Crumbl Global Privacy Policy

Privacy Policy

LAST UPDATED: July 29, 2024
Welcome to Crumbl Cookies! This Privacy Policy outlines how Crumbl, LLC (“Crumbl”, “we”, “us”, “our”) handle the collection, usage, storage, and sharing of your information in the following scenarios:
  1. When you access and use the Crumbl website at https://crumblcookiesmenus.com, the Crumbl mobile application, or any other application or website where this Privacy Policy is posted (“Sites”).
  2. During your visit to a Crumbl physical store location (“Stores”).
  3. When you purchase our products and services (“Products”).
  4. In any form of communication with us, such as via e – mail, text, or telephone (“Communications”).
  5. When we interact with third parties like service providers, governmental agencies, or other entities (“Third Parties”).
If you’re a resident of California, Nevada, Virginia, Colorado, or Connecticut, or if you’re located in the UK, EU, or outside the United States, specific sections below offer more detailed information relevant to your region.

Information Practices

What Information Do We Collect About You?

Information You Provide to Us

We gather your information when you interact directly with us, such as when:
  • You access, navigate, and create an account on our Sites.
  • Purchase our Products.
  • Engage in Communications with us, including through our online customer service team.
  • Visit our Stores.
  • Participate in promotions like sweepstakes or contests.
  • Post a tagged photo or other content on a third – party social network.
  • Share a Product review, question, answer, or other details on the Sites.
The details we collect include:
  • Contact Information: Your full name, mailing and delivery addresses, email address, and telephone number.
  • Account Credentials: Username, password, password hints, and authentication details.
  • Demographic Information: Age, gender, zip code, and country.
  • Billing Information: Payment details like credit or debit card numbers, expiration dates, security codes, bank account info, or other financial data related to Product purchases.
  • Profile Information: Interests, preferences, shopping lists, email preferences, purchase history, and favorites.
  • Communications: Messages sent through feedback, questions to customer support, public posts on our Sites or other platforms (e.g., product reviews, blog comments), e – mail messages, and recordings of phone calls with our representatives.

Information We Automatically Collect from You

When you interact with our Sites, Products, and Communications, we automatically receive certain data from your devices and browsers:
  • Usage Information: Details about the features you use on our Sites, links you click, items and pages you view, emails and ads you see, Products you view and buy, browsing times, and referring/exit pages. This data may be collected using first – and third – party cookies (including “session replay” cookies) and through payment providers like Stripe.
  • Device Information: Information about your device, such as its type, unique device identifier (UDID) placed by us or our service providers, IP address, MAC address, advertiser ID, operating system, browser type, and data on how you use our Sites. This may also be collected via cookies and through payment providers.
  • Location Data: Imprecise location data like that derived from an IP address or data indicating a city or postal code. Our Sites may collect device location information, which we and our service providers use with other submitted data to offer location – based services such as local Store info, search results, special offers, and personalized content.
  • Cookies: Small data files stored on your device that act as unique browser tags. We use session cookies (which expire when you close your browser and aid navigation) and persistent cookies (which personalize your experience, remember preferences, support security, and enable on – and off – site advertising and can be controlled through browser settings).
  • Pixels (Web Beacons): Codes embedded in websites, videos, emails, or ads that send usage information to a server. When you access content with a pixel, it may allow us or another entity to drop or read cookies on your browser. Pixels, used with cookies, track browser activity on a device. We may use pixels from other entities to track communications, serve ads, and provide additional functionality like social media account connections.
  • App Technologies: Information about non – browser – based technologies in our mobile apps and Sites, like SDKs. SDKs send usage information to a server, allowing us to track communications, serve ads, and offer features like social media account connections.

Internet – based Advertising / Do Not Track

We may collect user information over time and across different websites when you use our Sites. Third – party partners may do the same. For example, we use third – party ad networks to serve ads on our behalf on other websites. These networks can collect information about your Site visits and ad interactions, mainly through cookies, action tags, web beacons, and GIF tags. Some browsers have a ‘do not track’ feature, but as these features aren’t yet standardized, our Site doesn’t currently respond to those signals, unless stated otherwise in this Privacy Policy.

Social Media Widgets and Single Sign – on Services

Our Sites use third – party social media widgets. These may collect data like your IP address and visited pages on our Sites and place cookies on your device. They can be hosted by a Third Party or our Sites. Your interactions with these widgets are governed by the privacy policies of the providing social media networks.

Children under 13 Years of Age

Our Site is intended for adults and does not knowingly collect online personal information from children under 13 without prior parental consent. If you’re a parent/guardian of a child under 13 and think your child has provided personal info to our Sites that you want deleted, please contact us.

How Do We Use Your Information?

  • Fulfill Requests: Such as processing Product orders and replying to email inquiries.
  • Support Business Functions: Like order fulfillment, internal process management, authentication, fraud prevention, and public safety functions.
  • Communication: Keep you informed about our Products and promotions.
  • Service Provision: Provide access to our Sites and Stores.
  • Improvement: Enhance our Sites, Products, and Stores.
  • Marketing Optimization: Improve marketing and promotional strategies.
  • Analysis: Conduct statistical analysis of Site, Communication, and Store usage.
  • Contact: Reach out to you as necessary.
  • Dispute Resolution: Resolve disputes, investigate issues, and enforce our terms.
  • Technical Support: Diagnose server problems, manage Sites, and enhance Products.
  • Business Transactions: In the event of a merger, acquisition, asset sale, bankruptcy, or related transactions.

How Do We Disclose Your Information?

  • With Your Consent: We may disclose your information with your consent, which can be obtained in writing, online, through “click – through” agreements, when accepting Site terms, orally (including over the phone), or by other means. Note that consent to text messaging won’t be transferred to third parties.
  • With Service Providers & Business Partners: We may share your information with Third Parties like service providers, affiliates, subsidiaries, business partners, payment processors, billing/shipping/customer service partners, auditors, law firms, marketing/advertising networks, internet service providers, data analytics providers, debugging/error – repair companies, and those helping prevent malicious activities. We also share in relation to financial products (e.g., private label credit cards) and co – branded Product offerings. We use Stripe for payments, analytics, and other services. Stripe may collect personal data (including via cookies) such as transactional data and device – identifying info. They use this for service operation and improvement, fraud detection, and analytics. Learn more at.
  • In A Business Transfer: Information may be disclosed as part of business transactions like mergers, acquisitions, joint ventures, corporate reorganizations, financing, asset sales, or in insolvency, bankruptcy, or receivership cases, where it could be transferred as a business asset.
  • For Legal Process & Protection: We may disclose information to comply with laws, regulations, legal processes, or governmental requests, or when we believe access, use, preservation, or disclosure is reasonably necessary to:
    • Enforce agreements or bill for Site use.
    • Protect our rights, property, or safety, or that of others.
    • In relation to claims, disputes, or litigation.
    • Protect Site users and partners from improper use.
    • Calculate taxes, fees, or other obligations.

How Do We Secure Your Information?

While no system can ensure complete information security, we take all commercially reasonable measures to protect your data in line with applicable laws, appropriate to its sensitivity.

Links to Third – Party Sites

Our Sites may have links to Third – Party – owned/operated websites/applications. These operate independently and have their own privacy policies. This Privacy Policy doesn’t cover their practices. We recommend reviewing their privacy policies to understand how they collect and use information.

Your Choices

  • Opt – Out of Promotional Messaging: To stop receiving promotions, special offers, or member – exclusive event notifications, follow the unsubscribe instructions in those communications.
  • Opt – Out of Texting: You can opt out of texting at any time by replying ‘STOP’ to the text.
  • View and Correct Account Information: Log into your online account or contact us to view and correct your account details.
  • Regional Rights: California, Virginia, Colorado, Connecticut, and Nevada residents, as well as those outside the US, have specific rights and choices detailed in the relevant sections below.

California Residents

This section applies to California residents. Capitalized terms here have the same definitions as in the California Consumer Privacy Act (CCPA), including its implementing regulations.

Definitions

  • Personal information: Data that identifies, relates to, describes, can be associated with, or linked to you or your household.
  • Sensitive personal information: Social security number, driver’s license number, state ID, passport number, account log – in and password, financial account and password, debit/credit card number and access code, precise geolocation, race, ethnic origin, religious/philosophical beliefs, union membership, mail/email/text content (excluding communications with us), genetic data, biometric info, health information, and sex life/sexual orientation details.
  • Sell, sale, or sold: Transferring your personal information to a third party for money or other valuable consideration.
  • Share, shared, or sharing: Transferring your personal information to a third party for cross – context behavioral advertising, regardless of monetary consideration.

Notice of Financial Incentive

Material Terms of Incentive

Occasionally, we offer Product discounts in exchange for your personal information, like contact details. We may use this info to send Communications and market future Products and Sites.

How The Incentive Is Reasonably Related To The Personal Information Provided

Discounts (financial incentives) are based on our reasonable determination of the estimated value of the provided personal information. This considers factors like anticipated revenue, collection/storage/usage expenses, and other relevant business – related factors, as allowed by law.

Opt – In

Providing personal information for a discount means you’re opting into our financial incentive program. To opt out, don’t submit the personal information.

Right to Withdraw

If you want to stop receiving a discount in exchange for provided personal information, email [email protected] before using the discount.

Your Rights

To submit requests or have a representative do so, email [email protected] or call our toll – free number. You can authorize an agent to make requests on your behalf, but you must provide written permission, and we may ask you to verify your identity directly in some cases. We may deny requests from unauthorized agents.
We may verify your identity by matching request information with our records. For sensitive information, we may use more stringent verification methods, like requiring a signed declaration under penalty of perjury.
  • Right of Access: You can request disclosure of the categories and sometimes specific personal information we’ve collected about you, including collection sources and disclosure/sale/sharing details.
  • Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You can ask us to correct your personal information, subject to exceptions.
  • Right to Opt – Out of the Sale or Sharing of Your Personal Information: You can opt out of the sale or sharing of your personal information. The process is detailed at Do Not Sell or Share My Personal Information.
  • Right to Non – Discrimination: You have the right to exercise these rights without facing discrimination.

Notice of Collection

This list details the categories of personal information collected from California residents in the 12 months before this Privacy Policy’s last update, including collection sources, business purposes, and Third Parties with whom we share the information:
  • Identifiers (Includes Sensitive Personal Information): Name, signature, alias, postal address, telephone number, unique personal identifier, online identifier, IP address, account log – in, email address, account name, driver’s license number or other identifying info. Sensitive personal information includes driver’s license or other identification numbers.
  • Personal Characteristics (Includes Sensitive Personal Information): Age and gender.
  • Financial Information (Includes Sensitive Information): Account name, log – in info, credit/debit card number and access code. Sensitive personal information includes account log – in and password and credit/debit card number and access code.
  • Internet or other Electronic Network Activity Information: Automatically collected information as described above.
  • Commercial Information: Records of considered and purchased Products.
  • Geolocation Information: Zip code and general location.
  • Audio, Electronic, Visual, Thermal, and Related Information: Photographs, video recordings, recorded messages, and other related data.
Scroll to Top