Home Chef Privacy Notice

Last Updated: December 11, 2024

Our Privacy Notice is available in PDF form here.

At Home Chef your safety and trust are important to us. For that reason, we’re committed to handling your information in a way that is transparent, fair, and worthy of your trust.

In this notice, we explain how we collect, use, disclose, retain, and protect the information that we collect about you. We also let you know about your rights. Therefore, we encourage you to read this notice as well as any supplemental or different privacy notices that may be applicable when you access or interact with certain of our affiliated brands or service offerings.

We’re committed to ensuring that this notice is accessible to people with disabilities. To make accessibility-related requests, please contact us at support@homechef.com or 1-872-225-2433

1. Who We Are

Founded in 2013 and based in Chicago, Illinois, Relish Labs LLC d/b/a Home Chef (“Home Chef,” “we,” “us,” or “our”) is the leading meal solutions company with both a retail and online presence. Home Chef is a subsidiary of The Kroger Co. (NYSE: KR). With products available from www.homechef.com and www.tempomeals.com and in retail at more than 2,400 Kroger Family of Stores, we’re committed to bringing ease and convenience to home cooking through simple, delicious meals, so fans can enjoy their time at home, both in and out of the kitchen.

2. What Does This Notice Cover?

This notice covers information we collect from and about our customers and prospective customers including, for example, when they visit or make a purchase on one of our websites or mobile applications, interact with our advertisements, interact with us through social media, participate in consumer research, promotions, contests, or otherwise access or use one of our service offerings. This notice also applies to personal information we collect about individuals with whom we have a business relationship.

Additional disclosures apply if you live in one of the following jurisdictions:

3. Information We Collect

We collect information described below to save you time and money and to make your shopping experience better. We’ve grouped the information we collect into categories, with some of the information listed in multiple categories. Because we only collect information when needed for a particular purpose, not all this information will apply to you:

Some of the information we collect about you may include personal information that can be used to identify you, like name, address, and email address. In certain states, the definition of personal information may be broader and include things like IP address, mobile device ID, and unique identifiers used by cookies. When the information we collect about you is considered personal information under applicable law, we treat it as personal information.

Personal information does not include data where your identity has been removed so that we can no longer identify you or that we aggregate so that you can no longer be identified, which we may use for any purpose.

Children’s Privacy

Our websites are for a general audience and are not geared toward children. We don’t knowingly collect personal information from children under the age of 16. If you believe your child may have disclosed personal information to us, please call 1-872-225-2433 and we’ll remove it.

4. How We Collect Your Information

The following are examples of how we may collect your information:

You or a member of your household purchase our products or services

When you purchase our products or services, we’ll collect your purchase information and associate it with you or your household.

You provide it to us directly

You may give us personal information or provide it to us directly, including:

Information from your device

We may collect information from a device that we’ve associated with you or your household. For example, we may collect information automatically when you browse our websites, use our mobile applications or other online services, or view or interact with our advertisements.

Information we collect from other companies within The Kroger Family of Companies

We may collect your information from another company in the Kroger Family of Companies. For example, The Kroger Co.’s wholly-owned subsidiary 84.51° LLC collects personal information from other Kroger Family of Companies to support business operations.

We receive it from others

We may receive personal information about you from others, including, for example, data analytics providers, data enrichment providers, ad networks, and consumer research providers. We may also receive information about you from commercially available sources such as data aggregators and public databases.

If you create an account with us using your Google account or another third-party account, we may receive certain information about you from Google or another third party to enable us to create your account.

Finally, from time to time, we receive information from others that has been deidentified so that it is no longer personal information under applicable law. When we receive deidentified data from others, we commit to maintaining and using that data in deidentified form without attempting to reidentify it.

5. Cookies and Other Technologies

Cookies

A cookie is a small data file that is stored by your browser on your device. We use cookies to deliver a better experience by, for example, remembering your preferences and opt-outs.

Other examples of why we use cookies include:

In many cases the data collected through these cookies is controlled by us, but in some cases the data collected through use of these cookies is controlled by our vendors or other third parties.

Cookies may remain on your device for an extended period. If you use your browser’s method of blocking or removing cookies, some, but not all, types of cookies may be deleted and/or blocked. If you delete or block cookies, some functionality on our websites may not work properly.

Other Tracking Technologies

In addition to cookies, we may use other types of tracking technologies in connection with our websites, mobile applications, advertisements, and other digital service offerings.

Like with cookies, the data collected through these other types of tracking technologies is in many cases controlled by us. However, in some cases the data collected through these other technologies is controlled by our vendors or other third parties.

Examples of other tracking technologies include:

Web Beacons

Web beacons are embedded images or objects that are used on web pages or emails. Examples of why we may use web beacons include:

Embedded Scripts

We may use embedded scripts that collect information about your interactions with our websites, mobile applications, and advertisements. These scripts are temporarily loaded into your web browser and are active only while you’re connected to our websites, mobile applications, or advertisements.

In-App Tracking Technologies

Our mobile applications may use in-app tracking technologies including code from packages referred to as software development kits (SDKs). SDKs are packages of tools that help our mobile applications function in some way. For example, we may use code from SDKs in our mobile applications to:

Like with cookies, in many cases the data collected through these SDKs is controlled by us, but in some cases the data collected through use of these SDKS is controlled by our vendors or other third parties.

Unlike cookies, SDKs and other in-app tracking technologies are not browser based and therefore cannot be controlled through browser settings.

Device and Activity Monitoring Technologies

We may use technologies that monitor and record your experience and interactions with our websites and mobile applications, such as the features you engage with, how you navigate our websites and mobile applications, your keystrokes, cursor movements, scrolling activity, and click-related activity. These technologies may also collect and analyze information from your device, such as your operating system, plug-ins, and system fonts.

Examples of why we may monitor your experiences and interactions include:

Third-Party Interactive Features

We may engage vendors to provide certain interactive features on our websites. Your use of these interactive features on our websites is voluntary, and we may retain the information that you submit through these features. For example, we may offer an interactive chat feature on the websites to assist you with your order and other customer service purposes. When you participate in the interactive chat, the contents of the chat may be captured and kept as a transcript. By using these features, our vendors may process the information obtained through the feature to provide the service on our behalf.

Third-Party Analytics

We may use third-party analytics providers to help us analyze how you use or interact with our websites, services, advertisements, and mobile applications.

Our websites and apps use Google Analytics. You can learn more about how Google Analytics collects and processes data at “How Google uses information from sites or apps that use our services” and in the Google Privacy Policy. Information about Google Analytics’ current opt-outs for web is available here.

In some cases, we may integrate the analytics services we use with certain advertising services that are also made available by our analytics providers. For example, we integrate Google Analytics with the following Google advertising features:

·       Remarketing with Google Analytics

·       Cross Device Remarketing & Reporting

·       Google Analytics Demographics & Interest Reporting

·       Google Display Network Impression Reporting

 

You can opt-out of Google Analytics advertising features directly with Google through its Ads Settings, Ad Settings for mobile apps functionality, and through the NAI’s consumer opt-out mechanism available here.

6. How We Use Your Information

We use your information to:

We may use technologies including those that use machine learning and artificial intelligence to support our use cases.

Below are more specific examples of how we use your information:

7. How We Share Your Information

We may share your information as follows:

Notwithstanding anything else in this notice, we may share data that has been aggregated or deidentified in such a manner that it is no longer considered personal information for any purpose. When we share aggregated or deidentified data, we require recipients to refrain from reidentifying the data and to pass this obligation on to downstream recipients.

8. Interest-based Advertising

Interest-based advertising (also known as online behavioral advertising) occurs when advertisements are displayed to you based on information collected from your online interactions over time and across multiple websites that you visit, or across multiple devices or online services that you may use. Companies that engage in interest-based advertising use this information to predict your preferences and show you ads that are most likely to be of interest to you.

Some of the content, applications, and tracking technologies on our websites and mobile application is controlled by third parties, which include ad tech companies (such as Meta or Google) or other online service providers that serve interest-based advertisements. These third parties may use cookies (both first-party and third-party), web beacons, and other storage technologies to collect or receive information from our websites, mobile applications, and elsewhere on the Internet and use that information to provide measurement services as well as for interest-based advertising. Data collected or received by these third parties may be used to provide advertising related services to us or others.

These third parties may provide you with ways to choose not to have your information collected or used in this way.

For example, you can block the collection and use of information related to you by online platforms and ad tech companies for the purpose of serving interest-based advertising by visiting the following websites of the self-regulatory programs of which those companies are members:

You may still see “contextual” ads even if you opt out of interest-based ads. These ads, however, are based on the context of what you’re looking at on the websites and pages you visit. Even if you opt out of interest-based ads you’ll still receive these non-personalized, contextual ads.

9. Third-party Content and Links

Some content or links on our websites and mobile applications may be served or made available by third parties including the following:

User Content

Our websites and mobile applications may allow you to upload your own content to be displayed to the public. Any information you submit becomes public information, and we don’t control how others may use the content you submit. We’re not responsible for uses made by others that may violate our privacy policy, the law, or your intellectual property rights.

Third-party links

Our websites and mobile applications may contain links to other sites, which we don’t control. Those websites have their own privacy policies and terms.

10. How We Protect Your Personal Information

We implement and maintain reasonable security procedures and practices appropriate to the nature of the information we maintain, including appropriate technical, administrative, and physical measures designed to protect information from unauthorized or illegal access, destruction, use, modification, or disclosure. You also play an important role in protecting your information. It is your responsibility to select a strong password, change it regularly, not reuse or share your password, and alert us if you have any concerns about unauthorized use of your account.

11. Your Rights and Choices

We value our relationship with you and the trust you place in us. Keeping your information and your communications preferences current is an important part of that relationship.

We understand that our customers are individuals, and communication preferences will vary by customer. That is why we offer you the ability to manage what types of communications you receive from us and the ability to manage or change your preferences. Your rights may vary depending on where you’re located. We’ve created mechanisms to provide you with the following options:

Updating your account information

If you have an account with us, you can log in and update, modify, and delete data from within your account.

Managing your marketing and other communication preferences

You can manage your marketing and other communications preferences (text, email, push, purchase based advertising, etc.) by logging into your account on our websites or mobile applications. Your communications preferences can be managed under the “Preferences” section of your account.

To opt-out of receiving personalized offers and coupons by regular mail from us, please contact the customer contact center as described below. Note that you may still receive non-personalized mailers and flyers sent to your physical mailing address.

Please allow a reasonable amount of time for any changes to your settings to take effect.

Alternatively, you can unsubscribe from any marketing emails or text messages that we may send you by clicking the unsubscribe option in the footer of an email or texting “STOP” in response to a text message that you receive from us.

Cookies and Tracking Technologies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable certain cookies, please note that some parts of our websites may not function properly. If you’ve opted-out of sales or set other preferences, then those opt-outs or preferences may be lost if you delete your cookies.

Interest-Based Advertising

Information about interest-based advertising and how to opt-out of it is described in the Interest-Based Advertising section of this notice.

State Privacy Rights

If you live in one of the states listed below, you may have additional rights with respect to your personal information. Please see our additional disclosures below to learn about those rights.

12. Changes to this Policy

This policy is subject to change at our discretion. We will indicate changes to the policy by updating the “Last Updated” date at the beginning of the policy. We will communicate material changes to you in accordance with applicable law, which may include through a notice on the website home page or a notice to the email address specified in your account (if you have an account with us). Your continued use of our websites or our other services after any update to this policy will constitute your acceptance of our changes.

13. Privacy Questions and Comments

Our customer contact centers are ready to take your questions and comments about this policy or our privacy practices. You can reach us by telephone at 1-872-225-2433 or via email at support@homechef.com.

14. Contacting Our Privacy Program (Applicant, Current or Former Associate, B2B Partner)

If you are a current or former Home Chef employee, have applied for a job at Home Chef, or conduct a business relationship with Home Chef and you want to make a privacy request under the California Privacy Right Act, please click here to complete our online form or call (312) 219-5361.

15. State Specific Disclosures

Nevada Privacy Rights

If you live in Nevada, you can opt out of the sale of your personal information by completing the privacy request form here.

Privacy Notice for California Residents

1. Introduction and Scope

This Privacy Notice for California residents supplements the information contained in our Home Chef Privacy Notice and applies to residents of the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (as amended, and together with related regulations the “CCPA”) and any terms defined in the CCPA shall have the same meaning when used in this notice.

This notice does not apply to workforce-related personal information collected from California-based employees, job applicants, contractors, or similar individuals but does apply to personal information collected in the context of business-to-business (B2B) transactions.

This notice applies to “personal information” that we collect, meaning information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). Personal information does not include:

2. CCPA Notice at Collection

We collect information to save you time and money, to deliver the products and services you request, to enhance your shopping experience, and to support our business operations.

We may collect the personal information and sensitive personal information categories listed in the tables below. The tables also list, for each category, use purposes, and whether we currently sell the information or share it with third parties for cross-context behavioral advertising.

To opt-out of personal information sales or sharing, visit our privacy preference center. More information about our data practices can be found in our full Privacy Notice.

Personal information category Purposes Sell and share
Identifiers such as a name, postal address, unique personal identifier, online identifier, IP address, email, account name, or other similar identifiers
  • To provide you with products and services
  • To operate our business
  • To conduct marketing, personalization, and advertising
  • For Interest-Based Advertising purposes including cross-context advertising
  • To communicate with you including to provide recall notices
  • For research purposes
  • To design and develop new product and service offerings
  • To conduct business analytics
  • For safety and security purposes
  • To improve how we do business, our products and services, and customer experience
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
Yes
California Customer Records personal information, including any personal information described in subdivision (e) of Section 1798.80 of the California Civil Code such as your name, address, telephone number, signature, or financial information
  • To provide you with products and services
  • To operate our business
  • To conduct marketing, personalization, and advertising
  • To communicate with you, including to provide recall notices
  • For research purposes
  • To design and develop new product and service offerings
  • To conduct business analytics
  • For safety and security purposes
  • To improve how we do business, our products and services, and customer experience
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
Yes*
Characteristics of protected classifications under California or federal law such as gender, veteran or military status, or age
  • To provide you with products and services
  • To operate our business
  • To communicate with you
  • For research purposes
  • To design and develop new product and service offerings
  • To conduct business analytics
  • For safety and security purposes
  • To improve how we do business, our products and services, and customer experience
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
Yes**
Commercial information such as products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
  • To provide you with products and services
  • To operate our business
  • To conduct marketing, personalization, and advertising
  • For Interest-Based Advertising purposes including cross-context advertising
  • To communicate with you, including to provide recall notices
  • For research purposes
  • To design and develop new product and service offerings
  • To conduct business analytics
  • For safety and security purposes
  • To improve how we do business, our products and services, and customer experience
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
Yes
Biometric information N/A N/A
Internet or other electronic network activity information, such as browsing history, search history, and information regarding your interactions with our websites, applications, or advertisements
  • To provide you with products and services
  • To operate our business
  • To conduct marketing, personalization, and advertising
  • For Interest-Based Advertising purposes including cross-context advertising
  • To communicate with you
  • For research purposes
  • To design and develop new product and service offerings
  • To conduct business analytics
  • For safety and security purposes
  • To improve how we do business, our products and services, and customer experience
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
Yes
Geolocation data N/A N/A
Sensory data such as recordings of customer care calls
  • To operate our business
  • To conduct business analytics
  • For safety and security purposes
  • To improve our products and services offerings
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
No
Professional or employment-related information
  • For research purposes
No
Non-public education information as defined in the Family Educational Rights and Privacy Act N/A N/A
Inferences from personal information collected such as a profile about a consumer reflecting the consumer’s preferences, characteristics, and interests
  • To provide you with products and services
  • To operate our business
  • To conduct marketing, personalization, and advertising
  • For Interest-Based Advertising purposes including cross-context  behavioral advertising
  • To communicate with you
  • For research purposes
  • To design and develop new product and service offerings
  • To conduct business analytics
  • For safety and security purposes
  • To improve how we do business, our products and services, and customer experience
  • For other internal business purposes
  • To fulfill our legal obligations
  • To fulfill or meet requests
  • To fulfill other notified purposes
Yes

(*) We do not sell or share signatures, financial information (i.e., bank account number, credit card number, debit card number, or any other similar information), or other similar identifiers.

(**) In some cases, we may advertise (or facilitate advertising) to groups of individuals comprised of certain demographics like age or gender in a manner that is likely considered selling or sharing under California law.

Sensitive Personal Information Category Purpose Sell or Share
Complete account access credentials (such as usernames, account numbers, or card numbers combined with required access/security code or password)
  • To provide you with products and services reasonably expected (access to your accounts and make payments from your online account).
  • To prevent, detect, and investigate security incidents.
  • For short term transient use to, for example, process your payment if you do not save your card on your account.
  • To resist malicious, deceptive, fraudulent, or illegal actions directed at us.
  • To verify or maintain the quality or safety of a product or service.
  • Other notified purposes where the collection and processing is not for the purpose of inferring characteristics about a consumer.
  • To fulfill our legal obligations.
No

Retention

Except as otherwise permitted or required by applicable law or regulation, we’ll retain your personal information for as long as reasonably necessary to fulfill the purposes for which we collected it or for other compatible purposes that we’ve disclosed.

3. Other CCPA Disclosures

The following is a description of our online and offline information practices over the previous 12 months and other disclosures required by the CCPA.

(A) Personal information collected

The categories of personal information and sensitive personal information that we’ve collected about consumers in the past 12 months are the same as the categories described in our Notice at Collection.

(B) Sources of personal information

Please refer to How we collect your personal information, which describes the sources of personal information.

(C) Purpose for collecting personal information

Please see our Notice at Collection for an explanation of the reasons we collect personal information.

(D) Information about personal information that we’ve sold or shared

Home Chef is committed to delivering great products, great experiences, and great values. From time to time, we may use or disclose your information in a manner that is considered a “sale” or “sharing” under California law to provide the most relevant product recommendations and deliver marketing messages and personalized offers through select companies (e.g., analytics, advertising, and technology companies). Those companies help us match your interests with brands who want to send promotions and offers that we believe save you money on products you buy frequently, and help you discover new products or services that you might like. When we work with these companies, your privacy, data integrity and security remain a priority.

The table below identifies the categories of information we’ve sold or shared and the categories of third parties to whom information was sold or shared during the last 12 months. We don’t knowingly sell or share the personal information of consumers under the age of 16.

In cases where we have sold or shared personal information, we have done so for the following purposes:

Sold or Shared During Prior 12 Months
Personal Information Category Categories of third parties
Identifiers Adtech partners or vendors, social networks, internet service providers, technology vendors, analytic providers, third-party matching agents
California Customer Records personal information Adtech partners or vendors, internet service providers, technology vendors, analytic providers, third-party matching agents
Characteristics of protected classifications under California or federal law (i.e. gender, age, etc.) Adtech partners or vendors
Commercial information Adtech partners or vendors, social networks, internet service providers, technology vendors, analytic providers
Internet or other electronic network activity information. Adtech partners or vendors, social networks, internet service providers, technology vendors, analytic providers
Inferences from personal information collected Adtech partners or vendors, social networks, internet service providers, technology vendors, analytic providers, third-party matching agents

(E) Personal information that we’ve disclosed for a business purpose

During the prior 12 months, we’ve disclosed personal information for the following business or commercial purposes:

The table below describes the categories of recipients to whom information was disclosed for a business or commercial purposes during the prior 12 months:

Disclosed During the Prior 12 Months
Personal Information Category Categories of recipients
Identifiers Adtech partners or vendors, internet service providers, technology/SaaS providers, analytic providers, third-party matching agents
California Customer Records personal information Adtech partners or vendors, internet service providers, technology/SaaS providers, analytic providers, third-party matching agents
Characteristics of protected classifications under California or federal law Adtech partners or vendors, internet service providers, technology/SaaS providers
Commercial information Adtech partners or vendors, internet service providers, Technology/SaaS providers, analytic providers, third-party matching agents, professional service providers
Internet or other electronic network activity information. Adtech partners or vendors, internet service providers, technology/SaaS providers, analytic providers
Sensory data Professional service providers, Technology/SaaS providers
Inferences from personal information collected Adtech partners or vendors, internet service providers, technology/SaaS providers, analytic providers

4. Your California Privacy Rights

The CCPA provides California consumers (residents) with specific rights regarding their personal information including:

(A) Your Right to Know

You have the right to know what personal information we’ve collected about you. Once we receive your request and verify your identity (as described below), we’ll disclose to you:

(B) Your Right to Delete

You have the right to request that we delete personal information that we’ve collected from you and retained, subject to certain exceptions. Once we receive your request and verify your identity, we’ll review the request to see if an exception applies that allows us to retain some or all your information. We may deny your deletion request if retaining the information is necessary for us or our service providers to:

We’ll delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action. If an exception applies, we’ll provide you information about that exception.

(C) Your Right to Correct

You have the right to correct inaccurate personal information that we maintain about you. If you have an account with us, you can log in and update, modify, and delete data from within your account.

(D) Your Right to Opt-Out of Sales and Sharing for Cross-Context-Behavioral Advertising

We don’t sell or share personal information of consumers who we know are younger than 16 years of age.

Some of our websites or mobile applications use cookies or other tracking technologies that share data that may be considered a sale under the CCPA or may be used for cross-context behavioral advertising. Apart from our websites, we may disclose or otherwise make your data available to others in a manner that is considered a sale under the CCPA.

You may request that we stop selling and sharing your personal information (“opt-out”). With some exceptions, we can’t sell your personal information after we receive your opt-out request unless you later provide authorization allowing us to do so again. We must wait at least 12 months before asking you to opt back into the sale of your personal information.

(E) Your Right to Limit Use of Your Sensitive Personal Information

We don’t provide a right to limit your sensitive personal information in cases where we’re permitted to use such data under the CCPA without offering you the right to limit your use.

(F) Right to Non-Discrimination

You have the right not to be discriminated against for exercising any of your CCPA rights.

5. How to Exercise Your CCPA Rights

(A) Your right to know, delete, or correct

To exercise your right to know or delete, as described above, please submit a request by either:

To exercise your right to correct, as described above, you can log in and update, modify, and delete data from within your account.

We’ll only use personal information provided in a consumer request to verify the request. We won’t further disclose the personal information and will retain it only as necessary for the purpose of verification and to meet our legal obligations. We can’t fulfill your request if we can’t verify your identity or authority to make the request and confirm the personal information that is the subject of the request relates to you.

(B) Your right to opt-out of sales and sharing

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting our privacy preference center.

Opt-Out Preference Signals

You may also opt out of the of sales or sharing on our websites through an opt-out preference signal. To process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, we’ll opt you out of sales and sharing in the context of cookies and tracking technologies from the browser for which you have the opt-out preference signal enabled.

6. Who May Submit Requests?

Only you, or someone legally authorized to act on your behalf (an authorized agent), may make a request under the CCPA on another consumer’s behalf. You may also make a verifiable consumer request on behalf of your minor child.

Requests to know, correct, or delete

If you use an authorized agent to submit a request, we may require that the authorized agent provide us with proof that you gave the agent signed permission to submit the request. In addition, we may also require you to do either of the following: (1) verify your own identity directly with us; or (2) directly confirm with us that you’ve provided the authorized agent permission to submit the request on your behalf. These requirements of proof don’t apply if the agent has a power of attorney pursuant to California Probate Code.

We may deny a request from an authorized agent if the agent can’t meet the above requirements. Further, before responding to a request from an authorized agent, we’ll still require the authorized agent to provide us with enough information so that we can verify your identity.

Requests to opt-out and limit sharing

You may also use an authorized agent to exercise opt-out rights and to limit the use of sensitive personal information. In each case the agent must provide us with documentation demonstrating that you’ve provided signed permission to the agent to exercise these rights with us on your behalf. We may deny the request if we don’t receive such proof.

7. How Often Can You Submit Requests?

With limited exceptions, you may only make a verifiable consumer request to know your personal information twice within a 12-month period.

8. How Do We Verify Requests?

Before fulfilling your request, we take steps to verify you are who you say you are or that you have authority to act upon someone else’s behalf. One way we verify you is through your account. If you don’t provide your account number, we may request additional information that we need to verify you and, if you’re submitting a request on behalf of someone else, to verify that you’re permitted to act on that person’s behalf.

When we contact you to request verification information, please respond and provide the information that we’ve requested. Depending on the nature of the request you make, we may require you to verify your identity to either a "reasonable degree of certainty" or "high degree of certainty". This means that we need to match two or three pieces of information that we hold about you with information that you provide to us. In addition, we may ask for knowledge-based qualifiers during the verification process. This data we need to match or ask for you to provide could include, but is not limited to, email address, mailing address, phone number, date of last purchase, and purchase amount.

In some cases, we may require you to sign a declaration under penalty of perjury that you’re the consumer whose personal information is the subject of the request or that you’re authorized to make the request on behalf of someone else.

In addition to providing the information we need to verify you or your authority, you must provide us with enough information so that we can understand, evaluate, and respond to your request. We can’t respond to a request or provide you with personal information if we can’t confirm the personal information relates to you. We’ll only use personal information provided in the request to verify the requestor's identity or authority to make it.

CCPA Metrics Report

We’ve prepared a report on the status of CCPA privacy requests for the previous year. This report details the number of requests to know, requests to delete, requests to opt out of sale and sharing, requests to correct and requests to limit the use of sensitive personal information that we received, complied with, and denied as well as the mean number of days within which we responded to each privacy request. To view the CCPA metrics report, click here.

Other California Disclosures

(A) Shine the Light California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California residents to request certain details about how their personal information is shared with third parties, and in some cases affiliates, if personal information is shared for those third parties- or affiliates’ own direct marketing purposes. We do not share personal information with third parties or affiliates for those third parties’ or affiliates’ own direct marketing purposes.

Californians may request information about our compliance with this law by contacting us at support@homechef.com or by sending a letter to:

Relish Labs LLC d/b/a Home Chef
433 W. Van Buren St.
Suite 750N
Chicago, IL 60607
Attention: Privacy Officer

Any such request must include your name and “California Shine the Light Privacy Rights Request” in the first line of the description and, if sent by mail, must include your street address, city, state, and zip code.

Please note that “Shine the Light” rights and CCPA rights are granted by different laws and must be exercised separately.

(B) Do Not Track

We don’t respond to “Do Not Track” (DNT) signals. However, we do honor opt-out preference signals (global privacy control) as described above.

Other State Consumer Privacy Disclosures

The disclosures in this section are made pursuant to the following state consumer privacy laws:

For the purposes of this section, these laws will be referred to collectively as State Consumer Privacy Laws. References to “personal information” in our general privacy notice describe our practices with respect to “personal data,” as defined under these State Consumer Privacy Laws.

Categories of Personal Data and Purposes of Processing

You can learn more about the categories of personal data and sensitive data that we collect about consumers and the purpose for processing your personal data by visiting our CCPA Notice at Collection.

Categories of Personal Data Shared with Third Parties

We may use, disclose, or make available the categories of personal data listed below for targeted advertising purposes or in a manner that we've determined is likely considered a “sale” under the State Consumer Privacy Laws:

When we disclose or otherwise make available such information, we may do so to the following categories of third parties: adtech partners or vendors, social networks, internet service providers, technology vendors, analytic providers, third-party matching agents, and/or data brokers. You can learn more about how third parties may process personal data by visiting the How We Share Your Information section above.

Your Rights Under State Consumer Privacy Laws

If you’re a resident of a state that has enacted a State Consumer Privacy Law, then, subject to certain conditions and exclusions, you have the following rights with regard to your personal data:

  1. Right to access. You have the right to request access to and obtain a copy of any personal data that we may hold about you.
  2. Right to correct. You have the right to request that we correct inaccuracies in your personal data. Although Iowa and Utah laws do not grant its residents this right, we grant Iowa and Utah residents the right to request correction of their data.
  3. Right to delete. You have the right to request that we delete personal data that we have collected from or obtained about you.
  4. Right to opt out of the sale of personal data. You may request that we stop disclosing or making available your data in a way that is considered a “sale”.
  5. Right to opt out of targeted advertising. You may request that we stop disclosures of your personal data for targeted advertising.
  6. Right to withdraw consent/opt out of the processing of sensitive data. If you have previously granted us consent to process your sensitive data, you have the right to withdraw consent/opt out of further processing of your sensitive data.  We don’t collect sensitive personal information and as such don’t offer this right.
  7. Right to opt out of profiling. You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We don’t profile in a manner that would result in legal or similarly significant effects and as such don’t offer this right.
  8. Right to appeal. If you live in Colorado, Connecticut, Delaware, Florida, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, or Virginia and are unsatisfied with our decision not to take action on your request to exercise one of your privacy rights, you may appeal our decision.
  9. Right to non-discrimination. If you choose to exercise any of the privacy rights described above, we won’t deny our products or services to you, charge you different prices or provide a different level or quality of products or services to you unless those differences are related to the value of your personal data.
  10. Oregon Residents. If you live in Oregon, you have the right to request a list of third parties to which we disclosed personal data.
  11. Delaware Residents. If you live in Delaware, you have the right to request a list of the categories of third parties with whom we disclose your personal data.

How to Exercise Your Rights Under State Consumer Privacy Laws

You may exercise your privacy rights by either:

We’ll only use personal data that you provide in a request to authenticate the request. We won’t further disclose the personal data and will retain it only as necessary for the purpose of authentication and to meet our legal obligations. We can’t fulfill your request if we can’t authenticate it and confirm the personal data that is subject of the request relates to you.

Opt-Out Preference Signals

You may also be able to opt out of the sale of your personal data or targeted advertising through an opt-out preference signal. To process your request through an opt-out preference signal, you must use a browser supporting the preference signal. If you choose to use an opt-out preference signal, we will opt you out of the sale of your personal data and targeted advertising in the context of cookies and tracking technologies from the browser for which you have the opt-out preference signal enabled.

Authorized Agents

In certain states you may use an authorized agent (a person or entity acting on your behalf) to submit a request to opt-out out of our processing of personal data for the purposes of targeted advertising or sales. If you use an authorized agent to submit a request, we will not act on that request unless we are able to authenticate, with commercially reasonable effort, both your identity and the authorized agent’s authority to act on your behalf.

Oregon 

The following Kroger Family of Companies act as a controller of Oregon residents’ personal information:

Banner/Brand Entity Registered with Oregon Secretary of State
84.51 84.51 LLC
Fred Meyer
QFC
Fred Meyer Stores, Inc.
Fred Meyer Jewelers Fred Meyer Jewelers, Inc.
Home Chef Relish Labs LLC
Kroger The Kroger Co.