Last Updated: 5/8/2023

California Privacy Notice

This California Privacy Notice describes how Braveheart Foods (“we” or “us” or “our”) uses, discloses, and processes California residents’ (“you” and “your”) personal information within the scope of the California Privacy Rights Act of 2020 (CPRA). This California Privacy Notice supplements the information contained in our Privacy Policy and applies only to residents of California. This California Privacy Notice should be read in conjunction with our Privacy Policy, which is incorporated by reference into this California Privacy Notice. Your continued use of our website means that you accept the foregoing terms. To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the "Last Updated" date shown above.

Personal Information We Collect About You and How We Use It

The term “personal information” as used in this California Privacy Notice means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include any publicly available, deidentified, aggregated or anonymized information. We also collect “sensitive personal information” as that term is defined by the CPRA. “Sensitive Personal Information” means Personal Information that reveals information such as: (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

The chart below describes the Personal Information we have collected in the past 12 months, the sources from which it was collected and the business purpose. Please note the specific pieces of personal information we may collect about you can vary depending on the nature of your interactions with us.

Category of Personal Information	Examples	Categories of Sources from which Personal Information Collected	Purposes for Collection / Use
PERSONAL INFORMATION
Identifiers	Your name, alias, title, user ID, email address, email communication preferences, postal address, phone number, signature, driver's license or state ID card number, IP address	Directly from you Cookies, beacons, pixels and related technology From third-party brokers	Fulfill orders and deliver your purchases Send you information and updates Send you marketing communications Show your relevant ads while you are browsing the internet or using social media Contact you in order to obtain information about your product preferences and how we can improve our products, services, business, website, and apps. Detect and prevent fraud again you and/or us To respond to your requests for information, products, services, including managing your online accounts with us To identify and contact potential job candidates for recruitment purposes
Payment Information	Including credit and debit card information	Directly from you	Fulfill orders and provide refunds Detect and prevent fraud against you and/or us
Commercial information	Purchase history, products or services purchased, obtained or considered, and other purchasing or consuming histories or tendencies	Directly from you Cookies, beacons, pixels, and related technology Our Service Providers	Provide you with appropriate products, recommendations, and updates Fulfill orders and deliver your purchases Send you information and updates Send you marketing communications Show you relevant ads while you are browsing the internet or using social media Contact you to obtain information about your product preferences and how we can improve our products, services, business, website, and apps Detect and prevent fraud against you and/or us To improve our website and apps, set default options, and provide you wih a better shopping and website experience
Employment Information	Job title, employment history, professional credentials, etc.	From third-part brokers	To identify potential job candidates for recruitment purposes
Education information	Degrees and certification information	From third-party brokers	To identify potential job candidates for recruitment purposes
Geolocation data	Your IP address	Directly from you Cookies, beacons, pixels, and related technology	Make it easier for you to log into our website and apps Provide you with appropraite products, recommendations, and updates Show you relevant ads while you are browing the internet or using social media Improve our website and apps, set default options, and provide you with a better shopping and website experience Protect the security of our website and apps Detect and prevent fraud against you and/or us
SENSITIVE PERSONAL INFORMATION
Sensitive Personal Identifiers	Your driver's license or state ID card number	Directly from you	Fulfill orders and deliver your purchases Detect and prevent fraud against you and/or us

How Long We Keep Your Personal Information

Braveheart will only retain your personal information for as long as is needed for the purpose(s) for which it was collected and other permitted purposes, including retention of personal information pursuant to any applicable contract, law or regulation. Our retention periods vary based on business, legal and regulatory needs.

How We Share and Sell Personal Information

Braveheart does not “sell” your data as that term is commonly understood. However, we may disclose Personal Information to our third-party partners, as described below. This may be considered a sale of Personal Information or sharing for cross-context behavioral advertising of Personal Information under California law.

The chart below describes the Personal Information we have sold or shared in the past 12 months, the categories of third parties to which we have sold or shared the information, and the applicable business purpose.

Category of Personal Information	Categories of Third Parties with/to which Personal Information Has Been Sold or Shared	Business Purpose
Identifiers	Data analytics providers Third-party advertising partners Third parties for marketing purposes	Optimizing our website, services, and advertising Show you relevant ads while you are browsing the internet or using socil media
Commercial Information	Data analytics providers Third-party advertising partners Third parties for marketing purposes	Optimizing our website, services, and advertising Show you relevant ads while you are browsing the internet or using social media
Internet or other electronic network activity information	Data analytics providers Third-party marketing partners Third parties for marketing purposes	Optimizing our website, services, and advertising Show you relevant ads while you are browsing the internet or using social media
Geolocation data	Data analytics providers Third-party marketing partners Third parties for marketing purposes	Optimizing our website, services, and advertising Show you relevant ads while you are browsing the internet or using social media

How We Disclose Personal Information to Our Service Providers and Contractors

In addition to sharing the above personal information, we disclose Personal Information to our service providers or conractors pursuant to a written contract. The information we have disclosed to our service providers or contractors in the past 12 months and the applicable business purpose is set forth in the chart below.

Applicable Business Purposes
Category of Personal Information	Auditing & Ad Impressions	Security & Integrity	Functionality & Debugging	Short-Term / Transient Use, Including Non- Personalized Advertising	Services Performed on Our Behalf	Marketing Services	Research & Development	Quality Control & Improvement of Our Products and Services
Identifiers	✔	✔	✔	✔	✔	✔	✔	✔
Payment Information					✔
Commercial information				✔	✔	✔	✔	✔
Internet or other electronic network activity information	✔	✔	✔	✔	✔	✔	✔	✔
Geolocation data		✔	✔		✔	✔	✔	✔

Submitting Requests Relating to Your Personal Information

California residents may submit requests relating to your personal information as described below by submitting a request through by email to privacyrequests@pfgc.com or by phone at 1-800-473-4434. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with any of the requests described below. To verify your identity, we may require you to provide certain information we are likely to already have on-file about you based on the type of relationship you have with us. If you exercise your right to request specific pieces of your personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Right to Opt-Out of the Sale and Sharing of Your Personal Information. California residents may opt-out of the sale of their personal information or the sharing of their personal information for cross-context behavioral advertising. To opt-out, click here or download and use a browser supporting the Global Privacy Control (GPC) browser signal. If you choose to use the GPC signal, you will need to turn it on for each browser you use.

Right to Request More Information. This California Privacy Policy discloses our practices with respect to the collection of your personal information. In addition to these disclosures, you may also submit a request to know: (1) the specific pieces of personal information we have collected about you; (2) the categories of personal information we collected about you; (3) the categories of personal information we sold or shared about you and the categories of third parties to whom each category of personal information was sold or shared; (4) the categories of personal information we disclosed about you for a business purpose and the categories of persons to whom it was disclosed; and (5) a list of all third parties to whom we have disclosed personal information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.

Please note that due to the different requirements of the applicable laws, our response times may vary depending on the specific type(s) of information sought. We respond to all verifiable requests for information as soon as we reasonably can and no later than legally required.

Right to Correct Inaccurate Information. If you believe that any of the personal information we maintain about you is inaccurate, under the CPRA you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Request Deletion of Your Personal Information. You have the right to request that we delete your personal information. Following receipt of a verifiable request, we will let you know what, if any, personal information we can delete from our records. We will also notify our service providers and contractors, and any third parties to whom we have transferred your information about your request to delete. If we cannot delete all of your personal information, we will let you know why.

Right to Limit the Use of Your Sensitive Personal Information. Under the CPRA, California residents may have the right to limit the use of their Sensitive Personal Information. Given how we use your Sensitive Personal Information, as described above, this right does not apply to you.