Privacy Policy

PRIVACY POLICY

MILK BAR ONLINE PRIVACY POLICY

Last Updated: 07/13/23

This Privacy Policy describes how MomoMilk, LLC d/b/a Milk Bar (“Milk Bar” or “we,” “us” or “our”) collects, uses, handles and protects your personal information.  This Privacy Policy describes how we collect, use, disclose and protect personal information we collect or receive in connection with: (1) the operation of our websites that link to this Privacy Policy, including, but not limited to milkbarstore.com, along with the features, functionalities, applications, browser extensions and other services available through our websites (collectively, our “Sites”); (2) the operation of our retail stores (collectively, our “Stores”); (3) our business operations related to the operation of our Sites and Stores (our “Operations”); and (4) personal information we obtain from any third party site connected to our Sites, including, without limitation, Facebook, Twitter and Instagram (collectively, “Third Party Sites”). Our Sites, Stores, Operations and Third Party Sites are collectively referred to in this Privacy Policy as our “Platform.”

You can access and interact with our Platform in many ways, including from a computer or mobile device. This Privacy Policy applies regardless of how you access or interact with our Platform. Depending on how you interact with our Platform, there may be some cases where we need to provide you with additional information about how we use your personal information and/or what options you have regarding our use of your personal information. We may provide this additional information via notices on the Platform or via direct communications with you. If we do this, unless we tell you otherwise, the additional information will apply in addition to what is described in this Privacy Policy.

If you are a resident of California, please see the section titled Additional Information for California Residents below for additional provisions that may apply to you. 

Changes to this Privacy Policy

We may need to update this Privacy Policy to make sure it complies with applicable laws and conforms to changes in our Platform, and we reserve the right to do so at any time. If we do revise this Privacy Policy, we will make it known on our Platform or by email and we will update the “Last Updated” date at the top of this page so that you can tell if it has changed since your last visit. Unless otherwise noted, those changes will be effective as soon as they are posted. Please check back regularly to see if our Privacy Policy has been updated.

Your continued use of our Platform after any changes to this Privacy Policy become effective constitute your continued acknowledgement that you understand we may continue to collect and use your personal information as described in this Privacy Policy.

Categories of Personal Information We Collect

When we refer to “personal information” in this Policy, we mean any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Please see the table below for more details about the categories of personal information we collect.

The following table lists the categories of personal information we collect, a description of the types of data collected in each category, and a brief overview of why we collect this personal information. Additional details about how we use personal information, along with information about how we collect personal information from and who we disclose it to are provided below.

Personal Information Category	Data Elements Collected	Purposes for Collecting
Identifiers	Name Alias Email address Telephone number Postal address Physical address Online identifier (such as a cookie ID) Internet Protocol (IP) address Account name Device type Other similar information	We collect this category of personal information to communicate with you, to operate and improve our Platform, and to advertise, market and promote our Platform. We may also use this category of personal information to protect our rights and comply with our legal obligations.
Protected Classification Information	Age (day, month and year of your birth) Ancestry National origin Citizenship Marital status Physical or mental disability Veteran or military status	We may receive this category of personal information in connection with orders that are placed through our Platform. When we receive this category of personal information, we use it to fulfill the order it is associated with and may use it where necessary to communicate with you about an order or to protect our rights and comply with our legal obligations.
Commercial Information	Products or services purchased, obtained or considered Bank account number, debit card number, or credit card number used to purchase products or services Purchasing or consuming histories or tendencies Contents of mail, email or text messages where we are the intended recipient	We collect this category of personal information to communicate with you, to operate and improve our Platform, and to advertise, market and promote our Platform. We may also use this category of personal information to protect our rights and comply with our legal obligations.
Internet or Electronic Network Activity Information	Browsing history Search history Information regarding interactions with our Sites and online advertisements (including links clicked, pages or screen viewed, and access and session times) Information regarding devices that access or use our Sites and online advertisements (including operating system, browser type, language preferences, device identifier, and mobile phone number)	We collect this category of personal information to operate and improve our Platform and to advertise, market and promote our Platform. We may also use this category of personal information to protect our rights and comply with our legal obligations.
Non-Sensitive Geolocation Information	Imprecise location information (such as the city, state and ZIP associated with an IP address)	We collect this category of personal information to operate and improve our Platform and to advertise, market and promote our Platform. We may also use this category of personal information to protect our rights and comply with our legal obligations.
Sensory Information	Audio recordings Video recordings	We may collect this category of personal information in connection with our communications with you, such as when you call us for customer assistance, or when you visit one of our retail locations. We may use this category of personal information to communicate with you, to operate and improve our Platform and to protect our rights and comply with our legal obligations.
Professional or Employment-Related Information	Job title Other similar information	We collect this category of personal information to communicate with you, to operate and improve our Platform, and to advertise, market and promote our Platform. We may also use this category of personal information to protect our rights and comply with our legal obligations.
Inferences Drawn from Other Personal Information	Profiles reflecting preferences, predispositions, behavior, attitudes, intelligence, abilities, aptitudes and other similar information drawn from other personal information we collect	We may create this category of personal information based on the other categories of personal information we collect (excluding any Sensitive Personal Information) and may use this category of personal information to advertise, market and promote our Platform.
Sensitive Personal Information	Account log-in credentials Financial account, debit card or credit card number with any required security or access code, password or credentials allowing access to an account	We collect account log-in credentials and financial account information to communicate with you and to operate our Platform. We may also use these categories of Sensitive Personal Information to protect our rights and comply with our legal obligations.   For the other types of Sensitive Personal Information listed, we may receive those in connection with orders that are placed through our Platform. When we receive these types of Sensitive Personal Information, we use them to fulfill the order they are associated with and may use them where necessary to communicate with you about an order or to protect our rights and comply with our legal obligations.

Sources of the Personal Information We Collect

A large portion of the personal information we collect about you in connection with our Platform is collected directly from you or in connection with your access to, use of or interaction with our Sites (including personal information we automatically collect). You have the option not to provide any personal information we ask you to provide in connection with your access to, use of or interaction with our Platform. However, there are some features on our Platform where we have to collect certain personal information, and, if you do not provide us with the required personal information, you will not be able to access, use or interact with that feature. This is especially true where it is impossible for the feature to operate without certain personal information (for example, it is impossible for us to complete any order you place through our Sites unless you tell us where to deliver the order, what items to include in your order and your payment information).

We also may collect information (which may include personal information) about you from third parties, including, without limitation, online and offline sources, social media platforms, advertising networks, or other public or commercial sources (collectively, "Third Party Sources"). As described below, we may also disclose personal information to these Third Party Sources. The following table provides additional information about the Third Party Sources we may interact with in connection with your personal information:

Category	Examples/Explanations
Third Party Platforms	This category includes third party owned or operated platforms or services, such as Amazon, Apple, Facebook, Google, Shopify and Twitter. If you register for or sign into our Platform using an account you have on a third party platform (instead of creating an account directly with us, that third party is included in this category.
Service Providers	This category includes third parties that provide services to us related to the functionality and operation of our Platform, such as hosting the online portions of our Platform, managing communications we send and receive, processing orders and payments made through our Platform, and providing additional services and benefits we offer in our Stores, such as access to free public WiFi that we may make available.
Targeted Advertising Partners	This category includes third parties that facilitate the delivery of our targeted advertisements, promotions and offers.
Other Milk Bar Affiliated Companies	This category includes other companies we own or are otherwise affiliated with. This includes any third party involved in a merger, acquisition, bankruptcy or sale of all or a portion of our assets.
Analytics Providers	This category includes third parties that operate tracking technologies, such as web beacons, cookies, clear gifs and pixel tags on our Platform to collect information used to analyze the use and performance of our Platform, including, among other things, measuring the effectiveness of our Platform, content, communications and advertising.
Professional Advisors	This category includes third parties that provide us professional advice about the operation of our Platform and other business operations, such as our attorneys, accountants, financial advisors and other business advisors.
Government Officials/Law Enforcement	This category includes law enforcement, government officials and other private parties we interact with in connection with complying with legal requirements, pursuing and defending against lawsuits, protecting our and third party’s property and rights, protecting the security and integrity of our Platform, and preventing or stopping illegal, unethical, fraudulent and abusive activities.
Milk Bar Customers	This category includes other customers or Customers of our Platform, such as those that refer you to our Platform or place through our Platform on your behalf.

Why We Collect Personal Information

The following table describes the purposes for which we may collect personal information about you in connection with our Platform, along with the categories of personal information we collect for those purposes, who we collect, or receive, that personal information from and how long we keep that personal information.

Purpose for collecting and using personal information	Examples/Explanations	Categories of personal information collected	Sources of personal information
Communicating with you	responding to your customer service requests or any other inquiry or correspondence you send to us providing you with updates, reminders or other informational content presenting you with the opportunity to participate in surveys and record your responses (if you participate in a survey, we may combine your responses with other information for segmentation and analysis purposes) responding to your request to exercise rights regarding your personal information notifying you of changes to our terms and conditions or this Privacy Policy and other similar communications any other communications with us you request or consent to	Personal Information Categories Identifiers Protected Classification Information Commercial Information Sensory Information Professional or Employment-Related Information   Sensitive Personal Information Categories Account log-in credentials	You   Third Party Sources Third Party Platforms Service Providers Analytics Providers Other Milk Bar Affiliated Companies Milk Bar Customers
Operating our Platform	maintaining and servicing accounts processing or fulfilling orders and transactions verifying customer information processing payments ensuring the security and integrity of our Platform identifying and repairing errors that prevent any portion of our Platform from operating as intended providing access to the online features of our Platform enabling you to post reviews or other feedback on the public areas of the online portions of our Platform providing access to free public WiFi in our Stores conducting other internal business operations permitted under applicable law	Personal Information Categories Identifiers Protected Classification information Commercial Information Internet or Other Electronic Network Activity Non-Sensitive Geolocation Information Sensory Information Professional or Employment-Related Information   Sensitive Personal Information Categories Account log-in credentials	You   Third Party Sources Third Party Platforms Service Providers Analytics Providers Other Milk Bar Affiliated Companies Milk Bar Customers
Improving our Platform	evaluating frequently asked questions contacting you about Platform usage assisting you in better accessing, using and interacting with our Platform troubleshooting errors on our Platform generating statistics about access to, use of, or interaction with our Platform, including identifying geographic regions where our customers are located analyzing and developing the products and services we provide monitoring and reviewing trends and usage related to our Platform benchmarking our Platform against similar offerings from other companies developing a better understanding how our customers access, use and interact with our Platform, including monitoring, evaluating and analyzing how customers access, use and interact with our Platform and determining which features and portions of our Platform are the most popular	Personal Information Categories Identifiers Commercial Information Internet or Electronic Network Activity Non-Sensitive Geolocation Information	You   Third Party Sources Third Party Platforms Service Providers Analytics Providers Other Milk Bar Affiliated Companies
Advertising, marketing and promoting our Platform	sending you promotions serving you targeted advertising notifying you of new products, services, or other features available through our Platform enabling you to participate in contests, sweepstakes or promotions presenting you with other advertising or marketing related to our Platform, including promotions, coupons and other discount offers	Personal Information Categories Identifiers Protected Classification Information Commercial Information Internet or Electronic Network Activity Non-Sensitive Geolocation Information Professional or Employment-Related Information	You   Third Party Sources Third Party Platforms Service Providers Targeted Advertising Partners Analytics Providers Other Milk Bar Affiliated Companies
Protecting rights and complying with legal obligations	preventing, detecting, investigating and remediating online security and other similar concerns, including fraud preventing, detecting, investigating and remediating physical security and other similar concerns in our Stores, including through the use of video cameras protecting the rights, property and safety of Milk Bar, our customers and any other person complying with applicable laws, regulations and industry requirements responding to subpoenas and other legal or government requests evaluating or conducting a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which the assets transferred include personal information we have about our customers	Personal Information Categories Identifiers Protected Classification information Commercial Information Internet or Other Electronic Network Activity Non-Sensitive Geolocation Information Sensory Information Professional or Employment-Related Information   Sensitive Personal Information Categories Account log-in credentials	You   Third Party Sources Third Party Platforms Service Providers Analytics Providers Other Milk Bar Affiliated Companies Professional Advisors Government Officials/Law Enforcement

How Long we Retain Personal Information

We retain personal information only as long as we have a legitimate business purpose to keep it. These purposes may include retaining personal information to:

• Complete the transaction for which the personal information was collected;
• Continue our ongoing business relationship with you
• Ensure the security and integrity of our Platform; and
• Satisfy any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period for individual categories of personal information we collect, we consider the nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of the personal information, the purposes for which we process that personal information and whether we can fulfill those purposes through other means, and applicable legal, regulatory, tax, accounting, reporting, or other requirements.

Personal Information We Disclose to Third Party Sources

In order to operate our Platform and carry out other activities permitted by applicable laws, we may disclose certain personal information we have collected or received to certain Third Party Sources. The following table identifies the categories of personal information we may disclose to each category of Third Party Source and the purpose for those disclosures. Please note, these disclosures are in addition to any disclosures to third parties you authorize or instruct us to make.

Third Party Source Category	Purposes for Disclosure	Categories of Personal Information Disclosed
Third Party Platforms	provide targeted advertising or other marketing services perform data analysis and statistical analysis enable your ability to register and sign into our Platform through the use of your existing account on a Third Party Platform	Personal Information Categories Identifiers Commercial Information Internet or Electronic Network Activity Information Non-Sensitive Geolocation Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information
Service Providers	process and fulfill your orders provide payment processing services operate and manage our Websites and Apps and to improve the content and functionality of our Websites an Apps help us collect and analyze personal information for lawful business purposes, including providing data processing services provide non-targeted advertising and other marketing, including helping to run contests, sweepstakes and promotions and provide public relations services perform data analysis and statistical analysis	Personal Information Categories Identifiers Protected Classification Information Commercial Information Internet or Electronic Network Activity Information Non-Sensitive Geolocation Information Sensory Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information   Sensitive Personal Information Categories Account log-in credentials
Targeted Advertising Partners	provide targeted advertising or other marketing services provide data analysis and statistical analysis	Personal Information Categories Identifiers Commercial Information Internet or Electronic Network Activity Information Non-Sensitive Geolocation Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information
Other Milk Bar Affiliated Companies	operate our Platform process, fulfill or administer orders you place through the Platform market or promote our Platform in connection with a contemplated or completed strategic business transaction such as a merger, acquisition, sale of all or substantially all of our stocks to a subsequent owner or operator, a dissolution, bankruptcy, liquidation or other similar business transaction where personal information may be disclosed or transferred	Personal Information Categories Identifiers Protected Classification information Commercial Information Internet or Other Electronic Network Activity Non-Sensitive Geolocation Information Sensory Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information   Sensitive Personal Information Categories Account log-in credentials Racial or ethnic origin Religious or philosophical beliefs Union membership Health information Information concerning sex life or sexual orientation
Analytics Providers	provide targeted advertising or other marketing services provide data analysis and statistical analysis	Personal Information Categories Identifiers Commercial Information Internet or Electronic Network Activity Information Non-Sensitive Geolocation Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information
Professional Advisors	receive advice from our professional advisors, such as our attorneys, accountants, financial advisors and business advisors, in their capacity as advisors to us	Personal Information Categories Identifiers Protected Classification information Commercial Information Internet or Other Electronic Network Activity Non-Sensitive Geolocation Information Sensory Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information   Sensitive Personal Information Categories Account log-in credentials
Government Officials/Law Enforcement	comply with any valid legal process, governmental request or applicable law, rule or regulation comply with legal requirements, as ordered by a court or if we believe in good faith that the law requires it investigate, remedy or enforce potential violations of applicable agreements protect the rights, property and safety of Milk Bar, our customers and others detect and resolve any fraud or security concerns	Personal Information Categories Identifiers Protected Classification information Commercial Information Internet or Other Electronic Network Activity Non-Sensitive Geolocation Information Sensory Information Professional or Employment-Related Information Inferences Drawn from Other Personal Information   Sensitive Personal Information Categories Account log-in credentials
Milk Bar Customers	respond to a third party’s claim that content on our Platform violates rights or requirements publish comments, reviews or other feedback published to the public areas of our Platform	Personal Information Categories Identifiers

Additional Information About Information Collected by Third Parties in Connection with Our Platform

This section provides additional information about what information (including personal information) third parties may collect from or about you in connection with your access to, use of, or interactions with our Sites through analytics tools, including, without limitation, third party cookies, web beacons, clear gifs, pixel tags, or other similar technologies on our Sites, as well as certain operations within our Stores.

Information Collected by Analytics Providers

We may use, or permit the use of, analytics tools, including, without limitation, third party cookies, web beacons, clear gifs, pixel tags, or other similar technologies provided by our Analytics Providers, including:

• Google Analytics – We may use Google Analytics, a web analytics service provided by Google, Inc. ("Google"), to assist us in understanding how our Sites are used. Google Analytics will place cookies on your computer or mobile device that will generate information that we select about your use of our Sites, including your computer's or mobile device's IP address. That information will be transmitted directly to and stored by Google. The information will be used for the purposes of evaluating use of our Sites, compiling reports on activity on our Sites for our use and providing other services relating to activity on, and usage of, our Sites. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note that by doing so, you may not be able to use the full functionality of our Sites. Google's practices with respect to the personal information collected through Google Analytics is covered by Google's privacy policy, available at https://policies.google.com/privacy. Google allows you to opt out of Google Analytics. You may opt-out by visiting https://tools.google.com/dlpage/gaoptout.
• Google Tag Manager – We may use Google Tag Manager ("GTM"), a tag management system that allows JavaScript and HTML tags to be quickly deployed and updated on portions of our Sites for tracking and analytics. We use GTM on our Sites to include Google Analytics. If you have opted out of Google Analytics, GTM takes this opt out into account. For more information about Google's privacy practices applicable to GTM, please refer to https://policies.google.com/privacy/ and the terms of use at https://www.google.com/analytics/tag-manager/use-policy.
• Facebook Services – We may use services provided by Facebook, Inc. ("Facebook"), including, without limitation, Facebook Pixel, that enable us to measure the effectiveness of campaigns served on Facebook. The information collected through those services, which may include the use of cookies or other tracking technologies placed on our Sites by Facebook, will be transmitted directly to and stored by Facebook. For more information about Facebook's privacy practices, please refer to their privacy policy, available at https://www.facebook.com/about/privacy. To opt out, please visit https://www.facebook.com/ads/preferences.
• Microsoft Ads – We may use Microsoft Ads (formerly known as Bing Ads), an online marketing service provided by Microsoft Corporation ("Microsoft"), to display search advertisements and to track when you have visited our Sites via a Microsoft Ads advertisement. If you click on a Microsoft Ads advertisement, Microsoft Ads stores a cookie on your device that is used to track the number of individuals who click on a Microsoft Ads advertisement and are forwarded to the applicable website. To learn more about Microsoft's privacy practices, please refer to their privacy policy, available at https://privacy.microsoft.com/en-us/privacystatement. Microsoft allows you to opt out of tracking associated with Microsoft Ads. You may opt-out by visiting https://choice.microsoft.com/en-US/opt-out.
• HotJar - We may use HotJar, a session replay service provided by HotJar, Ltd. ("HotJar"), to assist us in understanding how our Sites are used. HotJar uses cookies and other technologies to collect data about the behavior of our users and their devices, in particular the IP address of the device, screen size, device type (Unique Device Identifiers), information about the browser used, location (Imprecise Geolocation only), preferred language for displaying our Sites in addition to mouse movement, click information, and text you enter as you navigate through our Sites. Our Analytics Providers store this information on our behalf in a pseudonymized user profile. Our Analytics Provers are contractually prohibited from selling the data collected on our behalf.  To learn more about HotJar’s privacy practices, please refer to their privacy policy, available at https://www.hotjar.com/legal/policies/privacy/.
• TripleWhale - We may use TripleWhale, an eCommerce analytics service provided by TripleWhale, inc. ("TripleWhale"), to assist us in understanding how our Sites are used. TripleWhale uses cookies and other technologies to collect data about the behavior of our users and their devices, in particular the email address, device type, and interactions with other websites and marketing channels.  To learn more about TripleWhale’s privacy practices, please refer to their privacy policy, available at https://www.triplewhale.com/pages/privacy-notice.
• TikTok - We may use TikTok for Business, an online marketing service provided by TikTok, Inc. ("Microsoft"), to display advertisements and to track when you have visited our Sites via a TikTok advertisement. If you click on a TikTok advertisement, TikTok for Business stores a cookie on your device that is used to track the number of individuals who click on a TikTok advertisement and are forwarded to the applicable website. To learn more about TikTok’s privacy practices, please refer to their privacy policy, available at https://ads.tiktok.com/i18n/official/policy/privacy.
• Sendlane - We may use SendLane, an online marketing service provided by Sendlane, to send email and SMS Messages and track when an email or SMS Message has been clicked to direct a user to our Sites. If you click on a Sendlane email or SMS message, Sendlane stores a cookie on your device that is used to track the number of individuals who click on a Sendlane email or SMS Message and are forwarded to the applicable website. To learn more about Sendlane’s privacy practices, please refer to their privacy policy, available at https://www.sendlane.com/privacy.

Information About Session Replay Services

Enabling session replay allows a website operator to record and play back a user’s journey through the operator’s website. We use that software so we can better understand each individual user’s experiences on our Sites (like how much time users spend on which pages, which links they click, what they like and don’t like) and use that knowledge to fix bugs on the Sites, improve your user experience on our Platform, and improve how our Platform functions.

We use session replay services offered by various Analytics Providers, including those offered by Facebook and HotJar. These session replay services use cookies and other technologies to collect data about the behavior of our users and their devices, in particular the IP address of the device, screen size, device type (Unique Device Identifiers), information about the browser used, location (Imprecise Geolocation only), preferred language for displaying our Sites in addition to mouse movement, click information, and text you enter as you navigate through our Sites. Our Analytics Providers store this information on our behalf in a pseudonymized user profile. Our Analytics Providers are contractually prohibited from selling the data collected on our behalf.

You can block session replay software in several ways. If you have cookies disabled, you won’t be tracked by any session replay software using cookies. You can visit www.allaboutcookies.org in order to obtain more information on deleting or controlling cookies. Some of our Analytics Providers also respect the Do-Not-Track (DNT) headers in browsers. As a website user browsing websites that utilize session replay, you are able to use the DNT setting in your browser to avoid certain Analytics Providers tracking any data about your visit. DNT is implemented through your browser, so you’ll need to check if the setting is enabled or disabled within your own browser.

Social Media Features

Our Sites may include social media features such as Facebook or Twitter buttons (such as "Like" or "Tweet"). These websites may automatically record information about your browsing behavior every time you visit a website that has a social media button, regardless of whether you click on the button. Your use of these features is governed by the privacy policy of the company providing the social media feature, not by this Policy. We recommend that you review your privacy settings on the social media sites that you use.

Information Collected In-Store

When you visit our Stores, depending on what you do during your visit, third parties may collect personal information about your activities in our Stores, including:

• Point-of-Sale Systems – Our point-of-sale systems collect information about your in-Store transactions, which may include collecting information we need to send you a receipt or otherwise communicate with you about your order. Our point-of-sale systems Service Provider may also collect information from you through our point-of-sale system. To learn more about their privacy practices, please review their privacy policy, available at HTTPS://POS.TOASTTAB.COM/PRIVACY.
• In-Store WiFi – We may offer free public WiFi to visitors to our Stores. The WiFi network in our Stores may capture certain data from the devices you connect to it, in addition to information you provide to obtain access. Unless you provide your consent for us to use this captured data in a way that identifies you or your devices, we won’t use this captured data in any way that identifies you or your device. Our WiFi Service Provider may also collect information from and about you if you use the WiFi network. To learn more about their privacy practices, please review their privacy policy, available at https://adentro.com/privacy/.

Use and Disclosure of Aggregated, De-Identified Information

We may collect, use, share, transfer and otherwise process de-identified and aggregated information that we receive or create for any purposes in our sole discretion, in compliance with applicable laws. We are the sole and exclusive owner of such de-identified and aggregated information, including if we de-identify personal information so that it is no longer considered personal information under applicable laws. We will not attempt to re-identify de-identified or aggregated information.

Your Choices

We offer you several choices with respect to how we use and disclose your personal information. This section describes the mechanisms available to you to control the personal information we use about you in connection with our Platform.

Updating Your Personal Information

If you want to update any personal information you have provided us, update your preferences, or otherwise contact us about our use of your personal information, you can:

• log into your account on our Sites and update your account information, such as your name, mailing address, email address and phone number on the [NAME OF PAGE] page, available at [URL FOR PAGE];
• contact us by mail at 382 Metropolitan Avenue, Brooklyn, NY 11211, Attn: Legal Department; or
• email us at help@milkbarstore.com.

Tools for Communications

To manage the communications we send you:

• For email communications you receive from us, you can opt-out of receiving such communications by following the unsubscribe instructions contained in most of the email messages we send. Your unsubscribe request or email preference changes will be processed promptly, though this process may take several days. During that processing period, you may receive additional emails from us. Please note, opting out of email communications will only apply to marketing and other promotional emails and will not apply to any email or other communications sent for non-marketing purposes, including, but not limited to, emails and other communications about your orders and other interactions with our Platform.
• If you have provided us with your prior express consent to receive text messages via an automatic telephone system (autodialer), we may use your information to send promotional, personalized advertising and other text messages to any mobile device connected to your mobile phone number. You can opt out from receiving future text messages at any time by:
• replying STOP to 940-41 or any text messages you receive from us;
• sending us an email at help@milkbarstore.com with the subject line "STOP" and including your phone number in the email; or
• by calling us at (347) 501-8022.

Once you opt out, we will send one additional confirmation text message stating that you have opted out of receiving automated text messages from us. For more information about text messages we may send, please review our Terms of Use, available at https://milkbarstore.com/pages/terms-of-use.

Interest-Based Advertising

We may work with third parties who use cookies, tags, and other technologies to collect information about your use of our Sites and other websites and apps on this browser or device and other browsers or devices associated with it to serve online ads likely to be of interest to you on your various devices and browsers, including online ads for our products and services. This type of advertising is called interest-based advertising.

To learn more about interest-based advertising or if you wish to limit third party advertising, you can visit the National Advertising Initiative Consumer Opt-Out Page and the Digital Advertising Alliance’s Consumer Choice Tool. In addition, the electronic device you use to visit our Sites may offer additional privacy settings when using our Sites – please see the device settings for additional details. Please note that even if you opt-out of receiving interest-based advertising, you will still see online advertisements, which may include our online ads, but they will be more general in nature. Also, if you delete or block online tracking technologies, buy or use a different device, access our Sites from a different device, login under a different name, or change web browsers, you will need to opt-out again.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address.  We (or service providers on our behalf including, without limitation, retention.com) may then send communications and marketing to these email or home addresses.  You may opt out of receiving this advertising from retention.com by visiting https://app.retention.com/optout

Protecting Your Information

We make commercially reasonable efforts to help keep your personal information secure and help protect your personal information from loss, theft, misuse, alteration, and unauthorized access or disclosure.  Unfortunately, even though we use commercially reasonable efforts to protect your personal information, we cannot guarantee complete security. Any information (including your personal information) that you provide to us is done so entirely at your own risk.

Additional Information for Individuals Located Outside the United States

Our Platform is solely intended for use by individuals located within the United States. Personal information collected in connection with the use and operation of our Platform is stored and processed in the United States. If you access or use our Platform or otherwise engage with us from outside the United States, you expressly consent to any transfer of your personal information outside of such country to the United States. Please note, the United States has not been assessed as having adequate privacy laws by some countries and economic regions.

Children’s Privacy

We do not intentionally collect personally identifiable information from children under the age of sixteen. If we become aware that we have collected personally identifiable information from a user of the site who is under the age of sixteen, we will make reasonable efforts remove that child’s personal information from our files. If you believe your child has provided us with personal information, please contact us at help@milkbarstore.com.

Links to Other Websites

This Privacy Policy does not apply to any personal information that you provide to, or that is collected by, any third-party website operator or third-party product. We are active on social media sites, including Facebook, YouTube, Instagram, Twitter, and LinkedIn. Anything you post on our social media sites is public information and will not be treated confidentially. We may post (or re-post) on our Sites, or our social media pages, any comments or content that you post on our social media pages.

Additional Information for California Residents

If you are a California resident, California law provides you with certain rights with respect to your personal information. Please note, if you are not a California resident, the rights in this section do not apply to you. In the event of a conflict between this section and the remainder of this Privacy Policy, this section will take precedence for California residents.

Collection, Source, Purpose and Sharing of Your Personal Information

• To learn the categories of personal information we collect, see the “Categories of Personal Information We Collect” section above.
• To learn the categories of sources from which your personal information is collected see the “Sources of the Personal Information We Collect” section above.
• To learn our purposes for collecting personal information, see the “Why We Collect Personal Information” section above.
• To learn how long we retain your personal information, see the “How Long we Retain Personal Information” section above.

Categories of Personal Information We Have Collected

During the past 12 months, we have collected the following categories of personal information:

• Identifiers
• Protected Classification Information
• Commercial Information
• Internet or Electronic Network Activity Information
• Non-Sensitive Geolocation Information
• Sensory Information
• Professional or Employment-Related Information
• Inferences Drawn from Other Personal Information

Categories of Sensitive Personal Information We Have Collected

During the past 12 months, we have collected the following categories of sensitive personal information:

• Account log-in credentials
• Financial account, debit card or credit card number with any required security or access code, password or credentials allowing access to an account

Categories of Personal Information We Have Disclosed for a Business Purpose

During the past 12 months, we have disclosed the following categories of personal information for a business purpose:

• Identifiers
• Protected Classification Information
• Commercial Information
• Internet or Electronic Network Activity Information
• Non-Sensitive Geolocation Information
• Sensory Information
• Professional or Employment-Related Information
• Inferences Drawn from Other Personal Information

Categories of Sensitive Personal Information We Have Disclosed for a Business Purpose

During the past 12 months, we have disclosed the following categories of Sensitive Personal Information for a business purpose:

• Account log-in credentials
• Financial account, debit card or credit card number with any required security or access code, password or credentials allowing access to an account

Categories of Personal Information We Have Sold or Shared

In the last 12 months, we have not sold, rented, leased, or otherwise disclosed, released, disseminated, transferred or made personal information available to a third party for monetary compensation or other valuable consideration.

During the past 12 months, we have shared the following categories of personal information with third parties for the purpose of serving targeted advertising:

• Identifiers
• Commercial Information
• Internet or Electronic Network Activity Information
• Non-Sensitive Geolocation Information
• Professional or Employment-Related Information
• Inferences Drawn from Other Personal Information

You have the right to opt-out of the sale or sharing of your personal information by clicking here.

Additional Uses or Disclosures of Sensitive Personal Information

We do not use or disclose sensitive personal information for any purpose other than our business purposes, as specified under the CCPA.

Your California Privacy Rights

Under the California Consumer Privacy Act of 2018, as amended (“CCPA”), California residents have certain additional privacy rights, with certain exceptions. If you live in California, you may exercise those California privacy rights listed below.

Right to Know

You have the right to request that we disclose certain information about you and our collection of your personal information over the last 12 months.

Once we receive your request and confirm your identity, we will disclose to you as required under the CCPA:

• the categories of personal information we collected from or about you;
• the categories of sources from which personal information was collected;
• the business or commercial purpose for collecting, disclosing, sharing, or selling your personal information;
• the categories of Third Party Sources with which we disclosed your personal information;
• the specific pieces of personal information we have collected about you;
• the categories of personal information that we sold, shared or disclosed for a business purpose; and
• the categories of Third Party Sources to whom it was sold, shared or disclosed for a business purpose.

Right to Request Deletion

You have a right to request that we delete personal information we collected from or about you. We will comply with such request, and direct our Service Providers and other applicable Third Party Sources to do the same, subject to certain exceptions permitted by applicable law.

Right to Correct

You have the right to correct inaccurate personal information that we collect about you. If we receive a verifiable request, we will consider it, taking into account the nature of the personal information and the purposes of the processing of the personal information. We may deny your request if we are unable to verify your identity or if we determine that the contested personal information is more likely than not accurate based on the totality of the circumstances. We may request that you provide us with documentation that is relevant to your request.

Please note, we may choose to delete the contested personal information as an alternative to correcting it if doing so would not negatively impact you or your consent to our deletion.

Right to Opt-Out of Sale or Sharing of Personal Information

You have the right to opt-out if we sell or share personal information with a third party. TO make a request, click the Do Not Sell or Share My Personal Information link on our Sites, contact us using the information in the “Contact Us” section below, or click here.

Non-Discrimination

We will not discriminate against you for exercising any of your rights under the CCPA.  Unless permitted by the CCPA, if you exercise your rights under the CCPA, we will not:

• deny you goods or services;
• charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• provide you a different level or quality of goods or services; or
• suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates or quality levels.  Any CCPA-permitted financial incentive we offer will reasonably relate to the value of your personal information and contain written terms that describe the program’s material aspects.  Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

How to Submit a Request to Exercise Your California Privacy Rights

In addition to any other options provided in this Privacy Policy, to exercise your rights under the CCPA, you may also:

• call us at 1-855-333-MILK;
• complete the webform available here; or
• email us at HELP@MILKBARSTORE.COM

Who May Exercise Your Rights

If you are a California resident, only you or a person that you authorized to act on your behalf may make a request related to your personal information. See the section titled “Using an Authorized Agent” below for more information. A parent or legal guardian may make a request on behalf of their child.

Our Process for Responding to Your Request

Information About Your Request

You must provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.

Verifying Your Identity

When we receive your request to exercise your rights under the CCPA, we will: (a) acknowledge receipt of your request; (b) try to match the information you provide in making the request with information we already maintain about you; (c) if required to verify your identity, we may ask you to provide additional information, including personal information; and (d) consider various factors when determining how to verify your identity, such as the sensitivity and value of the data, the risk of harm, the likelihood of fraud, etc.

We will only use personal information we collect during the verification process for the purpose of verifying your identity. If you maintain an account with us, we may use that account to respond to your request and/or verify your identity. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request and let you know why.

Timelines for Responding to Your Request

We will try to respond to your request within 45 days. If we require additional time, we will inform you of the reason and extension period. Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. For right to know requests, we will select a format to provide your personal information to you. We may charge a fee to process or respond to your request if it is excessive, repetitive, or manifestly unfounded.

Using an Authorized Agent

You have a right to submit requests to exercise your rights under the CCPA through an authorized agent. If you choose to use an authorized agent, you must: (a) provide signed, written permission to that authorized agent to submit requests on your behalf; (b) verify your identity directly with us (except when submitting a request to opt out); and (c) directly confirm with us that you granted permission to the authorized agent to submit the request on your behalf. For clarity, you are required to verify the identity of both yourself and the authorized agent.

We may deny a request from an authorized agent if we do not have proof that they are authorized by you to act on your behalf.

Honoring Opt-Out Preference Signals

If you provide us an opt-out preference signal (“Signal”) when you visit our Sites, you can opt out of the sale or sharing of your personal information without having to make an individualized request to us. You must use a valid opt-out preference signal in a format commonly used and recognized by us such as an HTTP header field.

If we receive or detect a Signal, we will treat the Signal as a valid request to opt-out of the sale or sharing of your personal information for that browser or device, and, if known, for you. We will display on our Websites “Opt-Out Preference Signal Honored” when a browser, device or consumer using a Signal visits our Sites, or display through a toggle or radio button that they have opted out of the sale or sharing of their personal information with third parties.

Your Shine the Light Rights

Under Shine the Light (California Civil Code Section 1798.83) you have the right to request the following information regarding our disclosure of your personal information to third parties for direct marketing purposes: (a) the categories of personal information we disclosed to third parties for their direct marketing purposes during the preceding calendar year; (b) the names and addresses of the third parties that received the information; and (c) if the nature of the third party's business cannot be determined from their name, examples of the products or services they marketed. This information may be provided in a standardized form that is not specific to you.

You are permitted to obtain this information from us once a year, free of charge. To make such a request, please submit your request in writing to:

MomoMilk, LLC

Attn: CA Privacy Rights Request

382 Metropolitan Avenue

Brooklyn, NY 11211

Contact Us

We welcome your questions, comments and concerns about privacy. Please email us at help@milkbarstore.com with your feedback pertaining to privacy. You also may write to us at:

MomoMilk, LLC

Attn: Legal Department

382 Metropolitan Avenue

Brooklyn, NY 11211