Effective November 23, 2020.

Custom and Craft Jewish Rituals, Inc. (“CCJR” or “we”) provides this Privacy Policy to inform you of our policies and procedures regarding the collection, use and disclosure of personal information we receive from users of www.Haggadot.com, www.CustomandCraft.org and www.HighHolidaysatHome.com (the “Site” or “Sites”) and our corresponding applications for mobile devices (the “Application”). This Privacy Policy applies only to information that you provide to us through the Site and Application. This Privacy Policy may be updated from time to time. We will notify you of any material changes by posting the new Privacy Policy on the Site or via the Application. You are advised to consult this policy regularly for any changes. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Service, accessible at http://haggadot.com/legal/terms

As used in this policy, the terms “using” and “processing” information include using cookies on a computer, subjecting the information to statistical or other analysis and using or handling information in any way, including, but not limited to collecting, storing, evaluating, modifying, deleting, using, combining, disclosing and transferring information within our organization or among our affiliates within the United States or internationally.

Information Collection and Use.

Our primary goals in collecting information are to provide and improve our Site, Application, services, features and content, to administer your membership (together, the “Service”) and to enable users to enjoy and easily navigate the Site and Application.

Personally Identifiable Information.

When you register with us through the Site or Application to become a Member of one or more of our Sites, we will ask you for personally identifiable information. This refers to information about you that can be used to contact or identify you (“Personal Information”). Personal Information includes, but is not limited to, your name, address, telephone number, geo-location information, photos or videos, free-form biography, website, email address user name, and if you are a donor, credit/debit card number or other financial information. 

You can register to join the Site or Application or by logging into your account with certain third-party social networking sites (“SNS”) (including, but not limited to, Facebook and Twitter) via our Site. If you decide to create your Account by logging into a SNS via the Site, we will extract the Personal Information you have provided to the SNS (such as your “real” name, email address and other information you make publicly available via the SNS) from the account you have with such SNS and use that information to create your Account; the information we extract may depend on the privacy settings you have with the SNS. For example, our Service allows users to create an account and login to the Service using their Facebook account credentials through Facebook Connect. If you are not currently registered as a Member and you click on “Sign in Using Facebook,” you will first be asked to enter your Facebook credentials and then be given the option to register and join the Site. By using Facebook Connect, you are allowing the Site to access your Facebook account information, and you are agreeing to the Facebook Terms of Use regarding your use of the Service via Facebook.

If you use the Site or Application to make donations or purchases, you may provide certain payment information, such as payment card, PayPal or other financial account information, and billing address. A third-party payment processor collects and processes that information on our behalf; we do not collect or retain your payment information. 

Automatically Collected Information and Cookies

When you visit the Site or Application, whether as a Member or a non-registered user just browsing (any of these, a “CCJR User”), our servers automatically record information that your browser sends whenever you visit a website (“Log Data”). This Log Data may include information such as the browser type or the webpage you were visiting before you came to our Site and Application, pages of our Site and Application that you visit, the time spent on those pages, information you search for on our Site and Application, access times and dates, your IP address and other statistics. We use this information to monitor and analyze use of the Site, Application and the Service and for the Site and Application’s technical administration, to increase our Site and Application’s functionality and user-friendliness, and to better tailor our Site and Application to our visitors’ needs. For example, some of this information is collected so that when you visit the Site and Application again, it will recognize you and serve advertisements and other information appropriate to your interests. We also use this information to verify that visitors to the Site and Application meet the criteria required to process their requests. We do not treat Log Data as Personal Information or use it in association with other Personal Information, though we may aggregate, analyze and evaluate such information for the same purposes as stated above regarding other Non-Identifying Information.

Like many websites, our Site and Application use “cookies” or other technologies to automatically collect certain information when you use our Site and Application, or interact with our emails. A cookie is a small data file that we transfer to your computer or mobile device’s hard disk for record-keeping purposes. We use cookies for two purposes. First, we utilize persistent cookies to save your login information for future logins to the Site and Application. Second, we utilize session ID cookies to enable certain features of the Site and Application, to better understand how you interact with the Site and Application and to monitor aggregate usage by CCJR Users and web traffic routing on the Site and Application. Unlike persistent cookies, session cookies are deleted from your computer when you log off from the Site, Application and Service and then close your browser. Third-party advertisers on the Site and Application may also place or read cookies on your browser. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all portions of the Site and Application or all functionality of the Service.

We may also use third-party tools or services, such as Google Analytics, to assist us with analyzing and improving the Site and Services. These service providers are not permitted to use the information collected on our behalf except to help use conduct and improve our business.

You may adjust your browser or operating system settings to limit this tracking or to decline cookies, but by doing so, you may not be able to use certain features on the Services or take full advantage of all of our offerings. Check the “Help” menu of your browser or operating system to learn how to adjust your tracking settings or cookie preferences.

We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. On your mobile device, you can adjust your privacy and advertising settings to limit your tracking for advertising or control whether you receive more relevant advertising. Note that our systems may not recognize Do Not Track headers or requests from some or all browsers.

If you do not wish to have your email address used by us to promote our own or third parties' products or services, you can opt-out by checking the relevant box located on the form on which we collect your data (the [order form/registration form or at any other time by logging into the Site and adjusting your user preferences in your account profile by checking or unchecking the relevant boxes or by sending us an email stating your request to info@Haggadot.com. If we have sent you a promotional email, you may send us a return email asking to be omitted from future email distributions.

Information Use

We may use the information we collect from and about you to present the Site or Application and its contents to you; respond to your inquiries, provide donor benefits and other services, fulfill orders, process payments and prevent transactional fraud, and contact and communicate with you; provide you with customized content, targeted offers, and advertising on the Services, via email or text message, or on other Site or Application; contact you with CCJR newsletters, marketing or promotional materials and other information that may be of interest to you; improve the content and functionality of the Site or Application and marketing efforts; conduct research and analysis; comply with applicable laws, including to respond to requests from public and government authorities; enforce this Privacy Statement; protect our rights, privacy, safety or property, and/or that of you or others; or as described to you at the point of data collection. 

Data Retention

We store your information as long as it is necessary to provide our Products and Services and fulfill the transactions you requested. Typically, we keep your information as long as you maintain a user account. Where appropriate or legally required, we retain your information on our servers even after deletion of your Haggadot.com account for other essential purposes such as complying with our legal obligations, resolving disputes, enforcing our agreements, or as is reasonably necessary for other business purposes.

Emailing Via a Site Account

As part of the Service, Site Members may communicate with other Site Members and non-registered users through use of their Accounts. Where Members have selected the option of adding one or more email addresses to an online form, for example, to collaborate on a booklet, the message they create in the corresponding template will be sent from the Site to those email addresses on their behalf. These email addresses will be used only for the purpose of sending the email communication to the addressee.

Phishing

Identity theft and the practice currently known as “phishing” are of great concern to Haggadot.com. Safeguarding information to help protect you from identity theft is a top priority. We do not and will not, at any time, request your credit card information, login information, or national identification numbers in a non-secure or unsolicited e-mail or telephone communication. For more information about phishing, visit the Federal Trade Commission’s website.

Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share the information we collect from and about you as described below.

CCJR Users. When you register through the Site and Application and submit Personal Information to create a profile or visual collection, CCJR Users will see your name. If you choose to provide additional Personal Information in your profile, CCJR Users will see such additional Personal Information, including, but not limited to, your photo, location, website, and biography. Providing additional Personal Information is voluntary and should correlate with the degree of interaction you want to have with CCJR Users. We recommend that you guard your sensitive information.

Aggregate Information and Non-Identifying Information. We may share aggregated information that does not include Personal Information and we may otherwise disclose Non-Identifying Information and Log Data with third parties for industry analysis, demographic profiling and other purposes. Any aggregated information shared in these contexts will not contain your Personal Information.

Service Providers. We may employ third-party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Site and Application-related services (e.g., without limitation, maintenance services, database management, web analytics and improvement of the Site and Application’s features) or to assist us in analyzing how our Site, Application and Service are used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Social Networking Sites. We may share the information in your account (including your Personal Information) with the SNSs that you have linked to your account. These third parties have access to your Personal Information only for this purpose (unless the SNS has received your Personal Information independently of the Service) and are obligated not to disclose or use it for any other purpose.

Facebook Connect. We allow users to automatically post recent activity back to Facebook, and give them the option to disable Facebook Connect at any time by logging into their profile and selecting the option to disable Facebook Connect. Further, you may be able to edit your privacy settings for the content that you post which appears on Facebook by making selections in your “Edit Profile” settings via the Site and Application.

Compliance with Laws and Law Enforcement. CCJR cooperates with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including, but not limited to, subpoenas), comply with a legal obligation or protect against legal liability, to protect the property and rights of Haggadot.com or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical or legally actionable activity.

Business Transfers. Haggadot.com may sell, transfer or otherwise share some or all of its assets, including your Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy.

Changing or Deleting Your Information

All Members may review, update, correct or delete the Personal Information in their Account by contacting us or by editing such profile via the Site and Application. If you completely delete all such information, then your Account may become deactivated. We will use commercially reasonable efforts to honor your request. We may retain an archived copy of your records as required by law or for legitimate business purposes.

Security

We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored “personal data” (as defined in applicable state statutes on security breach notification) to you via email or conspicuous posting on this Site or via the Application in the most expedient time possible and without unreasonable delay, insofar as consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.

International Transfer

Your information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you are located outside the United States and choose to provide information to us, Haggadot.com transfers Personal Information to the United States and processes it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

CCJR Users from the European Economic Area (EEA)

If you are a European resident, our legal basis for collecting and using your personal data or information is to do so with your consent; where we need the personal data or information for performance of a contract, or where the collection and use is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect the personal information in question.

If you are located in the EEA, we may also be a data processor of your personal data and a third party would be the controller. In these instances, we will only process and use your data in accordance with the documented instructions of the controller, subject to our agreement and data processing addendum entered into with your employer. The controller will be solely responsible for meeting any legal requirements applicable to data controllers (such as establishing a legal basis for processing and responding to data subject rights requests concerning the data your employer controls).

You have the right at any time to withdraw your consent to our collection and use of your personal data and to exercise the following rights. If we are the data controller, you can contact us to exercise these rights. To withdraw consent or exercise these rights, please contact the Executive Director at info@haggadot.com for assistance in adjusting your preferences. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If we ask you to provide personal data to us to comply with a legal requirement or enter into a contract, we will inform you of this and let you know whether providing us with your personal data is required and if not, the consequences of not sharing your personal data with us.  

Links to Other Sites

Our Site and Application contains links to other websites. If you choose to visit an advertiser by clicking on a banner ad or other type of advertisement, or click on another third-party link, you will be directed to that third party’s website. The fact that we link to a website or present a banner ad or other type of advertisement is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third-party websites. These other websites may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other sites follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit.

Our Policy Toward Children

This Site and Application are not directed to children under 13. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at info@Haggadot.com. If we become aware that a child under 13 has provided us with Personal Information, we will delete such information from our files.

Policy Changes

We may change this policy from time to time. If you continue to use our Site and Application after those changes are in effect, you agree to the new policy. If the changes are significant, we may provide a more prominent notice or get your consent, as required by law.

Contacting Us

If you have any questions about this Privacy Policy, please contact us at info@Haggadot.com.