California Privacy Policy

Last Update: May 2023

This California Privacy Notice describes how Afflink, LLC (“Afflink,” “we” or “us”) uses, discloses, and processes California residents’ (“you” and “your”) personal information within the scope of the California Privacy Rights Act of 2020 (CPRA). This California Privacy Notice supplements the information contained in our Privacy Policy and applies only to residents of California. This California Privacy Notice should be read in conjunction with our Privacy Policy, which is incorporated by reference into this California Privacy Notice.  Your continued use of our website and/or apps means that you accept the foregoing terms.  To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the "Last Updated" date shown above.  

Personal Information We Collect About You and How We Use It

The term “personal information” as used in this California Privacy Notice means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include any publicly available, deidentified, aggregated or anonymized information. We also collect “sensitive personal information” as that term is defined by the CPRA. “Sensitive Personal Information” means Personal Information that reveals information such as: (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

The chart below describes the Personal Information we have collected in the past 12 months, the sources from which it was collected and the business purpose.  Please note the specific pieces of personal information we may collect about you can vary depending on the nature of your interactions with us. 

How Long We Keep Your Personal Information
Afflink will only retain your personal information for as long as is needed for the purpose(s) for which it was collected and other permitted purposes, including retention of personal information pursuant to any applicable contract, law or regulation. Our retention periods vary based on business, legal and regulatory needs.

How We Share and Sell Personal Information
Afflink does not “sell” your data as that term is commonly understood. However, we may disclose Personal Information to our third-party partners, as described below. This may be considered a sale of Personal Information or sharing for cross-context behavioral advertising of Personal Information under California law.
The chart below describes the Personal Information we have sold or shared in the past 12 months, the categories of third parties to which we have sold or shared the information, and the applicable business purpose.

Submitting Requests Relating to Your Personal Information

California residents may submit requests relating to your personal information as described below by submitting a request through by email to privacyrequests@pfgc.com or by phone at 1-800-473-4434. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with any of the requests described below. To verify your identity, we may require you to provide certain information we are likely to already have on-file about you based on the type of relationship you have with us. If you exercise your right to request specific pieces of your personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Right to Opt-Out of the Sale and Sharing of Your Personal Information. California residents may opt-out of the sale of their personal information or the sharing of their personal information for cross-context behavioral advertising. To opt-out, click here, or download and use a browser supporting the Global Privacy Control (GPC) browser signal. If you choose to use the GPC signal, you will need to turn it on for each browser you use.

Right to Limit the Use of Your Sensitive Personal Information. Under the CPRA California residents may have the right to limit the use of their Sensitive Personal Information. Given how we use your Sensitive Personal Information, as described above, this right does not apply to you.

Right to Request More Information. This California Privacy Policy discloses our practices with respect to the collection of your personal information. In addition to these disclosures, you may also submit a request to know: (1) the specific pieces of personal information we have collected about you; (2) the categories of personal information we collected about you; (3) the categories of personal information we sold or shared about you and the categories of third parties to whom each category of personal information was sold or shared; (4) the categories of personal information we disclosed about you for a business purpose and the categories of persons to whom it was disclosed; and (5) a list of all third parties to whom we have disclosed personal information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.

Please note that due to the different requirements of the applicable laws, our response times may vary depending on the specific type(s) of information sought. We respond to all verifiable requests for information as soon as we reasonably can and no later than legally required.

Right to Correct Inaccurate Information. If you believe that any of the personal information we maintain about you is inaccurate, under the CPRA you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Request Deletion of Your Personal Information. You have the right to request that we delete your personal information. Following receipt of a verifiable request, we will let you know what, if any, personal information we can delete from our records. We will also notify our service providers and contractors, and any third parties to whom we have transferred your information about your request to delete. If we cannot delete all of your personal information, we will let you know why.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of your rights under the CCPA or the CPRA, you have the right to not receive discriminatory treatment by us.