Quick Organics, Inc. (“Quick Organics,” “Quick,” “we,” “us,” “our”) provides organic certification and record keeping services through our websites located at quickorganics.com, quickorganicsapp.com, and appquickorganics.com (collectively, the “Site”), and any related mobile applications and online services (collectively, together with the Site, the “Services”). This Privacy Policy describes how we collect, use, and disclose information about you when you access or use our Site and Services.
By using our Site and Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use our Site or Services.
1. Definitions
The following definitions apply throughout this Privacy Policy:
- “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as defined under applicable law including the California Consumer Privacy Act (“CCPA”) (Cal. Civ. Code §1798.140(v)).
- “Sensitive Personal Information” means Personal Information that includes precise geolocation data, or other categories identified under Cal. Civ. Code §1798.140(ae) and equivalent state laws.
- “Aggregate Information” means information that has been combined with data from multiple sources such that it relates to a group or category of consumers or operations and from which individual consumer or operation identities have been removed and cannot reasonably be restored.
- “Deidentified Information” means information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular consumer, household, or operation, processed in accordance with our Deidentification Standard, provided that Quick Organics: (a) has implemented technical safeguards and business processes to prevent re-identification; (b) has implemented business processes to prevent inadvertent release of Deidentified Information; (c) makes no attempt to re-identify the information; and (d) contractually obligates any recipients to the same commitments, consistent with Cal. Civ. Code §1798.140(m).
2. The Information We Collect About You
We collect information about you directly from you, from third parties, and automatically through your use of our Site and Services.
Information We Collect Directly From You
You may browse certain areas of the Site without registering with us or providing us Personal Information. However, to use certain features of our Site and Services, you must register with us and create an account.
- Contact and Registration Information. We collect your name, email address, phone number, mailing address, company or organization name, and account credentials when you register for an account, contact us through our Site, or sign up to receive information from us.
- Use of Services. We collect information you provide when you use our Services, including farm operational data, crop records, input logs, harvest records, field maps, certifier information, inspection records, audit documentation, and other organic certification and record keeping data you submit to the platform. This data may also include GPS coordinates or geolocation data associated with your farm or operation, which may constitute Sensitive Personal Information under applicable law.
- Other Information. We collect any other information you choose to provide to us, such as when you participate in a survey, submit a support request, or communicate with us.
Information We Collect Automatically
- Device and Usage Information. We collect information about how you access our Site and Services, including your browser type and version, operating system, device type, IP address, unique device identifiers, pages viewed, links clicked, date and time of your visit, and the referring URL.
- Log Data. Our servers automatically record information created by your use of the Services, including your IP address, browser type, the dates and times of your access, and details of your activity on the Site.
- Cookies and Similar Technologies. We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interaction with our Site and Services. See “Our Use of Cookies and Other Tracking Mechanisms” below for more information.
3. How We Use Your Information
- Provide Our Services. To provide, maintain, and improve our Site and Services, process transactions, send you related information (including confirmations, technical notices, updates, security alerts, and administrative messages), and provide customer support.
- Provide Personalized Services. To personalize and improve your experience on our Site and Services, including by presenting content and features tailored to your interests and preferences.
- Improve and Develop. To better understand how users access and use our Site and Services, for research and development purposes, and to improve and develop new features, services, and functionality.
- Offer Promotions. To send you promotional communications, such as information about products, services, and events offered by us and our partners, that may be of interest to you. You may opt out of receiving promotional emails at any time.
- Compliance. To comply with applicable legal requirements, industry standards, and our policies, and to protect the rights, property, and safety of Quick Organics, our users, and the public.
- Use of Customer Data in Deidentified and Aggregate Form. We may use Customer Content to generate Aggregate Information and Deidentified Information for purposes including (a) product improvement and analytics, (b) artificial intelligence and machine learning model training, (c) benchmarking and industry insights, and (d) internal research. Models, where used, are trained on Deidentified Information only, are evaluated for memorization of identifiable inputs, and are not used to make decisions that produce legal or similarly significant effects with respect to any Customer.
You may exclude your underlying Customer Content from the AI/ML training and benchmarking use cases above by emailing support@q-organics.com or by using the controls in your account settings. Exclusion applies to future training runs and future aggregates; previously trained models and previously published aggregates may continue to reflect contributions from your prior data.
3.5 Who Sees Your Data
Quick Organics operates a multi-stakeholder platform. The following parties may access your data, only as necessary for their role:
- You and users you authorize — see Customer Content you have created or that has been shared with your role.
- Other account holders within your operation (e.g., farm owner, farm employees, farm-side contacts who have their own Quick Organics accounts) — see Customer Content within the scope of their assigned role. Each account holder accepts this Privacy Policy and the Terms of Service in their own right and has independent privacy rights, including the right to submit access, deletion, and opt-out requests with respect to their own Personal Information.
- Your selected Certifier and assigned Inspector(s) — see your Organic System Plan, filing cabinet documents, activity records, and other certification-related Customer Content, only for the operations and certification periods they are responsible for. Certifying Parties act as independent controllers of the Personal Information they receive (see “How We Share Your Information” below).
- Quick Organics personnel — see Customer Content only as necessary to provide, maintain, and support the Service, subject to confidentiality obligations and internal access controls.
4. How We Share Your Information
- Certifiers, Inspectors, and Accredited Certifying Agents. Organic certifiers, inspectors, and USDA-accredited certifying agents (collectively, “Certifying Parties”) access your Personal Information and Customer Content as necessary to perform organic certification, inspection, and compliance review functions under the USDA National Organic Program (7 CFR Part 205) and applicable state organic programs. Certifying Parties act as independent controllers of the Personal Information they receive through the Service.
- Consent. We may share your information with third parties when you have given us your consent to do so.
- Affiliates. We may share your information with our corporate affiliates and subsidiaries for purposes consistent with this Privacy Policy.
- Service Providers. We share your information with third-party service providers who perform services on our behalf, such as hosting, data analytics, payment processing, customer service, and marketing. These service providers are contractually obligated to use your information only as necessary to perform services on our behalf and in a manner consistent with this Privacy Policy.
- Business Transfers. We may share your information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, or dissolution of all or a portion of our business.
- In Response to Legal Process. We may disclose your information to comply with applicable law, a subpoena, court order, legal process, or governmental request.
- To Protect Us and Others. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service, or as evidence in litigation in which we are involved.
Sale and Sharing of Personal Information. Quick Organics does not “sell” or “share” (as those terms are defined under the California Consumer Privacy Act and equivalent state laws) Personal Information.
5. Cookies and Other Tracking Mechanisms
We and our service providers use cookies and other tracking mechanisms to track information about your use of our Site and Services. We may combine this information with other Personal Information we collect about you.
Do-Not-Track / Opt-Out Preference Signals. We honor recognized opt-out preference signals, including Global Privacy Control (GPC). When we detect a GPC signal, we treat it as a valid opt-out of the “sale” and “sharing” of Personal Information under applicable law.
Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Policy, but instead by the privacy policies of those third parties.
6. Security of Your Personal Information
We have implemented commercially reasonable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. No data security measures can guarantee security; you should take steps to protect your password and keep your log-in credentials private.
7. Data Retention and Deletion
We retain your Personal Information for as long as your account is active or as needed to provide you the Services, plus a reasonable period thereafter for backup, archival, audit, and legal-compliance purposes. Specific retention periods:
- Account and registration data: Retained for the duration of your account and for three (3) years following account closure or termination.
- Farm operational data (Customer Content): Retained for the duration of your account and for one (1) year following account closure, after which it is deleted unless required for legal compliance.
- Automatically collected data (cookies, logs, device data): Retained for up to twenty-four (24) months from collection.
- Support and communication records: Retained for three (3) years following resolution.
Information that has been deidentified or aggregated in accordance with applicable law (including Cal. Civ. Code §1798.140(m)) is not Personal Information and is not subject to deletion under your privacy rights. A deletion request will not require Quick Organics to delete (a) Aggregate Information or Deidentified Information previously derived from your Customer Content; (b) AI or machine learning models previously trained on Deidentified Information; or (c) statistical insights or benchmarks previously generated from your data.
You may request deletion of your Personal Information by contacting us at support@q-organics.com.
8. Data Breach Notification
In the event of a data breach involving your Personal Information that poses a risk of harm, we will notify affected individuals and applicable regulatory authorities in accordance with the timelines and methods required by applicable state and federal law, generally without unreasonable delay following confirmation of a breach.
9. Your Rights Regarding Your Personal Information
You may request access, a copy, correction, or deletion of your Personal Information by emailing support@q-organics.com. We will respond to verifiable requests within the timeframes required by applicable law (generally forty-five (45) days, with extensions as permitted).
10. Your California Privacy Rights (CCPA/CPRA)
This section applies to California residents. As a California resident, you have rights to know/access, delete, correct, opt out of sale or sharing (we do not sell or share), limit the use of Sensitive Personal Information (including precise geolocation derived from your farm and field coordinates), data portability, and non-discrimination. To exercise any of these rights, email support@q-organics.com.
Upon a request to limit Sensitive Personal Information, we will (i) exclude precise geolocation from any use to train artificial intelligence or machine learning models and (ii) exclude precise geolocation from any Aggregate Information or Deidentified Information used for benchmarking or other secondary purposes. We will continue to use your precise geolocation data to operate your Organic System Plan, generate field maps, support inspector access, and meet NOP compliance obligations, because those are the purposes for which you provided it.
We honor Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of the sale and sharing of Personal Information associated with that browser.
11. Multi-State Privacy Rights
Residents of certain U.S. states have additional privacy rights under their state laws, including but not limited to Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA). These rights include the right to access, delete, correct, port, and opt out of certain processing. To exercise these rights, email support@q-organics.com.
12. Location of Information
Our Site and Services are designed for use in the United States. If you are using our Site or Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our databases are operated.
Quick Organics does not knowingly include Personal Information of EU/UK/EEA-resident data subjects in artificial intelligence or machine learning model training. If you operate internationally and are uncertain whether any Personal Information in your Customer Content pertains to an EU/UK/EEA-resident data subject, please contact support@q-organics.com before submitting that information to the Service.
13. Children and Minors
Our Site and Services are not directed to, and we do not knowingly collect Personal Information from, individuals under the age of eighteen (18). If we become aware that we have collected Personal Information from an individual under 18, we will delete it from our systems.
14. Contact Us
If you have questions about the privacy aspects of our Site or Services, or would like to exercise any of your privacy rights, please contact us at support@q-organics.com.
15. Changes to this Policy
This Privacy Policy is current as of the Effective Date set forth above. We may change this Privacy Policy from time to time. We will post any changes to this Privacy Policy on our Site. If we make any changes that materially affect our practices with regard to the Personal Information we have previously collected from you, we will endeavor to provide you with notice in advance of such change.