article background
article truck

California Privacy Notice

Last Updated: May, 10 2023

This California Privacy Notice describes how Vistar (“we” or “us”) uses, discloses, and processes California residents’ (“you” and “your”) personal information within the scope of the California Privacy Rights Act of 2020 (CPRA). This California Privacy Notice supplements the information contained in our Privacy Policy and applies only to residents of California. This California Privacy Notice should be read in conjunction with our Privacy Policy, which is incorporated by reference into this California Privacy Notice.

Your continued use of our website and/or apps means that you accept the terms of this Privacy Policy. To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the "Last Updated" date shown above

Personal Information We Collect About You and How We Use It

The term “personal information” as used in this California Privacy Notice means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include any publicly available, deidentified, aggregated or anonymized information. We also collect certain “sensitive personal information” as that term is defined by the CPRA. Your continued use of our website means that you accept the foregoing terms. To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the "Last Updated" date shown above.

Category of Personal
Information
Examples Categories of Sources from which Personal
Information Collected
Purposes for Collection / Use 
 Identifiers  Your name, alias, title, user ID, email
 address, email communication
 preferences, postal address, phone
 number, signature, driver's license or
 state ID card number, IP address
 Directly from you

 Cookies, beacons, pixels and related
 technology

 From third-party brokers
 Fulfill orders and deliver your
 purchases

 Send you information and updates

 Send you marketing communications

 Contact you to obtain information about
 your product preferences and how we can
 improve our products, services, business,
 website, and apps 

 Detect and prevent fraud against you
 and / or us

 To respond to your requests for
information, products, services,
including managing your online accounts
with us

 To identify and contact potential job
candidates for recruitment purposes
 Protected characteristics



 Date of birth



 Directly from you



 Fulfill orders and provide refunds

 Detect and prevent fraud against you
and / or us
 Payment Information



 Including credit and debit card
information 


 Directly from you



 Fulfill orders and provide refunds

 Detect and prevent fraud against you
and / or us
 Commercial Information  Purchase history, products or
 services purchased, obtained or
 considered, and other purchasing or
 consuming histories or tendencies
 Directly from you

 Cookies, beacons, pixels, and
 related technology

 Our Service Providers
 Provide you with appropriate products,
 recommendations, and updates

 Fulfill orders and deliver your purchases

 Send you information and updates

 Send you marketing communications

 To improve our website and apps, set
 defaul options, and provide you with a
 better shopping and website experience
 Employment information  Job title, employment history,
 professional credentials, etc.
 From third-party brokers   To identify and contact potential job
 candidates for recruitment purposes 
 Education information  Degrees and certification information   From third-party brokers  To identify and contact potential job
 candidates for recruitment purposes 
 Internet or other
 electronic network activity
 information
 Browsing history, search history, and
 information regarding your interactions
 with our website, apps, and advertisement,
 geolocation data inferred from your IP
 address
 Directly from you

 Cookies, beacons, pixels and related
 technology
 For website administration and analytics

 Improve our website and apps, set default
 options, and provide you with a better
 shopping and website experience

 To make it easier for you to log into our
 website and apps

 Protect the security of our website and apps

 Detect and prevent fraud against you
 and / or us 
 Geolocation data  Your IP address  Directly from you

 Cookes, beacons, pixels and related
technology
 Make it easier for you to log into our
 website and apps

 Improve our website and apps, set default
 options, and provide you with a better
 shopping and website experience

 Protect the security of our website and apps

 Detect and prevent fraud against you
 and / or us
                                                                                                            SENSITIVE PERSONAL INFORMATION
 Sensitive Personal Identifiers


 Your driver's license or state ID card
 number

 Directly from you


 Fulfill orders and deliver your purchases

 Detect and prevent fraud against you
and / or us

How Long We Keep Your Personal Information

Vistar will only retain your personal information for as long as is needed for the purpose(s) for which it was collected and other permitted purposes, including retention of personal information pursuant to any applicable contract, law or regulation. Our retention periods vary based on business, legal and regulatory needs.

How We Share and Sell Personal Information

We do not “sell” your data as that term is commonly understood. However, we may disclose Personal Information to our third-party analytics partners, like Google Analytics, which may be considered a sale of Personal Information or sharing for cross-context behavioral advertising of Personal Information under California law. In the past 12 months, we have disclosed Identifiers, Commercial Information, and Internet or other electronic network activity information to our third-party analytics providers for the purpose of optimizing our website, services, and advertising.

How We Disclose Personal Information to Our Service Providers and Contractors

We may also disclose Personal Information to our service providers or contractors pursuant to a written contract. The information we have disclosed to our service providers or contractors in the past 12 months and the applicable business purpose is set forth in the chart below.


 Applicable Business Purposes
 Category of Personal
Information or Sensitive Personal
Information
 Auditing & Ad
Impressions
 Security
&
Integrity
 Functionality
& Debugging
Short-Term / 
Transient Use,
Including Non-
Personalized
Advertising 
 Services
Performed
on Our
Behalf
 Marketing
Services
Research &
Development 
 Quality Control &
Improvement of
Our Products and
Services
 Identifiers  ✔
 ✔  ✔  ✔
 ✔  ✔  ✔  ✔
 Payment Information




 ✔



 Commercial information        ✔  ✔  ✔  ✔
 ✔
 Internet or other electronic network
 activity information
 ✔  ✔  ✔  ✔  ✔  ✔  ✔  ✔
 Geolocation data    ✔  ✔  ✔  ✔      ✔

Submitting Requests Relating to Your Personal Information

California residents may submit requests relating to your personal information as described below by submitting a request through by email to privacyrequests@pfgc.com or by phone at 1-800-473-4434. To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with any of the requests described below. To verify your identity, we may require you to provide certain information we are likely to already have on-file about you based on the type of relationship you have with us. If you exercise your right to request specific pieces of your personal information, we will require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Right to Opt-Out of the Sale and Sharing of Your Personal Information. California residents may opt-out of the sale of their personal information or the sharing of their personal information for cross-context behavioral advertising. To opt-out, click here, or download and use a browser supporting the Global Privacy Control (GPC) browser signal. If you choose to use the GPC signal, you will need to turn it on for each browser you use.

Right to Limit the Use of Your Sensitive Personal Information. Under the CPRA California residents may have the right to limit the use of their Sensitive Personal Information. Given how we use your Sensitive Personal Information, as described above, this right does not apply to you.

Right to Request More Information. This California Privacy Policy discloses our practices with respect to the collection of your personal information. In addition to these disclosures, you may also submit a request to know: (1) the specific pieces of personal information we have collected about you; (2) the categories of personal information we collected about you; (3) the categories of personal information we sold or shared about you and the categories of third parties to whom each category of personal information was sold or shared; (4) the categories of personal information we disclosed about you for a business purpose and the categories of persons to whom it was disclosed; and (5) a list of all third parties to whom we have disclosed personal information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third-party direct marketing purposes.

Please note that due to the different requirements of the applicable laws, our response times may vary depending on the specific type(s) of information sought. We respond to all verifiable requests for information as soon as we reasonably can and no later than legally required.

Right to Correct Inaccurate Information. If you believe that any of the personal information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Request Deletion of Your Personal Information. You have the right to request that we delete your personal information. Following receipt of a verifiable request, we will let you know what, if any, personal information we can delete from our records. If we cannot delete all of your personal information, we will let you know why.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of your rights you have the right to not receive discriminatory treatment by us.