CA Privacy Notice

This Privacy Notice for California Residents supplements the information contained in Eat Just, Inc.’s general Privacy Notice and applies solely to all individuals who reside in the State of California.

Effective Date:
September 1, 2021

We adopt this CA Privacy Notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this CA Privacy Notice. Terms capitalized herein but not defined, have the meanings assigned in the Privacy Notice.

Under the CCPA certain verified California residents have the following rights (“CCPA Rights”):

• You have the right to request and receive information on Eat Just’s data collection practices during the preceding twelve (12) months, including the categories of Personal Information we have collected, disclosed for a business purpose and/or sold; the sources from which we collected Personal Information; our business use of Personal Information; and the categories of third parties to whom we disclosed your Personal Information.

• You have the right to request and receive information on Eat Just’s data sharing practices including the categories of Personal Information we have shared for a business purpose or sold and the categories of third parties receiving such information.

• You have the right to request and receive the specific pieces of your Personal Information that we have collected.

• You have the right to have your Personal Information that we have collected deleted, subject to certain exceptions, including legal compliance.

• You have the right to opt-out of the sale of your Personal Information to third parties.

• You have the right not to be discriminated against because you exercised any of your CCPA Rights.

The CCPA rights described above do not apply to information collected in the employment context about our current, former or prospective employees or contractors (who receive separate disclosures under the CCPA) or to information collected about California business contacts (employees, owners, directors, officers, or contractors of companies, sole proprietorships, and other entities collected in the context of conducting due diligence regarding, or providing or receiving a product or service to or from, such companies, sole proprietorships, or entities). California business contacts have the right to tell us not to sell their information; please see below for how to exercise this right.

A. Personal Information We Collect

Eat Just collects the categories of Personal Information described in this Section A. We obtain the categories of Personal Information from individuals who provide information about themselves and through technology we employ such as cookies and similar technologies. Please note that not all information is collected from all users. We use the Personal Information as described in Section C of the Privacy Notice.

B. Recent Disclosures of Personal Information for a Business Purpose

Personal Information Disclosed: In the preceding twelve (12) months, Eat Just has disclosed the following categories of Personal Information for a business purpose:

• Identifiers.

• California Customer Records Personal Information categories.

C. Recent Sale of Personal Information

Personal Information Disclosed: In the preceding twelve (12) months we shared the following categories of Personal Information for monetary consideration or for other valuable consideration such as sharing with a third party that provides us with advertising, data analysis and security services, which may fall under the definition of for “other valuable consideration” which may be considered a ‘sale’ under the CCPA:

• Identifiers.

Third Parties Disclosed To: We have disclosed your Personal Information to the following categories of third parties:

• Marketing partners, payment processors, employee benefits providers, etc.

D. Exercising Your CCPA Rights

This section describes how to exercise your CCPA Rights.

Exercising access, data portability and deletion rights. To exercise the access, data portability and deletion rights described above, please submit a verifiable consumer request to us by either:

• Calling us at (844) 423-6637

• Emailing us at [email protected]

• Mailing us at 300 Wind River Way, Alameda, CA 94501

Only you, or your authorized agent, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a twelve (12) month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include:

• Email address

• Description of your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We may request that you submit a signed statement under penalty of perjury that you are the individual you claim to be if you make a request for data portability or for deletion of your information. We cannot respond to your request or provide you with personal information if we cannot verify your identity and confirm that the personal information relates to you.

Using an Authorized Agent. You may submit a request through someone holding a formal Power of Attorney. Otherwise, you may submit a request using an authorized agent only if (1) the person is registered with the Secretary of State to do business in California, (2) you provide the authorized agent with signed written permission to make a request, (3) you verify directly with us that you have authorize the person to make the request on your behalf, (4) you verify your own identity directly with us and (5) your agent provides us with proof that they are so authorized. We will require the agent to submit proof to us that they have been authorized to make requests on your behalf.

Response Timing and Format. We endeavor to confirm receipt of a data access, portability or deletion request within ten (10) business days, and provide information about how we will verify your identity and process the request. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the twelve (12) month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a secure format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

We are not required to search for Personal Information if all of the following conditions are met:

• We do not maintain the Personal Information in a searchable or reasonably accessible format.

• We maintain the Personal Information solely for legal or compliance purposes.

• We do not sell the Personal Information and do not use it for any commercial purpose.

• We describe to you the categories of records that may contain Personal Information that we did not search because of the conditions stated above.

Deletion Requests. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.

• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

• Debug products to identify and repair errors that impair existing intended functionality.

• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.

• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).

• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.

• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

• Comply with a legal obligation.

• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Personal Information Sales Opt-Out and Opt-In Rights. We may share your information for monetary consideration or for other valuable consideration such as sharing with a third party that provides us with advertising, data analysis and security services, which may fall under the definition of for “other valuable consideration” which may be considered a ‘sale’ under the CCPA. We do not sell personal information of individuals we actually know are less than 16 years of age.

If you are 16 years of age or older you have the right to direct us to not sell your Personal Information at any time (the “right to opt-out”). To exercise the right to opt-out, you (or your authorized agent, after providing written permission signed by you) may submit a request to us by contacting Eat Just through the communication channels listed in the Privacy Notice.

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize Personal Information sales. However, you may change your mind and opt back in to Personal Information sales at any time by contacting Eat Just through the communication channels listed the Privacy Notice.

You do not need to create an account with us to exercise your opt-out rights. We will only use Personal Information provided in an opt-out request to review and comply with the request.