Company Privacy Policy | Eat Milton's

Last Updated: June 3, 2026

We at Milton’s Baking Company (“Milton’s,” “us,” “we,” or “our”) are avid web users like you and hate spam just as much as you do. We are serious about protecting your privacy. This Privacy Policy (“Policy”) describes the information we collect about you (“Personal Information”), why we collect it, how we use it, how we share it with third parties, and informs you of your choices related to our collection and use of that information. If our information practices change, we will post an updated policy on our website.
This Policy covers information collected through offline or online methods, including when you visit the Milton’s website at www.eatmiltons.com (the “Site”), contact us by phone or email, subscribe to our mailing lists, enter a sweepstakes/contest sponsored by us, or when you engage with us on social networking sites including Facebook, Instagram, Twitter, and Pinterest.

EU Privacy - GDPR

If you are a resident of the European Union (EU) and/or European Economic Area (EEA) please click here [LINK] for an additional privacy notice applicable to you.

U.S. State Privacy Laws

If you are a California resident, please also see our California Notice [Add Link to the CCPA/CPRA Notice].
If you are a Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, OR Virginia resident, please also see our Multi-State Notice [Add Link to the Multi State Notice].

Arbitration

Please note the arbitration provision set forth below, requiring you to arbitrate any claims you may have against Milton’s on an individual basis. ARBITRATION ON AN INDIVIDUAL BASIS MEANS THAT YOU WILL NOT HAVE, AND YOU WAIVE, THE RIGHT FOR A JUDGE OR JURY TO DECIDE YOUR CLAIMS, AND THAT YOU MAY NOT PROCEED IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE CAPACITY. For more information click here.

YOUR CONSENT

Please review this Policy periodically, and especially before you provide any Personal Information to us. You should read this entire Policy before submitting information, including personal information, to us in any form or using our Site. By accessing or using the Site or submitting information to us, you consent to the data practices described in this Policy.
All Personal Information may be used for the purposes stated in this Policy. We may make full use of all information that is de-identified, aggregated, or otherwise not in personally identifiable form. We may also make full use of all user-generated content you submit to us, in accordance with our Terms of Use [Add link to Terms of Use].

TYPES OF DATA WE COLLECT

We collect Personal Information about you in the following ways: (1) from you when you choose to voluntarily provide it; (2) using automated technology, including when you visit our Site or interact with our electronic advertisements or communications; and (3) third party sources, including but not limited to service providers, entities providing data analysis and analytics, social media and social networking websites and other entities. Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. More information is given in the “Cookies and Other Technology” section below.
All Personal Information may be used for the purposes stated in this Policy. We may combine data collected from third party sources.

Personal Information

Milton’s collects Personal Information, such as your email address, name, address, or telephone number based on your communications with us including submission of forms on the Site and communications via email, telephone call, other electronic messages.
We collect information about you through your browser, computer hardware and software. This information can include your IP address, device ID, browser type, domain names, access times and dates, number of clicks, pages viewed, one or more cookies (as described below) that may uniquely identify your browser, and referring website addresses. This information is used by Milton’s for the improvement of our Site.
We also collect information such as product preferences, store where you purchased our product(s), and feedback if you choose to provide it to us through the Site, email and/or telephone call.

HOW WE USE YOUR PERSONAL INFORMATION

We use Personal Information of customers for a wide range of purposes, including:

• to respond to your requests and feedback;
• to allow you to post information and other content online;
• to improve our products, business, and Site;
• to follow up with you after you have communicated with us or submitted information to us through the Site or via email;
• to manage our business such as fraud prevention purposes, determining usage pattern of our consumers, complying with legal obligations, establishing, exercising or defending a legal claim, monitoring and reporting compliance issues;
• for analytics and profiling technology to customize your experience, statistical purposes, deliver content (including advertising) tailored to your interests and how you use our Site, to market to you through targeted advertising;
• to send promotional communications or offers (unless you have requested that we not send such communications);
• for marketing, research and legal purposes and other purposes;
• to address your interests and concerns; and
• as otherwise specified at the point of Personal Information collection.

OTHERS WITH WHOM WE MAY SHARE YOUR PERSONAL INFORMATION

Service Providers and Contractors
We disclose Personal Information you provide to consultants, service providers, and contractors that we use to support our business and operations who have agreed to keep the information confidential and use it only to provide the applicable service(s) such as vendors that help us communicate with you, vendors that host our website and data, security and fraud detection vendors.

Third Parties and Vendors
We disclose Personal Information to third parties we work with who help us gather information from you and communicate with you including entities that provide sweepstakes/contests sponsorship, social media companies, companies providing data analytics, targeted advertising, or online behavioral marketing services.

Administrative or Legal Obligations
We may disclose Personal Information to third parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; to identify, contact or bring legal action against someone who may be causing injury to or interfering with our (or others’) rights or property; to support any actual or threatened claim, defense or declaration in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; or in connection with disciplinary actions/investigations.

Sale or Corporate Restructuring
We may disclose Personal Information to third parties in connection with the sale, assignment or other transfer of the business of our website or the sale, assignment, merger, reorganization or other transfer of our brand or company.

HOW WE USE "COOKIES AND OTHER TECHNOLOGY"

An IP address is the unique number that is automatically assigned to your computer when you log onto the Internet. As you enter the Site, our server records and monitors your IP address and uses it to develop statistical analysis. These analyses assist us in refining and adapting the content and design of our site. The use of IP addresses also enables us to prevent malicious Internet users from masquerading as other users.

Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. A cookie is a small piece of information sent by a website that is saved on your hard drive by your computer’s browser. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags.

As you access or use our Site, we and/or third parties may collect information using cookies, web beacons, pixels, and navigational and location data collection (clickstream, log files, server logs) for the purposes described in this Policy. Such automated technologies further help us to keep track of your interactions with our website and provide you with a more customized experience.

To find more information about cookies please visit www.allaboutcookies.org. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won’t be able to enjoy the convenience provided by our customization.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

CROSS-BORDER DATA TRANSFERS

Transfers to Third Parties

Courts, tribunals, government authorities and related parties or counterparties with whom we share personal data, third-party vendors and business partners may in some cases be located outside your country of residence. Milton’s will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy.

THIRD PARTY ADVERTISING AND ANALYTICS DISCLAIMER

We and/or third-parties including advertising companies, social networking sites, and service providers on our behalf, use cookies, web beacons and other similar technology, to collect information for the purposes described in this Policy including advertising, analytics, online behavioral marketing, monitoring performance and improvement of our online services (traffic, errors, page load time, popular pages, etc.).

You may opt out of behavioral remarketing as follows:

Analytics

Google Analytics and Facebook Pixel. We use Google Analytics and Facebook Pixel to understand how our website, services, and products perform, how you use them, and to serve you with ads on third-party websites and social networking sites like Facebook. To learn more about how Google processes your data, please visit: https://www.google.com/policies/privacy/
To opt out of Google Analytics, please install the Google Analytics Opt-out Browser Add-on by visiting: https://tools.google.com/dlpage/gaoptout
To learn more about how Facebook uses your data, please visit: https://www.facebook.com/policy.php

Advertising and Behavioral Remarketing

We use remarketing services to advertise on third-party websites to you after you visit our Website, applications, and other online services.

Facebook. To understand more about Facebook advertising and manage your preferences, please visit: https://www.facebook.com/about/ads. Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.

Google Ads. To opt out of Google Ads, please visit: http://www.google.com/settings/ads

Pinterest. You can opt-out from Pinterest’s interest-based ads by enabling the “Do Not Track” functionality of your web browser or by following Pinterest instructions: https://www.pinterest.com/settings and updating your “Personalization” preferences.

Microsoft. To learn more about how Microsoft uses your data across its products and manage your privacy preferences, please visit: https://account.microsoft.com/account/privacy?refd=account.microsoft.com&ru=https%3A%2F%2Faccount.microsoft.com%2Fprivacy%2F%3Frefd%3Daccount.microsoft.com&destrt=privacy-dashboard. Information on Microsoft Advertising and opt-out choices is available here: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads

Instagram. To learn more about Instagram Ads and to exercise your choices, please visit: https://help.instagram.com/478880589321969/?helpref=hc_fnav&bc[0]=Instagram%20Help&bc[1]=Managing%20Your%20Account

Digital Advertising Alliance

You can also opt out from companies like Google, Instagram, Pinterest, Facebook and other participating companies through the Digital Advertising Alliance in the USA: http://www.aboutads.info/choices/. You can also opt out of participating companies from the Digital Advertising Alliance of Canada in Canada: http://youradchoices.ca/ or the European Interactive Digital Advertising Alliance in Europe: http://www.youronlinechoices.eu/, or opt out using your mobile device settings.

This Policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third parties’ privacy policies. For more information, we encourage you to check the privacy policies of these third parties to learn about their privacy practices.

EXTERNAL LINKS

We may make available third party applications through our Site and social media applications for your use. Links to such applications, any other websites included in this Site or links on our social media accounts operate with privacy policies beyond our control. Unless otherwise indicated, once you have left our Site or our social media account, all use of information you provide is governed by the privacy policy of the other website’s or social media account’s operators. We are not responsible for any transactions that occur between you and a third-party website or social media account.

PRIVACY OF CHILDREN

We are committed to children’s privacy. We do not knowingly collect or maintain Personal Information on the Site from persons under 13 years of age, and no part of our Site is directed to persons under 13. If you are under 13, please do not use or access the Site at any time or in any manner. If Milton’s learns that Personal Information of persons under 13 years of age has been collected on the Site without verified parental consent, then Milton’s will take appropriate steps to delete the information.

SECURITY

We have adopted reasonable and appropriate security procedures to help protect against loss, misuse and unauthorized access, to the Personal Information you provide to use. Please note, however, that there is no such thing as perfect security, and no Internet transmission is ever completely secure or error-free. When you provide us with your name and contact information, they are automatically recorded in a Windows server operating environment via an SQL database using an Always Encrypted Database Engine that is owned and managed by Milton’s. On rare occasion, user contact information may be stored via an offline datastore (i.e., paper) and within a locked facility and only accessible by Milton’s staff.

Every 90 calendar days, this offline datastore is evaluated and all records no longer in active use are shredded via an in-house cross-cut DIN Level 3-4 or better shredder. Technical infrastructure security is managed, updated, and maintained via a third-party IT Support and Cybersecurity NIST-compliant firm located in San Diego, CA.

OPT-IN EMAILS AND OFFERS

You may elect to receive information from us about new products and other noteworthy news items, by registering as a user on our Site, subscribing to our mailing list, and signing up to receive texts from us. You may always choose to decline to receive these communications at any time. Please see our opt-out policy described below.

YOUR OPT-OUT EMAIL CHOICES

Our users are given the opportunity to opt out of emails and communications to which they have previously opted in. This does not apply to emails that relate to our Site information, Terms of Use, or that are automatically generated by the system (registration confirmation emails). For example, even if you have unsubscribed from our promotional email messages, we will still send you confirmations when you register for any of our services. Users who no longer wish to receive our promotional communications, our newsletter or blog may opt out of receiving these communications by clicking on the Unsubscribe link provided in emails or can unsubscribe by emailing us at: believer@eatmiltons.com

The option to cancel mailings

Upon registering, you may begin receiving communications from us. If at any time you wish to unsubscribe from our mailings, please just ask by emailing us at: believer@eatmiltons.com

ARBITRATION; CLAIMS MUST BE BROUGHT ON AN INDIVIDUAL BASIS

By using the Site, you agree that any dispute in any manner arising out of or relating in any way to this Privacy Policy, its enforcement or interpretation, or because of an alleged breach, default, or misrepresentation in connection with any of its provisions, shall be submitted to binding arbitration with Judicial Arbitration and Mediation Services, Inc. (“JAMS”) in the San Diego, California area. ARBITRATION MEANS THAT YOU WILL NOT HAVE AND YOU WAIVE THE RIGHT FOR A JUDGE OR JURY TO DECIDE YOUR CLAIMS. Rights to the prehearing exchange of information and other discovery, as well as appeal rights, are more limited than were you to sue in court.

This arbitration provision is equally binding on claims brought by us as on claims brought by you or others. Arbitrations will be conducted under the applicable JAMS rules. The parties to arbitration will have all the same claims, legal rights, and remedies in arbitration that would be available in court. A single neutral arbitrator shall be selected in accordance with the JAMS Streamlined Arbitration Rules, which shall provide you a reasonable opportunity to participate in the arbitrator selection. It is further agreed that any disputes as to whether the scope of this arbitration provision covers the claim will be submitted to the arbitrator, and not a court, for decision. The parties to arbitration will have full right to use legal counsel at their own expense. All costs of arbitration (including arbitrator fees) shall be paid by us, except if you bring the arbitration, you may be charged an initial filing fee that shall not exceed the filing fees that you would incur for bringing an action in court. You will not be required to pay fees and costs incurred by the opposing parties if you do not prevail in arbitration. In arbitration, the parties may conduct reasonable discovery and shall reasonably exchange non-privileged information relevant to the dispute. The arbitrator’s award shall be in writing and provide a written statement of the essential findings and conclusions. The arbitrator will not have the power to commit any error of law or legal reasoning, and the award may be vacated or corrected on appeal to a court of competent jurisdiction for any such error. As an exception to this arbitration provision, no one subject to the provision will be precluded from seeking remedies for disputes or claims less than $10,000 in the aggregate that can be brought in a court of competent jurisdiction.

ANY ARBITRATION SHALL BE CONDUCTED ONLY ON AN INDIVIDUAL BASIS AND NOT IN A CLASS, CONSOLIDATED, OR REPRESENTATIVE CAPACITY. It is expressly understood and agreed that neither you nor we are entitled to arbitrate or bring any dispute covered by this arbitration provision as a class, consolidated, representative, collective, or private attorney general action, and the arbitrator(s) will have no authority to proceed on a class, consolidated, representative, collective, or private attorney general action basis. This means:

• You cannot bring a claim as a plaintiff or class member in a class action, consolidated action or representative action.
• The arbitrator cannot combine more than one person’s claim into a single case, and cannot preside over any consolidated, class or representative arbitration proceeding (unless we both agree to change this).
• The arbitrator’s decision or award in one person’s case can only impact the person who brought the claim, not other Milton’s customers, and cannot be used to decide other disputes with other customers.

If any part of the agreement to arbitrate in this section is found unenforceable, the unenforceable term will be severed and the remaining arbitration terms will be enforced (but in no case will there be a class, representative or private attorney general arbitration). In the event that any of the class action restrictions are ever deemed illegal or unenforceable, the illegally deemed or unenforceable restriction(s) shall be severed from this arbitration provision, and any class action shall be exempted from this arbitration provision and brought in court. This arbitration provision is subject to the Federal Arbitration Act, and may be enforced in any court of competent jurisdiction.

QUESTIONS

For information and questions about the use of your Personal Information or this Privacy Policy, you may contact us at: Milton’s Craft Bakers, 5973 Avenida Encinas, Suite 304, Carlsbad, CA 92008 USA, Phone 858-350-9696.

CHANGES TO THIS STATEMENT

Milton’s may occasionally update this Privacy Policy to reflect feedback from users like you and to reflect changes in our policies. We encourage you periodically to review this Privacy Policy to be informed of how Milton’s is protecting your information. In general, we only use your Personal Information in the manner described in the Privacy Policy in effect when we receive the Personal Information you provided. Your continued use of the Milton’s Website after any such updates constitutes your agreement to this Privacy Policy and any future revisions. IF YOU DO NOT AGREE TO FUTURE CHANGES TO THIS PRIVACY POLICY, YOU MUST STOP USING THE SERVICES AFTER THE EFFECTIVE DATA OF SUCH CHANGES.

NOTICE TO EU DATA SUBJECTS

PERSONAL INFORMATION

With respect to EU data subjects, “personal information,” as used in this Privacy Policy, is equivalent to “personal data” as defined in the European Union General Data Protection Regulation (GDPR).

HOW INFORMATION IS COLLECTED, USED AND DISCLOSED

We may collect certain personal information for various purposes, and we may disclose such information to various third parties. For more information on what types of personal information is collected, from what sources, for which purposes, and how that information is disclosed, please click here.

LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR)

If you are a resident of the European Economic Area (EEA), Milton’s legal basis for collecting and using the Personal Information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect it. In addition, we process Personal Information with the principle of data minimization in mind. This means that we limit ourselves to the minimum amount of Personal Information which is needed to achieve the particular purpose for which we process the Personal Information. Below are some examples of the purposes for which Personal Information may be processed.

Milton’s may process your Personal Information because:
• The processing is necessary to provide the services and features you have requested;
• The processing is necessary to perform a contract with you;
• The processing is necessary for the legitimate interests of our business, such as fraud prevention, information security, direct marketing, or to comply with the law;
• To fulfill a legal obligation;
• You have provided consent for us to do so.

RETENTION OF PERSONAL INFORMATION

SECURITY

We have adopted reasonable and appropriate security procedures to help protect against loss, misuse, and unauthorized access to the information you provide to us. Please note, however, that no data transmission or storage can be guaranteed to be 100% secure. As a result, while we strive to protect your information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to the Site and cannot be responsible for the theft, destruction, or inadvertent disclosure of your information.

COOKIE POLICY

An IP address is the unique number that is automatically assigned to your computer when you log onto the Internet. As you enter the website, our server records and monitors your IP address and uses it to develop statistical analysis. These analyses assist us in refining and adapting the content and design of the Site. The use of IP addresses also enables us to prevent malicious Internet users from masquerading as other users.

Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. A cookie is a small piece of information sent by a website that is saved on your hard drive by your computer’s browser. A “web beacon” is a small object or image that is embedded into a web page, application, or email and is used to track activity. They are also sometimes referred to as pixels and tags.

As you access or use the Site, we and/or third parties may collect information using cookies, web beacons, pixels, and navigational and location data collection (clickstream, log files, server logs) for the purposes described in this Policy. Such automated technologies further help us to keep track of your interactions with our website and provide you with a more customized experience.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are required for the operation of our website. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website.
• Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works.
• Functionality cookies. These are used to recognize you when you return to our website so that we can personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

At any time, you can modify your cookie settings [Add Link to adjust cookies]. You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

To find more information about cookies please visit www.allaboutcookies.org. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use. By disabling cookies, you won’t be able to enjoy the convenience provided by our customization.

CROSS-BORDER DATA TRANSFERS

Your information, including Personal Information, may be transferred to—and maintained on—computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside of the United States and choose to provide information to us, please be aware that your personal data will be transferred to, processed, and stored in the United States. Data protection laws in the U.S. may be different from those in your country of residence. We transfer your personal information out of the EEA only upon your consent. You consent to the transfer of your information, including personal information, to the U.S. as set forth in this Privacy Policy by visiting our Site.

Whenever we transfer your personal information out of the EEA to the U.S. or countries not deemed by the European Commission to provide an adequate level of personal information protection, the transfer will be based on a data transfer mechanism recognized by the European Commission as providing adequate protection for personal information.

Transfers to Third Parties

Courts, tribunals, government authorities and related parties or counterparties with whom we share personal data, third-party vendors and business partners are in some cases located outside the EU. Unless the recipients are located in countries that have been deemed adequate by the European Commission, we put in place data transfer agreements based on the applicable European Commission-approved Standard Contractual Clauses to protect the personal data so transferred. In certain cases, we may rely on statutory derogations for international data transfers.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal information out of the EEA. Milton’s will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy.

YOUR DATA PROTECTION RIGHTS UNDER THE GDPR DATA PRIVACY LAWS

The Data Controller

The Data Controller who collects and processes your Personal Information is: Milton’s Craft Bakers, 5973 Avenida Encinas, Suite 304, Carlsbad, CA 92008.

Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Barring certain situations, you have the following data protection rights:

• The right to access, update or erasure of the information we have on you. You have the right to access, update and erase your Personal Information.
• The right of rectification. You have the right to have your Personal Information corrected if that information is inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your Personal Information.
• The right of restriction. You have the right to request that we restrict the processing of your Personal Information.
• The right to data portability. You have the right to be provided with a copy of the information that we have on you in a structured, machine-readable and commonly used format.
• The right to withdraw consent. You have the right to withdraw your consent at any time where Milton’s relied on your consent to process your Personal Information.
• The right to know about automated decisionmaking. As a data subject you also have the right to not be subject to decisions based on automated decision making alone, including profiling, and which may lead to legal consequences for you. This right does not apply if such processing is necessary in order for Milton’s to enter into or fulfil an agreement with you, if such processing is allowed according to applicable legislation, or if the legal basis for such processing is your consent.

Milton’s has implemented reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information via the online submission form at: https://appliedsense.io/pda-request. If you wish to be informed of the type of Personal Information we hold about you and/or if you wish to remove such Personal Information from our systems, please contact us at: Vice President of Marketing & Innovation, Milton’s Craft Bakers, 5973 Avenida Encinas, Suite 304, Carlsbad, CA 92008 USA, Phone 858-350-9696. Please note that for your safety and security, we may ask you to verify your identity before responding to such requests.

Within the EU, all user data privacy protections and concerns may be sent to Milton’s EU/UK GDPR representative: Milton’s Craft Bakers c/o Fairway GB Ltd. 17 The Crescent, Salford M5 4PF UK, or at: privacy@miltonsbaking.com.

CALIFORNIA CONSUMERS ONLY: Your California Privacy Rights

This Privacy Rights Act Notice (“Notice”) provides additional information to California residents whose Personal Information is collected by Milton’s pursuant to California law, including the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). If you are not a California resident, this Notice does not apply to you. Please visit our Privacy Policy (“Policy”) for more information. Any capitalized terms undefined in this Notice have the same definition as the Policy.

RIGHT TO KNOW ABOUT PERSONAL INFORMATION COLLECTED, DISCLOSED, OR SOLD AND SHARED

Information Collected

Within the past 12 months, we have collected the categories of Personal Information about California consumers as described in Annex 1 to this Notice. To review these categories click here.

Business-to-Business (“B2B”) Information

If you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship, we collect the contact information you provide to us, including name, phone number, address, email address and other contact and relationship information consistent with your role in facilitating that business relationship. We use that information for internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship. We do not disclose that information outside our business relationship without your consent. See our B2B Privacy Notice [Link] for more details.

Information Sold or Shared, or Disclosed

We are committed to maintaining your trust, and we want you to understand when and with whom we may share the information we collect. We will share your Personal Information with third parties only in the ways that are described in this Privacy Policy.

As explained in Annex 1 (add link to Annex 1) of this Policy, we share your data with third-party partners such as social networking sites and advertising companies in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below.

We have sold or shared the following categories of Personal Information in the preceding 12 months:
• Personal Identifiers;
• Commercial Information; and,
• Internet/Network Activity

We have disclosed the following categories of Personal Information for a business or commercial purpose in the preceding 12 months:
• Personal Identifiers;
• Commercial Information; and,
• Internet/Network Activity

We do not sell the Personal Information of individuals under 16 years of age without affirmative authorization.

For details regarding the categories of third parties with whom we have shared, sold, or disclosed Personal Information, please see Annex 1 [LINK TO ANNEX 1].

CPRA RIGHTS AND REQUESTS

Under the CPRA, you are entitled to certain rights, and you can make requests with regard to those rights as follows:
Right to Know about the Categories of Personal Information Collected (“Right to Know”)
Right to Request Deletion of Personal Information (“Right to Delete”)
Right to Correct or Rectify Inaccurate Information about you (“Right to Correct”)

HOW TO MAKE YOUR REQUESTS TO KNOW, DELETE, OR CORRECT.

You have the right to make requests for the aforementioned rights (Request to Know; Request to Delete; or a Request to Correct (a “Request”)).

To make a Request for any of the information set forth above, please submit a verifiable consumer request pursuant to the instructions below. The Request must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected, sold, shared, or disclosed and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request. We will acknowledge your Request within 10 business days and will attempt to respond substantively within 45-90 days.

You may make a Request the following ways:
• You may make a request here.
• You may also make a request by phone by contacting us at 888-457-3783.

Once we receive your Request, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with two or three pieces of information that will help us to verify your identification.

We will review all information provided by you to us, to determine whether we can respond to your Request We will inform you of our decision to deny or grant your Request.

For any Requests to Know, you may make such Requests twice within a 12-month period.
For Requests to Correct, you will need to provide evidence supporting the inaccuracy of the current information, and we reserve the right to delete the information instead of correcting if such deletion does not impact you or you consent to the deletion.

We will retain correspondence, documents and information related to any Request for 24 months as required by law.

ADDITIONAL CPRA RIGHTS

Right to Know Sensitive Personal Information Collected

We do not collect or process sensitive personal information for the purpose of inferring characteristics.

Right to Opt-Out of Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your Personal Information (“Request to Opt Out”). As explained in Annex 1 (add link to Annex 1) of this Policy, we share your data with third parties such as social networking sites and advertising companies, in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” under the CPRA. You can control the information shared about you and request an opt-out as explained below. We will process your Request to Opt-Out of sale within 15 days.

You can make a Request to Opt Out in the following ways:

• You may make a request here – Do Not Sell or Share My Info [Add link to webform ].
• You may also make a request by phone by contacting us at [Add toll-free phone number].

Opt-out Preference Signals

We honor opt-out preference signals that you enable, including a Global Privacy Control. Opt-out preference signals are plug-ins available in certain browsers that signal to websites you visit of your preferences to opt out of the sale and sharing of certain personal information. If you have enabled an opt-out preference signal device from your browser, we will not sell or share your personal information without first seeking your explicit consent.

This Policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third-parties’ privacy policies. For more information, we encourage you to check the privacy policies of these third-parties to learn about their privacy practices.

Cookies

Cookies are small bits of code that are stored by your computer’s web browser and that may automatically identify your browser to the Services whenever your computer is used to visit the Services. Pixel tags are very small images or small pieces of data embedded in images, also known as “web beacons” or “clear GIFs,” that can recognize cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device.

To find more information about cookies please visit www.allaboutcookies.org.

ADDITIONAL OPTIONS TO OPT-OUT OF SALE OR SHARING

In addition to the above options to opt out of the sale or sharing of your information under the CCPA as described above, you have controls and choices with respect to collection and use of your information by third parties. These are summarized for you below. We do not control or maintain opt-out mechanisms for third party companies and are not responsible for their operation.

Advertising Opt-Out

You can opt out of sharing your information with third-party companies engaged in targeted advertising including social networking sites such as Google, Microsoft, Instagram, Pinterest and Facebook using the following tools provided through the AdChoices website powered by the Digital Advertising Alliance (DAA): For websites: http://optout.aboutads.info/?c=2&lang=EN. For mobile apps: http://www.aboutads.info/appchoices.

Google Opt-Out
If you would like to opt out of Google Analytics and Ads, you can. If you are on the web, you can opt out of Google Analytics by installing Google’s Opt Out browser add on: https://tools.google.com/dlpage/gaoptout, and you can opt out of interest-based Google ads using https://adssettings.google.com/u/0/authenticated.

Facebook Ad Preferences

To understand more about Facebook advertising and manage your preferences, please visit https://www.facebook.com/about/ads. Login to Facebook and go to Settings > Ads > Ad Settings (web) or Ad Preferences > Ad Settings (app) for more information.]

Pinterest. You can opt-out from Pinterest’s interest-based ads by enabling the “Do Not Track” functionality of your web browser or by following Pinterest instructions: https://www.pinterest.com/settings/ and updating your “Personalization” preferences.

Microsoft. To learn more about how Microsoft uses your data across its products and manage your privacy preferences, please visit https://account.microsoft.com/account/privacy?refd=account.microsoft.com&ru=https%3A%2F%2Faccount.microsoft.com%2Fprivacy%2F%3Frefd%3Daccount.microsoft.com&destrt=privacy-dashboard. Information on Microsoft Advertising and opt-out choices is available here: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads

Instagram. To learn more about Instagram Ads and to exercise your choices please visit: https://help.instagram.com/478880589321969/?helpref=hc_fnav&bc[0]=Instagram%20Help&bc[1]=Managing%20Your%20Account.

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights conferred by the California Consumer Privacy Act, including by exercising the rights specified herein.

AUTOMATED DECISION MAKING

We do not engage in automated processing or decision making.

NOTICE OF FINANCIAL INCENTIVE

From time to time, Milton’s may provide financial incentives to consumers who elect to participate in these programs and, in connection with such programs, allow us to collect and retain certain personal information, such as Identifiers (e.g., your name, email address, or phone number), and Commercial Information (e.g., your purchase history). These incentives may result in differences in the prices of our products offered to consumers (e.g., discounts and other promotions). For example, the financial incentives we may provide include discounts based upon purchase activity other periodic discounts for promotional purposes.

The material aspects of any financial incentive will be explained and described in its program terms or in the details of the incentive offer.

Participation in any financial incentive program is entirely optional and participants may withdraw from the program at any time. To opt-out of the program and forgo any ongoing incentives, please follow the instructions in the program’s terms and conditions, or contact us using the contact information below.

Each financial incentive or price or service difference related to the collection and use of personal information is based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer itself and the anticipated revenue generation that may be realized by rewarding brand loyalty and repeat purchases.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in Annex 1 [LINK] and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

AUTHORIZED AGENT INFORMATION

In order to allow an authorized agent to make a request on your behalf, please email us at: believer@eatmiltons.com to provide your written request and consent to an authorized agent. When your authorized agent makes a request related to your personal information, we will require the agent to provide the above written permission. We may also require that you verify your own identity directly with us at the time such a request is made.

OTHER CALIFORNIA DISCLOSURE INFORMATION

California Do Not Track Notice

Because there are not yet common, industry-accepted “do not track” standards and systems, the Site does not currently respond to Do Not Track signals. In addition, we may allow third parties to collect Personal Information from your activity on our website, as described in the “Information Collection and Use” section above and described in Annex 1 below [Add link to Annex 1.]

California Shine The Light Law Disclosure Information

Although we do not disclose to any third parties for their marketing purposes any personal information, California residents are entitled to receive the following disclosure information under California law.

Under California Law, California residents have the right to request in writing from businesses with which they have an established business relationship, (1) a list of the categories of personal information, such as name, address, e-mail address, and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (2) the names and addresses of all such third parties. To request the above information, please e-mail us at: believer@eatmiltons.com or write to us at: Milton’s Craft Bakers, 5973 Avenida Encinas, Suite 304, Carlsbad, CA 92008 with a reference to California Disclosure Information.

We will respond to such written requests within 30 days following receipt at the e-mail or mailing address stated above. If we receive your request at a different e-mail or mailing address, we will respond within a reasonable period of time, but not to exceed 150 days from the date received. Please note that we are required to respond to each customer only once per calendar year.

MULTI-STATE CONSUMER DATA PROTECTION ACT NOTICE

This Mutli-State Consumer Data Protection Act Notice (“Notice”) provides additional information to Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia residents.

The Notice below applies only to residents of those above mentioned states. Please see our Privacy Policy (“Policy”) for more information. Any capitalized terms undefined in this Notice have the same definition as the Policy.

RIGHT TO CONFIRM, ACCESS, AND DATA PORTABILITY

You have the right to confirm whether or not we are processing your personal data and to access such personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another controller without hindrance, where the processing is carried out by automated means.
We have collected the categories of Personal Information about residents of the above mentioned states as described in this Notice in Annex 1. To review these categories, click here. [LINK to Annex 1].

INFORMATION SOLD OR USED FOR TARGETED ADVERTISING

As explained in Annex 1 (add link to Annex 1) of this Policy, we and our third-party partners such as social networking sites and advertising companies, share your data in order to serve you with ads tailored to your preferences across various platforms. We also share your data with service providers to enhance user experience. This type of sharing may be considered a sale or sharing of information for targeted advertising purposes under certain state laws.

We have shared the following categories of personal Information for Targeted Advertising in the preceding 12 months (See Annex 1 for further details (add link to Annex 1)):
• Personal Identifiers
• Commercial Information
• Internet/Network Activity

We have shared the following categories of personal information for a business or commercial purpose in the preceding 12 months:
• Personal Identifiers
• Commercial Information
• Internet/Network Activity

For details regarding the categories of third parties with whom we have shared this information, please see Annex 1 (ADD LINK to Annex 1). You have the right to opt out of the sale or processing of your Personal Information for Targeted Advertising as set forth below.

RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION

You have the right to request the deletion of your Personal Information provided by or obtained about you (“Request to Delete”), subject to certain exceptions permitted by law.

RIGHT TO CORRECT PERSONAL INFORMATION (NOT APPLICABLE TO IOWA AND UTAH RESIDENTS)

You have the right to request that we rectify inaccurate information about you.

RIGHT TO OPT OUT OF SALE OR USE OF PERSONAL INFORMATION FOR TARGETED ADVERTISING

You have the right to opt-out of the sale or sharing of your Personal Information for targeted advertising (“Request to Opt Out”). As explained in Annex 1 (add link to Annex 1) of this Policy, we share your data with third parties such as social networking sites and advertising companies, in order to serve you with ads tailored to your preferences across various platforms. This type of sharing may be considered “selling” or “sharing” for targeted advertising. You can control the information shared about you and request an opt-out as explained below. We will process your Request to Opt-Out of sale within 15 days.

You can make a Request to Opt Out in the following ways:
• You may make a request here – Do Not Sell or Share My Info [Add link to webform ].
• You may also make a request by phone by contacting us at [Add toll-free phone number].

RIGHT TO OPT OUT OF PROFILING (NOT APPLICABLE TO UTAH RESIDENTS)

You have the right to opt out of the processing of your personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects (“Request to Opt Out of Profiling”). We do not process your personal data for profiling purposes.

RIGHT TO NON-DISCRIMINATION FOR EXERCISING CONSUMER PRIVACY RIGHTS

You have the right not to receive discriminatory treatment for exercising your privacy rights, including by exercising the rights specified herein. As the Right to Non-Discrimination is effective across the board, there is no specific “request” that you need to make in order to exercise this right.

HOW TO MAKE YOUR REQUEST TO CONFIRM, ACCESS, DATA PORTABILITY, CORRECT, DELETE (“Rights Request”)

You can make a Rights Request in the following ways:
• You may make a request here
• You may also make a request by phone by contacting us at 888-457-3783.

We will acknowledge your Request within 10 days and will attempt to respond substantively within 45-90 days.

You must provide sufficient information to allow us to verify that you are the person about whom the personal information was collected and must contain sufficient detail to allow us to properly understand, evaluate and respond to your request. If we cannot verify your identity, we will not be able to respond to your request.

Once we receive your Request, we will begin the process to verify that you are the person that is the subject of the request (the “Verification Process”). The Verification Process consists of matching identifying information provided by you with the information we have about you in our records. You will be asked to provide us with two or three pieces of information that will help us to verify your identity. We will retain correspondence, documents and information related to any Request to Know, Request to Delete, or Request to Opt-Out for 24 months as required by law.

RIGHT TO APPEAL (NOT APPLICABLE TO UTAH RESIDENTS)

You have the right to appeal our decision to deny any of your privacy rights requests above. Within 60 days of receipt of your appeal (45 days for Colorado residents), we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

If your appeal is denied and you remain unsatisfied with our response, you may contact your state’s Attorney General to submit a complaint or seek further assistance. For help locating your state’s Attorney General’s contact information, visit Consumer Resources - File a Complaint.” [make sure link is active and working before posting https://www.consumerresources.org/file-a-complaint/ ]

Making an Appeal

You can make an appeal in the following ways:
• Enter your appeal here [insert hyperlink ].

OPT-OUT PREFERENCE SIGNALS

COOKIES

As explained in our “Cookies and other technology” section (add link to the Cookies section in the main Privacy Policy), you can opt out of cookies using your browser. You may also exercise your right to opt-out of cookies using our Cookie Preference Center (Link to Cookie Banner).

Please Note:
• Opt-outs are device and browser based. You must opt out on each device and each browser where you want your choice to apply.

• Opt-outs maybe stored via cookies. If you clear cookies, your opt-out may no longer be valid and you must opt out again where you want your choices to apply.

• We may still share your Personal Information with our service providers that help us perform functions that are necessary for our business such as vendors that host our Site, analytics processors, etc. These entities are contractually obligated to keep this information confidential and not use it for any purpose other than for the services they provide to our business.

• You may still receive ads from us that are not tailored to your interests.

RETENTION OF PERSONAL INFORMATION

We will retain your Personal Information for as long as it is necessary for the purposes set out in the Privacy Policy [LINK] and to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

AUTHORIZED AGENT INFORMATION

ANNEX 1

Notice of Collection, Use, and Disclosure

We collect Personal Information from you in various ways and for various purposes as explained in the chart below.

If you would like to know more about our data collection and use policies, please consult our full Privacy Notice [Add link to main Privacy Policy]. To opt-out of sale of your information please click here: Do Not Sell My Info [Add link to Do-Not-Sell-My Info].

Category	Examples	Collected From	Purposes	Disclosed to	Sold or Shared	Retention Period
Personal Identifiers Commercial Information	Name, e-mail address, shipping address, postal code, telephone number. Products purchased, considered, reviewed or other purchasing or consuming habits including your product and store preferences.	When you access and use our Site, submit feedback on our Site or to the stores that sell our products (“store vendors”), enter in a contest or sweepstakes conducted by us (in connection with other companies), sign up for receiving email or mail subscriptions, participate in surveys, engage with us on social networking sites, or otherwise interact with us through our Site including making a submission on the Site, or communicating with us via email. We may also collect information from third-party sources, such as Amazon, Costco, social-networking services including Instagram and Facebook, third-party service providers, opt-in lists, publicly available data, consumer reporting agencies, other companies and referrals.	To provide customer service and support, follow up with you after you have communicated with us or submitted feedback to us regarding our products through our Site or our store vendors; To provide you with the products, services, and information you request and respond to correspondence that we receive from you; To identify your products and service preferences and notify you about product recalls or other information regarding the products you have purchased; To send promotional communications or special marketing offers about new or additional products, services, and promotions that might be of interest to you (unless you have requested that we not send such communications); Enhance, modify, or improve our business, Site, and products; For records, marketing, research, legal, and other business purposes; To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.	Consultants, service providers, and contractors that we use to support our business and operations (e.g. vendors hosting or operating our Site, data-storage vendors, customer service centers, entities that deliver communications on our behalf, and fraud detection service providers) who have agreed to keep the information confidential and use it only to provide the applicable services; Third party companies that assist us with data analytics such as Google and Facebook, data research, analyzing website metrics, entities including social networking sites such as Google, Facebook, Instagram, and Pinterest that assist us with targeted advertising, marketing, and behavioral remarketing; Third parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; An acquirer or successor-in-interest in the event of a reorganization, merger, sale, change of control, consolidation, joint venture, assignment, transfer or other disposition of all or any part of the business including any negotiation thereof; and Third-party advertisers or sponsors of contests, sweepstakes, discounts, and promotions that you enter into on the Site or social networking sites.	Y[1] - to opt out click here[2] . N	We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Internet/Network Activity	IP address, your device information, domain name, browser type and operating system, webpages viewed before and after visiting our Site, time spent on webpages, links clicks, pages viewed within Site, transactions entered into, site-navigation patterns.	Your computer or mobile device, through your online activities and interactions with us, including, without limitation, your use of our Site and services, your online activity on our Site, and on our social networking and social media channels or through our third-party sources, or communicating with us via email. We may also collect information from third-party sources, such as Amazon, Costco, social-networking services including Instagram and Facebook, third-party service providers, opt-in lists, publicly available data, consumer reporting agencies, other companies and referrals.	To provide, maintain administer and expand our Site; Analyze and track usage of our Site including social media accounts; Determine the popularity of our Site and social media accounts; To better understand how you use our Site, services, and products; Develop new products and service offerings; Enhance, modify, or improve our business, Site, and products; Provide you with a customized guest experience of our Site and present offers tailored to your personal preferences; To send promotional communications or offers including invitations taking surveys, and participating in promotions (unless you have requested that we not send such communications); For other marketing, research, legal, and other business purposes; To comply with our policies, procedures, and legal obligations, including complying with law enforcement or governmental authority requests, investigating fraudulent activity, resolving disputes, and enforcing our legal agreements and policies.	Consultants, service providers, and contractors that we use to support our business and operations (e.g. vendors hosting or operating our Site, data-storage vendors, customer service centers, entities that deliver communications on our behalf, and fraud detection service providers) who have agreed to keep the information confidential and use it only to provide the applicable services; Third party companies that assist us with data analytics such as Google and Facebook, data research, analyzing website metrics, entities including social networking sites such as Google, Facebook, Instagram, and Pinterest that assist us with targeted advertising, marketing, and behavioral remarketing; Third parties (including, without limitation, governmental agencies) if required to do so by law, regulation or court order; to respond to governmental and/or law enforcement requests; An acquirer or successor-in-interest in the event of a reorganization, merger, sale, change of control, consolidation, joint venture, assignment, transfer or other disposition of all or any part of the Team or its affiliates including any negotiation thereof.	Y - to opt out click here[3] .	We will retain your Personal Information for as long as it is necessary and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
Business-to-Business (“B2B”) Information	Name, phone number, address, email address and other contact and relationship information consistent with your role in facilitating the business relationship.	You, if you are a contact person for any of our business partners, vendors, distributors, suppliers, service providers, contractors, or other entities with which we have a business relationship or potential business relationship.	For internal purposes, including to contact you, send and receive information, and otherwise facilitate the business relationship.	We do not disclose B2B Information outside our business relationship without your consent.	N	We will retain your B2B Information for as long as it is necessary to fulfill the purposes outlined in this Policy and as otherwise needed to comply with applicable law and internal company policies.