Privacy Policy

Who we are

Emporio Zeva operates Not-A-Salami and the website at notasalami.com. In this policy, "we", "us" and "our" mean Emporio Zeva, based in San Francisco, California. We are the controller of the personal information described here.

Information you give us

We collect the information you choose to give us when you use the site:

• Inquiries and tasting requests — your name, email address, telephone number, company, role or department, the occasion or event you are planning, preferred date, location, approximate number of guests, what you are considering, any special requirements, and the message or notes you send.
• Waitlist sign-ups — your name, email address, the product you are interested in, and any note you add.
• Newsletter subscriptions — your email address.
• Correspondence — the content of any email or message you send us.
• Orders — the details needed to prepare, invoice and deliver an order. Payments are handled by a third-party payment provider; we do not receive or store your full card number.

Information we collect automatically

When you visit the site, we and our service providers collect limited technical information automatically. This includes the pages you view, how you arrived at the site, your approximate location derived from your IP address, your device and browser type, your screen size, and the dates and times of your visits. We use this to understand how the site is used and to keep it working properly.

How we use your information

We use personal information to:

• respond to your inquiry and arrange tastings, proposals and orders you ask for;
• prepare and fulfil orders, including invoicing and delivery;
• send you the newsletter and updates you have asked to receive;
• understand how the site is used so we can improve it;
• keep the site secure and prevent misuse; and
• meet our legal, tax, accounting and reporting obligations.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use your personal information to train advertising profiles.

Our legal bases

Where data protection law in the EEA, the UK or Switzerland applies, we rely on the following legal bases: performance of a contract, or steps taken at your request, when we handle an inquiry or an order; our legitimate interests in operating, securing and improving the site and in keeping business records; your consent for the newsletter and marketing messages, which you can withdraw at any time; and compliance with our legal obligations, including tax and accounting.

Cookies, analytics and tracking

We use cookies and similar technologies for essential site functionality and to measure traffic and usage. Essential cookies keep the site working and cannot be turned off through the site. Analytics cookies tell us which pages are used and how.

We use PostHog, an analytics service, to collect usage information such as pages viewed, clicks, and device and browser details. You can refuse or delete cookies at any time in your browser settings. If you do, parts of the site may not work as intended.

We honour the Global Privacy Control (GPC) signal. If your browser sends a GPC opt-out signal, we treat it as a request to opt out of any sale or sharing of your personal information.

When we share information

We share personal information only with service providers who process it on our behalf, under contract, and only as needed for the purposes described above. These providers give us:

• website hosting and infrastructure;
• database and file storage;
• email delivery and newsletter services;
• payment processing; and
• website analytics.

We may also need to disclose information to our professional advisers, such as accountants and lawyers; where the law requires it; to enforce our agreements; or to protect the rights, property or safety of us, our customers or others. If we are ever involved in a merger, acquisition or sale of assets, personal information may transfer as part of that transaction, and we will tell you if that happens.

Sale and sharing of personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. If this ever changes, we will update this policy and provide a clear way to opt out before any such sale or sharing begins. To make an opt-out request now, email hello@notasalami.com.

How long we keep information

• Inquiries, tasting requests and proposals — up to 24 months after our last contact with you.
• Order, invoice and tax records — up to 7 years, which is what tax and accounting law requires.
• Newsletter subscriptions — until you unsubscribe, plus a short period to record that you did.
• Waitlist entries — until the product launches, or until you ask us to remove you.
• Analytics data — up to 12 months.

When we no longer need information, we delete it or make it anonymous.

How we protect information

We use administrative, technical and physical safeguards to protect personal information, including encryption in transit, access controls, and limiting access to those who need it to do their work. No method of transmission or storage is completely secure, so we cannot promise absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Right to know what personal information we collect, use and disclose, and to request a copy of it.
• Right to correct inaccurate personal information.
• Right to delete personal information we hold about you.
• Right to opt out of the sale or sharing of your personal information, and of targeted advertising.
• Right to limit the use and disclosure of sensitive personal information.
• Right to data portability — to receive a copy in a portable format.
• Right to non-discrimination — we will not deny you service, or charge you a different price, because you exercised a privacy right.
• Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not carry out that kind of profiling.

These rights apply in particular to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana, and are subject to the exceptions and conditions in those laws.

How to exercise your rights

Email us at hello@notasalami.com and tell us what you would like us to do. We will acknowledge your request within 10 business days and respond within 45 days of receiving it. If we need longer, we will tell you why — the law allows up to 90 days in some cases. We may ask you to verify your identity first, and we will only ask for the minimum needed to do that. You may use an authorised agent to make a request for you; we may ask them for your written permission, or for proof that they hold power of attorney.

If we decline your request, you can appeal by replying to our decision. We will review the appeal and respond in writing within 45 days, explaining the outcome and how to complain to your state attorney general.

If you are in the EEA, the UK or Switzerland

You have the right to access, correct, delete, restrict or object to our processing of your personal information, the right to data portability, and the right to withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with your local data protection authority. Where we transfer personal information outside the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as the standard contractual clauses approved by the European Commission.

Children

This site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Links to other sites

The site may link to third-party websites, such as Instagram. We are not responsible for their privacy practices, and we encourage you to read their policies before giving them your information.

Changes to this policy

If we change this policy, we will post the new version here with a revised date. Where a change is significant, we will take reasonable steps to tell you directly.