERS AND SERVICE PROVIDERS, WHICH MAY BE LOCATED OUTSIDE YOUR COUNTRY OF RESIDENCE. THIS CONSENT IS GIVEN FOR THE DURATION OF YOUR RELATIONSHIP WITH BREADSTAND.

3.6 Sweepstakes, contests & surveys

From time to time, we may offer you the opportunity to participate in promotions such as sweepstakes, contests, offers, and/or surveys (“Special Promotions”) through the Service. A Special Promotion may be governed by a privacy policy and/or terms and conditions that are additional to, or separate from, this Privacy Policy and the Terms and Conditions of Use. If the provisions of the Special Promotion’s privacy policy or terms and conditions conflict with this Privacy Policy or the Terms and Conditions of Use, those additional or separate provisions shall prevail. If you participate in a Special Promotion, we may ask you for certain information in addition to what is stated in this Privacy Policy, including personal information. That additional information may be combined with other account information and may be used and shared as described in this Privacy Policy.

4. How we use the information we collect

Consistent with the permissions you give us to collect the information, we may use the information we collect, including your personal information:

  • to ensure technical functionality of the Service, develop new products and services, and analyse your use of the Service, including your interaction with applications, to communicate with you for Service-related or research purposes including via emails, notifications, text messages, or other messages, which you agree to receive;
  • to communicate with you, either directly or through one of our partners, for marketing and promotional purposes via emails, notifications, or other messages, consistent with any permissions you may have communicated to us (e.g., through your Breadstand account settings); in the section Your preferences below, we inform you of the controls you can use to opt out from receiving certain messages;
  • to process your payment or prevent or detect fraud;
  • to enforce this Privacy Policy, the Terms and Conditions of Use, and any other terms that you have agreed to, including to protect the rights, property, or safety of Breadstand, its users, or any other person, or the copyright-protected content of the Service;
  • to provide you with features, information, advertising, or other content which is influenced by your location and your location in relation to other Breadstand users; and as otherwise stated in this Privacy Policy.

 


5 Sharing information

This section describes how the information collected or generated through your use of Breadstand services may be shared by you or by us.

5.1 Sharing by Breadstand

5.1.1 Service providers and others

We may from time to time share your information with service providers to perform functions and process user data and help provide our Services, consistent with this Privacy Policy. For example, we work with service providers to host our internet services and payment processing. Where a third party processes user data on our behalf (e.g., a hosting service provider), it is subject to security and confidentiality obligations consistent with this Privacy Policy and applicable law. Where a third party processes user data on its own behalf, its processing is subject to its own Privacy Policy and applicable law.

5.1.2 Other sharing

In addition to the above, we may also share your information with third parties for these limited purposes:

  • to allow a merger, acquisition, or sale of all or a portion of our assets;
  • to respond to legal process (e.g., a court order or subpoena), if we believe in good faith that it is necessary to do so; to comply with requirements of mandatory applicable law; to protect the safety of any person; to protect the rights and property of Breadstand, including to enforce the Terms and Conditions of Use and any other terms that you have agreed to; and to address fraud, security, or technical issues;
  • to academic researchers for purposes including statistical analysis and academic study, but only in a de-identified format;
  • to publish de-identified or aggregate information about the use of the Breadstand Service; and
  • to allow other companies in the Breadstand group to use your information as specified in this Privacy Policy.

6. Security

 

We are committed to protecting our users’ information. Your password protects your user account, so you should use a unique and strong password, limit access to your computer and browser, and log out after having used the Breadstand Service. While we take data protection precautions, no security measures are completely secure, and we do not guarantee the security of user information.

7. Children

The Breadstand Service is not directed to children under the age of 13. (In some countries, stricter age limits may apply. See our Terms and Conditions of Use.) We do not knowingly collect personal information from children under 13 or under the applicable age limit (the “Age Limit”). If you are under the Age Limit, do not use the Service and do not provide any personal information to us. If you are a parent of a child under the Age Limit and become aware that your child has provided personal information to Breadstand, please contact us at privacy@Breadstand.com and you may request exercise of your applicable access, rectification, cancellation, and/or objection rights. If you are a California resident under the age of 18 and you wish to remove publicly available content, please contact us at eraser@Breadstand.com.

8. Accessing and updating user information

You can view and amend much of the information we keep about you through your account and profile pages. If you have questions about your privacy on the Service, this privacy policy, or information we have about you, please contact us at privacy@breadstand.com. You can also contact our privacy representative by sending a letter to Breadstand, Attn: Privacy Officer, Legal Department, 5 Brooks Rd, Lincoln, MA 01773, United States. We will respond to your request within a reasonable period of time upon verification of your identity in accordance with local laws. We recommend you include documents that prove your identity and a clear and precise description of the information which you request access to.

9. Changes to the Privacy Policy

Occasionally we may, in our discretion, make changes to the Agreements. When we make material changes to the Agreements, we’ll provide you with prominent notice as appropriate under the circumstances, e.g., by displaying a prominent notice within the Service or by sending you an email. In some cases, we will notify you in advance, and your continued use of the Service after the changes have been made will constitute your acceptance of the changes. Please therefore make sure you read any such notice carefully. If you do not wish to continue using the Service under the new version of the Agreements, you may terminate the Agreements by contacting us through the Customer Service contact form.

10. Information about cookies, other technologies and third-party data collection

This section describes use of cookies and other technologies. For further information about how information may be shared by Breadstand, please see the section Sharing by Breadstand.

10.1 What are cookies and other technologies?

A cookie is a small text file that is placed on your computer, mobile phone, or other device when you visit a website. The cookie will help website providers to recognise your device the next time you visit their website. There are other similar technologies such as pixel tags (transparent graphic images placed on a web page or in an email, which indicate that a page or email has been viewed), web bugs (similar to pixel tags), and web storage, which are used in desktop software or mobile devices.

There are also technologies such as mobile device identifiers and SDK integrations to help companies recognise your device when you return to an app or otherwise use the a service.

10.2 How we use cookies and other technologies

We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your device for a set period of time or until you delete them). We use the following types of cookies for the purposes explained in this chart:

Cookie Type Purpose
Essential Operational These cookies are necessary to allow us to operate the Breadstand Service as you have requested. For example, they let us recognise what type of subscriber you are and then provide you with services accordingly.
Performance / Analytics We use these cookies to analyse how the Breadstand Service is accessed, is used, or is performing. We use this information to maintain, operate, and continually improve the Breadstand Service. We may also obtain information from our email newsletters, including whether you opened or forwarded a newsletter or clicked on any of its content. This information tells us about our newsletters' effectiveness and helps us ensure that we're delivering information that you find interesting.
Functional These cookies let us operate certain functions of the Breadstand Service in line with the choices you make. These cookies mean that when you continue to use or come back to the Breadstand Service, we can provide you with our services as you have asked for them to be provided, such as knowing your username, remembering how you have customised our services, and reminding you of content you have enjoyed.
Targeting / advertising We use these cookies to serve you with advertisements that may be relevant to you and your interests. The information may also be used for frequency capping purposes (e.g., to ensure we do not display the same advertisement to you repeatedly) and to help us regulate the advertisements you receive and measure their effectiveness.
Third Party We may allow our business partners to use cookies on or outside the Breadstand Service for the same purposes identified above, including collecting information about your online activities over time and across different websites. We may also use service providers acting on our behalf to use cookies for the purposes identified above.
We also use mobile device identifiers and the other technologies identified in Section 11.1 for the purposes articulated in this Privacy Policy, for example to recognise your device when you return to the Breadstand app or otherwise use the Breadstand Services.

10.3 Manage your cookie and other preferences

Many web browsers allow you to manage your preferences. You can set your browser to refuse cookies or delete certain cookies. You may be able to manage other technologies in the same way that you manage cookies using your browser’s preferences.

Please note that if you choose to block cookies, doing so may impair the Breadstand Service or prevent certain elements of it from functioning.

There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

You hereby consent to the use of the cookies and other technologies described above.

10.4 More information

For more information about the use of cookies and how to block them, visit allaboutcookies.org, youronlinechoices.eu (Europe), or aboutads.info/choices (United States). If you have any questions or comments about our use of cookies, please contact us at privacy@breadstand.com.

Thank you for reading our Privacy Policy.

We hope you enjoy Breadstand and Chocolate Mail!

Data controller:

Breadstand  USA Inc.
5 Brooks Rd, Lincoln, MA 01773
USA