You are here:
Privacy Policy

Data Protection and Privacy Policy

Last Updated: March 2026

Privacy at a Glance

Who we are
Baccara Geva Agricultural Cooperative Ltd operates the corporate website WWW. baccara-geva.com and acts as the data controller for personal data processed through the corporate website.

What this notice covers
This notice explains how personal data is processed when you:

Online purchases and e-commerce activity for Australia are handled by BACCARA Pty Ltd and governed by their separate privacy policy.

What information we collect

We may collect:

Why we use your data

We use personal data to:

Legal basis for processing

Where required by GDPR / UK GDPR, processing is based on:

Your privacy rights

Depending on your location, you may have the right to:

Cookies

We use cookies to operate the site, analyze traffic, and improve user experience.
Non-essential cookies are only used after consent where required.

Contact for privacy requests

Baccara Geva Agricultural Cooperative Ltd
Email: [email protected]

For full details, please read the Privacy Summary below or the Full Data Protection and Privacy Policy.

 

 

Privacy Summary

This summary provides an easy-to-understand explanation of how we handle personal data. It is intended to help users understand our practices before reading the full Data Protection and Privacy Policy.

If there is any conflict between this summary and the full Privacy Policy, the full Data Protection and Privacy Policy governs.


Who processes your data

The corporate website is operated by Baccara Geva Agricultural Cooperative Ltd, which acts as the data controller for personal data processed through the corporate website.

Certain services linked from the site may be operated by other companies.

For example: The Australian online store is operated by [BACCARA Australian Subsidiary]and follows its own privacy policy.

What information we collect

We collect information that you provide directly and information collected automatically when you use the website.

Examples include:

Information you provide

Information collected automatically

We do not intentionally collect sensitive personal information through the corporate website.

Why we collect personal data

We process personal data for business purposes such as:

Cookies and website tracking

The website uses cookies and similar technologies to:

When you first visit the website, you can choose to:

You can change your cookie settings at any time.

Who we share data with

We do not sell personal data.

However, we may share information with trusted service providers that help operate the website, including:

These providers are contractually required to protect personal data and may only use it for the services they provide to us.

International transfers

Because we operate internationally, personal data may be transferred outside your country.

Where required, these transfers are protected using safeguards such as:

How long we keep data

We retain personal data only for as long as necessary.

Typical retention examples:

Some information may be retained longer to comply with legal obligations.

Your privacy rights

Depending on your jurisdiction, you may have rights including:

California residents may have additional rights under the California Privacy Rights Act (CPRA).

Children’s privacy

The corporate website is not intended for children under the age of 13.
We do not knowingly collect personal data from children without appropriate parental authorization.

Data security

We implement technical and organizational security measures such as:

While no system can guarantee absolute security, we maintain safeguards appropriate to the risks involved

Marketing communications

If you subscribe to marketing messages or newsletters, you may unsubscribe at any time using the unsubscribe link in our communications

Contact us

For privacy questions or data rights requests, contact:

Baccara Geva Agricultural Cooperative Ltd
Email: [email protected]
Address: Kibbutz Geva, 1891500, Israel

 

 

Preamble

Baccara Geva Agricultural Cooperative Ltd (hereinafter: “BACCARA” or “our”, “we” or “Us”), is committed to protect your Personal Data. This Data Protection and Privacy Policy explains how BACCARA collects, processes, uses, and stores Personal Data (as defined below) provided by you or otherwise collected about you through our global website located at: www.BACCARA-geva.com (hereinafter: “Policy” and “Website” respectively).

For clarity, this domain serves as the global corporate and technical information hub. The Website contains (a) “Corporate Website Area” pages used for corporate information, distributor inquiries, technical inquiries, and marketing communications; and (b) links to regionally-operated sites and stores that are governed by separate controllers and privacy notices (see Section 1.6).

Processing activities associated with direct-to-customer e-commerce transactions are not governed by this Policy and are instead governed by the applicable policy of the relevant selling entity, including [BACCARA Australian Subsidiary]for the AU/APAC store at www.BACCARAstore.com.au (see Section 1.6).

As used in this policy, “Personal Data” or “Personal Information” means information that refers to, is related to, or is associated with an identified or which may be used to identify an identifiable individual or as otherwise may be defined by applicable law, such as a name, address, telephone number, e-mail address, information about activities directly linked to a person, such as that person’s location or IP information.

Where applicable law distinguishes between “controller” and “processor,” BACCARA acts as the data controller for processing activities covered by this Policy.

This Policy may be revised or updated from time to time, and such changes shall come into effect from the moment BACCARA publishes the updated Policy and notifies you of such changes and/or updates, either by email, notification on our website or any other reasonable manner.

Material changes will be communicated by posting the updated Policy on this Website and updating the “Last Updated” date above. Where required by applicable law, we will provide additional notice and/or obtain consent before such changes take effect.

For any questions regarding the collection, processing or use of Personal Data relating to you and exercising your data subject rights (all as explained below) please contact, us at: [email protected]

Controller details:
Baccara Geva Agricultural Cooperative Ltd.
Registered Address: Kvutzat Geva, 1891500, Israel
Company / Registration No.:
570041970
Primary Privacy Contact (Email): [email protected]

UK/EU/EEA Representative (if required): BACCARA® ESPAÑA
Avda. de la Industria 38, Nave A15, Coslada, Madrid.
T. (+34) 913446310|   [email protected]

 

  1. General Principles of Our Data Protection
    • BACCARA is committed to ensuring that your Personal Data is protected according to the appropriate industry standards and practices in relation to the data we collect, and all in correspondence to BACCARA’s relevant legal obligations. Where GDPR or UK GDPR applies, BACCARA processes Personal Data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity/confidentiality, and accountability.
    • This policy explains your rights regarding the Personal Data BACCARA collects, processes and uses through the BACCARA Website, as well as BACCARA’s use of safeguards to protect these rights.
    • This Policy further applies also to BACCARA’s use of cookies and tracking tools, as specified in detail in the ‘Use of Cookies and Tracking Technologies’ Section of this Policy, as we use cookies and tracking tools on our Website to distinguish you from other users and to improve your use of our Website, and in some cases, certain features may not function if you remove the cookies from your browser. For the avoidance of doubt, cookie use and tracking tools associated with the online store operated by BACCARA’s Australian subsidiary are governed by the privacy policy applicable to that store activity (see Section 1.6).

Non-essential cookies and similar technologies (including analytics and advertising cookies) are deployed only where and to the extent required consents have been obtained through our cookie management tools, as applicable under law.

 

  1. Your Rights to Limit our Collection and Processing

You have certain rights in relation to the Personal Data that we hold about you, as detailed below:

Where we collect Personal Data from your directly subject to your consent, we will only process your Personal Data if you have provided your informed consent to such processing, unless We have alternative lawful grounds for processing or overriding legal obligations to further process Personal Data relating to you.

We will only use the data for the purposes stated in the consent procedure and within the scope outlined below in line with our “purpose limitation” obligations under applicable law.

Where we have collected Personal Data relating to You directly as per clause 2.1, You may revoke or withdraw your consent at any time by contacting and requesting so from us at: [email protected], and We will stop processing your Personal Data unless We either have overriding legal obligations or have alternative grounds for processing your personal data which permit us to continue processing your information, including for ongoing legitimate business interests, which we will notify you in our response to your request, where applicable.

Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrawal.

We do not knowingly collect or process Personal Data relating to children where doing so would require parental or guardian authorization under applicable law unless such authorization has been obtained or another lawful basis applies.

The Corporate Website Area is not directed to children under 13 and is not intended to solicit information from children under 13.

If we become aware that Personal Data relating to a child or minor has been collected contrary to applicable law, we will delete it without undue delay or take other action required by law. Where applicable law requires parental or guardian authorization, we may take reasonable steps to verify such authorization.

If you are a parent or guardian and believe a child has provided us with Personal Data in violation of applicable law, please contact us using the details below.

Be advised that this right applies where and to the extent provided under GDPR/UK GDPR (generally where processing is based on consent or contract and carried out by automated means).

 

Upon reviewing your Personal Data under the Right of Transparency, You may also request the erasure or correction of all or part of your Personal Data that is incorrect, inaccurate, outdated or false, insofar as it is held by BACCARA.

Upon your request, BACCARA will accommodate your request and delete (or alternatively equivalently irreversibly anonymize) or correct your Personal Data or remove from part or all of our records, as per your request, as soon as reasonably possible and when technically feasible, and unless there is an overriding legal interest or other authorized basis for the continuation of the processing of your Personal Data, which we shall notify you in response to your request.

Regardless and without derogating from your right of rectification, you may further, at any time you may request the erasure of your Personal Data we process about You in our records and systems, and will accommodate your request and delete (or alternatively equivalently irreversibly anonymize) or correct your Personal Data or remove from part or all of our records, as per your request, as soon as reasonably possible and when technically feasible, and unless there is an overriding legal interest or other authorized basis for the continuation of the processing of your Personal Data, in which case we will inform you accordingly..

Please be aware that in the event of deletion of Personal Data upon your request, BACCARA may not be able to further provide you the services you applied for through the Website, in whole or in part.

BACCARA does not employ automatic decision-making mechanisms at this, and we do not make decisions producing legal or similarly significant effects solely by automated means within the scope of this Policy; BACCARA further commits that where such will be implemented, we will notify you in advance and provide information on the logic involved and the significance and envisaged consequences, give you the opportunity to object and obtain human intervention in such a decision made through automated means, if at all, while expressing your point of view, and obtaining an explanation of the decision made prior to the human intervention and after the human intervention.

 

  1. Personal Data We Collect:
    • For the Corporate Website Area, the Personal Data collected and used by BACCARA is limited strictly to data necessary to respond to inquiries, provide requested information, administer newsletter subscriptions, maintain Website security and functionality, and perform analytics and advertising activities where you have provided consent, all as further described in this Policy.

For clarity, where processing is based on consent, you may decline consent and still access the Corporate Website Area, though some optional features (e.g., analytics/advertising personalization) may not operate.

  1. Collection of Personal Data Occurs when You:
    • Contact us via our designated support e-mail address or electronic form through our “Contact Us” page of our Website
    • When you browse through the website, use cookies and tracking technologies as further elaborated below, in section __ titled “Cookies and Tracking Technologies Policy” (add link).
    • When you subscribe to our newsletter to receive marketing materials and information and updates.
    • For clarity: if you place an order, create a customer account for purchasing, or otherwise interact with the Store Area, the collection and processing of your Personal Data for those Store Area activities is governed by the AU Privacy Policy (see Section 1.6.3).

 

Processing Activity

Type of Personal Data

Purpose

Lawful Basis (Art. 6 GDPR)

Contacting us via ‘Contact Us’ form / Scheduling a Meeting

Name, email, phone number, query content, region selection

Responding to your inquiry; routing to relevant subsidiary/distributor

Legitimate interests (responding to inbound requests; business communications) and/or pre-contractual steps where the inquiry relates to a potential contract

Subscribing to newsletter

Email address (and preferences where provided)

Sending marketing messages

Consent (opt-in where required) / soft opt-in where permitted by law and applicable conditions are met

Using the Corporate Website Area (strictly necessary cookies)

IP address (often truncated), device info, behavior

Ensuring website functionality, security, fraud prevention

Legitimate interests and/or legal obligations (security) as applicable; strictly necessary cookies are set without consent where permitted by applicable cookie laws

Using analytics cookies

IP address, device info, behavior

Measuring website performance

Consent (opt-in where required)

Showing personalized ads

Browsing behavior, identifiers

Targeted advertising

Consent (opt-in where required); US opt-out rights apply where required

Legal/compliance requests (e.g., regulatory)

Name, contact, correspondence, logs

Compliance; legal claims/defense

Legal obligation / legitimate interests

 

Lawful Interest Explanation (Art. 6(1)(f)): Our legitimate interests include operating, maintaining, and securing the Corporate Website Area; preventing fraud and abuse; and measuring high-level performance where permitted by law.

 

  1. What is the Personal Data We collect and when do we collect it:
    • When you contact us through the contact details and/or electronic forms;
    • When you subscribe to our newsletter;
    • When you browse through our websites and/or specific pages/portions, we will collect both statistical and non-identifying, and subject to your consent personal data through cookies, web beacons and other tracking technologies;
    • Store Area Activities (Not Covered by This Policy): If you create a purchasing account, place an order, enter shipping/billing details, make a payment, or otherwise interact with the Website’s Store Area, the personal data collected and processed for those activities is governed by the AU Privacy Policy (see Section 1.6.3).
  2. Why BACCARA Uses your Personal Data:

BACCARA uses data and Personal Data for the following reasons:

  1. How We Protect Information:
    • We implement generally accepted industry standards to maintain the safety of your Personal Data against loss, alteration, theft or access by unauthorized third parties when you enter, submit, or access your Personal Data and once we receive it (e.g. access controls, firewall and malware detection and blocking, etc.). However, no method of transmission over the Internet, or method of electronic storage is flawless or entirely secure.
    • Please note, however, that there are inherent risks in transmission of information over the Internet or other methods of electronic storage and we cannot guarantee that unauthorized access or use will never occur.
    • Therefore, while we strive to protect your Personal Data via the aforementioned technical and organizational means, we cannot guarantee its absolute security. What we can guarantee is that we will not sell, share, transfer or use the data We collect from you for purposes other than those purposes stated expressly herein above.
    • Limitation of Liability:

We implement industry-standard technical and organizational measures (including SSL encryption and access controls) to secure your data. However, no system for transmitting or storing data electronically can be guaranteed to be completely secure. Nothing in this Policy limits any rights you may have under applicable data protection laws, including rights to compensation where provided by law.

WE DO NOT GUARANTEE ABSOLUTE SECURITY, BUT WE GUARANTEE COMPLIANCE WITH MANDATED DATA PROTECTION SAFEGUARDS.

 

  1. Third Party Sites: 
    • Our website may contain links to third party websites and/or social media platforms. We have no control over third-party sites or services, and all use of third-party sites or services is at your own risk. BACCARA cannot accept responsibility for the privacy policies of any such third party sites and such third-party websites are governed solely by such third parties’ privacy policies and you are advised to be careful and check any such third party’s privacy policies and compliance with laws, prior to supplying them with any of your personal data to them.
    • BACCARA is not responsible for content available by means of such third party sites. BACCARA does not endorse any information or products offered by third parties and we urge our users to exercise caution in using third-party services.

 

  1. Cookies and Tracking Tools Usage by BACCARA
    • What’s a cookie?

A cookie is a small file sent from a website or web-based interface, which is then stored by your web browser. When you return to the website or web-based interface, the information in the cookie can be used to recognize your last session. Cookies cannot install malicious software such as viruses on your device, and they do not store any of your personal data or account information.

Cookies may in some cases store identifiers that can be associated with an individual or device. When combined with other information they may constitute Personal Data under applicable law.

We use cookies to save and maintain users’ settings and selected preferences during browsing sessions, to remember user preferences for future visits (e.g. geographical location, currency preferences accessibility and language selections and preferences), and for statistical analysis of the performance and trends on our website and for monitoring and identifying errors.

 

Cookies originate from two types of sources: first party and third party. The classification whether a cookie is ‘first’ or ‘third’ party refers to the internet domain that is placing the cookie.

 

When you first visit the Website, you will be given the option to accept or decline the use of cookies. You can also control the use of cookies at the individual browser level, and instructions for managing cookie usage can be found for the following browsers, at:

If you wish to opt-out of personalized or behavioral advertising, you can use an industry resource in your region that provides cookie choices, such as the tools provided by:

Be advised that if you elect to remove/block our cookies, you may still use the website or interface, but your ability to use some features or areas therein may be impaired, limited or unavailable.

Consent Model. Where required by applicable law, non-essential cookies (including analytics and marketing cookies) will be set only after you provide opt-in consent via our cookie banner or preference center. You may withdraw consent at any time via the cookie preference tools available on the Corporate Website Area.

Some browsers and extensions provide “Do Not Track” signals. The Corporate Website Area does not respond to Do Not Track signals as a universal standard. However, where required by applicable law we honor consent choices expressed via our cookie preference tools and, for California residents, applicable opt-out preference signals as described in the California Supplement.

Do not track options are available in a few browsers including:

Browser “Do Not Track” signals are not treated as a universal standard. However, where required by applicable law, we honor consent choices expressed through our cookie tools and recognized opt-out preference signals, including Global Privacy Control where applicable.

If you disable certain cookies or tracking technologies, some Website features or services may not function properly.

If you wish to withdraw your consent, you can choose to opt-out of cookies at any time by managing and/or deleting your cookies using your internet browser settings.

 

A number of websites provide detailed information on cookies, including AboutCookies.org and AllAboutCookies.org.

 

 

Some cookies and similar technologies may involve processing by third parties acting as our processors or independent controllers depending on the tool and configuration. Where required by law, these tools are enabled only after consent.

Cookie name

Provider

Category

Function

Retention period

 

 

 

 

 

_ga

Google Analytics

Analytics

Distinguishes users for analytics reporting

2 years

_ga_GT0ZXTZF0J

Google Analytics 4

Analytics

Persists user state for GA4

2 years

pll_language

Polylang

Functional

Stores the visitor’s selected website language to ensure consistent language display across pages and sessions.

1 year

_cf_bm

Cloudflare

Strictly Necessary / Security

Cloudflare bot-management cookie used to detect and mitigate automated traffic, protect against malicious bots, and maintain site security and performance.

30 minutes

 

  1. Data retention and deletion
    • BACCARA deletes (or equivalently irreversibly anonymizes) personal data where the purpose for which the data was being collected or processed ceases to apply, except where retention is required or permitted under applicable law (and in such cases only to the extent required) or we have overriding legal grounds to continue the processing as will be notified to you should you address up to exercise an applicable data subject right for deletion of Personal data.

For the Corporate Website Area, we retain Personal Data only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law (e.g., for legal claims, compliance, or security).

Data provided via the “Contact Us” or “Distributor Search” forms is retained for five (5) years from the last interaction to facilitate ongoing technical support and business development.

These periods may be adjusted where required or permitted by applicable law and based on risk, necessity, and limitation periods.

  1. Newsletter, Marketing Messages, Updates, Alerts and other Communications Sent by Us
    • You may elect to subscribe to our Newsletter or join our mailing list to receive alerts, notifications and marketing information through the dedicated consent interface available on our Website in the appropriate parts relating thereto.
    • If you confirm the receipt of the aforementioned newsletter, direct mailing or marketing messages from BACCARA, then your Contact Details and name will be to our marketing mailing list for sending messages to the user by various means, primarily via email or other electronic communications and/or through any other means of communication regarding sales promotion, advertising etc..
    • Where you have provided consent to receive marketing communications, we may use your contact details to send marketing messages and updates regarding our products or services and to measure the effectiveness of our marketing communications.
    • You can unsubscribe from our newsletter or mailing lists at any time by by clicking the “unsubscribe” link provided in each marketing message, advertisement or newsletter issue and/or by sending us a direct e-mail request sent to: [email protected].
    • In addition, if the information in the Company’s databases is used for the purpose of personally contacting the user, based on the user’s affiliation with a population group determined according to one or more characteristics of people whose names are included in one of our Databases (hereinafter: “contact with a commercial offer”), then the user is entitled to demand to be removed and has a specific right to object to such profiling for marketing purposes.
    • In this case, BACCARA will delete Personal data that we need to the extent it is used solely to contact the user with commercial offers as stated above. However, Personal Data collected and processed for other purposes hereunder – will continue to be retained by the Company by law but will no longer be used for the purpose of sending you marketing materials, direct mailing advertisements and/or newsletters.

 

  1. Transfer of Your Information to Third-Parties:
    • We do not sell, trade, or otherwise transfer to outside parties your Personal Data, except as specifically stated in this Policy.
    • For clarity, “selling” and “sharing” may have specific meanings under certain U.S. privacy laws (including California). Please see the U.S. supplements for those definitions and your opt-out rights.
    • This does not include trusted third parties service providers and/or affiliates who assist us in operating our Website, providing the Corporate Website Area functionality or specific software sign-up windows and/or provide the framework which we use for our routine business and or servicing you directly.
    • Such processing is conducted on our behalf and under our instructions, subject to legally binding written agreements. These agreements require such trusted third-parties to keep your Personal Data confidential, implement appropriate organization and technical data protection measures when processing your Personal Data, use your Personal Data solely to fulfill their obligations to us and only for the purposes we instruct (e.g. Data Processing Agreements, Standard Contractual Clauses, Business Corporate Rules, or other legally recognized international data transfer mechanisms) and refrain from using or disclosing your data for their own purposes.
    • Personal Data may be transferred to recipients located outside the EEA and/or the United Kingdom. Where GDPR applies, we rely on adequacy decisions or appropriate safeguards under GDPR Chapter V (such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required). Where UK GDPR applies, we rely on adequacy regulations and/or appropriate safeguards recognized under UK law (such as the UK International Data Transfer Agreement (IDTA) and/or the UK Addendum to the EU Standard Contractual Clauses), as applicable.

In this regard, Personal Data may be transferred to BACCARA subsidiaries or service providers in the United States (e.g., BACCARA USA). We ensure such transfers are lawful by utilizing the EU-U.S. Data Privacy Framework (DPF) or, where the recipient is not DPF-certified, by executing the European Commission’s Standard Contractual Clauses (SCCs) and conducting a Transfer Impact Assessment to ensure an equivalent level of protection

  1. Updates and Changes to this Policy
    • We may revise this Policy from time to time, and such changes shall come into effect from the moment BACCARA notifies you of such changes and/or updates, either by email, on the websites or in some other reasonable manner.
    • The above notwithstanding, if we wish to collect additional types of personal data or process existing personal data for new or additional purposes, we notify you directly through the contact details we have on record and will procure your prior consent before any such new processing activities.
    • When we make material changes to this Policy, we’ll provide you with prominent notice as appropriate under the circumstances, e.g., by displaying prominent notice on the BACCARA website or by sending you a message through the contact details on record to that effect, as reasonably applicable dependent on the change.
    • Notices and Correspondences. 

If you provide contact details through the Website, including through a “Contact Us” form, newsletter sign-up, or email correspondence, BACCARA may use those details to respond to your inquiry, provide requested information, send service-related or administrative communications, route your request to the appropriate affiliate, distributor, or regional contact, and otherwise communicate with you in connection with the purpose for which your details were provided.


Marketing communications will be sent only where permitted by applicable law and, where required, on the basis of your separate consent or another valid lawful basis. You may opt out of marketing communications at any time using the unsubscribe link in the relevant communication or by contacting us using the contact details provided in this Policy.
Notices sent by electronic means will be deemed received when sent, subject to applicable law.

These Terms represent the entire agreement between the parties regarding the subject matter hereof and supersede any and all other previous agreements between the parties regarding the subject matter hereof. BACCARA may assign its rights or obligations pursuant to these Terms. Users shall not assign any rights under these Terms and any attempted assignment shall be void. If any provision of these Terms shall be deemed invalid or unenforceable by a court of competent jurisdiction, such provision shall be interpreted to give maximum effect to its terms as permitted under law, and such invalidity or unenforceability shall not affect the validity or enforceability of any other part or provision of these Terms which shall remain in full force and effect.

For all queries relating to this Policy or to exercise your Data Subject Rights, please contact our Data Protection Office at:

Additional Privacy Protection Terms for U.S. Residents (State Privacy Notice)

This section applies to U.S. residents to the extent that applicable U.S. state privacy laws apply to BACCARA’s processing activities in the Corporate Website Area. Certain rights, definitions, and requirements vary by state. Where required by applicable law, we provide rights and disclosures consistent with laws such as those in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive consumer privacy statutes.

Categories of Personal Data We Process (Corporate Website Area):
• Identifiers and contact information (e.g., name, email, phone)
• Internet/online activity information (e.g., IP address, cookie identifiers, device information, browsing events on the Corporate Website Area)
• Communications content you provide (e.g., inquiry text, chatbot messages)
• Inferences derived from online activity (e.g., marketing preferences), where permitted

Purposes: As described in Section 6 (e.g., responding to inquiries, marketing with consent where required, analytics, security, fraud prevention).

Sensitive Data: We do not intentionally collect “sensitive data” as defined under certain U.S. state privacy laws in the Corporate Website Area. If we begin processing sensitive data in a manner that requires opt-in consent, we will obtain such consent where required.

Targeted Advertising / “Sale” / “Sharing” Opt-Out:
Where applicable law provides a right to opt out of targeted advertising and/or the “sale” or “sharing” of personal data (as defined by applicable law), you may exercise that right by:
(a) using our cookie preference tools (where applicable),
(b) using any “Do Not Sell or Share” or “Targeted Advertising Opt-Out” mechanisms we provide in the Corporate Website Area, and
(c) where required by law, using recognized opt-out preference signals.

Appeals (where required): If we decline to take action on a request and applicable law provides an appeal right, you may appeal our decision by contacting: [email protected] with the subject line “Privacy Appeal.”

Non-Discrimination: We will not unlawfully discriminate against you for exercising privacy rights.

 

Additional Privacy Protection Terms for California Residents

Beginning January 1, 2020, the California Consumer Privacy Act (“CCPA”) as amended by Proposition 24 titled the “California Privacy Rights Act” (“CPRA”) gives California residents certain rights with respect to the processing of personal data (known as “personal information” under the CCPA and CPRA).

This supplement provides additional privacy disclosures and privacy protection provisions in light of the above for California residents accessing our website.

Scope Clarification (Corporate Website Area vs Store Area):
This California supplement applies only to Personal Information processed by BACCARA in the Corporate Website Area (as defined in Section 1.6). Personal Information processed in connection with purchases, payments, fulfillment, and other Store Area activities is governed by the AU Privacy Policy.

Notice at Collection on Personal Information Collected and Processed

Under the California Privacy Rights Act, we provide this Notice at Collection to inform California residents, at or before the point of collection, about the categories of Personal Information we collect, the purposes for which it will be used, the retention periods, and whether it is sold or shared

Category of Personal Information

Purpose of Use

Retention Period

Sold or Shared?

Identifiers (e.g., name, email)

Customer support, Meeting Scheduling

|As long as necessary for transactions + up to 24 months for Corporate Website inquiries (unless longer retention is required for legal claims/compliance

Not sold. Disclosed to service providers for business purposes.

Internet Activity (e.g., IP address, cookies)

Website functionality, analytics, advertising

Session + up to 24 months

·         Functionality Shared for security and stablity

·         Analytics and Advertising Can be shared for targeted advertising, pending consent

 

Open-Query free text

Communications content you provide (e.g., inquiry text, ~~chatbot messages~~)

As long as necessary for transactions + up to 24 months for Corporate Website inquiries (unless longer retention is required for legal claims/compliance7 years for tax/accounting

Not sold, shared with CRM provider

Location Data (e.g., via IP)

Security, fraud prevention

Up to 12 months

Can Shared with analytics and/or security services provider

 

If we collect Sensitive Personal Information (such as geolocation, biometric identifiers, or racial/ethnic data), we use it only for purposes permitted under applicable law and do not sell or share such information. California residents may limit the use of SPI where applicable by contacting us at: [email protected] and/or by using any SPI limitation mechanisms provided in the Corporate Website Area.

Sources of Personal Information: Directly from you (forms, communications), automatically from your device/browser (cookies and similar technologies), and from service providers assisting us in operating the Corporate Website Area.

Retention: See Section 10 for our retention approach and indicative periods for the Corporate Website Area.

Your California Privacy Rights (CPRA)

Subject to applicable exceptions, California residents have the following rights:

 

Requests to Exercise Your Rights under the CCPA

You are afforded and entitled to forward us requests to exercise your rights as a California resident. We will not discriminate against you for exercising any of your rights under the CCPA

You may make a verifiable consumer request related to your personal information twice per 12-month period.

Please note, we may not have enough information about you to verify your identity to exercise your rights under the CCPA and may ask you to provide personal identification information in order to verify your identity.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

Right To Know – Under the CCPA, you have a right to request information about our collection, use, and disclosure of your personal information over the prior 12 months prior to the date of your request, and ask that we provide you with the following information:

  1. The Categories of and specific details of the personal information we have collected about you.
  2. The Categories of sources from which we collect personal information about you.
  3. The Purposes for collecting personal information as per 1 and 2 above.
  4. The Categories of third parties with which we shared your personal information.
  5. Categories of personal information disclosed about you for a business purposes.
  6. If applicable, categories of personal information sold about you and the categories of third parties to which the personal information was sold, by category or categories of personal information for each third party to which the personal information was sold.

To make a verifiable request for information about the personal information we have collected about you, please forward a request “I want to know what Personal Information is processed about me” through email at: [email protected] or send us a request through the “Contact Us” online form.

Right To Delete – You also have a right to request that we delete personal information, subject to certain exceptions.

To make a verifiable request for information about the personal information we have collected about you, please forward a request titled “I want to know what Personal Information is processed about me” through email at: [email protected] or send us a request through the “Contact Us” online form.

To make a verifiable request for information about the personal information we have collected about you, please forward a request titled “I want to permanently delete my data  through email at: [email protected] or send us a request through the “Contact Us” online form.

Right To Correct – You have the right to request correction of inaccurate personal information, subject to verification and applicable exceptions. To submit a correction request, email: [email protected] with the subject line “California Correction Request.”

Household Requests – We do not collect household data and only process information about individual users making orders and/or operating an account on our website. We will respond to verified requests as required by law; where we cannot verify household-level requests, we may respond at the individual level.

Disclosures of Personal Information for a Business Purpose

In the preceding 12 months, BACCARA has disclosed certain data from the following categories of personal information to the categories of recipients listed in Section 5 Section 12 of this Policy titled “Transfer of Your Information to Third Parties”) for one or more business purposes:

Sale of Personal Information

We do not sell personal information. We have taken substantial steps to identify and remediate any data sharing arrangements that could constitute a “sale” under the CCPA and CPRA.

We do not sell personal information for monetary consideration. However, certain disclosures of online identifiers and browsing activity to advertising partners may be considered “sharing” for cross-context behavioral advertising under California law if advertising cookies are enabled. You may opt out of such “sharing” by using our cookie preference tools and any “Do Not Sell or Share” mechanisms available in the Corporate Website Area.For more information on interest-based advertising, please see the ‘Cookies and Tracking Tools’ portion of our Data Protection and Privacy Policy.

We recognize Global Privacy Control (GPC) signals as a valid request to opt-out of the sale or sharing of personal information where such signals are supported by your browser or extension. Therefore, we will honor Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal information. If your browser or extension sends a GPC signal, we will process it in accordance with the California Privacy Rights Act.

Metrics / Response Timing (where applicable): We will respond to verified consumer requests within the timeframes required by California law, subject to permitted extensions.

Amendments to the Consent Language on Electonic Forms (leave check boxes empty/opt-in):

 

[ ] I confirm that I have read and understood the Privacy Policy and agree that BACCARA may process my personal data to respond to my inquiry and handle my request in accordance with that Policy.

[ ] I would like to receive marketing communications and product updates from BACCARA by email and/or SMS/MMS messages and I understand that I can withdraw my consent at any time by using the unsubscribe link in the messages received or contacting BACCARA.

 

 

Cookies Banner Language:

We use cookies and similar technologies to operate this website and to understand how visitors use it. Some cookies are strictly necessary for the site to function, while others help us improve performance, analyze usage, or provide personalized marketing.

You can accept all cookies, reject non-essential cookies, or manage your preferences. Your choice will apply only to this website and you can change your preferences at any time through the Cookie Settings link available on our site.

For more information about the cookies we use and how we process personal data, please read our Privacy Policy and Cookie Section for further details.

 

Buttons on the Banner:

 

Accept All

Purpose:
Allows all cookie categories (analytics, functional, marketing).

Button 2

Reject Non-Essential

Purpose:
Accepts only strictly necessary cookies required for website operation.

Button 3

Manage Preferences

Purpose:
Opens the detailed cookie settings panel where users can enable or disable categories such as:

 

Special Notes due to CPRA:

 

 

Please note:

You are now being directed to an external e-commerce platform
managed and operated by Baccara Australia.