PRIVACY POLICY

Our Commitment to Your Privacy

AholdDelhaizeExposed.com (“we,” “us,” “our”) is a project of the Center for Responsible Food Business (CRFB), a U.S.-based nonprofit organization. We are committed to protecting your personal information and respecting your privacy, whether you're signing a petition, subscribing for updates, or browsing our site.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information. We aim to comply with relevant privacy laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable laws globally.

1. Information We Collect

A. Information You Provide Directly

We collect personal information when you:

  • Sign a petition,

  • Subscribe to receive email updates,

  • Contact us through our forms.

This may include:

  • Your name

  • Email address

  • Country or location

  • Optional fields such as organization or title

  • Any message or comment you submit

By providing your email, you agree to receive communications from us related to our campaigns and organizational updates. You may unsubscribe at any time using the link provided in our emails.

B. Automatically Collected Information

When you visit our website, we collect basic analytics data, including:

  • Your IP address

  • Browser type and language

  • Device type and operating system

  • Pages viewed, time spent on pages, and navigation behavior

This information helps us improve website functionality, measure engagement, and enhance your experience.

C. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Provide core website functionality

  • Analyze traffic and site usage

  • Remember your preferences (e.g., language settings)

Visitors from the EU and certain U.S. states will be shown a cookie banner to manage their preferences. You can also control cookie settings through your browser.

2. How We Use Your Information

We use your information for the following purposes:

  • To operate and maintain the website

  • To process your petition signature or form submission

  • To communicate campaign updates and requests for action

  • To analyze engagement and improve our campaigns

  • To comply with applicable laws or respond to lawful requests

We do not sell your personal data.

3. Legal Bases for Processing (for EU/EEA users)

For individuals in the European Economic Area, we process your personal data under one or more of the following legal bases:

  • Consent: You’ve given clear consent for us to use your data (e.g., email sign-ups).

  • Legitimate Interests: We process data in ways that are necessary and non-intrusive to operate our campaigns and advocacy efforts.

  • Legal Obligation: We may need to retain data to comply with applicable legal obligations.

You may withdraw your consent at any time by contacting us or unsubscribing.

4. Data Sharing and Third Parties

We do not sell or share your data with advertisers or marketers.

We may share data with trusted third-party service providers (such as email platforms and web analytics tools) strictly for the purposes of:

  • Sending communications

  • Hosting forms or petitions

  • Conducting analytics

  • Ensuring site security and technical support

All service providers are contractually obligated to safeguard your data and use it only as instructed by us.

5. International Data Transfers

If you are located outside the United States, please be aware that your information may be transferred to and processed in the U.S. We implement appropriate safeguards to ensure an adequate level of protection in compliance with applicable data protection laws.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy or as required by law. If you unsubscribe or request deletion, your data will be removed from our active systems within 12 months unless retention is required for legal or security reasons.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

A. For EU/EEA Users (under GDPR):

  • Right to access your data

  • Right to correct or update your information

  • Right to deletion (“right to be forgotten”)

  • Right to restrict or object to processing

  • Right to data portability

  • Right to withdraw consent

  • Right to lodge a complaint with a data protection authority

B. For California Residents (under CCPA/CPRA):

  • Right to know what personal information is collected and how it’s used

  • Right to delete your personal information

  • Right to correct inaccurate information

  • Right to opt out of data sharing for advertising (we do not share for this purpose)

  • Right to non-discrimination for exercising your rights

C. For Other U.S. States (e.g., Virginia, Colorado, Connecticut, Utah):

You may have similar rights. Contact us to inquire.

To exercise your rights, please email us at: privacy@responsiblefoodbusiness.org.

8. Children’s Privacy

This site is not intended for use by children under 13. We do not knowingly collect information from children. If you believe we have inadvertently collected data from a minor, please contact us for immediate deletion.

9. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. While no system is completely secure, we continually assess and improve our security practices.

10. External Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Changes to This Privacy Policy

We may update this policy occasionally. Any significant changes will be posted on this page with an updated “Effective Date.” Your continued use of the site indicates acceptance of the revised terms.

12. Contact

For questions, data requests, or concerns, email us at privacy@responsiblefoodbusiness.org