Updated and effective August 13th, 2024.

This privacy policy (“Privacy Policy”) applies when you access, visit, or use any of the websites, mobile applications, features, widgets, or other online services that are owned and operated by Wilton Brands LLC or its affiliates or subsidiaries (“Wilton,” “we”, “us” or “our”) and that include a link to this Privacy Policy (each, a “Site” and collectively, “Sites”) and to information collected offline by Wilton.

By accessing, using, or otherwise interacting with any part of our Sites, or by otherwise providing personal data to Wilton, you agree to the terms of this Privacy Policy and the Terms of Use which govern your use of the Sites. If you do not agree to the terms of this Policy and the applicable Terms of Use, do not access or use the Sites or provide personal data to us.

Table of Contents

  1. Personal, Sensitive, and Non-Personal Data We Collect and How We Use and Disclose It
  2. Additional Details About Our Data Practices
    1. Data Collected Automatically
      1. Device ID/Interaction Information
      2. Location Data
      3. Cookies and Local Storage
      4. Web Beacons
      5. Data Collected Through Mobile Devices
      6. Session Replay Technology
    2. Data We Receive or Collect From Third Parties
      1. Enhancement Data
      2. Share by Email
    3. Data You Directly and Voluntarily Provide
      1. Chat Boxes
      2. User Content and Submission Features
      3. Sweepstakes, Contents, & Promotions
      4. Employment Applications
    4. Disclosure of Data to Third Parties
      1. Parent and Affiliated Companies
      2. User Content and Submission Features
      3. Social Media Features
      4. Business Transfers and Transitions
  3. Third Party Analytics Providers, Ad Servers, and Similar Third Parties
  4. Your Choices
  5. Third Party Links & Content
  6. Security
  7. International Transfer of Personal Information
  8. General Audience Sites
  9. Changes to This Privacy Policy
  10. Contact Us
  11. State Specific Rights - (Colorado, Connecticut, Utah, Nevada, California, and Virginia)

Personal, Sensitive, and Non-Personal Data We Collect and How We Use and Disclose It

We may collect information from you through various features when you visit one of our Sites or interact with us offline. Some of this information may be considered “personal information” or “personal data,” and some of which may be considered “sensitive,” under various applicable laws. We consider information that identifies you as a specific, identified individual (such as your name, phone number, and email address) to be personal information. We will also treat additional information, including IP addresses and cookie identifiers, as “personal information” or “personal data” where required by applicable law, and we will treat certain personal information as “sensitive data” as required by applicable law.

We may take your personal information and de-identify or pseudonymize it so as to make it non-personally identifiable, either by combining it with information about other individuals and/or by hashing the information (i.e., converting it into an alphanumeric code that does not identify you directly) or otherwise removing characteristics that make the information personally identifiable directly to you. We maintain and use de-identified data without attempting to re-identify it, except where permitted by applicable law, such as to determine whether our de-identification processes satisfy legal requirements. We will treat de-identified or pseudonymized information as non-personal to the fullest extent allowed by applicable law. We may also collect other information that is not personal information, such as demographic information (i.e., age and gender) and information regarding use of a Site. (We will treat this information as personal information only where required by applicable law.)

The following chart sets out by category the personal data collected (“Category”), the purposes for which the information is collected (“Purposes”), the categories of third parties to whom the information may be disclosed for a business purpose (“Disclosed To”), and the categories of third parties to whom the information may be sold for monetary value or other valuable consideration or shared for cross context behavioral advertising/targeted advertising (“Sold/Shared To”).

Please also see the “Additional Details About Our Data Practices” section below for additional information on certain types of personal data collection and use.

Category of Data Purpose of Collection:
Categories of Third Parties the Data is Disclosed To:
Third Parties to whom the Data is Sold/Shared for Targeted Advertising:
Contact Information
(This may include your first and last name, phone number, email address, and mailing address.)

Purpose of Collection:

  • Provide You the Sites: to enable you to use a Site or other services we offer; maintain your account information; process your payments and fulfill your orders; ship and deliver your orders; send order and account-related communications such as receipts and confirmations; respond to your inquiries, process information you provide to us, and send you information you have requested or agreed to receive, such as newsletters and promotional email communications; provide customer service and support, such as responding to your questions, complaints, or comments and getting your feedback; create and manage your account; facilitate your participation in sweepstakes/contests; permit you to post reviews
  • Advertising Activities and Marketing Messages: to send you information by email, mail, telephone, text message, or other means, about us and our Sites, products, services, and activities; to send you deals and information from us or third parties online or offline, including newsletters, special offers, and messages about items you have shown interest in); to create advertising models through lookalike modelling or other research methodologies
  • Personalization: to identify your preferences; tailor the content and advertising we display to you or others, on a site or elsewhere
  • Administrative: to verify your identity, including that your email address is active and valid; contact you regarding your use of the Sites, content, features, or products you use or other administrative matters, such as changes to our Privacy Policy, Terms of Use, or other policies; consider an employment application you submit
  • Internal Business Purposes: to provide and improve our products, services, and Sites; detect and troubleshoot problems; facilitate your job application; analyze the effectiveness of our marketing efforts; analyze trends, statistics, and usage patterns; market research; conduct sales auditing; comply with the legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: resolve disputes; enforce our agreements and policies; comply with our contractual obligations; cooperate with government or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Customer Service Providers: such as call centers and live chat vendors
  • Communication Services Providers: such as email delivery vendors and live chat agents
  • Order Fulfillment Vendors: such as payment processors, fulfillment centers, delivery services, order tracking vendors
  • Other Users;
  • Sweepstakes/Contest Partners: such as administrators, other prize providers, prize fulfillment vendors, and other third parties we partner with for contests, sweepstakes, or promotions
  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Security Vendors;
  • Parent and Affiliated Brands;
  • Government Agencies and Law Enforcement/Where Required: Government Agencies and Law Enforcement/Where Required
  • Third parties in the course of a business transition;
  • Other service providers who solely use your data to provide services to us or to you;

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Social Media Companies
Payment and Financial Information
(This may include your credit card number, billing address, or other payment card data.)

Purpose of Collection:

  • Provide You the Sites: to process your payments and fulfill your orders; provide customer service and support; send you transactional messages regarding your use of our Services, purchases, and other account-related communications
  • Security: to investigate, detect and protect against misuse of our systems, fraud, or other crime
  • Legal: to resolve disputes; enforce our agreements; comply with our contractual obligations; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Customer Service Providers: such as call centers and live chat vendors
  • Order Fulfillment Vendors: such as payment processors, fulfillment centers, order tracking, delivery service
  • Communications Service Provider: such as email delivery vendors and customer support
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with a court or other legal proceeding
  • Third parties whom you otherwise agree or direct us to share your data
  • Third parties in connection with business transitions
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

This category of data is not sold or shared for targeted advertising.

Demographic Data
(This may include ZIP code/postal code, city/state.)

Purpose of Collection:

  • Provide You the Sites: to process your payments and fulfill your orders; facilitate your participation in sweepstakes/contests; facilitate access to the Sites
  • Employment Related Purposes: to facilitate your job search; process your employment application; prepare related governmental and internal statistics reports
  • Advertising Activities: to send you deals and information from us or third parties online or offline, including newsletters, special offers, and invites; to create advertising models through lookalike modelling or other research methodologies
  • Personalization: to identify your preferences, tailor the content and advertising we display to you or others, on a Site or elsewhere, and to analyze trends and statistics
  • Internal Business Purposes: to provide and improve our products, services, and Sites; detect and troubleshoot problems; analyze trends, statistics, and usage patterns; market research; comply with legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: to resolve disputes; enforce our agreements and policies; comply with our contractual obligations; cooperate with government or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Communication Services Providers: such as email delivery vendors and live chat agents
  • Order Fulfillment Vendors: such as payment processors, fulfillment centers, delivery services, order tracking vendors
  • Sweepstakes/Contest: such as administrators, other prize providers, and prize fulfillment vendors
  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Security Vendors
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with a court or other legal proceedings
  • Third parties in the course of a business transition
  • Third parties to whom you agree or direct us to share your data
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Social Media Companies
Device ID/Interaction Information
(This may include details about the hardware and software you use to visit the Sites, areas of the Sites you visit, date and time of your visit to a Site, links that you click within a Site, websites or advertisements you visit before or after visiting a Site, terms you entered into a search engine that lead you to a Site, IP address, mobile device identifier, or other unique identifier, device connection information (such as browser type and version, operating system, and platform), whether an email message we sent was opened and whether a link in an email was clicked, and approximate location information.)

Purpose of Collection:

  • Provide You the Sites: to enable you to use a Site or other services we offer; process your payments and fulfill your orders; respond to your inquiries; provide customer service and support; create and manage your account; recognize you across the services and devices
  • Administrative: to recognize you across our Sites and your devices
  • Advertising Activities and Marketing Messages: to send you information about us and our Sites, products, services, and activities; to send you deals and information from us or third parties online or offline; to create advertising models through lookalike modelling or other research methodologies
  • Personalization: to identify your preferences; tailor content and advertising we display to you and others, on a Site or elsewhere; to analyze trends and statistics, and to create advertising models
  • Internal Business Purposes: to provide and improve our products and services; detect and troubleshoot problems; comply with legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: to resolve disputes; enforce our agreements and policies; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Order Fulfillment Vendors: such as payment processors
  • Social Media Platforms:
  • Sweepstakes/Contest Partners: such as administrators, other prize providers, and prize fulfillment vendors
  • Communications Services Providers: such as email delivery vendors and live chat agents
  • Security Vendors
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with a court or other legal proceedings
  • Third parties in connection with a business transition
  • Third parties to whom you agree or direct us to share your data
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties : such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Social Media Companies
Precise/Specific Location Data
(This may include data such as longitude/latitude coordinates from a global positioning system (GPS).)

Purpose of Collection:

  • Provide You the Sites: enable you to use certain features on the Sites, such as to locate products
  • Advertising Activities and Marketing Messages: to tailor content recommendations we display to you; to create advertising models through lookalike modelling or other research methodologies
  • Personalization: to tailor content based on your location
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Internal Business Purposes: to provide and improve our products and services; detect and troubleshoot problems; comply with legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Legal: to resolve disputes; enforce our agreements and policies; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Security Vendors
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with court or other legal proceedings
  • Third parties in connection with a business transition
  • Third parties to whom you agree or direct us to share your data
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

This category of data is not sold or shared for targeted advertising.

Photo/Video Data and Other User Generated Content
(This may include photos, videos, audio, text, files, or other content you upload, for example, through interactive features or in connection with a contest, sweepstakes, or other promotion.)

Purpose of Collection:

  • Provide You the Sites: to permit you to post reviews; provide you customer service and support, such as responding to your questions, complaints, or comments, and getting your feedback; to respond to your inquiries, process information you provide to us, and send you information you have requested or agreed to receive; facilitate your participation in a sweepstakes, contest, or promotion; to create and manage your account
  • Internal Business Purposes: to provide and improve our products services, and Sites; detect and troubleshoot problems
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: to cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Other Users
  • Sweepstakes/Contest Partners: such as administrators, other prize providers, and prize fulfillment vendors
  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Order Fulfillment Vendors: such as fulfillment centers, delivery services, order tracking vendors
  • Social Media and Other Third Party Platforms
  • Security Vendors
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with a court or other legal proceedings
  • Third parties in connection with a business transition
  • Third parties to whom you agree or direct us to share your data
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

This category of data is not sold or shared for targeted advertising.

Transaction Information
(This may include data about the products you purchase, returns/exchanges, customer service contacts, and data related to your participation in sweepstakes or contests or other promotions.)

Purpose of Collection:

  • Provide You the Sites: to process your payments and fulfill your orders; send order and account-related communications such as receipts and confirmations; respond to your inquiries, process information you provide to us, and send you information you have requested or agreed to receive; permit you to post reviews; provide customer service and support, such as responding to your questions, complaints, or comments and getting your feedback; facilitate your participation in sweepstakes/contests
  • Advertising Activities and Marketing Messages: to send you information about us and our Sites, products, services, and activities; to send you deals, and information from us and third parties online or offline, including newsletters, special offers, and messages about items you have shown interest in; to create advertising models through lookalike modelling or other research methodologies
  • Internal Business Purposes: to provide and improve our products, services, and Sites; detect and troubleshoot problems; analyze the effectiveness of our marketing efforts; analyze trends, statistics, and usage patterns; market research; conduct sales auditing; comply with legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: to resolve disputes; enforce our agreements and policies; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Order Fulfillment Vendors: such as payment processors, fulfillment centers, delivery services, order tracking vendors
  • Sweepstakes/Contest Partners: such as administrators, other prize providers, and prize fulfillment vendors
  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Customer Service Providers: (such as call centers and live chat vendors
  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Security Vendors
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with a court or other legal proceedings
  • Third parties in connection with a business transition
  • Third parties to whom you agree or direct us to share your datali>
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

This category of data is not sold or shared for targeted advertising.

User Account Information
(This may include information such as username, password, communication preferences, and account settings.)

Purpose of Collection:

  • Provide You the Sites: to enable you to use a Site or other services we offer; to create and manage your account; identify you across services and devices; process your payments and fulfill orders; send order and account-related communications; provide customer service and support
  • Administrative: to verify your identity
  • Personalization: to understand your preferences
  • Internal Business Purposes: to provide and improve our products, services, and Sites; detect and troubleshoot problems; comply with legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: to resolve disputes; enforce our agreements and policies; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Technology Systems Service Providers: such as webhosts, database hosts, software-as-a-service providers, third party developers, cloud computing providers
  • Security Vendors
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with court or other legal proceedings
  • Third parties in connection with a business transition
  • Third parties to whom you agree or direct us to share your data
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

This category of data is not sold or shared for targeted advertising.

Information About Your Interests and Preferences
(This may include information such as information derived from interactions with the Sites, including when you leave reviews.)

Purpose of Collection:

  • Advertising Activities and Marketing Messages: to send you about us and our Sites, products, services, and activities; to send you deals and information from us or third parties online or offline, including newsletters, special offers, and messages about items you have shown interest in; to create advertising models through lookalike modelling or other research methodologies
  • Personalization: to identify your preferences; to tailor the content and advertising we display to you or others, on a Site or elsewhere, and to analyze trends and statistics
  • Internal Business Purposes: to provide and improve our products, services, and Sites; detect and troubleshoot problems; analyze the effectiveness of our marketing efforts; market research
  • Security: to investigate, detect, prevent, and protect against misuses of our systems, fraud, crime, or other illegal activities or activities that violate our policies
  • Legal: to resolve disputes; enforce our agreements and policies; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations; protect our or others’ rights/assets; in connection with a corporate transition
  • Business transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/ with your consent

Categories of Third Parties the Data Is Disclosed to:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Social Media and Other Third Party Platforms
  • Technology System Service Providers
  • Communication Services Providers
  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with a court or other legal proceedings
  • Third parties in the course of a business transition
  • Third parties to whom you agree or direct us to share your data
  • Other service providers who solely use your data to provide services to us or to you

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

  • Third Party Analytics Partners, Ad Servers, and Similar Third Parties: such as analytics companies, network advertisers, agencies, others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere, affiliated marketing partners or unaffiliated third parties who are joint marketing and licensing partners or whose products or services are integrated in our Sites
  • Social Media Companies
Employment Application-Related Information
(This may include your education/work history, eligibility to work in the United States, work history, and similar information.)

Purpose of Collection:

  • Employment Related Purposes: to facilitate your job search; process your employment application; prepare related governmental and internal statistics reports; defend against employment-related claims
  • Administrative: to verify your identity
  • Internal Business Purposes: to comply with legal requirements and our business practices, such as our recordkeeping, backup, and document retention policies
  • Security: to investigate, detect, prevent, and protect against misuse of our systems, fraud, crime, or otherwise illegal activities, or activities that violate our policies
  • Legal: to comply with the law; resolve disputes; enforce our agreements and policies; cooperate in governmental or other legal inquiries; fulfill regulatory reporting obligations
  • Business Transitions: in connection with a merger, acquisition, consolidation, bankruptcy, or other corporate transition, affecting all or part of our assets, including during due diligence
  • Other Purposes as Disclosed: at the time of collection/with your consent.

Categories of Third Parties the Data Is Disclosed to:

  • Parent and Affiliated Brands
  • Government Agencies and Law Enforcement/Where Required: including third parties in connection with court or other legal proceedings
  • Technology System Service Providers
  • Security Vendors
  • Third parties in connection with business transactions
  • Third parties to whom you agree or direct us to share your information
  • Other service providers who use your data solely to provide services to us or to you.

Categories of Third Parties to Whom the Data is Sold/Shared for Targeted Advertising:

This category of data is not sold or shared for targeted advertising.

Additional Details About Our Data Practices

We provide in this section additional details about the information practices listed in the above chart, where it would be helpful for your understanding of such practices.

  1. Data Collected Automatically:

    Device ID/Interaction Information: We or our third-party business partners (including third party service providers, third-party content, advertising or analytics companies and other business partners) collect certain information whenever you access or interact with a Site (“Usage Information”) using a variety of tracking and other technologies, such as cookies, local storage, web beacons, embedded scripts, and location data services. These tracking technologies may transfer a unique identifier for your device to a browser, place a cookie on your device, temporarily download code to your device, or use other means to track your access or interactions.

    To get information about cookies, click on the link All About Cookies.org.

    We use these technologies for many purposes, including to make your use of a Site more convenient and to track total visitors on an aggregate basis. The information we collect may include (but is not limited to):

    • Date and time of your visit to a Site.
    • Areas you visit within a Site.
    • Links that you click on within a Site.
    • Websites or advertisements you visit before or after visiting a Site.
    • Terms you entered into a search engine that lead you to a Site.
    • IP address, mobile device identifier, or other unique identifier (“Device Identifier”) and other Usage Information for the device used to access a Site.
    • Device and connection information, such as browser type and version, operating system, and platform.
    • Whether an email message we sent was opened and whether a link in the email message was clicked.
    • Approximate location of your device, which may be collected or inferred through other information we collect, such as IP address.

    Location Data: We may collect precise location data from your device, if you have opted-in to the collection of that information. (You may be able to disable the collection of precise location data through the settings on the device used to access a Site, but your approximate location may remain available through its IP address or other information that we collect.)

    Cookies and Local Storage: “Cookies” and local storage are pieces of information (data files) transferred to an individual’s browser on their device when the device is used to visit a Site. These technologies are able to store a unique identifier for a device to allow a certain Internet site to recognize the device whenever the device is used to visit the site. These technologies may be used for many purposes by us and our third-party business partners, such as automatically collecting Device ID/Interaction Information, enabling features, remembering your preferences, and providing you with targeted advertising elsewhere online. Most browsers provide you with the ability to disable, decline, or clear cookies and local storage; please check your browser’s settings for further information. You can find more information about cookies and how they work at allaboutcookies.org. You can also adjust your cookie preferences by using our cookie management tool, which can be accessed via our Cookie Preferences.

    Pixel Tags: Small graphic images or other web programming code called pixels (also known as “web beacons”, “1x1 GIFs”, or “clear GIFs”) may be included in our web pages and email messages. Pixels may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a pixel. Pixels or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to a Site, to monitor how users navigate the Site, to count how many emails that were sent were actually opened or to count how many particular links were actually viewed.

    Data Collected Through Mobile Devices: We use embedded scripts and the tools provided in Software Development Kits (“SDKs”) to collect information through mobile devices such as the hardware model, operating system and version, identification numbers assigned to your mobile device, such as the ID for Advertising (IDFA) on Apple devices, and the Advertising ID on Android devices, mobile network information, and website usage behavior. SDKs are software packages that contain a set of tools that can be used to help build applications and implement new features in existing apps including those that collect information from your device.

    Session Replay Technology: Wilton may record through session replay technology your interactions with the Sites, such as what pages you visit on the Sites, how long you visit those pages, and any links you click or information you provide. We use this information for our internal business purposes, such as for website analytics, to improve the Sites and our products and services, and to address functionality issues.

    In addition, we may use a variety of other technologies that collect similar data for security and fraud detection purposes.

  2. Data We Receive or Collect From Third Parties:

    Enhancement Data: We may receive information about you from third parties and we may supplement that information with the information we collect to respond to your requests, tailor content, offer you products or services that we believe may interest you, and for other purposes.

    Share by Email: If you use a Site’s “Email a Friend” feature to share by email, we will ask you for the recipient’s personal information (i.e., email address) and will use your email address to identify the “sender.”

  3. Data You Directly and Voluntarily Provide: We may ask you to provide data to us when you use the Sites, for example, in the following ways:

    Chat Boxes: When you participate in a chat feature we may provide, Wilton can record and use your communications and the information you provide in order to assist you during the chat session, provide customer support, to improve our products and services, and for marketing purposes.

    User Content and Submission Features: A Site may permit you to submit or post photos, audio, video, text, files, social media posts, or other content (“User Content”) through interactive or other features, such as product reviews, discussion forums, blog comments, gallery posts, or promotional activities (“Submission Features”). Your submission of User Content is subject to the Terms of Use for the Site (including the User Content and Acceptable Use terms) which give us the right to use your User Content, online or offline, in connection with our promotional activities. Personal information, such as your name, user name (from a Site or your social media account), or where you reside, may be publicly displayed with your User Content. Others may access it, use it, and share it. We are not responsible for how others use User Content you submit or post. In addition, in connection with certain activities, your personal information may be disclosed publicly, for example, being identified as a winner of a sweepstakes or being awarded a prize.

    Sweepstakes, Contests, & Promotions: We may offer sweepstakes, contests, or other promotions (any, a “Promotion”), that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern that Promotion, which may contain specific requirements of you (including, without limitation and except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness, or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, personal information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, as required by law or permitted by the Promotion’s terms or official rules (such as on a winners list).

    Employment Applications: If you submit an employment application through the Careers portal on a Site and voluntarily “self-identify” in certain ways (e.g., veteran status or gender), we may use your personal information to fulfill legal reporting requirements or to defend against employment-related claims. Please note that we may utilize a careers portal that is operated by a third party, in which case your use of the careers portal will be subject to the third party’s privacy practices as disclosed on the portal, and not to this policy.

  4. Disclosure of Data to Third Parties: We may share non-personal information, including Usage Information, aggregated user statistics, and information that has been hashed or otherwise de-identified or pseudonymized, with third parties in our discretion and as permitted by law, including for targeted advertising purposes. We may also share personal information:
    1. as disclosed when you provided it
    2. with your consent
    3. as described elsewhere in this Privacy Policy
    4. in the circumstances described below – all as permitted by applicable law

    Parent and Affiliated Companies: Wilton may share information with Dr. August Oetker Nahrungsmittel KG (our parent company), for internal business and operational purposes.

    Social Media Features: A Site may permit you to interact with a third-party platform (such as Facebook, Instagram, or Twitter) and the Site, for example “liking” or “sharing” content from a Site, posting your social media posts to a Site, including a hashtag associated with us in your social media post, or creating an account or registering with a Site using existing login information from a third-party platform (“Social Media Features”). Your use of Social Media Features is subject to the Terms of Use for the Site (including the User Content and Acceptable Use terms) which give us the right to use your interaction, online or offline, in connection with our promotional activities.

    If you use Social Media Features, your interaction and personal information may be publicly disclosed on the Sites and on the third-party platform. We and the third-party platform may have access to information about you and your use of the Sites and the third-party site. These third-party platforms may be able to collect certain information about your visits to the Sites regardless of whether or not you affirmatively interact with the feature and whether or not you are logged into (or have) an account with the third-party platform. If others give us access to their profile, page, or other content on a third-party platform, we may also receive information about you if it is accessible through that content.

    The information we collect in connection with Social Media Features is subject to this Privacy Policy; the information the third-party platform collects is subject to the third party’s privacy practices (including whether the third-party shares information with us, the types of information shared, and your choices about what is visible to others on the third-party platform).

    Business Transfers and Transitions: We may, in evaluating or engaging in a sale of assets, bankruptcy, merger, or other transaction, transfer or assign your personal information, including, without limitation, during the course of any due diligence process, which you agree that we may do without your further consent. We may also share your personal information with any parent company of ours for business and operational purposes.

Third Party Analytics Providers, Ad Servers, and Similar Third Parties

Wilton works with third party business partners, such as analytics companies, network advertisers, agencies, and others who provide us with information about the Sites, Site users, and our advertisements, and who serve our advertisements elsewhere. We and these third parties collect certain information about your visits to and activity on our Sites and other websites and services and may use this information to target advertising to you and others and to assess the effectiveness of our advertising. We may share (or permit them to collect) certain information, such as Usage Information and hashed (including hashed email addresses) or otherwise deidentified or pseudonymized information, with these third parties for the purpose of serving you more relevant ads on and off the Sites and similar purposes.

These third parties may set and access their own tracking technologies on your device (including cookies and web beacons) over time and across websites and may collect or have access to information about you, some of which may be personal information or personal data under various state laws.

If you would like to opt-out of third party advertising and analytics, there are a variety of tools available to you:

  • Our Tools: To disable sharing through cookies set on our site by third parties for advertising and analytics purposes, please adjust your settings by clicking the Truyo Cookie Manager link. Certain states provide additional rights. Please see our sections for residents of California and Virginia for additional rights you may have.
  • Do Not Track: Some browsers can be set to send a “Do Not Track” request that requests that a website not track the visitor’s activity. When you choose to turn on the “Do Not Track” settings in your browser, your browser will send a signal to websites, analytics providers, advertisements networks, plug-in providers, and other web service providers you encounter while browsing to stop tracking your activity. For information about and to set up click the link “Do Not Track”.
  • Global Privacy Controls: Global Privacy Control (“GPC”) is a technical specification in your browser settings that you can use to automatically inform websites of your privacy preferences with respect to third party online tracking. To find out more about and to set up GPC, please visit the global privacy control about page..
  • NAI/DAA Opt-Out: Some of these service providers may be members of the Network Advertising Initiative (“NAI”) or Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. Both NAI and DAA provide information regarding procedures for opting-out of targeted online advertising from participating companies. For information from NAI about opting out, review the about ads consumer site. For information from DAA about opting out go to your ad choices..
  • Google Analytics: We also use Google Analytics, which uses cookies and other technologies to collect and analyze information about use of the Sites and provide other reports. This service may also collect information regarding your use of other websites, apps, and online resources. Click on the link for information about opting out from Google, and to download the Google Analytics opt-out browser add-on from Google..

Please note opting out through these mechanisms does block all online advertising. You will continue to receive generic advertisements. Your opt-out choices are browser and device specific; if you disable your cookies or upgrade your browser after opting out, or if you use different computers or browsers, you will need to indicate your opt-out choices across those other computers and browsers.

Your Choices

Corrections/Deletion/Opt-Out: You may update, correct, or delete the personal information you have provided by contacting us at privacy@wilton.com. We will take commercially reasonable steps to make changes in our active databases but will keep the original information consistent with our business practices (e.g., recordkeeping, backup, and document retention). To opt out of promotional email communications from us, email us at privacy@wilton.com or click on the unsubscribe link in a promotional email you receive from us.

Inquiries and Complaints: You may request information about how, where, and why we collect and use your personal information, including how we share your personal information with third parties, by contacting us at privacy@wilton.com. You may file a complaint with us in connection with the collection, use, or processing of your personal information under this Privacy Policy by contacting us at privacy@wilton.com. We will take reasonable steps to remedy any issues relating to our obligations relating to your personal information.

Closing Your Account; Retention of Information: To instruct us to close your account, email us at privacy@wilton.com. We will retain information from closed accounts as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is otherwise required or permitted by law.

A Site may contain links to other web sites that Wilton does not control, and advertising and other content hosted and served by third parties. Wilton is not responsible for the privacy practices of any third party.

Security

We take commercially reasonable steps to secure information. For example, the checkout process uses SSL (Secure Socket Layer) technology to help protect the transaction. No computer system is fully secure, however, and there are inherent risks associated with online transactions. You use a Site and submit information to us at your own risk.

International Transfer of Personal Information

Wilton is a United States company. If you are outside the U.S. and choose to provide personal information to us, we may transfer personal information for processing to the U.S. and other jurisdictions (including Germany, where our parent company is located). These jurisdictions may not have the same data protection laws as the country where you are located. When we transfer your personal information to the U.S. or other jurisdictions, we will protect it as described in this Privacy Policy. By visiting a Site or providing information, you agree to the transfer, processing, and storage of your information in the U.S. and elsewhere. Personal Information processed or stored in another jurisdiction may be subject to access requests from governments, courts, or law enforcement in accordance with the laws of that jurisdiction.

General Audience Sites

The Sites are intended for a general audience and are not intended for use by or targeted to children younger than the age of 18. We do not knowingly collect personal information from children younger than the age of 18. If you are the parent or legal guardian of a child younger than age 18 and believe that we have collected personal information from your child, please contact us using the information in the “Contact Us” section below.

Changes To This Privacy Policy

To the extent permitted by applicable law, we may change this Privacy Policy from time to time. We will notify you of material changes by posting the changed or modified Privacy Policy on each of our Sites. We may also notify you in other ways, such as through contact information you have provided. The revised Privacy Policy will take effect when posted unless a later date is specified. To the fullest extent permitted by applicable law, you agree that by accessing, visiting, or using any of the Sites or submitting information to any of the Sites or in-store after the effective date (or taking any other action as specified in the revised Privacy Policy), you agree to the revised Privacy Policy. However, we will provide notice and obtain your consent (opt-in or opt-out) if required by law. Note that you may need to consent to our new policy in order to continue to use the Sites.

Contact Us

If you have any questions or concerns about this Privacy Policy, please email us at privacy@wilton.com.

State Specific Rights

  • Colorado, Connecticut, Utah, and Virginia: We set forth above the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared. Residents of Virginia, Colorado, Connecticut, and Utah have certain privacy rights with respect to this data, as described below. If you are a Consumer residing in one these states (as defined in each state’s respective law) and would like to exercise your applicable rights, please this Privacy Request Form or call 1-800-794-5866 to submit a request.

    Access Your Personal Information/Data Portability (CO, CT, UT, VA Residents) - To confirm whether we are processing your personal data and request to access such data, please complete the form. This includes to obtain a copy of the personal data previously provided by you to us and, to the extent feasible, in a readily usable format to allow data portability.

    Delete Your Personal Information (CO, CT, UT, VA Residents) - Request to delete your personal data.

    Correct Your Inaccurate Personal Information (CO, CT, VA Residents) - Correct the personal data we hold about you.

    Opt-Out of Targeted Advertising - Wilton engages in online advertising practices (and certain analytics or similar activities) that may be considered “targeted advertising” under these states’ laws. To disable sharing through cookies set by third parties that may be considered targeted advertising under such laws, Wilton uses the Truyo cookie manager to permit you to adjust your cookie settings. Please also review the Third Party Advertising and Analytics section above for information on industry tools and device settings that may be available to you.

    Opt-Out of Sales of Your Personal Data (CO, CT Residents) - Wilton does not sell your personal data for monetary compensation, but as discussed above, Wilton engages in certain online advertising practices (and third-party analytics and similar activities), which may be considered a “sale” as defined by CO and CT. To opt-out of the sales of your personal data please complete this form

    Right to Appeal (CO, CT, VA Residents) - If, for any reason, you would like to appeal our decision relating to your request and you are a resident of Colorado, Connecticut, or Virginia, you have the right to submit an appeal and can do so by submitting this Privacy Request Form or calling 1-800-794-5866. Please include your full name, the basis for your appeal, and any additional information to consider.

    Authorized Agents Submitting Opt-Out Requests for Sales and Targeted Advertising (CO, CT Residents) - If you are an authorized agent submitting a request to opt-out of sales or targeted advertising on behalf of a Colorado or Connecticut resident, please submit the request pursuant to the above instructions. We may require documentation to authenticate the resident’s identity and that you are authorized to submit the request on the resident’s behalf in order to be able to fulfill your request. Please keep in mind that if we cannot authenticate that you are authorized to act on the resident’s behalf or we cannot authenticate the resident’s identity, we may deny the request.

    Sensitive Data - If you are a Virginia, Colorado, or Connecticut resident, we will obtain your consent to the processing of any Sensitive Data (as defined by the applicable state law) we collect. If you are a resident of Utah, we will notify you at or before the time of collection of Sensitive Data (as defined by Utah law). If you wish to opt out of our processing of your Sensitive Data (as defined by the applicable state law), please complete this Privacy Request Form.

    • Nevada: Pursuant to Nevada law, you have the right to opt-out of the sale of certain covered personally identifiable information (PII) we have collected about you through our websites and online services. Please note that Wilton does not sell your covered information as those terms are defined under applicable Nevada law. However, you may still submit an opt-out request and we will honor that request as required by Nevada law if we were to engage in such a sale in the future. If you are a Nevada resident and would like to opt-out of the sale of your covered information, please submit your request to privacy@wilton.com. Your request must include your full name, street address, city, state, and zip code. Please contact us from the email address you have used to interact with us, or else provide us with that email address in your Nevada Opt-Out request email. We may contact you via such email address as needed regarding this request. If you previously provided a phone number to us, including it in your Nevada Opt-Out request email will assist us in identifying you and processing your request. You may also be required to take reasonable steps as we determine from time to time in order to verify your identity and/or the authenticity of the request. We will respond to your request within sixty (60) days either confirming that your request has been processed or indicating that we need an additional thirty (30) days to complete the request.

Notice to California Residents

  1. California Privacy Notice (This California Privacy Notice is effective as of January 1, 2023.)

    This notice supplements Wilton’s Privacy Policy and applies only to California residents. This California Privacy Notice sets forth the disclosures and rights for California Consumers regarding their Personal Information, as required by the California Consumer Privacy Act ("CCPA"). Terms (including defined capitalized terms) used in this California Privacy Notice have the same meanings given in the CCPA, CPRA, and the regulations, unless otherwise defined.

    Exercising Your California Rights
    California consumers have the right to request:

    1. That we disclose to you what Personal Information we collect, use, disclose, and sell/share, including the right to request that we provide to you the specific pieces of Personal Information we have collected about you ("Right to Know")
    2. That we delete the Personal Information we have collected from you ("Right to Delete")
    3. That we correct inaccurate Personal Information we hold about you ("Right to Correct")
    4. To opt out from the sharing of your Personal Information and Sensitive Personal Information to a third party for cross-context behavioral advertising (i.e. targeted advertising) ("Right to Opt-Out of Sharing")
    5. To opt-out from the sale of Personal Information and Sensitive Personal Information ("Right to Opt-Out of Sale")
    6. That we limit the use or disclosure of your Sensitive Personal Information to purposes set forth in the statute, including that use which is necessary and anticipated to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services ("Right to Limit the Use and Disclosure of Sensitive Personal Information")

    All subject to the meanings and exceptions set forth in the CCPA and CPRA. More information on each of these rights is below. In your request, you must provide enough information to allow us to verify you are the person about whom we collected personal information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it. We can’t respond to your request if we can’t verify your identity. Making such a request does not require you to create an account with us, and we will only use the information you provide in a request to verify your identity.

    Verifying Your Requests

    When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with information, beyond your full name, in order to verify your identity and fulfill your request, such as your mailing address, phone number (if you have provided it), and email address that you have used to interact with Wilton. We will take reasonable steps to verify your identity based upon the information you provide and the type of request you are making. We may ask for additional information as needed to fully verify your request.

    If we are unable to verify that the individual submitting the request is the same individual about whom we have collected information (or someone authorized by that individual to act on their behalf), we will not be able to process the request.

    Agents

    If you are an agent submitting a CCPA request on a consumer’s behalf, please complete this California Resident Privacy Request Form. We will also ask you to submit a declaration signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request and needs to be clear about the permission granted. Alternatively, you may submit a copy of a power of attorney under Probate Code sections 4000-4465. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit a request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

    Right to Know

    California Consumers have the right to know what information we have collected about you (the categories and the specific pieces of information).

    If you are a California consumer and would like to exercise your Right to Know, please complete this California Resident Privacy Request Form or call us toll-free at 1-800-794-5866.

    In order to have us provide you with specific pieces of information, we will require a signed declaration under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.

    Right to Delete

    California Consumers have the right to request that we delete information we have collected from you. If you are a California Consumer and would like to exercise your Right to Delete, please complete this California Resident Privacy Request Form or call us toll-free at 1-800-794-5866.

    Please note that as part of the verification process, we may follow up after you submit your request and require you to confirm that you want your information deleted.

    Right to Correct Inaccurate Information

    California Consumers have the right to request that we correct inaccurate information we hold about you. If you are a California Consumer and would like to exercise your Right to Correct, please complete this California Resident Privacy Request Form or call us toll-free at 1-800-794-5866.

    Right to Limit The Use and Disclosure of Sensitive Personal Information

    Under the CPRA Regulations, a business must only provide the Right to Limit the Use and Disclosure of Sensitive Personal Information when such Sensitive Personal Information is not collected or processed for the purpose of inferring characteristics about a consumer, or does not fall under certain statutory exceptions, pursuant to CPRA §1798.121. Wilton’s use and disclosure of Sensitive Personal Information is not used for such purpose and/or falls within the statutory exceptions, and we therefore do not offer this right at this time.

    Right to Opt-Out of the Sale of Personal Information or Sharing for Cross Contextual Behavioral Advertising

    California Consumers have the right to opt-out of the “sale” or “sharing” of your Personal Information or Sensitive Personal Information. Wilton does not sell your personal information for monetary compensation, but as discussed above, Wilton engages in certain online advertising practices (and third-party analytics and similar activities), which may be considered a “sale” or “share” for cross-context behavioral advertising (i.e., targeted advertising), whether or not for monetary or other valuable consideration.

    If you are a California Consumer and would like exercise your Right to Opt-Out of “Sale” or “Sharing”, please complete this California Resident Privacy Request Form or call us toll-free at 1-800-794-5866.

    Cookie-Based Opt Outs for Do Not Sell or Share for Cross Contextual Behavioral Advertising

    As discussed above, certain online advertising (and certain analytics or similar marketing business partners) may collect data from visitors to the Sites through the use of cookies, which may be considered a “sale” or “share” for cross-context behavioral advertising as defined in the CCPA and CPRA.

    To utilize our cookie management tool, including to opt-out of certain third-party analytics and advertising cookies that are potentially “sales” or “sharing”, click the (Truyo Cookie Manager) link.

    Please read the"Third-Party Analytics Providers, Ad Servers, and Similar Third Parties"section of the policy for more information on how you can manage your privacy via third parties. The Digital Advertising Alliance ("DAA") also offers tools for California consumers to send requests under the CCPA to opt out of the sale of personal information by some or all of the participating companies (CCPA Opt Out Tools).

    Data Retention

    We will retain all categories of personal information described in this California Privacy Notice for as long as it is reasonably necessary for the purposes set out in this California Privacy Notice, considering the time period reasonably necessary to: use the Sites; exercise the choices and rights you have requested; comply with our contractual obligations; enforce our terms for use of the Sites; and comply with legal and regulatory requirements. Except as noted differently on specific pages or apps, we retain your personal information while you have an account with us, or while you are using our Sites or continuing to visit us. We will retain information from closed accounts as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is otherwise required or permitted by law.

    Users Younger than 16

    Wilton does not knowingly share or sell Personal Information of minors younger than 16 years of age.

    Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

    California consumers have the right to not receive discriminatory treatment for exercising CCPA rights. We will not discriminate against you for exercising your CCPA rights.

    Notice of Financial Incentive

    Under California regulation, certain programs we offer that provide benefits to consumers may be considered financial incentive programs. We may collect personal information from you in connection with these programs, e.g., contact information (name, email address, residential address) and certain commercial information for a number of reasons, including to administer the program, contact you with regard to your account (if any), to provide the benefits to you, to better serve you, and to fulfill your requests associated with the program.

    To opt in to the programs, you may need to provide certain information, register for an account and agree to the applicable program terms, or otherwise follow the instructions associated with that applicable program. Please also see the terms of the program you are joining for additional description of the program and any additional requirements. Participation in our programs is voluntarily and you can withdraw at any time.

    To the extent that we provide a program that may be considered a financial incentive because the program is directly or reasonably related the collection, deletion or sale or retention of consumer personal information, the value is reasonably related to the overall value we receive from the personal information participants provide specific to the program minus the costs and expenses we incur in providing the program.

  2. Other California Rights / Your California Privacy Rights
    1. Your California Privacy Rights / Shine the Light: As stated above in this Privacy Policy, Wilton does not share personal information with third parties for their direct marketing purposes (as defined by California Civil Code Section 1798.83) unless we give you choice (to opt in or opt-out) before sharing with those third parties.

      If you are a California consumer and you have questions about our practices with respect to sharing information with third parties for their direct marketing purposes and your ability to exercise choice, please send your request by email to privacy@wilton.com. You must put the statement “Your California Privacy Rights” in the subject field of your email. You must include your name, street address, city, state, and ZIP code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

!