Any capitalized term not defined herein shall have the meaning given to them in the associated Terms of Service available at https://cheddar.com/terms.
2.INFORMATION WE COLLECT AND HOW WE COLLECT IT
3.HOW WE USE INFORMATION
4.WHEN AND WITH WHOM WE MAY SHARE INFORMATION
5.THIRD PARTY DATA COLLECTION
6.CHOICES YOU HAVE TO LIMIT USE AND SHARING OF INFORMATION
7.HOW WE SECURE YOUR INFORMATION
8.YOUR CALIFORNIA PRIVACY RIGHTS
9.USING OUR SERVICES OUTSIDE OF THE UNITED STATES
11.HOW TO CONTACT US
a. “Altice” refers to Altice USA, Inc. Cheddar is a subsidiary of Altice. Other Altice subsidiaries and brands include Optimum, Suddenlink, Altice Mobile, News12, i24News and a4. You can learn more about Altice by visiting http://www.alticeusa.com/ .
b.“a4” refers to a4 Media & Data Solutions, LLC, which is an affiliate of Altice and Cheddar. You can learn more about a4 by visiting www.a4media.com.
c. “Third Party Platform”is a third party platform or service (e.g., Hulu, YouTubeTV, Roku) through which authorized users can access and stream Cheddar Content via a channel and/or platform-specific version of a Cheddar App.
d. “Subscriber” means a consumer who creates an Account (see Section 2.a below) and directly subscribes to obtain Cheddar Content from us.
e. “Platform Subscriber” means a consumer who has access to Cheddar Content as a result of the consumer’s subscription to a Third Party Platform.
f. “Information” means the information we collect about you and your use of the Cheddar Service. It includes information you provide to us, information we collect when you use the Cheddar Service, and information provided to us by third parties. Depending on how it is used or shared, some Information can be PII or De-identified Information, as those terms are defined below.
g. “Personally Identifiable Information” or “PII” means information that directly identifies or can reasonably be used to identify a particular individual (for example, email address). PII does not include De-identified Information.
h. “De-identified Information” or “Anonymous Information” is information that does not directly identify and cannot be reasonably linked to a particular individual. We treat IP addresses and other unique identifiers – such as cookie IDs, advertising IDs, device IDs and household IDs – as De-identified Information when they cannot reasonably be used to identify a particular individual. We also consider aggregated information and Device Identifiable Information to be De-identified Information.
i. “Device Identifiable Information” or “DII” is a type of De-identified Information that directly identifies or can reasonably be used to identify a specific browser, device, or group of devices, but doesn’t directly identify and cannot reasonably be used to identify a specific individual.
j. “Financial Information” means information related to your financial relationship with us, including your payment history and payment information provided to us by our payment processing partner Stripe, Inc. (“Stripe”) (see Section 2.e below).
k. “Usage and Device Information” means information about your use of the Cheddar Service, including your accessing, viewing, and downloading of Cheddar Content, which includes information about your use of our Site and the Cheddar App. This includes your activities, your IP address, your browser type, your Internet service provider (ISP), referring_exit pages, your operating system or device type, date_time stamps, and related metadata. It also means information about your mobile device collected when the device interacts with the Cheddar Service, including unique device ID (including MAC ID and other identifiers), device type, device status, device serial number, and information about the settings, configurations, and software on your device.
l. “Service Provider(s)” means third party vendor(s) that perform services on our behalf in connection with the offering, operation and provision of the Cheddar Service or other legitimate business activities, for example, authentication, fraud prevention, payment processing, billing, customer service, analytics, and advertising and marketing services.
m. “First Party Advertising” is advertising or marketing communications for Cheddar or Altice products and services, including those offered under the i24News, Altice Mobile, Optimum and Suddenlink brands.
n. “Third Party Advertising” is advertising or marketing communications for a third party (including, for example, for non-Altice products and services).
2. INFORMATION WE COLLECT AND HOW WE COLLECT IT. We collect Information about you and your associated devices when you provide it to us, when you use the Cheddar Service, and when it is provided to us by a Third Party Platform or other third parties. a. Information You Provide To Us: When you create a Subscriber account (“Account”), or otherwise communicate with us, we collect the Information you provide to us, which may include PII, such as your email address and a password. We may allow you to submit additional information including an avatar.
b. Information We Collect When Subscribers Use the Cheddar Service: When you use the Cheddar Service as a Subscriber, Cheddar and our Service Providers automatically collect Usage and Device Information.
c. Information Collected via Cookies, Web Beacons and Similar Technologies: We and our Service Providers use web tracking technologies known as “cookies”, and “Clear GIFs” (also known as “web beacons,” “Internet tags,” “pixels” or “pixel tags”) to collect additional information about your interaction with the Cheddar Site. A cookie is a small encrypted computer code added to a file on your computer as a record of your visit. It does not collect or provide your name or any other personal information about you, but can be used to recognize your device or computer when you return as a repeat visitor to our Site. Clear GIFs are lines of code that allow websites to summarize overall visitor usage patterns and to provide personalized services. When we post videos, we and our Service Providers may use local shared objects, known as “Flash Cookies,” to store your preferences for volume control or to personalize certain video features.
d. Information Provided by Third Party Platforms. When you stream Cheddar Content via a Third Party Platform the provider of that platform may collect PII and Usage and Device Information about you and your interaction with the Cheddar Content (see Section 5 below). We obtain Platform Subscribers’ Usage and Device Information, such as IP address and device ID, from certain Third Party Platform providers (SamsungTV+, DirecTV Now, Sling and Pluto) for advertising or marketing uses.
e. Information Provided by Other Third Parties.For Platform Subscribers, we obtain an authentication token from our Service Provider when you attempt to access the Cheddar Content which confirms that you are an authorized subscriber of the relevant Third Party Platform. For Subscribers who set up subscription payments through our payment processing partner Stripe (see Section 5.b below) we receive a unique payment identifier that we use to confirm monthly charges with Stripe. f. Information collected from Children. We do not knowingly solicit children to purchase or use our services or products and do not knowingly collect PII from anyone under the age of 13. In order to create an Account with Cheddar, an individual must be at least 13 years of age. Children older than 13 but younger than 18 must have the consent of the child’s parent or guardian to use the Cheddar Service. If you believe that we might have any Personal Data from a child under 13, please contact us at email@example.com .
3. HOW WE USE INFORMATION. We use the Information we collect for legitimate business activities, including: 1) to provide and improve the Cheddar Service, 2) to communicate with you, and 3) for advertising and marketing.
a. To Provide and Improve the Services.We use the Information we collect to conduct business activities related to providing you with the Cheddar Service, including: 1) establishing your Account; 2) measuring credit and payment risk; 3) facilitating billing and collections functions and obligations (including any reporting to credit bureaus or collection agencies to obtain payment for our billed products and services); 4) authenticating access to your Account; 5) account administration; 6) service delivery; 7) maintenance and operations, including management of the network and devices supporting our service and our systems; 8) technical support; 9) hardware and software upgrades for devices and systems; 10) understanding the use of the Cheddar Service; 11) improving our services and identifying and developing new features, products and services; 12) internal analytics and reporting; 13) detecting the unauthorized reception, use, or abuse of the Cheddar Service and to protect our subscribers from fraudulent, abusive, or unlawful use of, or subscription to, the Cheddar Service; 14) collecting fees and charges; 15) protecting our rights, our personnel, and our property; and 16) complying with applicable law.
b. To Communicate with You.We also use the Information we collect to deliver and personalize our communications with you. For example, we may use the Account information you provide us to inform you of Cheddar Service updates or in connection with other activities related to the Cheddar Service.
b. Service Providers. We may share your PII with our Service Providers.For example, we may use third party analytics services to collect data about usage of our services. We also use a third party authentication service to ensure that individuals seeking to access Cheddar Content via Third Party Platforms are authorized to do so and a third party payment processing platform, Stripe, to handle subscription payments on our behalf. These Service Providers are authorized to use your PII only as necessary to provide these services on our behalf.
e. Advertising Partners. We share the Platform Subscriber Usage and Device Information that we receive from certain Third Party Platforms (see Section 2.e) with our ad server and Supply Side Platform (SSP) partners for the delivery of Third Party Advertising to you on the Third Party Platforms.
5. THIRD PARTY DATA COLLECTION.
a. Third Party Platforms. When you use an application that runs on a Third Party Platform (e.g., iOS, Roku, Samsung, etc.), the provider of that Third Party Platform may collect PII and Usage and Device Information about you and your use of our Cheddar App. We refer you to privacy policies of these platforms for information on their privacy practices.
6. CHOICES YOU HAVE TO LIMIT USE AND SHARING OF INFORMATION.
a. Your Account information: You may change your Account information at any time by logging into your Account and selecting Account setting. You may close your Account at any time by emailing support@Cheddar.com . If you close your Account, you may lose access to the Cheddar Content that was available to you through your subscription to the Cheddar Services. We will retain your PII and other Account information while your Account is active and, following the close of your account: (i) for a period of time in case of accidental deletion or in case you change your mind; and (ii) where we believe in good faith that preservation is required to comply with our legal obligations or necessary to enforce our rights. (CA Residents have additional deletion rights with respect to their information, see Section 8 below). You can stop all collection of information by the Cheddar App by uninstalling the Cheddar App. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
c. Emails.When you create an Account, you may receive certain emails: (1) We may send you newsletters and other emails about new or upcoming Cheddar products, services, or offers. If you decide you no longer wish to receive these emails, you may opt-out as instructed in each email or in your Account settings. (2) When you first register with Cheddar, we may send you a welcome email that provides information about the Cheddar Service and your Account. We may also, from time to time, send you other emails concerning your Account status. You may not opt-out of receiving these transactional emails.
d. Interest Based First Party Advertising. Some advertising that you see on the internet or in mobile applications on your devices are tailored to your interests and based on your activity online or in mobile applications. If you do not wish to receive interest based ads for Cheddar or Altice products and services on other websites or mobile applications, you may opt-out of most such advertising by going to the following websites operated by industry trade and self-regulatory organizations: http://networkadvertising.org/choices (operated by the Network Advertising Initiative) or http://www.aboutads.info (operated by the Digital Advertising Alliance).
Please note, your opt-out preferences may not take effect immediately and do not retroactively apply to existing advertising/promotional messages or campaigns.
7. HOW WE SECURE YOUR INFORMATION.We employ physical, electronic, administrative and procedural safeguards to protect your Information, including PII. Despite these measures, we do not guarantee the security of Information stored in our database or that unauthorized parties will not intercept Information you send or receive over the internet. As a shared resource, the internet subjects our services and you to the risk of unauthorized access to files and data, even when security measures are implemented.
8. YOUR CALIFORNIA PRIVACY RIGHTS. The California Consumer Protection Act (CCPA), Cal. Civ. Code §§ 1798.100-1798.199, requires that “Businesses” (as defined in the CCPA) provide CA Residents with information regarding the personal information collected, disclosed and sold about them. The CCPA definition of personal information (“CA Personal Information”) is broader than the definition of PII in Section 1.g above and includes Account information, Usage and Device Information, such as IP addresses, cookie IDs, and device IDs, and Financial Information, to the extent such information is reasonably capable of being associated with or linked to a particular consumer or household. We consider ourselves to be a Business with respect to the CA Personal Information (both Account information and Usage and Device Information) we collect from Subscribers who are CA Residents when they create an Account or access the Cheddar Content via the Site or a Cheddar App.
The CCPA provides CA Residents the right to know about the CA Personal Information collected, disclosed or sold about them by us as a Business, the right to request that we delete the CA Personal Information we collect from them (subject to certain exceptions), the right to opt-out of our sale of their CA Personal Information, and the right not to receive discriminatory treatment by us for exercising any of these privacy rights.
a. Collection of CA Personal Information.Cal. Civ. Code § 1798.140(o) contains a list of categories of CA Personal Information. The table below lists the categories of CA Personal Information we have collected about Subscribers who are CA Residents in the preceding 12 months, the categories of sources of that information, the business or commercial purposes for which the information was collected, and the categories of third parties with whom it was shared.
|Category of CA Personal Information||Information Collected and Categories of Sources||Business or Commercial Purpose for Collection||Categories of Third Parties With Whom CA Personal Information Was Shared|
|Identifiers||Account information you provide us (see §,2.a);,Usage and Device Information collected when you use Service or visit Site (see §§ 2.b and 2.c)||Provide,Service and Communicate with you (see §§ 3.a and 3.b),Advertising,and Marketing (see § 3.c)||Service Providers (see § 4.b),Altice Affiliated Businesses (see § 4.c)|
|Customer Records||Account information you provide us (see § 2.a);,Financial Information (see §§ 2.e and 5.b)||Provide Service and Communicate with you (see §§ 3.a and 3.b)||Service Providers (see § 4.b),Altice Affiliated Businesses (see § 4.c)|
|Internet/Electronic Network Activity Information||Usage,and Device Information collected when you use Service or visit Site (see §§ 2.b,and 2.c)||Provide Service and Communicate with you (see §§ 3.a and 3.b),Advertising and Marketing (see § 3.c)||Service Providers (see §,4.b),Altice Affiliated Businesses (see § 4.c)|
b. Disclosure and Sale of CA Personal Information.The CCPA distinguishes between the disclosure of CA Personal Information for business or commercial purposes (a “CA Disclosure”) and the “sale” of CA Personal Information (a “CA Sale”), which is broadly defined to include making such information available to a third party for monetary or other valuable consideration. For purposes of this policy, we consider our sharing of Subscriber Account information, Usage and Device Information and Financial Information as indicated above to be a CA Disclosure for our operational business purposes. We do not sell CA Residents’ CA Personal Information and will not do so without proper notice and choice (e.g., opt-out rights) as required under the CCPA.
c. Right to Know and Deletion Requests.CA Residents have the right to request that we disclose the categories and/or specific information of CA Personal Information we have collected about them. For all Subscribers, the categories of information we collect, the categories of sources of that information, the business or commercial purposes for which the information was collected, and the categories of third parties with whom it was shared are described above. CA Residents also have the right to request that we delete the CA Personal Information we collected from them, subject to certain exceptions (such maintaining the information to continue to provide our services).
CA Residents may submit requests to know the specific pieces of CA Personal Information collected about them or to have their personal information deleted by emailing us at CCPA@cheddar.com or via the request forms available here (for right to know specific pieces of CA Personal Information collected) and here (for deletion). We will only be able to honor such requests for CA Residents whose identities we can verify.
CA Resident Subscribers making a request via the online request form will be required to verify their identity by logging into their Account. CA Resident Subscribers making requests via email will be directed to log into their account in order to verify their identity.
For CA Resident non-Subscribers, the CA Personal Information we collect as a Business is limited to Usage and Device Information we collect when you visit the Site (see Section 2.c). We do not have any reasonable way to verify the identity of a non-Subscriber CA Resident making a right to know specific pieces of information or deletion request with respect to this information.
e. Authorized Agents.CA Residents may use an authorized agent to submit an opt out, right to know or delete request on their behalf provided that the CA Resident gives the authorized agent written permission to do so, the authorized agent submits verifiable proof of such written permission and their identity to us, and the CA Resident subsequently verifies to us that permission has been provided. CA Residents or their authorized agents can contact us at CCPA@cheddar.com for instructions and identity verification requirements for authorized agent requests.
f. Shine the Light Law (Cal. Civ. Code § 1798.83).A separate California law requires that we provide CA Residents with notice and choice with respect to the disclosure of their personal information to third parties for marketing purposes. We provide this notice and choice in Sections 4.e, 6.b and 6.c above. This satisfies our obligation to otherwise maintain or furnish users with a list of the names and addresses of third parties who receive Personal Information from us for marketing purposes. g. CA Privacy Questions. If you are a CA Resident and have additional questions regarding our collection, use or sharing of your CA Personal Information, or your CCPA or Shine the Light law rights as described in this Section, you may send us your questions by email to the Privacy Administrator at firstname.lastname@example.org . All requests should be labeled “Your California Privacy Rights” on the email subject line. For all requests, please clearly state that the request is related to “Your California Privacy Rights”, and include the email address associated with your Account.
Effective: May 26, 2020