Privacy Policy

(Last Updated: April 5, 2019)

Our Commitment to Privacy

We, Grilla, Inc., being the owner and operator of the www.grilla.co website, respect the privacy of your personal information. This Privacy Policy refers to this website as “our website” or “our site”. We provide this explanation about our online information practices to show our commitment to protect your privacy.
We do not sell or rent personally-identifying information collected during your use of our website without your permission.
In accordance with this Privacy Policy or otherwise, we may share your personally-identifying information with a third party upon notification to you at the time of data collection or transfer. You will always have the option of not permitting the transfer by not using the particular services for which the information is collected or shared.

The Information We Collect

At the time you register on our site or otherwise provide information to us through our site, we may collect and store your name, email address, mailing address, phone number, and other personally-identifying information. The user information we collect is categorized as follows:

  • Application Information — information that you provide to us through our website and through other means. Examples include your email address, mailing address, including zip code, and phone number.
  • Transaction and Experience Information — information about your transactions with us, as well as information about our communications with you. Examples include your account history, requests for information, and our responses.

We need this information to provide goods and services that you request from our website and to let you know of additional goods and services about which you might be interested. We also use this information to customize your experience using our website.
We may also share the information we collect about you with third parties from one or more of the following categories, but only (a) to the extent authorized by you, (b) as necessary to provide the goods or services you request, or (c) as required by law.

  • Social Media Companies
  • Retailers
  • Credit Card Companies
  • Payment Processor Companies
  • Banks
  • Government Agencies

We may ask you for personally-identifying information at other times, such as if you enter into a promotion, post information, register for a forum, complete a survey, or otherwise communicate with us. If and when you opt in to receive information regarding a promotion or other service offered by a third party, you give us your permission to share your name and email address with the third party offering the promotion or other service.
In addition, we automatically gather general statistical information about our website and visitors, such as IP addresses, browsers, pages viewed, number of visitors, goods and services purchased, etc., but in doing so we do not refer to you by your name, email address, home address, or telephone number. We use this data in the aggregate to determine how much our users use parts of our site to help us improve our site. We may provide this statistical information to third parties, but when we do so we do not provide personally-identifying information without your permission.
As part of our service, we use cookies and beacons to store and sometimes track information about you. Some features of our site may be available only through the use of a cookie. A cookie is a small amount of data that is sent to your browser from a Web server and stored on your computer’s hard drive. A beacon is a transparent graphic image placed on our website to monitor the behavior of a visitor to our website. Generally, we use cookies to remind us who you are and enable us to access your account information so you do not have to re-enter it. We use cookies and beacons to gather statistical information about usage by registered or unregistered users to research visiting patterns and to help target advertisements based on user interests; to help our retailers track visits and process orders; and to track progress and participation in promotions and other services. Preference and options configurations in your browser determine if and how a cookie or beacon will be accepted. You can change those configurations on your computer if you desire. By changing your preferences, you can accept all cookies, you can receive notices when a cookie is sent, or you can reject all cookies. If you reject all cookies and cookies are disabled, you may be required to re-enter your information more often and certain features of our site may be unavailable. Disabling cookies will also prevent beacons from tracking your unique information when visiting our website.
In addition, the retailers, advertisers, and other third parties appearing at our site or linked to our site may use their own cookies and beacons and may collect personally-identifying information, including credit card information, in connection with your use of their websites. The privacy policy of such third parties may differ from ours. We encourage you to read the third party’s privacy policy before responding to the offer to determine how that third party uses the personally-identifying information.
Our site does not engage in the collection of personally-identifying information from users across third-party websites or third-party online services or applications, except if you specify that we may when you elect to register and login to or otherwise access our site via certain third-party sites or applications, such as, for example, Google+, Facebook, Twitter, or Instagram. Any interaction with a third-party site or application typically allows the third party to collect some information about you (whether through cookies, registration information or otherwise). These third parties may even track you when you do not interact with the application. If you have engaged any of these third-party service providers, their respective privacy policies will govern their tracking and collection of information. Aside from the foregoing, we do not knowingly enable other parties to collect personally-identifying information about our users’ activities over time and across different sites, applications, or services. If your browser or similar mechanism gives our site a “do not track” signal, our site will make commercially reasonable attempts to honor your settings (although we still may deliver and use cookies and other tracking technologies for non-marketing purposes). However, we do not make any promises or guarantees about the effects of any “do not track” choice that you may make because: (a) such nuanced treatment is not necessarily available or effective for all browsers, mechanisms, or tracking technologies, and our commercially reasonable attempts to honor your settings might not be effective to preclude tracking or behavioral advertising at all or over any particular period of time; (b) third parties may not honor your settings or our policies and may use cookies or other tracking technologies for behavioral advertising despite our commercially reasonable attempts to prevent them from doing so; and (c) tracking technologies, browsers, and access devices may change from time to time and our commercially reasonable attempts might not be effective for each technology or across all platforms.

The Way We Use Information

We use your personally-identifying information to improve our marketing and promotional efforts, to analyze site usage, to improve our content and product offerings, and to customize our site’s content, layout, and services.
We may use your information to deliver information to you that, in some cases, is targeted to your interests, such as articles, targeted banners, new services, advertisements, and promotions. You may opt out of receiving this information by so indicating in your registration and preferences file or otherwise notifying us in writing. We may ask you to provide us, in your discretion, with additional information regarding your personal or business interests, experience, or requests, which we may use to customize our services for you.
We may use your email address, your mailing address, and phone number to contact you regarding administrative notices and communications relevant to your use of our site.
If you place a request for goods or services, we use your information to deliver your order. Third-party providers handle payments for goods and services ordered from us through our site. This provider, as well as other providers, may collect additional information, including billing information, credit card number, expiration date, and security code, and tracking information from checks or money orders. If you obtain goods or services directly from one of the retailers or service providers, we may exchange with the vendor personally-identifying information about you for purposes of your transaction.
We may also use or disclose information to: (a) resolve disputes; (b), investigate problems; (c) enforce our Website User Agreement (Terms of Use); (d) protect our operations or those of any of our affiliates; (e) protect our rights, privacy, safety, or property, and that of our affiliates, you, or others; and (f) allow us to pursue available remedies or limit the damages that we may sustain. At times, we may review the status or activity of multiple users to do so. We may disclose or access information whenever we believe in good faith that the law so requires or if we otherwise consider it necessary or advisable to do so to maintain service and improve our goods and services. In addition, as our business changes, we may buy or sell various assets. In the event all or a portion of assets owned or controlled by us or our affiliated entity are sold, assigned, transferred, or acquired by another company, the information from and about our website users may be among the transferred assets.
We use your IP address to help diagnose problems with our server, to manage our website, and to enhance our site based on the usage pattern data we receive.

Security

We employ reasonable and current security methods designed to prevent unauthorized access, maintain data accuracy, and ensure correct use of information.
To use some of our services, you may be required to set up a password-protected account or profile on our website. We recommend that you do not divulge your password to anyone. It is your responsibility to keep your password protected. Our employees and representatives will never ask you for your password in an unsolicited phone call or in an unsolicited email. Remember to sign out of your account, close your browser window, and delete your temporary Internet files when you have finished your session. This precaution helps ensure that others cannot access your personal information and correspondence if you share a computer with someone else or are using a computer in a public place where others may have access to it.
Whenever you voluntarily disclose personal information online — for example, on message boards or blogs, through email, or in chat areas — that information can be collected and used by others.
No data transmission over the Internet or any wireless network can be guaranteed to be perfectly secure. As a result, while we try to protect your personal information, we do not and cannot ensure or guarantee the security of any information you transmit to us, and you do so at your own risk.

International Users

We maintain information in the United States of America and in accordance with the laws of the United States, which may not provide the same level of protection as the laws in your jurisdiction. By using our website and providing us with information, you understand and agree that your information may be transferred to and stored on servers located outside your resident jurisdiction and, to the extent you are a resident of a country other than the United States, that you consent to the transfer of such data to the United States for processing by us in accordance with this Privacy Policy.

European Union GDPR Rights

In this Section 6, we have summarized certain rights that you may have under the European Union General Data Protection Regulation 2016/679 (“GDPR”), and this Section 6 is only applicable if you are a data subject covered by the GDPR. Some aspects of GDPR are complex and we do not purport to provide all of the details below. Therefore, you should familiarize yourself with the GDPR and relevant guidance from the applicable regulatory authorities for a full explanation of these rights.
Your principal rights under GDPR are the rights to: (a) access; (b) rectification; (c) erasure; (d) restrict processing; (e) object to processing; (f) data portability; (g) complain to a supervisory authority; and (h) withdraw consent.
You have the right to confirm whether or not we process your personal data and, when and where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned, and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. We will provide the first copy free of charge, but additional copies may be subject to a reasonable fee.
You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: (a) when the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) when you withdraw consent to consent-based processing; (c) when you object under certain rules of GDRP to the processing; (d) when the processing is for direct marketing purposes; and (e) when the personal data have been unlawfully processed. However, there are exceptions to and exclusions from the right to erasure. They include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; and for the establishment, exercise or defense of legal claims.
In some circumstances you have the right to restrict the processing of your personal data. Those circumstances are: (a) when you contest the accuracy of the personal data; (b) when processing is unlawful but you oppose erasure; (c) when we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise, or defense of legal claims; and (d) when you have objected to processing, pending the verification of that objection. Where processing has been restricted on this basis, we may continue to store your personal data. However, we will otherwise process it only with your consent; for the establishment, exercise, or defense of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.
You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary, to carry out a task in the public interest or in the exercise of any official authority vested in us or for the purposes of the legitimate interests pursued by us or by a third party. If you notify us of such an objection, we will cease to process the personal information except in the event of compelling legitimate grounds for the processing that override your interests, rights and freedoms, or when the processing is for the establishment, exercise, or defense of legal claims.
You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you notify us of such an objection, we will stop processing your personal data for this purpose.
You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary to carry out a task for reasons of public interest.
To the extent that the legal basis for our processing of your personal data is (a) consent or (b) that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used, and machine-readable format. However, this right does not apply where it might adversely affect the rights and freedoms of others.
If you consider that our processing of your personal information infringes data protection laws, we hope that we can resolve any query or concern you raise with us about our use of your information. However, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.
To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
You may exercise any of your rights in relation to your personal data by written notice to us via any of the contact information described in Section 8.

California Residents – Your California Privacy Rights

California Civil Code Section 1798.83 permits California residents to request from us certain information regarding the disclosure of certain categories of personal information to third parties for their direct marketing purposes within the immediately preceding calendar year. A company may also comply with the law by disclosing in its privacy notice that it provides consumers choice (opt-out or opt-in) regarding sharing personal information with third parties for those third parties’ direct marketing purposes (as we do), and information on how to exercise that choice.
If you are a California resident and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please send your request to us via the email address or the mailing address set forth in Section 8. You must put the statement “Your California Privacy Rights” in the subject field of your email or include it in your writing if you choose to write to us at the designated mailing address. You must include your name, street address, city, state, and zip code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.
If you are a California resident under the age of 18, and a registered user of our website, California Business and Professions Code Section 22581 permits you to request and obtain removal of content that you have publicly posted. To make such a request, please send an email with a detailed description of the specific content to us via the email address set forth in Section 8. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information that you have posted and there may be circumstances in which the law does not require or allow removal even if requested.
To the extent the California Consumer Privacy Act of 2018 applies to our collection of information that identifies or relates to you or your household, you may have a number of important rights free of charge. In summary, those rights may include: (a) the right to know the categories of personal information to be collected and the purposes for which the information will be used (see Sections 2 and 3 above); (b) the right to know the categories of personal information that were actually collected in the preceding 12 months and sold or disclosed for business purposes in the preceding 12 months (see Sections 2 and 3 above); (c) the right to require us to respond to verifiable requests with disclosures about our collection, sale, or disclosure of your personal information (such requests may be made by contacting us as described in Section 8 below); (d) the right to access a copy of the specific pieces of personal information that we have collected about you (see Section 8 below); (e) the right to request that we delete, and request any third-party service providers to delete, any personal information collected about you (see Section 8 below); and (f) the right to opt out of the sale of your personal information to third parties, if you have previously given us permission to do so, since we do not sell or rent personally-identifying information collected during your use of the website without your permission (such requests may be made by contacting us as described in Section 8 below)

How You Can Update, Correct, or Delete Your Information

You may access the information that we collect online and maintain through normal updating methods. To access, update, correct, or request deletion of this information, you may contact us by email at [~ email address ~], by fax at [~ number ~], by phone at [~ number ~], or by mail at [~ address ~]. Your account can be deleted or deactivated, but doing so will result in your not being able to access certain services. During the normal course of doing business, we will continue to share your information among our business units, our affiliates, and unaffiliated third parties as necessary in order to service your accounts and fill any orders you place with us.

Children Under 13

We do not intentionally collect information from children under the age of 13. Our website is not directed to children under the age of 13 and we request that these children not provide personal information through our website. If a child under 13 has provided us with personally-identifying information without parental or guardian consent, the parent or guardian should contact us to remove the information and opt out of promotional opportunities or other applicable services. Without prior parental consent, we shall use the personally-identifiable information of a child under 13 only to respond to such a child’s request and for no other purpose.

Changes to Our Policy

We reserve the right to change, add, modify, or remove portions of our Privacy Policy at any time. Any changes to our Privacy Policy will be communicated through our website and will become effective immediately as of the last updated date set forth above. Please continue to check our Privacy Policy from time to time to learn about any changes to our privacy practices. Information collected before changes are made will be secured according to the previous Privacy Policy.

Your Consent

By using our website, you consent to the collection and use of this information in the manner described in this Privacy Policy.