Privacy Policy
Last Updated: Apr 1, 2026
INTRODUCTION
This Privacy Policy describes how Kodiak Cakes, LLC (“Kodiak Cakes,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise process information about you. This Privacy Policy applies to information we collect when you access or use our websites and other online products and services (collectively, our “Services”) and when you otherwise interact with us, such as through our customer support channels, on social media, or at in-person events. We may provide different or additional notices of our privacy practices for certain offerings, and such notices will supplement or replace the disclosures in this Privacy Policy.
We may change this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy. If we make material changes, we will provide you with additional notice (such as by adding a statement to the Services or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.
COLLECTION OF INFORMATION
The information we collect about you depends on how you interact with us. In this section, we describe the categories of information we collect and the sources of this information.
Information You Provide to Us
We collect information you provide directly to us. For example, we collect information directly from you when you create an account, make a purchase, submit or post content through our Services (including product reviews), communicate with us via third-party platforms, participate in a contest or promotion, sign up for rewards or marketing communications from us, request customer support, or otherwise communicate with us. The types of information that we collect directly from you include your name, email address, postal address, phone number, and any other information you choose to provide. If you make a purchase from us, we work with a third-party payment processor to process your payment information.
Information We Collect Automatically
We automatically collect information about your interactions with us or our Services, including:
- Transactional Information: When you make, exchange, or return a purchase, we collect information about the transaction, such as product details, purchase price, and the date of the transaction.
- Device, Usage, and Activity Information: We collect information about how you access our Services, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, browser type, and app version. We also collect information about your activity on our Services, such as the route by which you access our Services, access dates and times, browsing behavior (such as pages viewed and links clicked), and information about your activity on specific pages (such as mouse movements, keystrokes, and items placed in your cart).
- Audio Recordings: If you contact customer service by phone, we may monitor and retain those conversations, including for training purposes.
- Information Collected by Cookies and Similar Tracking Technologies: We use tracking technologies, such as cookies, pixels, and session replay, to collect information about your interactions with the Services and our marketing communications. These technologies help us improve our Services and marketing communications, personalize your experience, and analyze your interactions with us, including to see which areas of our Services are popular and count visits. For more information about the cookies and similar tracking technologies we use, and the choices available to you, see the Targeted Advertising and Analytics and the Your Choices sections below.
Information We Collect from Other Sources
We obtain information from other sources. For example, we may collect information from our retail partners, such as your name and address. We may also receive information in connection with reviews of Kodiak Cakes’ products that you post on third-party sites and services
Information We Derive
We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address or infer that you are looking to purchase certain products based on your browsing behavior and past purchases.
USE OF INFORMATION
We use the information we collect to process and fulfill your orders and market our products to you.
We also use the information we collect to:
- Provide, maintain, and improve our products and Services;
- Develop new products and services;
- Personalize your experience with us;
- Send you technical notices, security alerts, support messages, and other transactional or relationship messages;
- Send you marketing communications, including if you choose to sign up for early-access and other promotions we offer or if you choose to sign up for marketing text messages from us (see the Your Choices section below for information about how to opt out of these communications at any time);
- Monitor and analyze trends, usage, and activities in connection with our Services and products;
- Target advertisements to you on third-party platforms and websites (for more information and to opt out, see the Targeted Advertising and Analytics section below);
- Facilitate contests and promotions and process and deliver entries and rewards;
- Detect, investigate, respond to, prosecute, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of Kodiak Cakes and others; and
- Comply with our legal and financial obligations.
TARGETED ADVERTISING AND ANALYTICS
We engage others to provide analytics services, serve advertisements, and perform related services across the web and in mobile applications. To do this, Kodiak Cakes and these partners may use cookies, pixels, SDKs, and other technologies to collect information about your use of our Services and other websites and mobile apps, including your device identifiers, IP address, web browser and mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, order information, items added to cart, and conversion information. This information is used to deliver advertising targeted to you on other companies’ sites or mobile apps, understand the effectiveness of this advertising, analyze and track data, determine the popularity of certain content, and better understand your activity. You can opt out of ad targeting through cookies and similar technologies on our website by following the prompts behind the Your Privacy Choices link in the site footer. Your opt-out choice will be linked to your browser only; therefore, you will need to renew your opt-out choice if you visit our website from a new device or browser, or if you clear your browser’s cookies.
In addition to ad targeting activities that rely on cookies and similar technologies, we work with advertising partners to translate other identifiers, such as your email address or phone number, into a unique identifier (called a hashed value) that such partners can then use to show ads that promote Kodiak Cakes across the web and in mobile apps. You may opt out of these disclosures by emailing us at privacy@kodiakcakes.com.
The activities described in this section may constitute “targeted advertising,” “sharing,” or “selling” under certain privacy laws. See the Additional Information for Specific Jurisdictions section below for details.
You can also learn more about interest-based ads, or opt out of having your web browsing information used for behavioral advertising purposes by companies that participate in the Digital Advertising Alliance, by visiting www.aboutads.info/choices. Your device may also include a feature that allows you to opt out of having certain information collected through mobile apps used for behavioral advertising purposes.
DISCLOSURE OF INFORMATION
We disclose personal information as described in the Targeted Advertising and Analytics section above and in the following scenarios:
- Vendors and Service Providers. We make personal information available to our vendors, service providers, contractors and consultants who perform services on our behalf, such as companies that assist us with web hosting, shipping and delivery, payment processing, financing, fraud prevention, customer service, analytics, and marketing.
- Other Users. If you provide a product review or otherwise post content on our Services, other users of our Services will be able to see this information.
- Law Enforcement Authorities and Individuals Involved in Legal Proceedings. We disclose personal information in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
- To Protect the Rights of Kodiak Cakes and Others. We may disclose personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Kodiak Cakes, our users, the public, or others.
- Professional Advisors. We disclose personal information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
- Corporate Transactions. We disclose personal information in connection with, or during negotiations of, certain corporate transactions, including a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
- Corporate Affiliates. Personal information is disclosed between and among Kodiak Cakes and our parents, affiliates, subsidiaries, and other companies under common control and ownership.
- With Your Consent and at Your Direction. We make personal information available to third parties when we have your consent, or you intentionally direct us to do so.
We may also disclose aggregated or de-identified information that cannot reasonably be used to identify you. We maintain and use this information only in a de-identified fashion and will not attempt to re-identify such information, except as permitted by law.
YOUR PRIVACY CHOICES
Account Information
You can access certain information stored within your Kodiak Cakes account at any time by logging in and navigating to the account details menu.
Cookies and Similar Tracking Technologies
Kodiak Cakes uses cookies and similar tracking technologies, as described above. You can usually adjust your browser settings to remove or reject browser cookies.
Communications Preferences
You may opt out of receiving text messages and promotional emails from Kodiak Cakes by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your account or orders.
ADDITIONAL INFORMATION FOR SPECIFIC JURISDICTIONS
Individuals Residing in Certain U.S. States
Some U.S. states have enacted privacy laws that grant their residents certain rights and require specific disclosures (“State Privacy Laws”). If you reside in California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, or Virginia, and to the extent these laws apply to Kodiak Cakes, this section applies to you. This section also serves as our California notice at collection.
Additional Disclosures
Our Privacy Policy explains how we collect, use, and discloseinformation about you, as well as our targeted advertising and analytics practices. As required by certain State Privacy Laws, we use the tables below to explain this same information.
| Category of Personal Information We collect… | Categories of Recipients We may disclose personal information to… | Use of Personal Information We use personal information to… |
| - Identifiers (such as your name, email, phone number, and IP address) - Commercial information (such as records of products you purchased) - Internet and electronic network activity (such as information about your activity on our website) - Audio data (such as call recordings when you contact customer service) - Inferences (such as inferred information about your shopping preferences) - Other data you choose to provide (such as the content of product reviews) | - To vendors and service providers - To others that visit our Services (such as the content of product reviews) - To law enforcement or others involved in legal proceedings - Recipients in connection with efforts to protect rights of Kodiak Cakes and others - To professional advisors - Recipients in connection with corporate transactions - To our corporate affiliates - With your consent or at your direction | - Process and fulfill your orders; - Market our products to you Provide, maintain, and improve our products and Services; - Develop new products and services; - Personalize your experience with us; - Send you technical notices, security alerts, support messages, and other transactional or relationship messages; - Send you marketing communications, including if you choose to sign up for early-access and other promotions we offer or if you choose to sign up for marketing text messages from us (see the Your Choices section below for information about how to opt out of these communications at any time); - Monitor and analyze trends, usage, and activities in connection with our Services and products; - Facilitate contests and promotions and process and deliver entries and rewards; - Detect, investigate, respond to, prosecute, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of Kodiak Cakes and others; and - Comply with our legal and financial obligations. |
We do not collect information that is considered “sensitive” under State Privacy Laws.
As described in the Collection of Informationsection above, we collect personal information from various sources, including directly from you, automatically when you access or use our Services, and from third-party sources.
We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this Privacy Policy.
Sales, Sharing, and Targeted Advertising Activities
We also disclose certain categories of personal information to show you targeted ads on third-party properties and allow certain third parties to use this information for their own marketing purposes. These disclosures may be considered “sales,” “sharing,” or use of personal information for “targeted advertising” under State Privacy Laws, and the table below provides more information about our practices.
| Category of Personal Information | Category of Third Parties |
| - Identifiers (such as a cookie ID, IP address, or hashed version of your email address) - Internet and electronic network activity (such as information about your activity on our website) - Inferences (such as inferred information about your shopping preferences) | - Advertising and marketing networks |
We do not engage in sales, sharing, or targeted advertising using personal information about consumers we know to be under the age of 18.
Your Rights under State Privacy Laws
Opt Out of Sales, Sharing, and Targeted Advertising
You may opt out of activities that we engage in that constitute “targeted advertising,” “sharing,” or “sales” of personal information under the State Privacy Laws by:
- Following the prompts behind the Your Privacy Choices link in the footer of our website. Your opt-out choice will be linked to your browser only; therefore, you will need to renew your opt-out choice if you visit our website from a new device or browser, or if you clear your browser’s cookies; and
- Emailing us at privacy@kodiakcakes.com to turn off “targeted advertising,” “sharing,” and “sales” based on your email address.
You can also opt out by visiting our websites with a legally recognized universal opt-out signal enabled, such as the Global Privacy Control. If you are not logged into your account with us, our processing of the signal will be limited to cookie-based sales, sharing, and targeted advertising for the specific browser or device that you are using.
Access, Correction, and Deletion
You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information.
To request access, correction, or deletion of your personal information, please send an email to privacy@kodiakcakes.com, or write us at: 8163 Gorgoza Pines Road, Park City, UT 84098. To authenticate your request, we will verify your request by asking you to provide certain information, such as your name, email address, mailing address, and phone number.
Nondiscrimination
You have the right not to be discriminated against for exercising any of your privacy rights.
Appeals
If we deny your request, you may appeal our decision by contacting us at privacy@kodiakcakes.com. If you have concerns about the result of an appeal, you may contact the attorney general in the state where you reside.
Authorized Agents
If you are an authorized agent seeking to make a request to opt out of sales, sharing, or targeted advertising on behalf of a consumer, please email us at privacy@kodiakcakes.com.
If you reside in California, you may also designate an authorized agent to submit an access, deletion, or correction request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the individual who is the subject of the request to verify their own identity or confirm the authorized agent has permission to submit the request. If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California resident, please contact us at privacy@kodiakcakes.com.
Notice of Financial Incentives
We provide discounts, rewards, coupons, exclusive offers and other benefits to customers who join participate in certain promotional or marketing campaigns we offer. These offerings may constitute “financial incentives” or “bona fide loyalty programs” under State Privacy Laws (for simplicity, we refer to these offerings as financial incentives throughout this Privacy Policy).
If you decide to participate in a financial incentive, we collect relevant personal information from you, such as identifiers (like your name, email address, or phone number) and commercial information (like your purchase history). We disclose this information to our marketing and advertising vendors so we can display ads that are targeted to your interests and preferences. We also may disclose your commercial information to our program partners and other merchants.
You can opt into a financial incentive by following the instructions we provide. You can withdraw from the financial incentive at any time by following the unsubscribe instructions in the applicable program’s terms and conditions, promotional emails, or text messages, or contacting us at privacy@kodiakcakes.com. If you request that we delete personal information that is essential to providing you with the financial incentive, we will not be able to provide you with such benefits going forward. For example, if you ask us to delete your email address, we will no longer be able to email you discounts, coupons, or other exclusive offers or benefits. In some cases, we may provide additional terms and conditions when you sign up to participate in a financial incentive. The value of your personal information is reasonably related to the value of the offer or discount presented to you.
Shopify Network Intelligence
Our online store is hosted by Shopify, and Shopify collects and processes personal data about store customers for purposes including but not limited to: providing product and store customization, analytics, and advertising services. Information submitted by customers will be shared with Shopify as well as third parties that may be located in other countries. To learn more about Shopify’s data practices, please review their privacy policy.
Depending on your jurisdiction, you may opt out or object to Shopify’s processing of your data for certain use cases on their Privacy Controls page.
CONTACT US
If you have questions about this Privacy Policy, please contact us at privacy@kodiakcakes.com.
US State Privacy Notices
Colorado (CPA)
This section provides additional information for Colorado residents under the Colorado Privacy Act (CPA). The terms used in this section have the same meaning as in the CPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the CPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the CPA, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information.
We process personal data for purposes of targeted advertising (as defined in the CPA), including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Location Information, and Consumer Communications. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
CPA Rights
Your CPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your CPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out here.
Targeted Advertising:
Exercise your right to opt-out here.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Colorado Attorney General's Office.
Minnesota (MNCDPA)
This section provides additional information for Minnesota residents under the Minnesota Consumer Data Privacy Act (MNCDPA). The terms used in this section have the same meaning as in the MNCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MNCDPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MNCDPA, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information.
We process personal data for purposes of targeted advertising (as defined in the MNCDPA), including online identifiers and internet activity. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MNCDPA Rights
Your MNCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Obtain List of Third Parties
You have the right to obtain a list of the specific third parties to whom we have disclosed personal data. We have or may have disclosed personal data to the following third parties:
- ExpertVoice
- FedEx
- Google Analytics
- Google Pay
- PayPal - Pay with PayPal, Venmo, Pay Later
- Shop Pay
- Shopify Network Intelligence
- UPS
- USPS
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MNCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Profiling Rights
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Minnesota Attorney General's Office.
Indiana (INCDPA)
This section provides additional information for Indiana residents under the Indiana Consumer Data Protection Act (INCDPA). The terms used in this section have the same meaning as in the INCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the INCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the INCDPA), including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Location Information, and Consumer Communications. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the INCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
INCDPA Rights
Your INCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your INCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the INCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Indiana Attorney General’s Office.
Kentucky (KYCDPA)
This section provides additional information for Kentucky residents under the Kentucky Consumer Data Privacy Act (KYCDPA). The terms used in this section have the same meaning as in the KYCDPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the KYCDPA.
Data "Selling" and Targeted Advertising
We process personal data for purposes of targeted advertising (as defined in the KYCDPA), including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Location Information, and Consumer Communications. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
We do not receive monetary consideration in exchange for your data and therefore do not sell your data as defined in the KYCDPA.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
KYCDPA Rights
Your KYCDPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your KYCDPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
We do not sell your personal data, as defined by the KYCDPA.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Kentucky Attorney General’s Office.
Maryland (MODPA)
This section provides additional information for Maryland residents under the Maryland Online Data Privacy Act (MODPA). The terms used in this section have the same meaning as in the MODPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the MODPA.
If you have any questions or wish to contact us regarding this privacy notice, please send an email to privacy@kodiakcakes.com.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the MODPA, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information.
We process personal data for purposes of targeted advertising (as defined in the MODPA), including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Location Information, and Consumer Communications. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
MODPA Rights
Your MODPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, we may require you to pay a small fee for this service.
Right to Obtain List of Categories of Third Parties
You have the right to obtain a list of the categories of third parties to whom we have disclosed personal data. You can also find that information in our Privacy Policy.
Right to Delete
You have the right to request that we delete any personal data provided by or obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed or required by law.
Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your MODPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Maryland Attorney General’s Office.
Rhode Island (RIDTPPA)
This section provides additional information for Rhode Island residents under the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). The terms used in this section have the same meaning as in the RIDTPPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the RIDTPPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the RIDTPPA, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information. The specific third parties we've sold personal data to are: Google Analytics, Shopify Network Intelligence.
We process personal data for purposes of targeted advertising (as defined in the RIDTPPA), including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Location Information, and Consumer Communications. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
RIDTPPA Rights
Your RIDTPPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. You have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than once in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your RIDTPPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agents
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent’s authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Right to Withdraw Consent
If we rely on your consent to process your personal data, you may withdraw that consent at any time. Submit a request here to withdraw consent.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select “Appeal a Decision” in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Rhode Island Attorney General’s Office.
Nevada (NPICICA)
This section provides additional information for Nevada residents under the Nevada Privacy of Information Collected on the Internet from Consumers Act (NPICICA), Nevada Revised Statutes Chapter 603A. The terms used in this section have the same meaning as in NPICICA. This section does not apply to data that is not considered "covered information" as defined in the NPICICA.
NPICICA Rights
Your NPICICA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to review any covered information we have collected about you online.
Right to Delete
You have the right to request that we delete any covered information we have collected about you online. We will permanently delete any such covered information from our records and direct our processors to do the same. However, we may retain your covered information if it is necessary for certain purposes, as allowed by law.
Right to Correct
You have the right to correct inaccuracies in any covered information we have collected about you online, taking into account the nature of the data and our purposes for processing it.
Right to Opt-Out
We do not receive monetary consideration in exchange for your covered information and therefore do not sell your covered information as defined in the NPICICA.Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request. Authentication is not required for a Request to Opt-Out, but we may deny the request if we have a good faith, reasonable, and documented belief that the request is fraudulent.
Third-Party Tracking
We use cookies and other technologies that allow third parties to collect covered information about your online activities over time and across different Internet websites or online services.
Tennessee (TIPA)
This section provides additional information for Tennessee residents under the Tennessee Information Protection Act (TIPA). The terms used in this section have the same meaning as in the TIPA. This section does not apply to information that is not considered "personal data," such as deidentified or publicly available information as defined in the TIPA.
Data "Selling" and Targeted Advertising
We "sell" certain personal data to third parties, as that term is defined in the TIPA, including Personal Identifiers, Internet Activity, Commercial Information, and Location Information.
We process personal data for purposes of targeted advertising (as defined in the TIPA), including Personal Identifiers, Internet Activity, Commercial Information, Financial Information, Location Information, and Consumer Communications. This allows us to show you ads that are more relevant to you.
You may opt-out of these data practices here.
Profiling
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
TIPA Rights
Your TIPA rights are described below. Make a Privacy Request by clicking here.
Right to Access
You have the right to confirm whether we are processing personal data about you and to access such data. Where processing is carried out by automated means, you have a right to receive a copy of your personal data in a portable and readily usable format that allows you to transmit your data to another controller.
If you make an Access Request more than twice in a 12-month period, or we determine the request is manifestly unfounded or excessive, we may require you to pay a small fee for this service.
Right to Delete
You have the right to request that we delete any personal data we have obtained about you. We will permanently delete any such personal data from our records and direct our processors to do the same. However, we may retain your personal data if it is necessary for certain purposes, as allowed by law. Any personal data retained for these purposes will not be processed for other purposes.
Right to Non-Discrimination
If you exercise your TIPA privacy rights, we will not discriminate against you by, for example, charging a different price or offering a different level or quality of products or services.
We will not retaliate against you, as an employee, applicant for employment, or independent contractor, for exercising your privacy rights.
Right to Opt-Out
Sale of Personal Data:
Exercise your right to opt-out.
Targeted Advertising:
Exercise your right to opt-out.
Profiling:
We do not profile consumers in furtherance of decisions that produce legal or similarly significant effects.
Authorized Agent
You may authorize an agent to submit a Request to Opt-Out on your behalf, including through a technology such as a web link, browser setting, or global device setting. We will comply with such requests if we are able to authenticate your identity and the agent's authority to act on your behalf.
Opt-Out Preference Signals
Your browser settings may allow you to automatically transmit an opt-out preference signal, such as the Global Privacy Control (GPC) signal, to online services you visit. When we detect such a signal, we set the Global Privacy Platform privacy string in your browser so that any third party who respects that signal will not track your activity on our website. Your Request to Opt-Out will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. GPC is supported by certain internet browsers or as a browser extension. Find out how to enable GPC.
Right to Correct
You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.
Authenticating Your Request
Once we receive your request, we will verify the information you provided by matching the information that we have collected. If we cannot authenticate your request, we may ask for additional information from you. If you are unable to provide additional information, or we are unable to authenticate the request using commercially reasonable efforts, we may deny your request.
Right to Appeal
If we decline to take action in response to any of your privacy requests, you have the right to appeal that decision within a reasonable amount of time, but no later than 90 days from the date of our decision. To submit a request for appeal, click here and select "Appeal a Decision" in the request type drop-down.
If you believe your rights have been violated and you are not able to resolve the issue directly with us, you may file a complaint with the Tennessee Attorney General's Office.
