Privacy Policy for kohls-frozencustard.com
We are staunchly committed to protecting and meticulously safeguarding your personal information through stringent privacy controls and transparent processing practices, maintaining the highest standards of data protection across our platform.
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for maintaining comprehensive oversight of how your personal information is collected, used, and protected throughout our systems.
We may process usage data (“usage data”), which comprehensively includes browser type and version, operating system details, page view timestamps, interaction patterns, service utilization metrics, and clickstream data. This information is collected through automated logging systems, cookies, and analytics tools and may include time spent on pages, features accessed, and ordering patterns. The source of this data is our analytics software and server logs. We process this information for several important purposes, including improving website performance, enhancing user experience, analyzing service usage patterns, and optimizing our menu offerings, which enables us to deliver better service, personalize user experiences, and maintain system security. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.
We may process account data (“account data”), which comprehensively includes your name, email address, telephone number, delivery address, order history, and payment information. This information is collected through registration forms, order processes, and account updates and may include loyalty program participation, saved preferences, and communication preferences. The source of this data is direct user input and automated order processing systems. We process this information for order fulfillment, account management, customer service, and marketing communications, which enables us to provide seamless ordering experiences, maintain accurate records, and deliver personalized services. The legal basis for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
We may process profile data (“profile data”), which comprehensively includes your dietary preferences, favorite menu items, order frequency, special requests, and allergen information. This information is collected through profile settings, order history analysis, and customer feedback and may include customization preferences, special occasions, and preferred payment methods. The source of this data is your direct input and order behavior analysis. We process this information for personalizing your experience, improving our menu offerings, managing dietary requirements, and enhancing customer service, which enables us to provide tailored recommendations, ensure safety compliance, and improve service quality. The legal basis for this processing is our legitimate interests in providing personalized services and ensuring customer satisfaction.
Your Rights:
Right to Access: You have the right to request and receive a copy of all personal data we hold about you, along with information about how we use and process it. This includes the ability to request confirmation of data processing, obtain copies of your data, and understand how your data is being used. To exercise this right, you can submit a written request through our contact form or email our data protection officer. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to confirm your identity.
Right to Rectification: You have the right to request corrections or updates to any inaccurate or incomplete personal data we hold about you. This right ensures your data remains accurate and up-to-date. This includes the ability to update contact information, correct account details, and modify preferences. To exercise this right, you can access your account settings or contact our customer service team directly. We will process your request within 15 days and may require account verification, specific correction details, and supporting documentation to verify the accuracy of the changes.
Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected. This right allows you to have your data removed from our systems and records. This includes the ability to delete your account, remove order history, and withdraw marketing consent. To exercise this right, you must submit a formal deletion request through our designated channels. We will process your request within 30 days and may require password confirmation, written confirmation of deletion intent, and identity verification documents to protect against unauthorized deletion requests.
Right to Restrict Processing: You have the right to limit how we use your personal data in specific circumstances, such as when you contest the accuracy of the data or object to its processing. This includes the ability to pause marketing communications, limit data processing activities, and temporarily block certain uses of your information. To exercise this right, you can submit a processing restriction request through our privacy portal. We will respond within 15 days and may require account access verification, specific restriction parameters, and confirmation of restriction scope to implement your request accurately.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transmit this data to another service provider. This includes the ability to export order history, download account information, and transfer loyalty program data. To exercise this right, you can request a data export through your account settings or contact our support team. We will fulfill your request within 30 days and may require two-factor authentication, format specifications, and receiving party details to ensure secure data transfer.Data Processing and Security Measures
We process Service Data which includes account credentials, user preferences, service selections, and interaction history. This processing involves automated collection, storage, and analysis, enabling us to provide personalized frozen custard ordering and loyalty program services. For example, in the context of food service, this includes tracking favorite flavors, dietary preferences, and order history. The legal basis for this processing is legitimate business interests and contractual necessity, specifically to fulfill customer orders and maintain service quality.
We process Technical Data which includes device information, IP addresses, browser type, and system logs. This processing involves automated collection and analysis, enabling us to optimize website performance and ensure security. For example, this includes monitoring site traffic patterns and detecting potential security threats. The legal basis for this processing is legitimate interests, specifically to maintain service functionality and protect against unauthorized access.
We process Communication Data which includes email correspondence, chat logs, and customer service interactions. This processing involves storage, analysis, and response management, enabling us to provide effective customer support and service updates. For example, this includes managing special order requests and handling customer feedback. The legal basis for this processing is legitimate interests and contractual necessity, specifically to maintain customer relationships and improve service quality.
We process Transaction Data which includes payment information, order details, and purchase history. This processing involves secure payment processing, order fulfillment, and record-keeping, enabling us to complete transactions and maintain accurate financial records. For example, this includes processing credit card payments and managing digital receipts. The legal basis for this processing is contractual necessity and legal obligation, specifically to fulfill orders and comply with financial regulations.
We process Preference Data which includes dietary requirements, flavor preferences, and notification settings. This processing involves analysis and profile creation, enabling us to personalize user experience and provide relevant recommendations. For example, this includes customizing menu suggestions and special offer notifications. The legal basis for this processing is consent and legitimate interests, specifically to enhance user experience and service delivery.
Security Measures
Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.
We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.
Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.
Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.
We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.
All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.
International Data Transfers
We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Binding Corporate Rules, and Privacy Shield certifications. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies
International transfers are protected by ISO 27001, GDPR standards, and regional data protection regulations, ensuring compliance with international privacy laws. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures
Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees
Data Retention
We maintain specific retention periods for different data categories:
Account Information: 2 years after account closure to maintain service continuity and comply with legal requirements
Usage Data: 12 months to analyze service patterns and improve user experience
Transaction Records: 7 years to comply with tax and financial regulations
Communication History: 3 years to maintain service quality and handle disputes
Technical Logs: 6 months for security monitoring and system optimization
These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences
Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy for kohls-frozencustard.com
Essential cookies serve fundamental functions for our frozen custard website’s basic operations. These cookies process authentication data, session information, and security tokens to enable core functionality. For example, they maintain your shopping cart contents while you browse our frozen dessert menu and ensure secure checkout processes.
Essential cookies are fundamental to website functionality. These cookies manage user authentication, maintain security protocols, and ensure proper site operations. We use them specifically for:
– User authentication during ordering
– Security measures for payment processing
– Basic site operations including menu display
– Session management for cart functionality
– Technical stability across ordering platforms
Functional cookies enhance your experience by remembering your preferences when ordering frozen custard. They enable:
– Language preferences for our international customers
– Region-specific menu items and pricing
– User interface customization for frequent orders
– Feature optimization for mobile ordering
– Personalized settings for dietary preferences
Analytics cookies help us understand customer behavior. They collect information about:
– Page interactions with our menu items
– Navigation patterns through our flavor selections
– Feature usage of ordering systems
– Session duration during visits
– User preferences for popular items
Performance cookies assess and improve our service by:
– Monitoring site speed during peak ordering times
– Identifying technical issues in the ordering process
– Optimizing content delivery of menu updates
– Analyzing user experience with our digital menu
– Tracking system performance during rush hours
You can control cookie preferences through:
– Browser settings
– Cookie consent tools on our website
– Privacy preferences in your account
– Account settings for registered customers
For EU residents, we ensure:
– Explicit consent mechanisms before processing
– Data minimization in order processing
– Purpose limitation for customer data
– Storage limitations on order history
– Processing transparency in all operations
California residents have additional rights:
– Right to know about personal information collected during orders
– Right to delete personal data from our system
– Right to opt-out of data sales
– Right to non-discrimination in service
– Right to access collected information
Regarding users under 13:
– Age verification requirements for online accounts
– Parental consent procedures for digital ordering
– Limited data collection from young customers
– Special protection measures for minor’s data
– Parental access rights to account information
Policy updates involve:
– Regular review procedures of our practices
– User notifications of significant changes
– Consent renewal when required by law
– Clear change documentation
– Continuous compliance monitoring
For privacy-related inquiries:
– Primary Contact: [email protected]
– Response Time: Within 48 hours
– Verification Required: For data-related requests
– Available Support: Privacy concerns, data requests, rights exercise
This policy was created specifically for kohls-frozencustard.com and covers all associated services within the frozen custard industry.