We use cookies. These cookies enhance your experience and improve our website. Certain cookies are necessary and can't be turned off, but we also allow others to place cookies to track the performance of our website and deliver personalized content and ads. You can select your preference using the buttons.
CITARELLA OPERATING, LLC
PRIVACY POLICY
LAST UPDATED: AUGUST 1, 2023
Thank you for shopping at Citarella!
For over 100 years, our philosophy has been to value relationships more than anything. Citarella understands that you want to know how we use and share your personal information. We value our relationship, and you have our word that the personal information we collect will only be used on behalf of giving our valued customers, our very best.
This Privacy Policy encompasses the Personally Identifiable Information we collect at Citarella.com, an Internet property of Citarella Operating, LLC (collectively, “Citarella”, “us”, “our” or “we”). We have created this privacy policy (the “Privacy Policy”) to disclose our information gathering and dissemination practices. Please take a few minutes to read it so that you understand how we treat your information. As we continuously improve and expand our services, this policy might change, so please check it periodically
Personally Identifiable Information
Let’s start with how we define “Personally Identifiable Information.” “Personally Identifiable Information” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked – directly or indirectly – to you or your household. Personally Identifiable Information is more than your name, address, and telephone number. It includes all types of information that can be used to distinguish one person from another and can be used to deanonymize previously anonymous data. Personally Identifiable Information may be used alone or in tandem with other relevant data to identify an individual and may incorporate direct identifiers, such as driver’s license information, that can identify a person uniquely or quasi-identifiers, such as gender, that can be combined with other quasi-identifiers, like date of birth, to successfully recognize an individual. While we collect some of this information directly from you, much of the information is collected behind the scenes. We use this information to better understand you as a customer and your experiences with us so that we can personalize them.
How We Collect Your Personally Identifiable Information
We collect Personally Identifiable Information from you when you: (1) Purchase, order, return, exchange or request certain information about Citarella products and services; (2) Apply for a Citarella “house” account; (3) Conduct a transaction where we collect information required by law; (4) Visit the Citarella.com website (the “Website”) via “cookies;” (5) Visit one of our stores; (6) Create an account at our Website; (7) Contact one of our service departments; (8) Provide us with comments, suggestions, feedback or surveys; (9) Otherwise submit Personally Identifiable Information to us; (10) Via the Social Media Pages that we control; and/or (11) When you ask us to ship or deliver an order. You may access the links to Citarella’s Social Media Pages/accounts featured on third-party social media websites, such as Facebook®, Instagram®, LinkedIn®, Twitter® and TikTok® (collectively, our “Social Media Pages”). Therefore, when we refer to the “Website” that is inclusive of our Social Media Pages
Cookies and Other Identifying Technologies
“Cookies” are small pieces of information that a website sends to your device while you are viewing a website that may also return information about your website usage (including if you are logged in). We use both our own cookies, and cookies placed by third parties. We use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your mobile device until you delete them). Among other things, cookies allow us to provide you with a more personal and interactive experience tailored to your interests and to improve our marketing efforts. Cookies may be managed by following instructions provided by your browser, or in jurisdictions where it is required by law, by choosing to allow or disallow cookies from the cookie consent module. If you choose to disable cookies some areas or features of our Website may not work properly. We also use similar tracking mechanisms to view your interactions with our advertisements and emails we send, including whether you have opened those emails. We use this information to make our Website operate efficiently, to improve user experience on our Website and emails and to understand website and email traffic and how our Website and emails are being used. We also participate in behavior-based advertising. This means that a third-party may use a cookie or other behavioral tracking technology to collect information about your use of our Website so that they can provide advertising about products and services tailored to your interests. That advertising may appear either on our Website, or on other websites. You can opt-out of receiving advertising based upon your browsing behavior from some network advertising companies by going to the Network Advertising Initiative and the Digital Advertising Alliance websites. We use this information to provide advertising about products and services tailored to our user’s interest. You can “decline” or “accept” cookies by clicking the “Cookies” banner located at the bottom of our Website. To find more information about Cookies, including how to manage and delete Cookies, please visit https://allaboutcookies.org/. Please be advised that in the event you delete or block cookies, it is possible that some functionality at the Citarella Website may not work properly.
In addition to Cookies, we may use other kinds of tracking technologies on our Website and within our advertisements. These tracking technologies act like Cookies act whereby the Personally Identifiable Information collected through these other types of tracking technologies are mostly controlled by us. However, there are limited instances where the Personally Identifiable Information collected through these other technologies is controlled by our vendors or other third-parties. For instance, sometimes we use “web logs.” Web logs collect information from you, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet), domain name, click-activity, referring website, and/or a date/time stamp for your visit. We have a legitimate interest in monitoring our networks and the visitors to our Website. Among other things, it helps us understand which of our products and/or services is the most popular.
We collect Personally Identifiable Information from your internet-enabled device, including mobile devices, such as unique identifying information broadcast from your device when visiting our Website. We track your use of our Website across various devices, including your personal computer and mobile device, in order to optimize and personalize your experience. We may collect certain of your Personally Identifiable Information across various devices. We have a legitimate interest in identifying unique visitors across disparate devices, and in understanding how users interact with us across the various internet-enabled devices they use.
Aggregate Data
Citarella reserves the right to transfer and/or sell aggregate or group data about visitors to the Website for lawful purposes. Aggregate or group data is data that describes the demographics, usage, and other characteristics of visitors to our Website as a group, without disclosing Personally Identifiable Information.
Social Media Pages
If you engage in any interaction with Citarella, or any third-party on any Citarella Social Media Websites, you should be aware that: (1) The Personally Identifiable Information you submit by and through such Social Media websites can be read, collected and/or used by other users of these websites/services (depending on your privacy settings associated with your accounts with the applicable Social Media Pages), and could be used to send you unsolicited messages or otherwise to contact you without your consent or desire; and (2) Where Citarella responds to any interaction on such Social Media Pages, your account name/handle may be viewable by any and all members/users of Citarella’s Social Media Pages. We are not responsible for the Personally Identifiable Information that you choose to submit on any Social Media Page. The Social Media Page operates independently from Citarella, and we are not responsible for such Social Media Pages’ interfaces or privacy or security practices. We encourage you to review the privacy policies and settings of the Social Media Pages with which you interact to help you understand those Social Media Pages’ respective privacy practices. If you have questions about the security and privacy settings of any Social Media Page that you use, please refer to their applicable privacy notices or policies.
Third-Party Websites
Our Website (including, the Social Media Pages) may include links to other websites whose privacy practices may differ from our practices. If you submit Personally Identifiable Information to any of those sites, your Personally Identifiable Information is governed by their privacy policies. We are not responsible for the privacy practices or the content of any sites to which our Website and Social Media Pages provide links. We encourage you to carefully read the privacy policy of any website you visit.
Third-Party Analytics
From time to time, we may use Google Analytics or other analytics providers to obtain analytical information about our Website. These analytics providers may use Cookies and other tracking technologies that help us analyze how you use or interact with our Website, services, and advertisements. More information about Google Analytics can be found in the Google Analytics Terms of Use and the Google Analytics Privacy Policy. You may exercise choices regarding the use of cookies from Google Analytics by downloading the Google Analytics Opt-out Browser Add-on which is available here.
Opt-Out/Unsubscribe
To opt-out of receiving e-mail and other forms of communication from Citarella, you can: (1) Follow the instructions included in the applicable e-mail message or other communication; (2) Visit Citarella.com and sign into your account to update your preferences; or (3) E-mail us at: privacy@citarella.com. Notwithstanding the foregoing, we may continue to contact you for the purpose of communicating information relating to your requests for products and/or services offered at our Website, as well as to respond to any inquiry or request made by you. To opt-out of receiving such communications relating to such requests for products and/or services offered at our Website and/or inquiry response-related messages from Citarella, you must cease requesting and/or utilizing the products and/or services offered at Citarella.com and/or cease submitting inquiries to the Citarella.com Website, as applicable. Once a request to opt-out is received, we may take a reasonable amount of time to action the request. This is typically within thirty (30) days, unless otherwise specified by local laws or regulations, notwithstanding failures or deficiencies of underlaying technology systems or processes required to process the opt-out request.
How We Use Personally Identifiable Information
The Personally Identifiable Information we may receive from third-party sources are from entities that can help us correct our records, improve the quality or personalization of our service to you, provide demographic data, and help prevent or detect fraud. For example, we may collect information from consumer reporting agencies, affiliates, or other service providers if you apply for credit. The Personally Identifiable Information we receive and store when you interact with our Website, e-mails, and online advertising allow the Website to work correctly, to evaluate use of the Website and to support Website analytics and marketing campaigns. There are many ways that we use data, check out the other sections of the Privacy Policy where we provide contextual examples throughout our stores, online, and at delivery. Generally, we use Personally Identifiable Information to:
- Process and complete your transactions including, as applicable, order confirmation, billing, and delivering products or services.
- Provide customer service, including responding to your requests or inquiries.
- Personalize your experience with content and offers that are tailored to you, including special offers from other companies.
- Provide you with newsletters, articles, product or service alerts, new product or service announcements, savings awards, event invitations, and other information.
- Include you in market research, surveys, promotions, sweepstakes, and contests.
- Improve the way offers are made based on the purchasing decisions of our customers and improving the interactions visitors have with our services.
- Evaluate your shopping experience or existing products and Services or to create new items
- Alert you about a product safety announcement or recall or correction of an offer, promotion, or advertisement.
- Keep a record of our interactions with you if you place an order or otherwise deal with our representatives over the telephone or online.
- Verify and validate your identity or otherwise prevent, investigate, or provide notice of fraud, unlawful or criminal activity, or unauthorized access to or use of Personally Identifiable Information, and our Website systems.
- Comply with our legal obligations, including complying with law enforcement or governmental authority requests, participating in judicial proceedings, responding to requests from third parties based on their statutory rights against us (IP infringement, piracy, other unlawful activity) and investigating potentially fraudulent activity.
- Process and evaluate your application and related materials you submit as a job applicant.
- Interact with you when you contact us as a vendor or on behalf of another business.
- Enable you to interact with content service providers, whether by linking to their sites, viewing their content within our online environment, or by viewing our content within their online environment. Create aggregated, pseudonymized, or anonymized information for analytical and statistical purposes.
We also use information with your consent, including for purposes such as:
- Providing you with our promotions;
- Sending you promotional newsletters and marketing communications;
- Serving digital advertisements to you tailored to your interests on third party ad properties;
- Fulfilling any other purposes disclosed to you and with your consent.
We send two kinds of e-mail: (1) e-mails about cool stuff happening at Citarella; and/or (2) e-mails containing important information about your account. You can opt out of the former, but not the latter except as otherwise set forth herein. To accomplish these purposes, we may combine personal and non-personal information we collect online with offline information, including information from third-parties. We may also share your information within our family of corporate affiliates, to accomplish these and our affiliates’ purposes. We may share your personal information, whether you are a current or former customer, under limited circumstances. We may share information about you with service providers or suppliers that help with our business operations. Examples are shipping vendors, third party lending institutions, credit card processors, billing services, and companies that help us improve our product and service offerings and our Website. We require these service providers and suppliers to keep the information secure. We also prohibit them from using your information for any purposes other than those requested by us.
Service Providers
Citarella uses agents, vendors, consultants and other service providers to help it maintain and operate its Website, payment processing, and for other reasons related to the operation of its business, and those companies may receive your information for that purpose. These companies may only use such information for the purpose of performing those functions and may not use it for any other purpose, although we may permit them to use aggregate information which does not identify you or de-identified data for other purposes.
Affiliates
We share your information with our affiliates for internal business purposes. For example, we share your Personally Identifiable Information with our affiliates for customer support, marketing, and technical operations.
Joint Marketing/Co-Branding Business Partners
We reserve the right to share your Personally Identifiable Information with our business partners in connection with offering you co-branded services, selling or distributing our products, or engaging in joint marketing activities.
Promotions
Our promotions may be jointly sponsored or offered by third-parties. If you voluntarily choose to enter a Promotion, we may share your Personally Identifiable Information with third-parties a set forth in the official rules that govern the Promotion as well as for administrative purposes and as required by law (e.g., on a winners list). By entering a Promotion, you agree to the official rules that govern that Promotion, and, except where prohibited by applicable law, allow the sponsor and/or other parties to use your name, voice and/or likeness in advertising or marketing materials.
Merger or Acquisition
We may share your Personally Identifiable Information if Citarella is involved in a merger, acquisition, or sale of all or a portion of its assets. In such event, you may be notified via e-mail and/or a prominent notice on our website of any change in ownership or uses of your information, as well as any choices you may have regarding your Personally Identifiable Information.
Security and Compelled Disclosure
Citarella must disclose Personally Identifiable Information about you in response to lawful requests by public authorities, including meeting national security or law enforcement requirements. We may share Personally Identifiable Information about you in connection with legal requirements, such as in response to an authorized subpoena or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud. We may also share Personally Identifiable Information about you to defend the Terms of Use or other policies applicable to the Website or if we believe your actions are inconsistent with our user agreements or policies. To the maximum extent permitted by applicable law, we may use IP addresses, mobile device identifiers or any other information we collect to identify users, and may do so in cooperation with copyright owners, internet service providers, wireless service providers or law enforcement agencies in our discretion. Such disclosures may be carried out without notice to you.
Consent
We may share your Personally Identifiable Information for any other purpose disclosed to you and with your consent.
Deleting, Modifying and Updating Your Information
Where required by law, at your request we will: (1) Inform you of what Personally Identifiable Information we have on file for you; (2) Amend the Personally Identifiable Information that we have on file for you; and/or (3) Remove Personally Identifiable Information that you have provided to us, or that we have collected. You may do so by e- mailing us at: privacy@citarella.com. We simply request that you identify yourself and the specific Personally Identifiable Information requested to be accessed, corrected, or removed before processing such requests. To the extent permitted by applicable law, we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others or would be extremely impractical. For example, requests concerning information residing on backup tapes might not be practical. Please be advised that deleting your Personally Identifiable Information may terminate your access to certain products and/or services offered on the Website. If you wish to continue using the full complement of products and/or services offered on the Website, you should not delete all the Personally Identifiable Information that we have on file for you. Please be further advised that, after you delete your Personally Identifiable Information, residual copies may take a period of time before they are deleted from our active servers and may remain in our backup systems.
Children’s Privacy
We do not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register as users. The Website and its content are not directed at children under the age of 13. If we learn that we have collected Personally Identifiable Information from a child under age 13, we will delete that information promptly. If you believe that we might have any information from a child under 13, please contact us at privacy@citarella.com.
Special Privacy Notice for California Residents
This Special Privacy Notice for California residents applies to residents of the State of California. We adopt this notice to comply with the California Consumer Privacy Act of 2018 (as amended, and together with related regulations the “CCPA”) and any terms defined in the CCPA shall have the same meaning when used in this notice. This notice does not apply to workforce-related personal information collected from California-based employees, job applicants, contractors, or similar individuals but does apply to personal information collected in the context of business-to-business (B2B) transactions. This notice applies to “Personally Identifiable Information” that we collect, meaning information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, or household. However, for purposes of the CCPA, such personal information does not include publicly available information from government records, deidentified or aggregated consumer information, information excluded from the CCPA’s scope, like health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data, personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994. We collect information to save you time and money, to deliver the products and services you request to enhance your shopping experience and support our business operations. We may collect personal information and use it.
In compliance with California law, we provide California residents residing in California with certain information upon request (“CA Consumer Request”). This Section of the Privacy Policy sets forth how California residents can request Personally Identifiable Information. If you would like to submit a CA Consumer Request, you can contact us at privacy@citarella.com or at (203) 242-8287. If you choose to submit a CA Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested Personally Identifiable Information you want to know about. Citarella will only use the information it receives to respond to your request. Citarella will not be able to disclose information if it cannot verify that the person making the CA Consumer Request is the person about whom we collected Personally Identifiable Information, or someone authorized to act on such person’s behalf.
To submit a CA Consumer Request, please follow these steps:
- Request to Access. You may submit a CA Consumer Request to obtain a copy of or access to the Personally Identifiable Information that Citarella has collected on you.
- Request to Know. You may submit a CA Consumer Request to receive Personally Identifiable Information about Citarella’s collection practices. You may request information on the categories of Personally Identifiable Information (as defined by California law) Citarella has collected about you; the categories of data collection sources; Citarella’s business or commercial purpose for collecting or selling Personally Identifiable Information; the categories of third parties with whom Citarella shares Personally Identifiable Information, if any; and the specific pieces of Personally Identifiable Information we have collected about you. Please note that the categories of Personally Identifiable Information and sources will not exceed what is contained in this Privacy Policy. Additionally, Citarella is not required to retain any information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. Citarella is also not required to reidentify Personally Identifiable Information if it is not stored in that manner already, nor is it required to provide the Personally Identifiable Information to you more than twice in a twelve-month period.
- Request to Delete. You may request that we delete your Personally Identifiable Information. Subject to certain exceptions set out below we will, on receipt of a verifiable CA Consumer Request, delete your Personally Identifiable Information from our records and direct any service providers to do the same. Please note that we may not delete your Personally Identifiable Information if it is necessary to: (i) complete the transaction for which the Personally Identifiable Information was collected; (ii) provide a product or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; (iii) detect security incidents, protect against malicious, deceptive activity, and take all necessary and appropriate steps to mitigate current and future risk; (iv) debug and repair internal information technology as necessary; (v) undertake internal research for technological development and demonstration; (vi) exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (vii) comply with the California Electronic Communications Privacy Act; (viii) engage in public or peer- reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; (ix) enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; (x) comply with an existing legal obligation; or (xi) otherwise use your Personally Identifiable Information, internally, in a lawful manner that is compatible with the context in which you provided such information. Citarella may not, and will not, treat you differently because of your Consumer Request activity. As a result of your CA Consumer Request activity, we may not and will not deny products or services to you; charge different rates for products or services; provide a different level quality of products or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.
Separate from the CCPA, California’s Shine the Light law gives California residents the right to ask companies what Personally Identifiable Information they share with third-parties for those third-parties’ direct marketing purposes. We do not disclose your Personally Identifiable Information to third-parties for the purpose of directly marketing their goods or services to you unless you request such disclosure. If you have any questions regarding this policy, or would like to change your preferences, you may contact us at the address listed hereinbelow.
Special Privacy Notice for Nevada Residents
Nevada law (SB 220) requires website operators to provide a way for Nevada consumers to opt-out of the sale of certain information that the website operator may collect about them. Citarella does not sell your Personally Identifiable Information to third-parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. In compliance with Nevada law, we provide Nevada residents residing in Nevada with certain information upon request (“NV Consumer Request”). Citarella does not sell, rent, or lease your Personally Identifiable Information to third parties. You are permitted to opt out of future sales of certain covered information that we may have collected or will collect about you. However, if you are a resident of Nevada and would like to submit a request to opt-out and/or not to sell your Personally Identifiable Information, you may do so by emailing us at privacy@citarella.com or contacting us at (203) 242-8287. If you choose to submit a NV Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested Personally Identifiable Information. We will only use the information it receives to respond to your NV Consumer Request. We will not be able to disclose information if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We may not, and will not, treat you differently because of your NV Consumer Request activity. As a result of your NV Consumer Request activity, we may not and will not deny products or services to you; charge different rates for products or services; provide a different level quality of products or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.
Special Privacy Notice for Virginia Residents
Under Virginia’s Consumer Data Protection Act (“CDPA”), Virginia residents have certain rights around Citarella’s collection, use, and sharing of their Personally Identifiable Information. Citarella does not sell your Personally Identifiable Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Citarella does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Citarella may engage in “targeted advertising” as that term is defined in the CDPA. In compliance with Virginia law, we provide Virginia residents residing in Virginia with certain information upon request (“VA Consumer Request”). This Section of the Privacy Policy outlines how Virginia residents can request information, what you will receive and how to opt-out. If you would like to submit a VA Consumer Request, you can contact us at privacy@citarella.com or (203) 242-8287. If you choose to submit a VA Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. Citarella will only use the information it receives to respond to your request. We will not be able to disclose information if we cannot verify that the person making the VA Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. You have: (i) the right to know and confirm whether we are processing your Personally Identifiable Information, and to access the data; (ii) the right to correct inaccuracies in your Personally Identifiable Information; (iii) the right to delete your Personally Identifiable Information; (iv) subject to a number of exceptions in each case; (v) the right to obtain a copy of your Personally Identifiable Information, in a readily usable format; (vi) the right to opt-out of the processing of your Personally Identifiable Information for targeted advertising purposes; (vii) the right to opt-out of the sale of your Personally Identifiable Information; and (viii) the right to opt-out of profiling based upon your Personally Identifiable Information. Citarella may not, and will not, treat you differently because of your VA Consumer Request activity. As a result of your VA Consumer Request activity, we may not and will not deny products or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personal Information.
Special Privacy Notice for Colorado Residents
Under Colorado’s Consumer Privacy Act (“CPA”), Colorado residents have certain rights around Citarella’s collection, use, and sharing of their Personally Identifiable Information. Citarella does not sell your Personally Identifiable Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Citarella does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Citarella may engage in “targeted advertising” as that term is defined in the CPA. In compliance with Colorado law, we provide Colorado residents residing in Colorado with certain information upon request (“CO Consumer Request”). This Section of the Privacy Policy outlines how Colorado residents can request information and what you can receive. If you would like to submit a CO Consumer Request, you can contact us at privacy@citarella.com or (203) 242-8287. If you choose to submit a CO Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested Personally Identifiable Information. Citarella will only use the information it receives to respond to your request. Citarella will not be able to disclose information if it cannot verify that the person making the CO Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. Citarella does not sell, rent, or lease your Personally Identifiable Information to third parties.
- Request to Access. You may submit a CO Consumer Request to obtain a copy of or access to the Personally Identifiable Information that Citarella has collected on you.
- Request to Know. You may submit a CO Consumer Request to receive information about Citarella’s data collection practices. You may request information on the categories of Personally Identifiable Information (as defined by Colorado law) Citarella has collected about you; the categories of data collection sources; Citarella’s business or commercial purpose for collecting or selling Personally Identifiable Information; the categories of third parties with whom Citarella shares Personally Identifiable Information, if any; and the specific pieces of Personally Identifiable Information we have collected about you. Please note that the categories of Personally Identifiable Information and sources will not exceed what is contained in this Privacy Policy. Additionally, Citarella is not required to retain any information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. Citarella is also not required to reidentify Personally Identifiable Information if it is not stored in that manner already.
- Request to Delete. You may request that Citarella delete your Personally Identifiable Information. Subject to certain exceptions set out below we will, on receipt of a verifiable CO Consumer Request, delete your Personally Identifiable Information from our records and direct any service providers to do the same. Please note that we may not delete your Personally Identifiable Information if it is necessary to: (1) Complete the transaction for which the Personally Identifiable Information was collected; (2) Provide a product or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; (3) Detect security incidents, protect against malicious, deceptive activity, and take all necessary and appropriate steps to mitigate current and future risk; (4) Debug and repair internal information technology as necessary; undertake internal research for technological development and demonstration; (5) Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (6) Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; (7) Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; (8) comply with an existing legal obligation; or (9) Otherwise use your Personally Identifiable Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
- Request to Correct. You may request that Citarella correct inaccuracies in your Personally Identifiable Information.
- Request to Opt-Out. You may request to opt-out of the processing of your Personally Identifiable Information for purposes of targeted advertising or the sale of Personally Identifiable Information.
- Right to Data Portability. You have the right to obtain a copy of your Personally Identifiable Information, that you previously provided to Citarella, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another without impediment, where the processing is carried out by automated means. Citarella may not, and will not, treat you differently because of your CO Consumer Request activity. As a result of your CO Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.
Special Privacy Notice for Connecticut Residents
Under Connecticut’s Data Privacy Act (“CTDPA"), Connecticut residents have certain rights around Citarella’s collection, use, and sharing of their Personally Identifiable Information. Citarella does not sell your Personally Identifiable Information and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law. Similarly, Citarella does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects. Citarella may engage in “targeted advertising” as that term is defined in the CTDPA. Under Connecticut law, if you are a resident of Connecticut, you have the right to request access to or a copy of the Personally Identifiable Information we have about you. This Personally Identifiable Information may include information you have given us directly such as your name, address, phone number, and your marketing preferences. Personally Identifiable Information we have obtained through your interactions with us, such as your transaction history with Citarella, your actions on the Citarella website, and your Citarella account. Personally Identifiable Information that third parties have shared about you, such as your demographic data.
In compliance with Connecticut law, we provide Connecticut residents residing in Connecticut with certain information upon request (“CT Consumer Request”). This Section of the Privacy Policy outlines how Connecticut residents can request information and what you can receive. If you would like to submit a CT Consumer Request, you can contact us at privacy@citarella.com or (203) 242-8287. If you choose to submit a CT Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. Citarella will only use the Personally Identifiable Information it receives to respond to your request. Citarella will not be able to disclose Personally Identifiable Information if it cannot verify that the person making the CT Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. Citarella does not sell, rent, or lease your Personally Identifiable Information to third parties.
- Request to Access. You may submit a CT Consumer Request to obtain a copy of or access to the Personally Identifiable Information that Citarella has collected on you.
- Request to Know. You may submit a CT Consumer Request to receive information about Citarella’s data collection practices. You may request information on the categories of Personally Identifiable Information (as defined by Connecticut law) Citarella has collected about you; the categories of data collection sources; Citarella’s business or commercial purpose for collecting or selling Personally Identifiable Information; the categories of third parties with whom Citarella shares Personally Identifiable Information, if any; and the specific pieces of Personally Identifiable Information we have collected about you. Please note that the categories of Personally Identifiable Information and sources will not exceed what is contained in this Privacy Policy. Additionally, Citarella is not required to retain any Personally Identifiable Information about you if it is only used for a one-time transaction and would not be maintained in the ordinary course of business. Citarella is also not required to reidentify Personally Identifiable Information if it is not stored in that manner already.
- Request to Delete. You may request that Citarella deletes your Personally Identifiable Information. Subject to certain exceptions set out below we will, on receipt of a verifiable CT Consumer Request, delete your Personally Identifiable Information from our records and direct any service providers to do the same. Please note that we may not delete your Personally Identifiable Information if it is necessary to: (i) complete the transaction for which the Personally Identifiable Information was collected; (ii) provide a product or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; (iii) detect security incidents, protect against malicious, deceptive activity, and take all necessary and appropriate steps to mitigate current and future risk; (iv) debug and repair internal information technology as necessary; undertake internal research for technological development and demonstration; (v) exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; (vi) engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; (vii) enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; (viii) comply with an existing legal obligation; or (ix) otherwise use your Personally Identifiable Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
- Request to Correct. You may request that Citarella correct inaccuracies in your Personally Identifiable Information.
- Request to Opt-Out. You may request to opt-out of the processing of your Personally Identifiable Information for purposes of targeted advertising or the sale of Personally Identifiable Information.
- Right to Data Portability. You have the right to obtain a copy of your Personally Identifiable Information, that you previously provided to Citarella, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another without impediment, where the processing is carried out by automated means. Citarella may not, and will not, treat you differently because of your CT Consumer Request activity. As a result of your CT Consumer Request activity, we may not and will not deny products or services to you; charge different rates for goods or services; provide a different level quality of products or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information
Special Privacy Notice for Utah Residents
In compliance with Utah law, we provide Utah residents residing in Utah with certain information upon request (“UT Consumer Request”). This Section of the Privacy Policy outlines how Utah residents can request information and what you can receive. If you would like to submit a UT Consumer Request, you can contact us at privacy@citarella.com or (203) 242-8287. If you choose to submit a UT Consumer Request, you must provide us with enough information to identify you and enough specificity on the requested data. Citarella will only use the information it receives to respond to your request. Citarella will not be able to disclose information if it cannot verify that the person making the UT Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. Citarella does not sell, rent, or lease your Personally Identifiable Information to third parties.
- Right to access. You have the right to confirm if we are processing your Personally Identifiable Information and to access your Personally Identifiable Information.
- Right to delete. You have the right to delete the Personally Identifiable Information that you provided to Citarella.
- Right to data portability. You have the right to obtain a copy of your Personally Identifiable Information, that you previously provided to Citarella, in a format that: to the extent technically feasible, is portable; to the extent practicable, is readily usable; and allows you to transmit the data to another without impediment, where the processing is carried out by automated means.
- Right to opt out of certain processing. You have the right to opt out of the processing of your Personally Identifiable Information for the purposes of targeted advertising, or the sale of personal data.
Citarella may not, and will not, treat you differently because of your UT Consumer Request activity. As a result of your UT Consumer Request activity, we may not and will not deny products or services to you; charge different rates for products or services; provide a different level quality of products or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your Personally Identifiable Information.
Video Surveillance
Some of our stores utilize video surveillance to create a safer environment for our staff and customers, and to deter, prevent, investigate and/or prosecute any illegal activity that may occur at our stores. Our video systems record digital images. The video is accessible only to a limited number of Citarella employees, or to third party service providers engaged to assist with security-related tasks. These service providers may have access to video only where strictly required to perform their tasks and are not allowed to use the video for any other purposes.
House Account Credit Services
We may collect your Social Security Number and other financial information where required for certain transactions, such as when providing house account credit services. We strive to limit the amount of Personally Identifiable Information collected to support the intended purpose of the collection. However, if you provide us with your Social Security Number or other financial information, Citarella may use that information to determine your financial situation in connection with the extension of a house account and by sharing such information with consumer reporting agencies, consumer credit bureaus or for any other lawful purposes. We may receive Personally Identifiable Information about you from other sources as well.
Security of Your Information
Securing your Personally Identifiable Information is our priority. Whether you are shopping online or in our stores, we use reasonable security measures to protect the confidentiality of Personally Identifiable Information. When we do have to collect your most private personal information, such as Social Security Numbers, we protect such information confidentiality and strive to prohibit any unlawful disclosure. When our registration/application process asks users to enter sensitive information (such as your Social Security Number, etc.), and when we store and transmit such sensitive information, that information is encrypted and is protected with SSL encryption software. While we use SSL encryption to protect sensitive information online, we also do everything in our power to protect user information off-line. However, no method of security is 100% effective, and we cannot be responsible for the actions of those who may gain unauthorized access to your personal information. Citarella makes no warranties, express, implied or otherwise as to the ultimate effectiveness of these reasonable and appropriate safeguards. All collected information is stored in a technically and physically secure environment. When we ask users to enter sensitive information (such as credit card information, Social Security Numbers, etc.), and when we store and transmit such sensitive information, that information is encrypted and is protected with SSL encryption software. Once we receive your transmission, we make reasonable efforts to ensure its security on our systems. Access to this information is strictly limited, and not accessible to the public. Our users’ information, not just the sensitive information mentioned above, is restricted in our offices. Only employees who need the information to perform a specific job (for example a credit specialist or a customer service representative) are granted access to personal information. Our employees are dedicated to ensuring the security and privacy of all user information. Employees not adhering to our firm policies are subject to disciplinary action. In compliance with applicable federal and state laws, we shall notify you and any applicable regulatory agencies if we learn of an information security breach with respect to your personal information. You will be notified via e-mail in the event of such a breach. Please be advised that notice may be delayed to address the needs of law enforcement, determine the scope of network damage, and to engage in remedial measures. Your account information is protected by the password you use to access your online account. Please keep this password confidential. If your browser is capable of SSL (and most are), your account information will be protected during transport across the Internet. We also protect the credit or debit card information we collect during transactions. We comply with industry standard requirements. These standards require safeguards for handling and securing customer information. These include using secure networks; encryption or other protection of cardholder data; physical and technical access controls; monitors and tests of security systems; and information security policies.
Changes to Privacy Policy
Citarella reserves the right to modify or supplement this policy at any time. If a material change to the terms of this policy is made, Citarella will post a notice prior to the change becoming effective on its homepage and a link to the new policy.
Electronic Signatures and Electronic Records
By submitting your Personally Identifiable Information and agreeing to the terms of this Privacy Policy, you understand and affirm that you are agreeing to be bound by the Privacy Policy and all other agreements and terms and conditions found on the Website by using your electronic signature and that your electronic signature is as legally binding as a physical signature on paper. Furthermore, you are agreeing that you will use an electronic signature to accept electronic records regarding the products and services located at our stores and/or offered by our Website, including, but not limited to, this Privacy Policy. You further agree and consent: (1) To receive surveys, agreements, and other information that may be provided or otherwise available to you electronically. Included in those agreements, surveys and other information may be disclosures required by federal, state, and local laws and regulations, where allowed by such laws; (2) To be bound by the terms and conditions of the agreements, applications, and other information provided to you by us electronically; (3) To use and receive electronic records and electronic signatures in conducting business with us, including agreeing to the terms of the Privacy Policy; (4) That to electronically receive agreements, applications, and other information, you will need a compatible operating system, web browser, and e-mail application, and you will need access to a printer or the ability to download information to keep copies of such documents for my records. The operating systems, web browsers, and e-mail applications identified herein are compatible. You furthermore understand that you are indicating that you have the capability to access the agreements, surveys, and other information and download or prints copies for your records; (5) For customer service or technical assistance regarding electronic records or electronic signatures, you may contact us by e-mail at privacy@citarella.com; (6) You may obtain a paper copy of the agreements, applications, and other information at any time by contacting us by e-mail at privacy@citarella.com. We will not charge a fee for any paper copy
Contact Us
E-mail Customer Service at privacy@citarella.com for store experience, product questions and general feedback/questions. E-mail Customer Credit Service for all Citarella financed account credit questions or call 212-874-0383. You can also contact us via the address below:
Mail:
Citarella Operating, LLC
2135 Broadway
New York, NY 10023
Copyright © 2023, Citarella Operating, LLC. All Rights Reserved.


