Privacy Policy

In general, what should you cover in your Privacy Policy?

Effective Date: October 29, 2024

Introduction
Homey Harvest, operated by Goodness Grub LLC, is committed to protecting your privacy and complying with all relevant privacy laws, including the Virginia Consumer Data Protection Act (VCDPA), the California Consumer Privacy Act (CCPA), and other applicable U.S. federal regulations. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information. By using our website and services, you consent to this policy.

1. Scope of the Policy

This Privacy Policy applies to all users of Homey Harvest’s website, mobile application, and related services, regardless of location. This policy covers both residents of Virginia and other U.S. states and details the rights of users, the data processing practices we follow, and the protections in place.

2. Information We Collect

Homey Harvest collects personal information directly from users, automatically through the website, and from third-party services to provide a better experience. The types of information collected include:

2.1. Personal Identification Information

Full Name
Contact Information (phone number, email address, delivery address)
User Account Information (username, password)

2.2. Transactional Information

Payment Details: Includes credit/debit card information, PayPal details, and any other financial information necessary to complete transactions.
Order History: Records of past orders, frequency, and types of meals ordered.

2.3. User Preferences

Dietary Preferences: Information related to specific diets (e.g., vegan, vegetarian), food allergies, and meal preferences.
Customization Requests: Any additional information provided by users to customize orders.

2.4. Technical Information

Cookies and Tracking Data: We use cookies, web beacons, and similar technologies to gather data related to browsing activities, preferences, and device information.
IP Addresses and Device Identifiers: Information related to IP addresses, browser types, device models, and operating systems.

3. How We Use Your Information

Homey Harvest uses the collected data for the following purposes:

3.1. Service Provision

To process orders, manage payments, and coordinate deliveries.
To personalize user experience, including tailored recommendations based on preferences and order history.

3.2. User Communication

For customer support, order confirmations, and updates about services.
For marketing purposes, such as newsletters, promotions, and new offerings, provided the user has opted in for such communications.

3.3. Analytics and Improvement

To analyze user behavior, monitor website performance, and make necessary improvements to services and offerings.

3.4. Compliance with Legal Obligations

To comply with state and federal regulations, including tax laws, consumer protection laws, and privacy regulations.

4. Data Sharing and Disclosure

Homey Harvest does not sell or rent personal data to third parties. However, we may share your information in the following situations:

4.1. Service Providers

We may share your information with third-party service providers (e.g., payment processors, delivery services, marketing firms) to perform functions on our behalf.

4.2. Legal Compliance

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.3. Business Transfers

In the event of a merger, acquisition, or asset sale, user information may be transferred as part of the transaction. We will notify users of such changes.

5. User Rights Under Virginia Law (VCDPA) and U.S. Federal Law

Homey Harvest adheres to the VCDPA, CCPA, and other federal regulations to protect user rights. Users have the following rights:

5.1. Right to Access

Users can request access to the personal data we hold about them, including categories of information collected, purposes for processing, and the third parties with whom data is shared.

5.2. Right to Rectification

Users can request corrections to any inaccurate or incomplete information.

5.3. Right to Deletion

Users can request the deletion of their personal information, subject to exceptions where data retention is legally required (e.g., for tax or contractual obligations).

5.4. Right to Data Portability

Users can request a copy of their data in a machine-readable format, facilitating the transfer of information to another service provider.

5.5. Right to Opt-Out

Users have the right to opt-out of targeted advertising, sale of personal information, or profiling that affects legal or similarly significant outcomes.

6. Data Protection Measures

We implement industry-standard security measures to protect your information, including:

6.1. Encryption

All data transmitted between your browser and our servers is encrypted using SSL/TLS.
Sensitive information, such as payment details, is encrypted using AES-256 while stored in our systems.

6.2. Access Controls

User data is accessible only to authorized personnel, who are subject to confidentiality agreements and trained in data protection.

6.3. Regular Audits

We conduct regular audits of our data security practices to ensure compliance with laws and to enhance protection measures where needed.

7. Data Retention Policy

We retain user information as long as necessary for operational, legal, or business purposes. Retention periods are based on factors such as:

Legal requirements (e.g., financial records retention).
Operational needs (e.g., maintaining active accounts and processing recurring orders).

Upon expiration of the retention period, personal data is securely disposed of or anonymized.

8. Compliance with CCPA

For users residing in California, we comply with the CCPA, which provides additional rights similar to those outlined under VCDPA, including the right to:

Request specific pieces of information collected.
Know whether information is sold or shared (Homey Harvest does not sell data).
Equal service, even if users exercise their privacy rights.

9. Minors’ Privacy Protection

Homey Harvest’s services are not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal data, please contact us immediately to ensure removal.

10. Policy Changes

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or user feedback. Users will be notified of significant updates via email or a prominent notice on our website.

11. Contact Information

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Homey Harvest
Goodness Grub LLC
10432 Balls Ford Road, Historic District, Suite 300
Manassas, VA 20109
United States