In this age of information, you value your privacy more than ever before, and so does Raley’s. As a prospective or actual Vendor of Raley’s, or an employee of such a Vendor, we may collect personal information about you in order to conduct business with you.
This Vendor Notice at Collection (“Notice”) informs you, as a person participating in a business relationship with Raley’s, of the categories of personal information that may be collected from you or other sources and the purposes for which the categories will be used.
“Personal information” as used in this Notice refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal information includes “Sensitive Personal Information” as defined by the California Consumer Privacy Act, “CCPA”.
Often, the information we collect will be business information, such as a business name and business address. On occasion we may collect personal information, such as when we conduct business with a sole proprietor whose business address is also a home address, or when a person’s name, title, and email is provided as contact information for a business.
The following are categories of personal information that Raley’s may collect from you or other sources, regarding you:
- Real name and aliases;
- Postal addresses and other addresses;
- Unique Identifiers or Unique Personal Identifiers;
- Device identifiers;
- Internet Protocol (IP) addresses;
- Telephone (including mobile) numbers;
- Online identifiers;
- Email addresses;
- Account names;
- Social security numbers or taxpayer identification numbers;
- Physical characteristics or descriptions, including images captured on security cameras or other technology;
- Insurance policy numbers;
- Educational information;
- Employment information, including employment history;
- Bank account numbers;
- Insurance policy numbers;
- Commercial information, including records of personal property, products or services purchased;
- Professional or employment-related information.
Your personal information will be retained for as long as Raley’s has a business need or is legally required to maintain and/or use such information.
Your personal information is used for Raley’s legitimate business needs only. We may use or disclose the categories of personal information, above, that we collect from you for the following purposes:
- Fulfilling the reason(s) you provided the personal information to Raley’s, such as setting up an account and providing contact information to conduct business;
- Administering and processing payments for services, goods, refunds and reimbursements;
- Investigating, evaluating and reporting related to potential health and safety issues, security breaches, and legal claims;
- Collecting and processing checks that are returned as undelivered;
- Processing and administering government documentation (e.g., W9);
- Conducting audits (internal or third party);
- Complying with mandatory government reporting and regulatory requirements;
- Applying for government tax credits or benefits;
- Providing information technology (IT) support;
- Performing contractual obligations in our Terms & Conditions;
- Any purpose described to you when the information is collected.
We reserve the right to retain and disclose your personal information as required to comply with federal, state or local law; to comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities; to cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law; to exercise or defend legal claims; or when we believe that disclosure is necessary to prevent harm or injury. We reserve the right to not disclose to you, and to not delete, personal information where compliance with your request would violate an evidentiary privilege. Nothing herein shall prevent us from providing your personal information to a person covered by an evidentiary privilege as part of a privileged communication.
Personal information does not include publicly available information from government records, lawfully obtained, truthful information that is a matter of public concern, information that a business has a reasonable basis to believe is lawfully made available to the general public by you or from widely distributed media, information made available by a person to whom you have disclosed the information so long as you have not restricted the information to a specific audience, de-identified or aggregated information, or other information specifically exempted by California law (such as health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other sector-specific privacy laws, including the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the California Financial Information Privacy Act, and the Driver’s Privacy Protection Act of 1994).