Last updated: September 16, 2022
Please also visit our Terms and Conditions establishing the use, disclaimers and limitations of liability governing the use of our Service here.
1. Information We Collect
The categories of information we collect can include:
We use this information to operate, maintain, and provide to you the features and functionality of the Service, as well as to communicate directly with you, such as to send you email messages and push notifications, and invite others to join the Service. We may also send you Service-related emails or messages (e.g., account verification, change or updates to features of the Service, technical and security notices). For more information about your communication preferences, see "Control Over Your Information" below.
2. How we use the information we collect
We will use your Personal Information for our legitimate interests, meaning our interests in conducting our business, fulfilling orders and processing transactions, and managing and providing services to you, which include the following:
3. How long we keep your personal information
We retain Personal Information for only as long as it is deemed necessary, to fulfill the purposes identified or as required by law. Please note that the retention period for Personal Information may extend beyond your relationship with us. We use the following criteria to determine retention periods:
Personal Information no longer necessary or relevant for its identified purposes or no longer required to be retained by law, shall be securely destroyed, erased, or made anonymous.
4. How we protect and store your information
We are committed to making sure your privacy is protected when you use our Service and when we collect information from you. We take the security of your information seriously and implement a variety of security measures to maintain the safety of all Personal Information you provide. We also make sure that third parties we use to process your Personal Information also use appropriate security measures to protect your data.
When we collect sensitive information like your credit card information, that information is encrypted and securely transmitted. For example, we use a secure server for transmitting sensitive information. All supplied sensitive/credit card information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our payment gateway providers database only to be accessible by those authorized with special access rights to such systems and are required to keep the information confidential. You can verify that this sensitive information is being transmitted securely by looking for “https” at the beginning of the address of the webpage.
After a transaction is completed, your sensitive information will not be stored on our servers.
The safety and security of your information also depends on you. We urge you to be careful about entering information on public computers or on public networks.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to or stored on our Service.
5. Do not track (DNT) signals
We participate in interest-based advertising and use third-party advertising companies to serve you targeted advertisements based on your browsing history. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
We may also work with third-party partners who employ tracking technologies or the application of statistical modeling tools to determine if two or more devices are linked to a single user or household so that content you see on one device can result in relevant advertising on another device, to perform analytics, and to measure the performance of our advertising campaigns.
Although we do our best to honor your privacy preferences, we are unable to respond to Do Not Track signals set by your browser.
Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser. Cookies enable websites or service providers’ systems to recognize your browser and capture and remember certain information. For example, you may use our cookies to stay logged in when you exit a browser window. You may read more about cookies at https://www.allaboutcookies.org/.
Some cookies (Strictly Necessary Cookies) are so essential to the functioning of our website that you cannot opt out of them. However, you can choose to accept, decline, or withdraw consent to other cookies. Be aware that disabling cookies may prevent you from using certain features or services on our Service.
Browser Opt-Out: Most browsers have a “help” button or section on the toolbar. If you click on this button or section, you will find information about turning on and off cookies and how to receive notifications when a new cookie is received.
Additionally, many advertising services allow you to opt out of targeted advertising. You may find more information in the resources available at the Network Advertising Initiative, http://www.networkadvertising.org.
Mobile devices: Note that these resources may not work to turn off cookies on mobile devices. Every mobile device is different. Here are some resources for turning off cookies for popular mobile browsers:
When you access our Service from a mobile device, we may collect unique identification numbers associated with your device or our App (including, for example, a UDID, Unique ID for Advertisers ("IDFA"), Google AdID, or Windows Advertising ID), mobile carrier, device type, model and manufacturer, mobile device operating system brand and model, phone number, and depending on your mobile device settings, your geographical location data, including GPS coordinates (e.g., latitude and/or longitude) or similar information regarding the location of your mobile device, or we may be able to approximate a device's location by analyzing other information, like an IP address.
Additionally, many advertising services allow you to opt out of targeted advertising. You may find more information in the resources available at the Network Advertising Initiative, http://www.networkadvertising.org , and may opt out of Facebook and Instagram, Google, and Bing target ads by visiting the links below:
7. Control over your information
Profile and Data Sharing Settings: You may update your contact information, such as your name, and may change some of your data sharing preferences by emailing us at firstname.lastname@example.org.
Access to your Device Information: You may control the App’s access to your device information through your “Settings” app on your device. For instance, you can withdraw permission for the App to access your address book, location, photo stream, and camera.
How to control your communications preferences: You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., transactional communications, changes/updates to features of the Service, technical and security notices).
Modifying or deleting your information: If you have any questions about reviewing, modifying, or deleting your information, you can contact us directly at email@example.com. We may not be able to modify or delete your information in all circumstances.
8. Disclosure to third parties
Other than as described herein, we do not sell, trade, or otherwise transfer to third parties your personally identifiable information. We may share your Personal Information with other companies and brands owned or controlled by Products by Krystal. (which also includes our subsidiaries (i.e., any organization we own or control) or our ultimate holding company (i.e., any organization that owns or controls us) and any subsidiaries it owns) for the purpose of operating our Service, conducting our business and servicing you, including providers of hosting, cloud services and other information technology services providers for the management or hosting of the Service; payment processors; order and subscription management and fulfillment services; e-commerce platforms; rating and reviews platforms; email communication and customer support services; and web analytics, marketing and digital advertising services, so long as those parties agree not to use the information for their direct marketing purpose, to keep this information confidential and use appropriate security measures to protect your data. We may also disclose your information as required under applicable law, to enforce the policies of our Service, or to protect our or others’ rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. In the event of a merger, acquisition, reorganization, bankruptcy, receivership, or sale or transfer of all or a portion of our assets, your Personal Information may be transferred to a successor or affiliate or other entity surviving out of the event.
9. SMS Text Messaging
If you opt in to receive mobile text messages from us, you will receive messages at the phone number you provide at the time you opt in. For help, you may contact us at firstname.lastname@example.org with “SMS Text Messaging” in the subject line. If you would like to stop receiving text messages, reply STOP to any Products by Krystal text message at any time. Message and data rates may apply. Data obtained through the short code program will not be shared with any third-parties for their marketing reasons/purposes.
10. California Consumer Privacy Act
Effective January 1, 2020, if you are a California resident, then you have the following rights:
You have the right to request the deletion of the personal information that we have collected from you.
We do not sell and have not sold consumers’ personal information in the preceding 12 months.
Effective January 1, 2020, if you wish to submit a request under the California Consumer Privacy Act, please click here to fill out a request form. You may also email us at email@example.com with the subject line “California Consumer Privacy Act Request.” You may have an authorized agent contact submit a request under the California Consumer Privacy Act on Your behalf; however, we require You (1) provide the authorized agent with signed permission to do so and (2) verify Your own identity. If the authorized agent is not an individual having power of attorney, We also require (3) You directly confirm that You provided the authorized agent permission to submit the request.
We will need to verify your identity to enable us to process your request. The verification process will include a two-step verification process, where you must enter the email address associated with your Products By Krystal account (or, for non-account holders, the email address we have on file for you), receive an email with an authentication code, and enter the code when prompted to do so. Disclosure and deletion are subject to our receipt of a verifiable consumer request and exceptions or limitations established by applicable laws and regulations. Disclosure and/or deletion will not be completed if a consumer request cannot be verified.
11. Canda's Personal Information Protection and Electronic Documents Act (PIPEDA)
If you are a Canadian resident, then you have the following rights:
The Service is governed by and operated in accordance with data privacy laws of the United States and Canada, and is intended for the enjoyment of residents of the United States and Canada. We make no representation that the Service is governed by or operated in accordance with the laws of any other nation. By using the Service, or providing us with any Personal Information, you (a) acknowledge that the Service is subject to data privacy laws of the United State and Canada, (b) consent to the collection, processing, maintenance, and transfer of such information to the United States and other applicable territories in which the privacy laws may not be as comprehensive as or equivalent to those in Canada, and (c) waive any claims that may arise under those laws.
You have a right to access the Personal Information we have about you. Upon written request and authentication of identity, we will provide you with your Personal Information. We may charge you a reasonable fee for doing so. We will make the information available within a reasonable time, and in any event within the timelines established by PIPEDA. In some instances, we may not be able to provide access to certain personal information (e.g., if disclosure would reveal Personal Information about another individual, the personal information is protected by solicitor-client or litigation privilege). We may also be prevented by law from providing access to certain personal information. If we refuse an access request, we will notify you in writing and document the reasons for refusal.
We will make a reasonable effort to ensure that the Personal Information we use or disclose is accurate and complete. Since the Personal Information we collect is provided directly by users, we rely on you to provide accurate personal information about yourself. However, if you demonstrate that the Personal Information we have about you is inaccurate or incomplete, we will amend your Personal Information as required. If appropriate, we will send the amended information to third parties to whom the information has been disclosed.
If you are a Canadian and wish the exercise rights afforded to you under PIPEDA, please contact us at the following mailing and email addresses:
12. Nevada Online Privacy Law
If you are a Nevada resident, you have the right to submit a request directing us not to make any sale of personally identifiable information we have collected or will collect about you. We do not sell your personal information. To request confirmation that we do not sell your personal information, please send an email to firstname.lastname@example.org with “Nevada Privacy Information” in the subject line of your message.
13. Protecting Childrens' Privacy
We are a general audience site. Our Service, products, and services are all directed to people who are at least 13 years of age or older. We do not knowingly collect, use or disclose any information from anyone under 13 years of age. We understand and are committed to respecting the sensitive nature of children’s privacy online. If we discover that we have inadvertently collected information from anyone under 13 years of age, any information regarding that user will be promptly deleted. If you believe we might have any information from or about anyone under 13 years of age, please contact us by using the information below in the “Contact Us” section of this policy.
15. How To Contact Us