Name: Alspopcorns
Address: 1202 Main St, Cincinnati, Ohio, 45202, United States
Telephone: 513-993-7677

01

1. Effective Date and Operational Scope

This privacy policy took effect on November 12, 2026. It applies to all electronic communications, web requests, commercial inquiries, and interactive services provided under the trade name Al’s Popcorns through alspopcorns.com. Any future modifications become active immediately upon publication with an updated effective date timestamp.

02

2. Identity of the Data Controller

The data controller responsible for personal information handled under this policy is Alspopcorns, operating as a registered Ohio business entity in the United States.

Trading Name: Al’s Popcorns (legal entity: Alspopcorns)

Production Kitchen Address: 1202 Main St, Cincinnati, Ohio 45202, Cincinnati, Ohio, United States

Direct Telephone: 513-993-7677

Direct Governance Email: [email protected]

Production Speciality: Small-batch kettle popcorn manufacturing and distribution

03

3. Categories of Personal Data Collected

We gather only information required to provide accurate popcorn quotes, fulfill custom batch preparations, and measure marketing delivery. We maintain no user accounts, store no passwords, and never process or retain debit or credit card details.

Inquiry Transmission Records: When you submit a custom quote request via our contact form or calculator, mitid54.php records your submitted name, telephone number, email address, physical delivery or pickup address, requested popcorn batch type, batch specifications, operational notes, and your explicit consent confirmation.

Automated Technical Telemetry: Every form post captures your internet protocol address, browser user-agent string, referring landing uniform resource locator, the unix timestamp when the interface was rendered, and the exact timestamp when the submission was transmitted.

Support Conversation Records: Our interactive kitchen desk widget (vinaf4d.php) generates a local browser token and logs text conversation transcripts so kitchen staff can review batch queries across active sessions.

Campaign Click Identifiers: Inbound advertising links dynamically attach campaign parameters including gclid, msclkid, and fbclid to monitor attribution and referral effectiveness.

Consent Preference Tokens: Your selection regarding tracker storage is preserved locally in the browser under the designated token site_consent_v2.

04

4. Operational Purposes for Processing

We process personal information exclusively for tangible manufacturing, communication, and fulfillment objectives:

Calculating ingredient volumes, kettle batch capacity, packaging requirements, and bespoke pricing for event orders.

Communicating batch completion times, pickup notifications for 1202 Main St, and courier transit dispatches across Hamilton County.

Operating real-time customer support inquiries through our kitchen messaging channel.

Defending digital endpoints against automated web scrapers, submission flooding, and submission spam.

Evaluating paid digital acquisition channels to allocate kitchen advertising resources across search and social engines.

05

5. Articulated Legal Bases for Processing

In compliance with international data standards and European frameworks, every data operation relies upon an explicit legal basis:

Consent: Storing optional analytical or promotional cookies, tracking paid advertising clicks across domains, and recording opt-in communications depend upon explicit consent granted through our cookie consent interface.

Contractual Necessity: Processing contact details, packaging requirements, and delivery destinations is essential to prepare non-binding price quotes and execute commercial food production agreements at your request.

Legitimate Interests: Collecting routine technical server logs, honeypot telemetry, and security timestamps serves our legitimate business interest in protecting infrastructure security, maintaining system uptime, and preventing fraud.

06

6. Paid Advertising Networks and Click Attribution

This website is an active landing destination for commercial search engine marketing and paid digital acquisition. We purchase sponsored placements and monitor ad engagement across three authorized platforms: google ads, microsoft advertising, and Meta Ads.

Google Ads: Paid keyword campaigns hosted by google ads pass the unique parameter gclid within inbound website URLs, allowing conversion measurements when consent is granted.

Microsoft Advertising: Search traffic originating from microsoft advertising appends the parameter msclkid to record referral efficiency and landing page relevance.

Meta Ads: Sponsored placements across Meta platforms attach the query parameter fbclid to track social engagement and visitor response.

We never state or imply that any advertising vendor has certified, reviewed, or endorsed our popcorn kitchen or our operational standards. All promotional placements represent self-directed commercial marketing.

07

7. Implementation of Google Consent Mode v2

To guarantee that advertising scripts strictly adhere to visitor preference choices, this website executes consent mode (specifically Google Consent Mode v2). Prior to receiving your affirmative response, four core tracking variables are initialized to a restricted state:

ad_storage — initialized to denied.

ad_user_data — initialized to denied.

ad_personalization — initialized to denied.

analytics_storage — initialized to denied.

Under consent mode, these four signals remain denied until a visitor clicks Accept All on our consent banner. If a visitor declines or later updates their selection via our cookie interface, all four variables revert immediately to denied, halting tag collection.

08

8. Authorized Third-Party Service Providers

We disclose customer and technical information only to vetted downstream infrastructure providers essential to our website hosting, customer messaging, and ad evaluation:

Google LLC & Google Ireland Ltd: Supplies search engine marketing services (Google Ads) and basic visitor metrics under strict data processing agreements.

Microsoft Ireland Operations Ltd: Coordinates paid network placements through Microsoft Advertising; visitor data handling by Microsoft is fully governed under the Microsoft Privacy Statement accessible at privacy.microsoft.com.

Meta Platforms Ireland Ltd: Operates Meta Ads conversion reporting and promotional campaign tracking.

Production Web Hosting Provider: Maintains secure Linux server instances in North America where incoming form requests, chat records, and access logs reside in isolated storage.

Transactional Mail Service: Relays inquiry notifications from mitid54.php directly to kitchen staff inboxes at 1202 Main St over encrypted transport protocols.

09

9. Cross-Border International Data Transfers

Our popcorn manufacturing kitchen and primary hosting servers reside inside the United States. If you browse alspopcorns.com or place an inquiry from outside North America, your information travels directly to the United States. To safeguard personal details originating from the European Economic Area, Switzerland, or the United Kingdom, our enterprise service partners utilize approved Standard Contractual Clauses and certified adequacy mechanisms to maintain protection levels equivalent to domestic statutes.

10

10. Definitive Retention Schedules

We never maintain personal data indefinitely. Information is purged on disciplined schedules tied directly to commercial requirements:

Inquiry Form Submissions and Email Transcripts: Retained for exactly 24 months to reference repeat batch recipes, volume discounts, and dietary accommodations before permanent database deletion.

Support Chat Conversations: Retained for exactly 12 months from the final recorded dialogue message to facilitate seasonal batch customer service.

Server Access and Security Logs: Retained for exactly 90 days for network diagnostic and firewall auditing, after which logs cycle and overwrite automatically.

Consent Preference Records: Stored in local browser memory under site_consent_v2 for exactly 6 months before prompting the visitor to re-confirm their preferences.

Data Subject Requests: Formal verification, data extraction, or erasure actions are fully executed and answered within 10 days of verified receipt.

11

11. Technical and Organizational Security Measures

We safeguard transmission channels and electronic records through layered administrative and technical defenses:

All web browsing and API interactions require Transport Layer Security with modern cipher suites.

Server databases sit behind restricted firewall perimeters with SSH key authentication and disabled public listening ports.

Inquiry endpoints use honeypot fields and strict sanitization routines to prevent SQL injection, cross-site scripting, and automated bot spamming.

Physical access to administrative equipment at our 1202 Main St facility is restricted to authorized culinary staff.

12

12. European Rights Under the GDPR Framework

Visitors residing within the European Economic Area, the United Kingdom, or Switzerland possess distinct legal rights regarding their personal data under the General Data Protection Regulation (gdpr):

Right of Access: You may request an itemized confirmation of what personal data we maintain and receive a copy in a common portable format.

Right to Rectification: You may require us to correct inaccurate records or complete incomplete information regarding your catering orders.

Right to Erasure: You may instruct us to delete personal details when processing is no longer required for legitimate fulfillment.

Right to Restrict Processing: You may limit how we process records during pending dispute verifications.

Right to Data Portability: You may receive your provided records in a structured, machine-readable format.

Right to Object: You may oppose processing founded upon legitimate business interests or direct marketing outreach.

Right to Withdraw Consent: You may retract consent for optional cookies and advertising measurements at any moment with immediate effect.

13

13. United States State Privacy Rights and California Disclosures

Under United States state privacy legislation — including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), alongside statutes in Colorado, Connecticut, Virginia, and Utah — consumers hold specific protections:

Right to Know and Access: Consumers may inspect the categories and specific pieces of personal information collected, the business purposes, and third parties involved.

Right to Delete: Consumers may request permanent removal of personal details collected directly from them.

Right to Correct: Consumers may request corrections to inaccurate personal records.

Right to Opt Out of Sale and Sharing: We do not sell customer names, phone numbers, or emails for monetary remuneration. However, transmitting marketing identifiers to ad networks may constitute sharing under California law. You hold the absolute right to opt out of such sharing.

Non-Discrimination: We never alter batch popcorn pricing, charge punitive fees, or diminish service levels because you exercise statutory privacy privileges.

14

14. Recognition of Global Privacy Control Signals

Our web platform programmatically listens for the Global Privacy Control browser header (Sec-GPC). When your browser transmits a valid global privacy control broadcast, our scripts treat it as a verified statutory opt-out instruction: marketing cookies, advertising attribution tags, and profiling mechanisms are suppressed without requesting separate verification prompts.

15

15. Children’s Online Privacy Protection

Al’s Popcorns produces confectionery items for general consumer audiences, but our online ordering and contact mechanisms are strictly directed toward adults and event coordinators capable of forming binding commercial agreements. We do not knowingly solicit, collect, or store personal details from minors under 16 years of age (or under 13 in compliance with COPPA). If a parent or guardian discovers that a minor has submitted personal contact information without authorization, contact [email protected] immediately for prompt record deletion.

16

16. Statutory Supervisory Authorities and Complaints

If you believe our data collection violates state or international privacy statutes, you possess the right to register a formal complaint with relevant regulatory bodies:

Ohio Residents: Consumer Protection Section, Office of the Ohio Attorney General, 30 E. Broad St., 14th Floor, Columbus, OH 43215.

California Residents: California Privacy Protection Agency (CPPA), 915 Capitol Mall, Suite 350A, Sacramento, CA 95814.

European Residents: The competent Data Protection Authority situated in your individual European Union Member State.

17

17. Data Subject Access Requests (DSAR Procedure)

To exercise your statutory entitlements — including access verification, data erasure, or opt-out confirmation — submit a written request directly to our culinary administrative office:

Electronic Mail: [email protected] with the subject line “Data Subject Request”.

Postal Mail: Al’s Popcorns, Attn: Privacy Office, 1202 Main St, Cincinnati, Ohio 45202, Cincinnati, Ohio, United States.

Required Verification Details: To safeguard client records from unauthorized disclosure, your communication must contain your full name, the email or phone number originally used in your popcorn order inquiry, and the specific action requested.

Response Timeline: We review, verify, and complete every legitimate inquiry within 10 days of receipt without assessment of processing fees.

18

18. Amendments and Policy Updates

We periodically modify this policy to mirror shifts in commercial popcorn production lines, digital communication channels, or advertising compliance standards. Material changes will be highlighted through a visible banner on our site or communicated directly to active inquiry contacts. The date stamped at the head of this register identifies the current binding revision.

19

19. Direct Human Contact and Inquiries

If you have specific questions regarding this privacy document, kitchen data handling, or batch quote retention, contact our Cincinnati team directly:

Operating Entity: Alspopcorns

Production Kitchen: 1202 Main St, Cincinnati, Ohio 45202

Direct Kitchen Phone: 513-993-7677

Electronic Inquiries: [email protected]

Governing Venue: State and federal courts located within Hamilton County, Cincinnati, Ohio

Privacy Policy & Data Governance