Privacy Notice

Effective January 23, 2020

KeHE Distributors, LLC (collectively "KeHE," "we," or "us") knows that you care how your information is used and shared. This Privacy Notice ("Policy") describes our policies with respect to information that KeHE collects through the KeHE Connect Retailer website https://connectretailer.kehe.com ("Website").

1. Changes in this Policy
KeHE may amend this Policy at any time without notice. Changes to this Policy may affect our use of personally identifiable information that you provided us prior to our notification to you of the changes. Please visit our Website to obtain current information about our Policy.

KeHE uses various technologies to protect the confidentiality, security, and integrity of information volunteered or collected from users of the Website. We do not require anyone to divulge any personally identifiable information to use the Website. KeHE on occasion requires a user to register, when for example signing up for a newsletter or purchasing products or services. KeHE will not collect personal information about you unless the information is provided voluntarily by you.

2. Information KeHE Collects
The information we collect generally includes: (1) personal information you supply and (2) tracking information collected as you navigate through the Website. KeHE processes Personal Data, as defined herein, collected through the services on the lawful basis of legitimate interests to provide the services to you. Such processing is necessary for the purposes of the legitimate interests pursued by KeHE or by our service providers related to the services.

Information Collected from You: We may collect and store personally identifiable information that you provide to us. The personally identifiable information we request from you may include your: (i) country of residence; (ii) first, middle, and last name; (iii) job title; (iv) home or office phone and fax numbers; (v) employer's name and address; (vi) home or office address; (vii) home or office e-mail address; (viii) KeHE customer identification number, user ID, and password; and (xi) credit card information (only if purchases are made) (collectively "Personal Data").

Information Collected Through Technology: Information we collect automatically: When you use our Website, we collect information sent to us by your computer, tablet, mobile phone, or other access devices. The information sent to us may include, but is not limited to, the following: data about the pages you access, computer IP address, device ID or unique identifier, device type, geo-location information, computer and connection information, mobile network information, statistics on page views, traffic to and from the sites, referral URL, ad data, and standard web log data and other information.

Cookies, Web Beacons, Links, and Other Tracking Technologies: We may keep track of how you use and interact with the Website through the use of cookies, web beacons, links, and other tracking technologies. We do this to help analyze the use of and improve the Website. Through these technologies, we may automatically collect information about your use of the Website and other online activities, including our email correspondences, third-party services, and client applications, and certain online activities after you leave the Website. Link information is generally only analyzed on an aggregate basis. Some Website features may not function properly if you disable cookies. Such data may include analytics information, sites visited before visiting the Website, browser type, operating system, and tracking of your interactions with our content and emails.

IP Addresses: We automatically collect the IP addresses of users of certain Website, such as website visitors and those that log in to the Website. We process this information on the basis of our legitimate interests in protecting the Website and providing the Website to you.

Location Information: KeHE may collect user location information. This information is used to deliver content relevant to customers’ specific location, as well as analyze site user location to better serve clients.

Advertising Information: We partner with third parties to manage our advertising on other sites. Our third-party partners may use cookies or similar technologies in order to provide you with advertising based upon your browsing activities and interests. If you have chosen to connect your account to an external third-party application, such as LinkedIn, you can change your settings and remove permission for the app by changing your account settings.

Unique Identifiers: When you use or access the Website, we may access, collect, monitor, store on your device, and/or remotely store one or more “Unique Identifiers,” such as a universally unique identifier (“UUID”). A Unique Identifier may remain on your device persistently, to help you log in faster and enhance your navigation through the Website. Some features of the Website may not function properly if use or availability of Unique Identifiers is impaired or disabled.

Analytics Information: We use data analytics to ensure site functionality and improve the Website. We use mobile analytics software to allow us to understand the functionality of the Website on your phone. This software may record information such as how often you use the Website, what happens within the Website, aggregated usage, performance data, app errors and debugging information, and where the Website were downloaded from. We do not link the information we store within the analytics software to any personally identifiable information that you submit within the mobile application.

Log File Information: When you use our Website, we may receive log file information such as your IP address, browser type, access times, domain names operating system, the referring web page(s), pages visited, location, your mobile carrier, device information (including device and application IDs), search terms, and cookie information. We receive log file data when you interact with our Website, for example, when you visit our website, sign into our Website, or interact with our email notifications. We use log file data to provide, understand, and improve our Website, and to customize the content we show you. We may link this log file to other information we collect about you via the Website.

Third Party Data Sources: We may collect certain information about you from third party data sources that maintain information about individuals, such as contact information and job titles. Certain of these sources may be provided to us as part of a subscription. We also may receive your information from trade shows or other similar events or organizations when they provide them to us. Such disclosures are controlled by the privacy policies and practices of these third parties.

Information Is Not Collected Online from Children Under 16: KeHE does not knowingly collect any personally identifiable information online from children under the age of 16.

3. How KeHE Uses That Information
Our primary purpose for collecting and processing Personal Data is to provide you with a secure, smooth, and efficient user experience throughout our Website. We may also use your Personal Data to:

Payment Processing Data: We use third-party service providers to process payments made through the Website, for product orders. The payment information (i.e., complete credit card information) you provide is available only to our payment processors and we do not receive or collect your full payment information. You may be subject to the privacy policies and terms and conditions of our service providers when utilizing a third party service through our Website to process payments. Please review the service providers’ privacy policies and terms and conditions before using their services.

We do not undertake to maintain any information about you for a duration greater than necessary to provide services to you or as provided by law, rule or regulation.

KeHE may use information about use of the Website and aggregated information about you and other visitors to our Website in order to improve our Website and develop content and services that may be of interest to you and for its other business purposes.

4. Security Measures Taken to Protect Personally Identifiable Information

KeHE uses firewalls, vulnerability scans, and encryption technology to protect personally identifiable information. KeHE also employs internal physical and technologic security measures to detect and block unauthorized intrusions to its computer systems. However, while we employ reasonable security measures to protect your personal information, please be aware that no method of electronic transmission is completely infallible, and we cannot guarantee its absolute safety.

5. Information Sharing with Third Parties

We may share Personal Data and aggregate information with our suppliers, vendors and business partners. We may also share your personal information with our authorized service providers that perform certain services on our behalf. These services may include providing customer service, performing business and sales analysis, and supporting our Website functionality, other features offered through our Website. These service providers may have access to personal information needed to perform their functions but are not authorized to share or use such information for any other purposes.

We may also provide your information to third parties to accomplish the purpose for which the information was submitted, such as providing your personally identifiable information to credit card processors to process a purchase.

We may also transfer user or customer information, including personally identifiable information, in connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale.

We may disclose specific information in response to a valid court order, subpoena, government investigation, or as otherwise required by law, to enforce our Website policies, or to protect our or others' rights, property, or safety. We reserve the right to report to law enforcement illegal uses of the Website, or defend ourselves against third-party claims. We may also share information with companies assisting in fraud protection or investigation. We do not provide information to these agencies or companies for marketing or commercial purposes.

6. Rights in Relation to Your Personal Data

KeHE enables users of its Website to update contact information and to opt out of the collection of personally identifiable information or particular communications or services by e-mail, telephone, or regular mail. Please use the contact information listed below. Due to production, mailing, and system timelines, it may take some time to process your request. In addition, we may still use your information to communicate with you for other purposes, such as for customer service.

Additional Privacy Rights for Individuals in the European Union (EU Users Only): Under the General Data Protection Regulation (GDPR) you have a number of rights with regard to your personal data.

Right of access: Upon request, the KeHE will confirm any processing of your Personal Data and, and provide you with a copy of that Personal Data in an acceptable machine-readable format.

Right to rectification: You have the right to have KeHE correct any inaccurate Personal Data or to have KeHE complete any incomplete Personal Data;

Right to restrict processing: You have the right to ask KeHE to suppress the processing of your Personal Data but KeHE may still store your Personal Data.

Right to object to processing: You have the right to object to your Personal Data used in the following manners: (a) processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); (b) direct marketing (including profiling); and (c) processing for purposes of scientific/historical research and statistics.

Right to erasure: You may ask the KeHE to delete or remove your Personal Data and we will do so in some circumstances, such as where we no longer need it (we may not delete your data when other interests outweigh your right to deletion).

Right to data portability: Effective 25 May 2018, you have the right to obtain your Personal Data from us that you consented to give us or that is necessary to perform fulfillment of member benefits with you. We will give you your Personal Data in a structured, commonly used and machine-readable format.

Right to withdraw consent: We rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on your prior consent.

Right to file a complaint with a supervisory authority: You have the right to file a complaint with a supervisory authority, in particular in the European Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of Personal Data relating to you infringes upon your rights.

You may exercise your rights by contacting us as indicated under “Contact Us” section below.

Transfer And Storage Of Your Information: Please note information KeHE collects about you may be transferred, processed and/or accessed by us in the United States, or another country where we, or our Service Providers operate. Please be aware Personal Data may be transferred to, and maintained on, computers located outside of your state or country where privacy laws may differ from and may not be as protective as those where you live. If you are located outside the United States and choose to allow us to collect information about you, please be aware that KeHE may transfer your Personal Data to the United States and process and store it there.

If you are located in the European Economic Area ("EEA") or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information to a country or jurisdiction that does not have the same data protection laws as your jurisdiction, as disclosed in this Privacy Policy. It may also be processed by staff operating outside the EEA who work for us or for one of Service Providers, also as disclosed.

Website Hosting: KeHE works with AWS as its web hosting services provider. AWS is located in Seattle, WA, and the Website are stored by by AWS in various states throughout the United States of America, including Virginia, Florida, Ohio, and Oregon. KeHE shares your data, including Personal Data, with our website hosting Service Provider for the purposes of processing your data pursuant to your use of the services.

Data Hosting: KeHE works with AWS as its data hosting services provider. AWS is located in Seattle, WA, and KeHE’s data are stored by AWS in various states throughout the United States of America, including Virginia, Florida, Ohio, and Oregon. KeHE shares your data, including Personal Data, with our website hosting Service Provider for the purposes of processing your data pursuant to your use of the services.

7. Third Party Links

he Website may also contain links to other third party websites that are not under our control. These websites may have their own policies or no policies at all, regarding privacy. You should seek and review these policies before providing information to these websites. KeHE has no responsibility for linked websites and provides these links solely for the convenience and information of our visitors. KeHE also maintains a strict "no-spam" policy and fully complies with CAN-SPAM Act regulations.

8. Safely Using KeHE’s Services

Despite KeHE’s safety and privacy controls, we cannot guarantee the services are entirely free of illegal, offensive, pornographic, or otherwise inappropriate material, or that you will not encounter inappropriate or illegal conduct from other Users when using the services. You can help KeHE by notifying us of any unwelcome contact by contacting us using the information below.

9. Your California Privacy Rights

Under California Civil Code Section 1798.83 (known as the "Shine the Light" law), KeHE members and customers who are residents of California may request certain information about our disclosure of personal information during the prior calendar year to third parties for their direct marketing purposes. To make such a request, please write to us at the address below or at privacypolicy@kehe.com with "Request for California Privacy Information" on the subject line and in the body of your message. We will comply with your request within thirty (30) days or as otherwise required by the statute. Please be aware that not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing will be included in our response

10. Questions or Comments

If you have any questions or comments about the KeHE’s privacy policy, please contact us at:
KeHE Distributors, LLC
1245 E. Diehl Rd., Suite 200
Naperville, IL 60563
ATTN: Marketing- Privacy Policy Question
privacypolicy@kehe.com

11. Miscellaneous

This Policy is subject to, a part of, and incorporated into the Terms of Use which can be found at https://kehe-connect.s3.amazonaws.com/prod/public_common/managed-content/static_pages/TermsAndConditions.html.