Privacy Policy

Privacy Policy for The Mixing Bowl
Effective Date: April 8th, 2024
Last Updated: February 12, 2025

1. Introduction
The Mixing Bowl (“we,” “us,” or “our”) operates the website https://themixingbowl315.com/. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) (applicable to EU/EEA users), the California Consumer Privacy Act (CCPA/CPRA) (for California residents), and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). By using our website, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information Provided by You
When you submit forms on our website, we collect:

Name
Email address
Phone number

2.2 Automatically Collected Data
We use Google Analytics 4 (GA4) to collect aggregated, non-personally identifiable information, including:

Usage Data: Pages visited, time spent, clicks, and interactions.
Device Information: Device type, operating system, browser, and anonymized IP address.
Location Data: Approximate geographic region (derived from anonymized IP addresses).

3. How We Use Your Information
We process your data for the following purposes:

To respond to inquiries submitted through forms.
To analyze website traffic and improve user experience via Google Analytics.
To comply with legal obligations and protect against fraudulent activity.

4. Legal Basis for Processing (GDPR Compliance)
For users in the EU/EEA, we process your data under:

Consent: Obtained via our cookie banner for non-essential tracking.
Contractual Necessity: To fulfill requests made through forms.
Legitimate Interests: To enhance website functionality and security.

5. Data Sharing and Third Parties
5.1 Service Providers
We share data with:

Google Analytics: GA4 processes anonymized usage data under GDPR-compliant Data Processing Terms. Data may be transferred to the U.S. using Standard Contractual Clauses (SCCs).
Hosting providers and IT services (data stored in encrypted formats).

5.2 Legal Disclosures
We may disclose data if required by law, court order, or to protect our rights, property, or safety.

We do not sell, rent, or trade your personal information.

6. Your Rights and Choices

6.1 GDPR Rights (EU/EEA Users)
You may:

Request access to, correction, or deletion of your data.
Restrict processing or object to direct marketing.
Withdraw consent (where applicable).
Receive a portable copy of your data.

6.2 CCPA/CPRA Rights (California Residents)
You may:

Opt out of the “sale” or sharing of personal data (we do not sell data).
Request disclosure of data categories collected in the past 12 months.
Delete personal information (subject to legal exceptions).

6.3 PIPEDA Rights (Canadian Users)
You may:

Access or correct inaccuracies in your personal information.
Withdraw consent for data collection, use, or disclosure.

To Exercise Rights:
Contact us at [email protected] or by mail:
The Mixing Bowl, 103 Bennett Rd, Camillus, NY 13031. We will respond within 30 days.

7. Cookies and Tracking Technologies

Google Analytics: Uses cookies to track aggregated usage data. GA4 anonymizes IP addresses by default and excludes personal identifiers (e.g., names, emails).
Cookie Consent: Manage preferences via our cookie banner. Essential cookies (e.g., form functionality) do not require consent.

8. Data Security and Retention

Security: We implement encryption, access controls, and regular security audits.
Retention:
- Form submissions: Retained for 2 years or until deletion is requested.
- Analytics data: Automatically anonymized after 14 months.

9. International Data Transfers
Data collected from the EU/EEA or Canada may be transferred to the U.S. using GDPR-approved safeguards (e.g., SCCs) or PIPEDA-compliant measures.

10. Children’s Privacy
Our website is not directed at individuals under 16. We do not knowingly collect data from minors.

11. Updates to This Policy
We will notify users of material changes via a website notice. Continued use after updates constitutes acceptance.

12. Contact Us
For questions, requests, or complaints:

Email: [email protected]
Phone: (315) 264-8802
Address: 103 Bennett Rd, Camillus, NY 13031

This policy reflects our commitment to transparency and compliance with global privacy standards. For details on third-party practices, review Google’s Privacy Policy.

Key Legal References:

GDPR (Articles 6, 15–22)
CCPA/CPRA (Sections 1798.100–1798.199)
PIPEDA (Principle 4.9)