Privacy policy

Privacy Policy

Updated: 02/10/2025

This Privacy Policy describes how Downtown Snacks LLC (“City Pop”, or “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site. It also explains that City Pop and Heja Sports AB ("Heja") work together to provide a fundraising platform and product fulfillment, with each company storing personal data and being responsible for its protection.

Contact

After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at info@citypopdenver.com or by mail using the details provided below:

City Pop, 15315 Xenon Street Ste A, Arvada, CO 80002, United States

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information.”

Device Information
Purpose of collection: To load the Site accurately for you and to perform analytics on Site usage to optimize our Site.
Source of collection: Collected automatically using cookies, log files, web beacons, tags, or pixels.
Disclosure for a business purpose: Shared with our processor Shopify.
Personal Information collected: Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Order Information
Purpose of collection: To provide products or services, process payments, arrange shipping, provide invoices/order confirmations, screen for fraud, and provide relevant advertising.
Source of collection: Collected from you.
Disclosure for a business purpose: Shared with our processor Shopify and fundraising partner Heja Sports AB.
Personal Information collected: Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. Payment information is only shared with our processor, Shopify. Payment information is not shared with Heja Sports AB.

Customer Support Information
Purpose of collection: To assist with inquiries, fulfill orders, and address concerns.
Source of collection: Collected from you.
Disclosure for a business purpose: Shared with our processor Shopify and fundraising partner Heja Sports AB.
Personal Information collected: Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. Payment information is only shared with our processor, Shopify. Payment information is not shared with Heja Sports AB.

Fundraising Platform and Production Fulfillment
City Pop and Heja work together to provide a fundraising platform and production fulfillment. As part of this collaboration, both City Pop and Heja store and process personal data to facilitate the operation of these services. This personal data includes, but is not limited to, your name, phone number, address, email address, purchase history, purchase amounts, and transactional information. Credit card information is not retained by either City Pop or Heja once it is transferred to City Pop’s payment processor, Shopify..

If you wish to opt out of the fundraising platform or production fulfillment services, you must contact both City Pop and Heja directly to request this.

Minors

The Site is not intended for individuals under 13. If you believe your child has provided us with Personal Information, please contact us for deletion.

Sharing Personal Information

We share your Personal Information with service providers, such as Shopify and Heja Sports AB, to facilitate transactions and comply with legal requirements. For more details, visit Shopify’s privacy policy: Shopify Privacy Policy and Heja Sports AB’s privacy policy: Heja Privacy Policy.

Behavioral Advertising

We use Personal Information for targeted advertising and marketing communications. You can opt-out via:

Facebook: https://www.facebook.com/settings/?tab=ads
Google: https://www.google.com/settings/ads/anonymous
Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Digital Advertising Alliance: https://optout.aboutads.info/

Using Personal Information

We use your Personal Information for providing services, processing payments, shipping orders, and marketing updates.

Lawful Basis (GDPR)

For EEA residents, we process your data under the following legal bases:

Your consent
Performance of a contract
Compliance with legal obligations
Legitimate interests that do not override your rights

Retention

We retain your Personal Information unless you request erasure.

Automatic Decision-Making

Shopify employs automated fraud prevention mechanisms, including:

Temporary IP blacklists for failed transactions.
Temporary card blacklists associated with suspicious activity.

Selling Personal Information (CCPA)

Our Site does not sell Personal Information as defined by CCPA.

Your Rights

GDPR (EEA Residents)
You have the right to access, correct, update, or erase your data. Contact us to exercise these rights.

CCPA (California Residents)
You can request access, correction, or deletion of your data. You may also designate an agent to act on your behalf.

Cookies help improve your browsing experience by remembering preferences and tracking interactions. We use:

Necessary Cookies (e.g., for login and checkout functionality)
Performance Cookies (e.g., Google Analytics)
Advertising Cookies (e.g., Facebook Pixel)

To manage cookies, visit: Shopify Cookies Policy

Changes to This Policy

We may update this Privacy Policy periodically. Changes take effect upon posting.

For further inquiries, email us at info@citypopdenver.com or mail us at:
City Pop, 15315 Xenon Street Ste A, Arvada, CO 80002, United States