PRIVACY POLICY
Last updated August 20, 2026
This privacy notice for Golden West Packaging Group ("Company," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you:
Visit our website at , , and all subdomains thereof, or any other website of ours that links to this Privacy Policy (the “Online Properties”);
Engage with us in other related ways, including any correspondence, sales, marketing, or events (together, with the Online Properties, the “Services”).
By creating an account, providing information to us (by any means, whether in correspondence, via our website, or otherwise), or continuing to use our Services, you acknowledge that you have read, understood, and consent to be bound by this Privacy Policy.
If you do not agree with this PRIVACY Policy or our practices, you may not use our Online Properties OR OUR SERVICES. This PRIVACY Policy may change from time to time and your continued use of our Online Properties or Services constitutes your acceptance of those changes. We encourage you to review this PRIVACY Policy periodically.
Questions or concerns? If you still have any questions or concerns, please contact us at sales@goldenwestpackaging.com.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Policy, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Golden West Packaging Group and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information? We do not process sensitive personal information.
Do we receive any information from third parties? We do not receive any information from third parties.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.
In what situations and with which parties do we share personal information? We may share your personal information in specific situations and with specific third parties.
How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your personal information.
Where is your personal information held? Your personal information may be held by us and by trusted third parties, including service providers and affiliates, some of which may be located outside the country where it was originally collected. In particular, our Company is headquartered in the United States and utilizes service providers both in the United States and throughout the world. As a result, your information may be stored and processed in multiple jurisdictions in accordance with this Privacy Policy and applicable data protection laws.
How is your personal information protected during international transfers? While we may transfer your personal information to other countries where we or our service providers operate, including jurisdictions that may not provide the same level of data protection as your home country, we take appropriate safeguards to protect your information and ensure such transfers comply with applicable data protection laws.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do third party websites affect your privacy? If you follow links to third-party websites, we cannot control how those parties collect, use, or disclose your information and are not responsible for their practices. Accordingly, we encourage you to review their privacy policies and exercise caution before providing any personal information.
How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.
TABLE OF CONTENTS
WHAT INFORMATION DO WE COLLECT?
HOW DO WE PROCESS YOUR INFORMATION?
HOW WILL WE USE YOUR PERSONAL INFORMATION FOR PROMOTIONAL COMMUNICATIONS?
WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
HOW DO WE KEEP YOUR PERSONAL INFORMATION SAFE?
DO WE COLLECT PERSONAL INFORMATION FROM MINORS?
WHERE IS YOUR PERSONAL INFORMATION HELD?
HOW IS YOUR PERSONAL INFORMATION PROTECTED DURING INTERNATIONAL TRANSFERS?
WHAT ARE YOUR PRIVACY RIGHTS?
DO-NOT-TRACK FEATURES AND GLOBAL PRIVACY CONTROLS
DO WE MAKE UPDATES TO THIS PRIVACY POLICY?
HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?
WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.
We may collect and use the following information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”).
We collect personal information when you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
names
phone numbers
email addresses
passwords
usernames
debit/credit card numbers
billing addresses
mailing addresses
Sensitive Information. We do not process sensitive information.
Payment Data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is stored by our third party payment processor: Stripe, LLC.. You may find their privacy notice link(s) here: https://stripe.com/privacy.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.
We may also automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies, which is explained in greater detail in our .
HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
To facilitate account creation and authentication and otherwise manage user accounts. We may process your personal information so you can create and log in to your account, as well as keep your account in working order.
To deliver and facilitate delivery of Services to the user. We may process your personal information to provide you with the requested Service.
To respond to user inquiries/offer support to users. We may process your personal information to respond to your inquiries and solve any potential issues you might have with the requested service.
To fulfill and manage your orders. We may process your personal information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, including sending you information about special offers and discounts on our products and services, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see " HOW WILL WE USE YOUR PERSONAL INFORMATION FOR PROMOTIONAL COMMUNICATIONS?" below).
To deliver targeted advertising to you. We may process your personal information to develop and display personalized content and advertising tailored to your interests, location, and more.
To identify usage trends. We may process personal information about how you use our Services to better understand how they are being used so we can improve them.
To determine the effectiveness of our marketing and promotional campaigns. We may process your personal information to better understand how to provide marketing and promotional campaigns that are most relevant to you.
To save or protect an individual's vital interest. We may process your personal information when necessary to save or protect an individual's vital interest, such as to prevent harm.
To prevent and detect fraud. We may process your personal information when it is necessary to prevent and detect fraud against you, Company, or another party.
For operational reasons. We may process your personal information for our operational reasons, such as improving efficiency, training and quality control, including managing our business, e.g. in relation to our financial performance, customer base, product range or other efficiency measures.
For compliance reasons. We may process your personal information as necessary to comply with professional, legal and regulatory obligations that apply to our business.
HOW WILL WE USE YOUR PERSONAL INFORMATION FOR PROMOTIONAL COMMUNICATIONS?
In Short: We may use your personal information to send you promotional communications, but you can opt out at any time.
We may use your personal information to send you updates (by email, text message, telephone or post) about our Services, including exclusive offers, promotions, or new products or services.
You have the right to opt out of receiving promotional communications at any time by
Contacting us using one of the methods listed in the “HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?” section below; or
Using the “unsubscribe” link in emails or “STOP” number in texts.
We may ask you to confirm or update your marketing preferences if you instruct us to provide further Services in the future, or if there are changes in the law, regulation, or the structure of our business.
WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
Under data protection law, we can only use your personal information if we have a proper reason for doing so, e.g.:
To comply with our legal and regulatory obligations;
For the performance of our contract with you or to take steps at your request before entering into a contract;
For our business legitimate interests or those of a third party; or
Where you have given consent.
A business legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.
The table below explains the legal basis for how we process your personal information (as described above):
| What we use your personal information for | Our reasons |
|---|---|
| To facilitate account creation and authentication and otherwise manage user accounts. | For the performance of our contract with you or to take steps at your request before entering into a contract |
| To deliver and facilitate delivery of Services to the user. | For the performance of our contract with you or to take steps at your request before entering into a contract |
| To respond to user inquiries/offer support to users. | For the performance of our contract with you or to take steps at your request before entering into a contract |
| To fulfill and manage your orders. | For the performance of our contract with you or to take steps at your request before entering into a contract |
| To send you marketing and promotional communications. | For our legitimate interests or those of a third party, i.e. to promote our business to existing customers, future customers, and former customers |
| To deliver targeted advertising to you. | For our legitimate interests or those of a third party, i.e. to promote our business to existing customers, future customers, and former customers |
| To identify usage trends. | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best Service for you at the best price |
| To determine the effectiveness of our marketing and promotional campaigns. | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best Service for you at the best price For our legitimate interests or those of a third party, i.e. to promote our business to existing customers, future customers, and former customers |
| To save or protect an individual's vital interest. | To comply with our legal and regulatory obligations For our legitimate interests or those of a third party; i.e. to protect the safety of any person from situations involving potential threats to that person |
| To prevent and detect fraud. | For our legitimate interests or those of a third party, i.e. to minimize fraud that could be damaging for us, you, or a third party |
| For operational reasons. | For our legitimate interests or those of a third party, i.e. to be as efficient as we can so we can deliver the best Service for you at the best price |
| For compliance with professional, legal and regulatory obligations that apply to our business. | To comply with our legal and regulatory obligations |
We may also anonymize, aggregate or de-identify personal information so the end-product does not identify you or any other individual. Such aggregated, anonymized or de-identified information is not considered personal information for purposes of this Privacy Policy and we may use it for any purpose. For example, we may use this information to generate norms by industry, geography, level, etc., enable us to understand where our Services are being utilized, conduct ongoing validation studies, compile reports, and improve the Services.
WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
In Short: We may share your personal information in specific situations described in this section and/or with the following third parties.
We may need to share your personal information in the following situations:
Business Transfers. We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition of all or a portion of our business to another company, or similar transaction, as well as in the event of any insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.
When we use Google Maps Platform APIs. We may share your personal information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API). We obtain and store on your device ("cache") your location for six (6) months. You may revoke your consent anytime by contacting us at the contact details provided at the end of this document.
Affiliates. We may share your personal information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Business Partners. We may share your personal information with our business partners with whom we partner to provide our Services, to offer you certain products, services, promotions, and carry out other activities described in this Privacy Policy.
Marketing and Advertising Partners. We may share your personal information with our marketing and advertising partners, including social media networks, third-party advertising networks, and other parties that assist us in serving, measuring the performance of, and optimizing our advertisements.
Service Providers. We may share your personal information with third parties that provide business, professional, or technical support services to us and/or administer activities on our behalf. We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers relating to ensure they can only use your personal information to provide services to us and to you
Analytics Providers. We may share your personal information with parties that assist us in performing analytics and help us measure the effectiveness of the Services and our marketing and advertising efforts.
Governmental and Public Authorities. We may share your personal information with government and public authorities as necessary or permitted by the laws of any jurisdiction in which we operate, including in response to a subpoena, court order, investigative demand, request for cooperation from a law enforcement agency, or similar request from a self-regulatory body or government agency.
We may also need to share some personal information with other parties to the extent we believe it is necessary or appropriate to (1) protect our operations and those of our affiliates and subsidiaries; (2) investigate and prevent against fraud and other illegal activity; (3) protect our rights, privacy, safety, property, and/or those of others; or (4) allow us to pursue available remedies or limit damages that we may sustain.
We may disclose your personal information for other reasons described at the time of information collection or prior to disclosing your information. Additionally, we may disclose your personal information with your consent or when you direct us to do so.
Except as set forth above, we will not share your personal information with any other third party.
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
In Short: We may use cookies and other tracking technologies to collect and store your information.
We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy at
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
In Short: We keep your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy Different retention periods apply for different types of personal information. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of personal information; the potential risk from unauthorized use or disclosure of the personal information; the purpose(s) for which we use or may use the personal information; whether we can achieve the purpose(s) through other means; and the applicable legal requirements.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. If we anonymize or de-identify information, we will maintain and use the information in anonymize or de-identified form and not attempt to re-identify the information except as required or permitted by law.
HOW DO WE KEEP YOUR PERSONAL INFORMATION SAFE?
In Short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process from unauthorized use, access, loss, misuse, alteration, or destruction.
However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
DO WE COLLECT PERSONAL INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
Our Services are not directed at children. We do not knowingly solicit data from or market to children under 18 years of age. You may not use our Services if you are under the age of 18. If you are under 18, do not use our Services or provide any information about yourself including, without limitation, your name, address, email address or any screen name or username you may use. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at the contact information found inf the “HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?” section below.
WHERE IS YOUR PERSONAL INFORMATION HELD?
In Short: Your personal information may be held by us and certain third parties, including some located outside the country where it was originally collected.
Your personal information may be held at our offices and those of our group companies, third-party agencies, service providers, representatives and agents as described above (see “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?” section above).
Some of these third parties may be based outside the country where we originally collected your personal information. For more information, including on how we safeguard your personal information when this occurs, see below: “HOW IS YOUR PERSONAL DATA PROTECTED DURING INTERNATIONAL TRANSFERS?”.
HOW IS YOUR PERSONAL INFORMATION PROTECTED DURING INTERNATIONAL TRANSFERS?
In Short: We may transfer your personal information internationally, but we take steps to protect it in accordance with applicable data protection laws.
To bring you our Services, we operate globally. Therefore, it is sometimes necessary for us to share your personal information outside the country where we originally collected your personal information, e.g.:
With our offices in the United States of America (“United States”);
With your and our service providers located throughout the world;
If you are based outside the EEA; or
Where there is an international dimension to the Services we are providing to you.
These transfers may be subject to special rules under local data protection law.
These outside countries do not have the same data protection laws as the country where we originally collected the personal information. In particular, you are advised that the United States uses a sectoral model of privacy protection that relies on a mix of legislation, governmental regulation, and self-regulation. We will, however, ensure the transfer complies with data protection law and all personal information will be secure. If you are located outside the United States, we will only transfer your personal information if:
you provide your explicit consent;
the country to which the personal information will be transferred has been granted an appropriate adequacy decision by your local supervisory authority; or
we have put in place appropriate safeguards in respect of the transfer, for example we have entered into the appropriate standard contractual clauses and required additional safeguards with the recipient, or the recipient is a party to binding corporate rules approved by a supervisory authority.
Our Company is headquartered in the United States and utilizes service providers both in the United States and throughout the world. As such, our Company and our service providers may transfer your personal information to, or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction.
Where the laws of your country allow you to do so, by using our Services, you consent and authorize our Company to transfer, store, and use all such information in the United States and any other country where we operate which may not offer an equivalent level of protection to that required in the country where you reside and to the processing of that information by us on its servers located in the United States as described in this Privacy Policy. If you do not want your personal information transferred to the United States, and any other country where we operate, please do not submit any information to us or use our Services.
If you would like further information, please contact us (see “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?” section below).
WHAT ARE YOUR PRIVACY RIGHTS?
In Short: Depending on where you are located or reside, you may have additional privacy rights under certain applicable privacy laws, as described in our Privacy Notice Addendum
If you are located in the European Economic Area, the UK, or reside in Canada, the State of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia please go to our to learn about additional rights you may have under applicable data protection laws.
DO-NOT-TRACK FEATURES AND GLOBAL PRIVACY CONTROLS
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.
The 'Global Privacy Control' (GPC) is a browser setting that allows users to automatically communicate their preference to opt out of data sharing or selling across different websites. When you enable a GPC setting in your web browser, you are signaling to websites that you wish to opt out of the sale or sharing of your personal information across all websites that recognize this signal. If you have enabled a GPC signal on your browser, we will automatically process your request to not sell or share your personal information.
HOW DO THIRD PARTY WEBSITES AFFECT YOUR PRIVACY?
If, in your interactions with the Services, you are linked or directed to, or click on, a third party website, we cannot control what information you may provide to that party or on that website, and we are not responsible for how that party may use or disclose any information you may provide to them. This is not as an endorsement by us of any third party website, content that may be offered on such third party website, or of any products or services provided by such third party. We do not control, nor are we responsible for, such third party website, product or service offerings. As such, we urge that you exercise caution before providing them with your personal information and to review the third party’s privacy policy for information on its data processing practice.
You should contact the site administrator for such third party website if you have any complaints, claims, concerns or questions regarding such third party website or its privacy practices.
DO WE MAKE UPDATES TO THIS PRIVACY POLICY?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date above and the updated version will be effective as soon as it is posted to this page. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.
HOW CAN YOU CONTACT US ABOUT THIS PRIVACY POLICY?
If you have questions or comments about this notice, you may email us at or by post to:
PRIVACY NOTICE ADDENDUM
This Privacy Notice Addendum (“Notice”) supplements the information contained in the above Privacy Policy and applies solely to all visitors, users, and others located in the European Economic Area, the UK, or who reside in Canada or the State of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, ("consumers" or "you").
We adopt this Notice to comply with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the UK version of the GDPR, the California Shine the Lights law, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, New Hampshire Senate Bill 255, New Jersey Senate Bill 332, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, and certain other privacy and data protection laws, as applicable (collectively, the "Statutes"). Any terms defined in the Statutes will have the same meaning when used in this Notice. Any terms used in this Notice but undefined herein shall have the meaning provided in the Privacy Policy.
As further set forth in our Privacy Policy, we may collect certain information that is (i) linked or reasonably linkable to an identified or identifiable individual or natural person, or (ii) that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a consumer or household, or (iii) as further defined in the Statutes as “Personal Data” or “Personal Information,” as further described in our Privacy Policy.
What categories of personal information do we collect?
We have collected the following categories of personal information in the past twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | YES |
| B. Personal information categories listed in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | YES |
| C. Protected classification characteristics under California or federal law | Gender and date of birth | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | YES |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | YES |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, visual, thermal, olfactory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | YES |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from other personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | YES |
| L. Sensitive Personal Information | (1) personal information that reveals: A person’s social security, driver’s license, state identification card, or passport number; A person’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; A person’s precise geolocation; A person’s racial or ethnic origin, religious or philosophical beliefs, or union membership; The contents of a person’s mail, email, and text messages unless the business is the intended recipient of the communication; or A person’s genetic data. (2) the processing of biometric information for the purpose of uniquely identifying a consumer; (3) personal information collected and analyzed concerning a consumer’s health, or a personal information collected and analyzed concerning a consumer’s sex life or sexual orientation. |
NO |
Personal Information We Sold or Disclosed for a Business Purpose.
In the preceding 12 months, we have sold to one or more third parties the following categories of personal information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:
Category A – Identifiers
Category B - Customer records information
Category D - Commercial information
Category F - Internet or other electronic network activity information
Category G - Geolocation data
Category I - Professional or employment-related information
Category K - Inferences drawn from collected personal information
Shine the Light Law.
California Civil Code Section 1798.83, also known as the "Shine The Light" law permits individuals who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. We do not disclose personal information that corresponds to the categories of personal information set forth under Cal. Civ. Code § 1798.83 to third parties for the third parties’ direct marketing purposes.
Your Rights Under the CCPA.
You may have the right under the California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), and certain other privacy and data protection laws, as applicable, to exercise free of charge:
| Disclosure of Personal Information We Collect About You | You have the right to know: The categories of personal information we have collected about you; The categories of sources from which the personal information is collected; Our business or commercial purpose for collecting or selling personal information; The categories of third parties with whom we share personal information, if any; and The specific pieces of personal information we have collected about you. Please note that we are not required to: Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained; Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or Provide the personal information to you more than twice in a 12-month period. |
|---|---|
| Personal Information Sold, Shared, Disclosed, or Used for a Business Purpose | In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know: The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and The categories of personal information that we disclosed about you for a business purpose. You have the right under the CCPA and CPRA and certain other privacy and data protection laws, as applicable, to opt-out of the sale or sharing for cross-contextual behavioral advertising of your personal information. If you exercise your right to opt-out of the sale or sharing for cross-contextual behavioral advertising of your personal information, we will refrain from selling or sharing for cross-contextual behavioral advertising your personal information, unless you subsequently provide express authorization for the sale or sharing for cross-contextual behavioral advertising of your personal information. To opt-out of the sale or sharing for cross-contextual behavioral advertising of your personal information, please visit our opt out form located here: https://app.termly.io/dsar/29df1a1d-895e-44c8-bbec-09e4e572ef2b |
| Right to Limit Use and Disclosure of Sensitive Personal Information. | You have the right to opt-out of the use and disclosure of your sensitive personal information for anything other than supplying requested goods or services. We do not collect sensitive personal information |
| Right to Correction | You have the right to request correction of inaccurate personal information maintained by us about you. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal information. |
| Right to Deletion | Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will: Delete your personal information from our records; and Direct any service providers to delete your personal information from their records. Please note that we may not delete your personal information if it is necessary to: Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity; Debug to identify and repair errors that impair existing intended functionality; Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; Comply with the California Electronic Communications Privacy Act; Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; Comply with an existing legal obligation; or Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information. |
| Protection Against Discrimination | You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things: Deny goods or services to you; Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; Provide a different level or quality of goods or services to you; or Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or Services. Please note that we may charge a different price or rate or provide a different level or quality of good and/or services to you, if that difference is reasonably related to the value provided to our business by your personal information. |
Your Rights Under Other State Privacy Laws
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, also provide consumers who are residents of these states with certain rights regarding their Personal Data. This section describes the rights you may have under these state privacy laws, under certain circumstances and subject to certain exceptions. Please contacts us if you have any questions about your rights under these state privacy laws.
| Consumer Right | Explanation | Applies to Residents of: |
|---|---|---|
| The Right to Opt-Out | You may have the right to opt out of the processing of Personal Data concerning you for the purposes of: Targeted Advertising; The Sale of Personal Data; or Profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. |
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia |
| The Right of Access | You may have the right to confirm whether we are processing Personal Data concerning you and to access your Personal Data. Please note, there may be restrictions on how often you may exercise this right. |
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia |
| The Right to Correction | You may have the right to correct inaccuracies in your Personal Data, taking into account the nature of the Personal Data and the purposes of the processing of your Personal Data. | Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia |
| The Right to Deletion | You may have the right to delete Personal Data concerning you or to request that we delete Personal Data provided by, or obtained about, you. | Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia |
| The Right to Data Portability | You may have the right to obtain a copy of your Personal Data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance. Please note, there may be restrictions on how often you may exercise this right. |
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia |
| The Right to Appeal | We hope that we can resolve any query or concern you raise about our use of your Personal Data. However, if we do not take action on your request to exercise any of your rights, we will inform you without undue delay after the receipt of the request our reason for not taking action. You may appeal any decision we have made about your request by following the instructions in the communication you receive from us notifying you of our decision. | Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia |
Your Rights Under the GDPR and the UK GDPR.
In some regions (like the European Economic Area and the UK), you have certain rights under applicable data protection laws.
| Right to Access | The right to be provided with a copy of your Personal Data (the right of access). |
|---|---|
| Right to Rectification | The right to require us to correct any mistakes in your Personal Data. |
| Right to be Forgotten | The right to require us to delete your Personal Data—in certain situations. At your request, we will delete your Personal Data promptly if: it is no longer necessary to retain your Personal Data; you withdraw the consent which formed the basis of your Personal Data processing; you object to the processing of your Personal Data and there are no overriding legitimate grounds for such processing; the Personal Data was processed illegally; or the Personal Data must be deleted for us to comply with our legal obligations. We will decline your request for deletion if processing of your Personal Data is necessary: to comply with our legal obligations; in pursuit of a legal action; to detect, predict and monitor fraud; or for the performance of a task in the public interest. |
| Right to Restriction of Processing | The right to require us to restrict processing of your Personal Data—in certain circumstances, e.g. if you contest the accuracy of the data, if your Personal Data was processed unlawfully and you request a limitation on processing, rather than the deletion of your Personal Data, we no longer need to process your Personal Data, but you require your Personal Data in connection with a legal claim, or you object to the processing pending verification as to whether an overriding legitimate ground for such processing exists. We may continue to store your Personal Data to the extent required to ensure that your request to limit the processing is respected in the future. |
| Right to Data Portability | The right to receive the Personal Data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations. At your request, we will provide you free of charge with your Personal Data in a structured, commonly used and machine readable format, if: you provided us with Personal Data; the processing of your Personal Data is based on your consent or required for the performance of a contract; or the processing is carried out by automated means. |
| Right to Object | The right to object: at any time to your Personal Data being processed for direct marketing (including profiling); in certain other situations to our continued processing of your Personal Data, e.g. processing carried out for the purpose of our legitimate interests. We will comply with your request unless we have compelling legitimate grounds for the processing which override your rights and freedoms, or where the processing is in connection with the establishment, exercise or defense of legal claims. Please note that even if we stop all marketing communications, you may still receive administrative communications from us. |
| Right Not to be Subject to Automated Individual Decision-Making | The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you, unless you have given us your explicit consent or where they are necessary for a contract with us. |
| Right to withdraw consent | You have the right to withdraw any consent you may have previously given us at any time. |
For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.
We hope that we can resolve any query or concern you raise about our use of your information. However, the General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred. The appropriate supervisory authority can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
Canada’s Personal Information Protection And Electronic Documents Act
The Personal Information Protection and Electronic Documents Act (PIPEDA) provides consumers who are Canadian residents with specific rights regarding their Personal Information. This section describes your rights under PIPEDA and explains how to exercise those rights.
You have a right to know how your Personal Information will be used. We will explain why we need your Personal Information before or when we collect it, if the purpose is not already clear.
We will collect Personal Information only for the purposes we’ve identified or for the primary uses described in our Privacy Policy. We shall collect information by fair and lawful means only.
We will not use or disclose your Personal Information other than for the purposes for which it was collected unless we receive your consent or unless we are required or permitted to by law.
We will keep your Personal Information only for as long as it needs to for the purposes identified in our Privacy Policy, as required by law, or as necessary to resolve any disputes you may have concerning our Services. We will follow internally set guidelines and use care in the disposal, destruction, or de-identification of Personal Information to prevent unauthorized parties from gaining access to such Personal Information.
We will maintain accurate, complete and up-to-date Personal Information as required for the identified purposes associated with its collection. Please let us know if your contact or other Personal Information changes.
Upon your written request, and subject to exceptions as permitted or mandated by law, we will inform you of the existence, use and disclosure of your Personal Information and will give you access to that Personal Information. You may challenge the accuracy and completeness of your Personal Information and have it amended as appropriate.
We maintain procedures for addressing and responding to all inquiries or complaints from you about our handling of Personal Information. We will inform individuals who make inquiries or lodge complaints of the existence of relevant complaint procedures. We may seek external advice where appropriate before providing a final response to individual complaints. We shall investigate all complaints. If a complaint is found to be justified, we will take appropriate measures, including, if necessary, amending our policies and procedures.
How to Exercise Your Rights.
If you would like to exercise any of your rights described in this Notice, please:
Complete a data subject request form available at https://app.termly.io/dsar/29df1a1d-895e-44c8-bbec-09e4e572ef2b;
Call us, toll-free, at, by calling toll-free at 888.501.5893; or
Email us at sales@goldenwestpackaging.com.
Please note that you may be restricted on the number of data access or data portability requests you may make within a 12-month period.
If you choose to contact us, we will take steps to verify your identity before granting you access to your personal information or complying with your request. In order to help protect your privacy and maintain security, you will need to provide us with:
Enough information to identify you (e.g., your full name, address, email address, telephone number, birth date, or customer or matter reference number);
Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
A description of what right you want to exercise and the information to which your request relates.
In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.
You may use a representative, called an "authorized agent," to submit a request to us.
In some states, an authorized agent must be a natural person, or a business entity registered with the appropriate Secretary of State, that you have authorized to act on your behalf.
In order to protect your privacy, Company requires you to confirm that you have provided the authorized agent permission to submit the request and you must provide the authorized agent with signed permission. "Signed" means that the written attestation, declaration, or permission has either been physically signed or provided electronically pursuant to the Uniform Electronic Transactions Act. In California, an authorized agent that has power of attorney pursuant to California Probate Code section 4121 to 4130 must submit proof of statutory power of attorney, but in such cases, consumer verification will not be required.
Company may deny a request from an authorized agent that does not submit proof that they have been authorized to act on your behalf. Requests submitted by an authorized agent will still require verification of the person who is the subject of the request in accordance with the process described above.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.
Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.