INFORMATION FOR CALIFORNIA CONSUMERS
Last Updated in July 2026
We are committed to compliance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and the regulations adopted by the California Privacy Protection Agency (CalPrivacy).
This section supplements our Privacy Policy and applies to California residents. To the extent this section conflicts with any other provision of our Privacy Policy, this section controls for California residents.
CATEGORIES OF PERSONAL INFORMATION COLLECTED, DISCLOSED OR SOLD
In the preceding 12 months, we have collected the following categories of personal information about California consumers, as defined by the CCPA: identifiers, including name, email address, phone number, IP address, and online identifiers; customer records information, including billing address, delivery address, and encrypted payment information; commercial information, including order history and transaction records; internet or other electronic network activity information, including browsing history on our site, referring URLs, and interaction with our advertisements; geolocation data, meaning general location derived from IP address (not precise geolocation); and limited inferences drawn to personalize content and advertising.
We do not knowingly collect sensitive personal information as defined under the CPRA, and we do not knowingly collect personal information from minors under 16 years of age.
SOURCES OF PERSONAL INFORMATION
We collect personal information from you directly, when you place an order, contact us, subscribe to our mailing list, or complete a form on our site; from you indirectly, when you navigate our site through cookies and similar technologies; and from third-party service providers such as our website host, analytics providers, and payment processors acting on our behalf.
PURPOSE OF USE
We use the personal information we collect to take and fulfill orders and process payments; to communicate with you about your order or inquiry; to operate, secure, and improve our website; to prevent fraud and enforce our terms; to send marketing communications, where you have consented; to comply with legal obligations; and to personalize and measure advertising, where you have consented.
DISCLOSURE OF PERSONAL INFORMATION
In the preceding 12 months, we have disclosed identifiers, customer records information, and internet activity information for business purposes to website hosting providers, payment processors, analytics providers, email marketing providers, and advertising partners. Each recipient is bound by a written contract that limits its use of the personal information to the purposes for which it was provided, as required by the CPRA.
SALE OF SHARING OF PERSONAL INFORMATION
Under the CCPA, the terms "sale" and "sharing" are defined broadly and can include the use of third-party advertising cookies and analytics tools. To the extent our use of such tools constitutes a "sale" or "sharing" under the CCPA, you have the right to opt out.
YOUR CALIFORNIA PRIVACY RIGHTS
You have the following rights under the CCPA and CPRA: the right to know what personal information we collect, use, disclose, and sell or share, and to obtain a copy of that information; the right to delete the personal information we have collected from you, subject to certain exceptions; the right to correct inaccurate personal information we hold about you; the right to opt out of the sale or sharing of your personal information; the right to limit the use and disclosure of sensitive personal information, where applicable; the right to non-discrimination for exercising your rights; and the right to data portability, to receive information we hold about you in a portable format, where technically feasible.
GLOBAL PRIVACY CONTROL
We recognize and honor Global Privacy Control (GPC) signals as valid opt-out requests for the sale or sharing of personal information for California consumers. If your browser transmits a GPC signal, we will treat it as an opt-out preference for that browser and device.
HOW TO EXERCISE YOUR RIGHTS
You may submit a verifiable request to exercise your rights by completing the form on this page, by emailing info@thebagelmill.com, or by calling (707) 981-8010 during regular business hours. You may also authorize an agent to submit a request on your behalf. Agents must provide written authorization signed by you, and we may require you to verify your identity directly.
VERIFICATION
Because we must ensure that we respond only to the correct person, we may ask you to provide information that we can use to verify your identity against the information we already have on file. We will use the minimum information necessary and will not use verification information for any other purpose.
TIMING OF RESPONSE
We will confirm receipt of your request within 10 business days. We will respond substantively within 45 calendar days. If we need additional time, up to a total of 90 days, we will notify you of the reason and the extension. Deletion, correction, and right-to-know requests will cover the 12-month period preceding your request, or a longer period if required by law. We do not charge a fee to process your request unless it is manifestly unfounded or excessive, in which case we will notify you before proceeding.
FREQUENCY OF REQUESTS
You may submit a maximum of two right-to-know or portability requests within any 12-month period.
NOTICE OF FINANCIAL INCENTIVES
We do not currently offer financial incentives in exchange for the retention or sale of personal information.
CONTACT
Questions about your California privacy rights? Contact The Bagel Mill, 212 Western Avenue, Petaluma, California, 94952. Email: info@thebagelmill.com. Phone: (707) 981-8010.