GDPR / CCPA

Privacy Policy & Data Protection Notice

Effective date: 9/12/2025

Thank you for visiting Columbia Restaurant Gift Shop (“we,” “us,” “our”). We respect your privacy and are committed to protecting your personal data. This Policy describes how we collect, use, disclose, retain, and protect your information under the General Data Protection Regulation (GDPR) for EU/EEA users, and the California Consumer Privacy Act (CCPA/CPRA) for California residents.

1. Who We Are

Columbia Restaurant Gift Shop is the e-commerce division of the Columbia Restaurant Group.
Address: 2025 E. 7th Ave., Tampa, FL 33605, United States
Contact: Contact@1905crg.com
If applicable under GDPR, our Data Protection Officer / Privacy Contact is: Contact@1905crg.com

2. What Personal Data We Collect

We may collect the following categories of personal data:

Type Examples
Provided by you Name, billing and shipping address, email address, phone number, payment information (via payment processors), order history, and other details you provide when purchasing or contacting us.
Automatically collected IP address, browser type, device information, operating system, cookies, browsing history, cart activity, page visits, and analytics data.
From third parties Payment gateways, shipping carriers, marketing/advertising partners, social media platforms, if you use them to sign in or share.

3. How We Use Personal Data

We use your personal data to:

  • Process and fulfill orders, including payment and shipping.

  • Communicate with you (order confirmations, customer service, updates, marketing if consented).

  • Improve and personalize your experience: analytics, understanding how users use the site.

  • Perform fraud prevention, security, and legal obligations.

  • Comply with laws/regulations.

4. Legal Basis for Processing (GDPR)

For individuals in the EU/EEA, we rely on one or more of the following legal bases:

  • Contract: Necessary to perform the contract with you (e.g. fulfilling orders).

  • Consent: Where you have given consent (e.g. for marketing communications, tracking cookies).

  • Legitimate interest: For purposes like fraud prevention, improving services, or site analytics.

  • Legal obligation: Where required by law.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to operate our site, provide services, and improve your experience:

  • Necessary cookies: essential for site functions (shopping cart, account login).

  • Functional cookies: remembering preferences, language, etc.

  • Performance / Analytics cookies: to measure site usage, traffic, and to understand how visitors interact with our site.

  • Advertising / Marketing cookies: to show you relevant ads, for retargeting, etc.

You will have the option (on first visit or via a cookie settings tool) to accept or reject non-essential cookies. If you decline these, some features may not function as intended.

6. Data Sharing & Transfers

We may share your data with:

  • Payment processors, banks, fulfillment and shipping companies.

  • Marketing/advertising partners.

  • Analytics providers.

  • Vendors who help us run our business (IT, customer service, etc.).

If we transfer personal data outside the EU/EEA, we will use recognized safeguards (e.g., Standard Contractual Clauses) to protect your rights under GDPR.

7. Data Retention

We retain your personal data as long as necessary for the purposes listed above, including to:

  • Complete transactions and fulfill orders.

  • Meet legal, tax, or accounting obligations.

  • Maintain security and prevent fraud.

After we no longer need the data, we securely delete or anonymize it.

8. Your Rights

Under GDPR (for EU/EEA residents)

You have the right to:

  • Access your personal data.

  • Rectify inaccurate or incomplete information.

  • Erase / be forgotten under certain conditions.

  • Restrict or object to certain processing activities.

  • Data portability.

  • Withdraw consent at any time (without affecting processing done before withdrawal).

  • Lodge a complaint with a supervisory authority (in your country).

Under CCPA/CPRA (for California residents)

You have the right to:

  • Know what categories and specific pieces of personal information we collect, use, share, or sell.

  • Delete your personal information (subject to exceptions).

  • Opt out of sale or sharing of your personal information.

  • Non-discrimination for exercising your rights.

Do Not Sell or Share My Personal Information: If you wish to opt out of sale/sharing, you can request via [insert link or method, e.g. a button, or contact email].

9. How to Exercise Your Rights

To exercise any of these rights, you may:

  • Contact us by email at: [insert privacy contact email]

  • Call us at: [if applicable]

  • Use any form or portal we provide on the site.

We may require proof of identity before fulfilling certain requests to protect your privacy.

Time frames:

  • Under GDPR, we generally respond within one month. We may extend this by an additional two months if necessary, with notice.

  • Under CCPA, we generally respond within 45 days.

10. Security Measures

We take reasonable technical and organizational steps to protect your personal data, such as:

  • Secure servers, encryption (in transit & at rest), firewalls.

  • Access controls limiting who can see your data.

  • Regular security assessments.

11. Children’s Privacy

Our site is not intended for children under 16. We do not knowingly collect personal data from children under that age. If you believe we have collected such data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Policy from time to time. We will post the “effective date” at the top and notify you of significant changes via the site or by email (if you have opted into communications).

13. Contact Information

If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact:

Privacy Contact / DPO:
1905 Restaurant Group
Email: Contact@1905crg.com
Mailing Address: 2025 E. 7th Ave., Tampa, FL 33605, United States