Privacy Policy
Napkins.com Privacy Policy
Last Updated: July 8, 2025
This Privacy Policy (“Policy”) describes the information collected by or on behalf of Hoffmaster Group, Inc. d/b/a Napkins.com (“Napkins.com,” “we,” “us,” or “our”) through our website https://www.napkins.com/ (“Site”) and the services available through our Site and our interactions with you both online and offline (collectively, “Services”), as well as how that information is used and disclosed. If you have questions or concerns about this Policy, please contact us as set forth below.
If you are a California, Nebraska, or Texas resident, please see the applicable section of this Privacy Policy below for additional information that may apply to you.
We may modify or update this Policy from time to time. Changes that in our sole discretion are material will be posted on the Site or otherwise communicated to you. We do not ordinarily provide advance notice of a minor change. All changes will be effective immediately upon posting to the Site.
We may collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly with you or your household (“Personal Information”) when you use our Services. The Personal Information we collect falls into three categories: (a) information you provide to us; (b) information we collect through automated methods; and (c) information we collect from other sources, each further detailed below. We will collect, use, and disclose such Personal Information pursuant to this Policy and applicable law.
Information You Provide to Us
We collect Personal Information that you provide directly to us. This may occur in the following ways:
Accounts: You may choose to create an account on the Site. You will be required to submit certain Personal Information in order to create an account, such as your name and email address. You are not required to create an account in order to place an order.
Online Orders: If you place an order online, you will be required to submit your contact, shipping, and billing information. You may choose to complete your transaction via Shop Pay.
Order & Payment Data: When you make a purchase, we use a PCI-compliant payment processor, Shopify Payments, to help us facilitate payment. Napkins.com does not receive your full credit or debit card number or other financial information when you make a payment, and such information is provided directly to our payment processor. However, Napkins.com does receive information about your transaction, such as the products purchased, and your contact information (e.g., name, shipping address, and billing address). You can review Shopify’s privacy policy here.
Contact via Online Form and Newsletter: If you sign up for our newsletter or contact us via the online form on our Site, we will collect and use your name and contact information and any additional Personal Information you provide in your message, if applicable.
Feedback: When you provide comments or feedback about our Site, the content on the Site, or our products, including product reviews (“Feedback”), we will collect Personal Information that you submit along with your Feedback.
Data Automatically Collected
We may use automated technologies to collect Personal Information from your computer system or mobile device when you use our Services. This may include the following:
Cookies & Other Tracking Technologies. We may use cookies, web beacons, pixel tags and other tracking technologies (collectively “Tracking Technologies”) on our Site. Most browsers automatically accept Tracking Technologies. You may be able to disable Tracking Technologies by changing your browser settings, depending on your browser, but disabling Tracking Technologies may impact your use and enjoyment of the Site. Not all features or functions of the Site may work properly if you disable Tracking Technologies. You cannot disable all Tracking Technologies, such as those that are essential to the functioning of the Site.
The Tracking Technologies on our Site may collect information such as:
- IP addresses assigned to the computers and other devices you use;
- your internet service provider;
- device ID number;
- approximate geographic location;
- browser type;
- Site pages visited;
- websites you access before and after visiting the Site, and
- data related to how and when you use the Site.
Google Analytics. We use Google Analytics to collect and process information about your use of the Site. Google sets Tracking Technologies on your browser or device, and then your web browser will automatically send information to Google. Google uses this information to provide us with reports that we use to better understand and measure how users interact with our Site. To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google’s “Google Analytics Cookie Usage on Websites” page.
We currently do not honor “do not track” signals.
Data from Other Sources.
We obtain Personal Information about individuals from other sources, such as Shop Pay if you elect to pay via Shop Pay and Social Media (as defined below), and we may combine that Personal Information with other data we may already have. If you use Shop Pay, we receive from Shop Pay your name, billing address, shipping address, and the last four digits of your payment card.
We are active on social media, including Facebook, LinkedIn, Instagram, X, and Pinterest (“Social Media”). Anything you post on Social Media is public information and will not be treated confidentially. We may post (or re-post) on the Site and our Social Media pages any comments or content that you post on our Social Media pages. Your use of Social Media is governed by the privacy policies and terms of the providers that own and operate those websites and not by this Policy. We encourage you to review those policies and terms.
2. How We Use Your Information
We use Personal Information that we collect for the following purposes:
As Stated or Agreed to at the Point of Collection. We may use Personal Information for the purposes stated or agreed-to (or as is obvious) at the point of collection. For example, we may use your Personal Information to: (i) process your order, manage billing, arrange delivery and complete payments; and (ii) respond to your questions, comments, or complaints. We may also use as otherwise requested or consented to by you.
Administration. We use Personal Information for administrative purposes, such as managing accounts, manage accounting records, comply with internal audit requirements, manage risks, obtain professional advice, and to understand the Services’ demographics and user preferences.
Site Management. We use Personal Information for Site management, such as troubleshooting problems, improving the content and functionality of the Site, statistical and other analyses of the Site, and to customize the Site to you and our users.
Business Analytics. We use Personal Information for business analytics purposes, including consumer and operations research, to assess the effectiveness of our Site, online services, marketing, and advertising, and to analyze market trends and customer demand.
Advertising and Other Communications. We may use Personal Information to send you advertisements, promotions, to notify you of new products, to notify you of new features of our Site, to notify you of changes to our website terms or this Policy, and for other similar communications. We may use third parties or service providers to deliver communications to you. You may opt-out of marketing emails by using the unsubscribe link in the email. Opting out of marketing communications does not opt you out of non-marketing communications.
To Protect Our Rights. We may use Personal Information to protect our legal rights or interests, or those of other parties, including to bring a legal action against you or anyone who may be causing harm to us, our Site, or to other users of the Site. We may also use Personal Information to seek business, financial or legal advice, and to respond to other legal requests.
Create Aggregated and De-Identified Data. We may process Personal Information to create deidentified and aggregated data. Any such deidentified and aggregated data is no longer subject to this Privacy Policy. Napkins.com is the sole and exclusive owner of such de-identified and anonymized information.
How We Use Data Collected by Tracking Technologies.
We use Tracking Technologies to: (i) make our Site function properly; (ii) provide personalized experiences; (iii) tailor our interactions with you; (iv) help with our marketing efforts; (v) provide us with valuable data and statistics about the usage and effectiveness of our Site and to help us improve our Site; and (vi) help us improve our Services.
3. Retention of Personal Information
We will keep Personal Information for the period necessary to fulfill the purposes described in this Policy, unless a longer retention period is permitted or required by law. We take reasonable steps to delete the Personal Information we collect when: (1) we have a legal obligation to do so, (2) we no longer have a purpose for retaining the information, or (3) if you ask us to delete your Personal Information, unless we determine that doing so would violate our existing, legitimate legal, regulatory, dispute resolution, contractual, or similar obligations. We may also decide to delete your Personal Information if we believe it is incomplete, inaccurate, or that our continued storage of your Personal Information is contrary to our legal obligations or business objectives. When we delete your Personal Information, it will be removed from our active servers and databases; however, it may remain in our archives when it is not practical or possible to delete it.
4. Disclosure of Personal Information
We may disclose Personal Information to the following categories of third parties, in compliance with applicable laws:
Affiliates. We may disclose Personal Information to our corporate subsidiaries, affiliates and with their respective officers, directors, employees, accountants, attorneys and agents in order to provide and improve Services, and for approved marketing purposes.
Third Parties and/or Service Providers. We may disclose Personal Information to third parties and/or service providers that provide services for us. For example, we may disclose Personal Information to vendors, contractors and business partners to help us host and manage the Site, provide advertising and marketing, improve the content and functionality of the Site, perform data analysis and statistical analysis, troubleshoot problems with the Site, and support or provide the security of the Site. We take commercially reasonable steps to ensure our third-party vendors, contractors, or business partners provide at least the same level of protection for Personal Information as we do. In some cases, a third-party provider may interact with you directly in connection with our Services or our products and services. To the extent we do not receive, access, or store Personal Information that you provide to such third-party provider(s), such data collection is subject to that third-party provider’s privacy policies and/or applicable terms of use, which are made available to you to the extent required by appliable laws.
Government Officials / Law Enforcement. We will cooperate with law enforcement and other governmental agencies, and may disclose Personal Information: (i) if we believe in good faith we are legally required to disclose that Personal Information, (ii) if we are advised to disclose Personal Information by our legal counsel, (iii) when necessary to identify, contact or bring a legal action against someone who may cause or be causing harm to, or interfering with the legal rights of, Napkins.com or any other party, (iv) or as otherwise appropriate.
Professional Advisors. We may disclose Personal Information to our professional advisors, such as our attorneys, accountants, financial advisors and business advisors, in their capacity as advisors to Napkins.com.
Change in Ownership. In the event Napkins.com is the subject of a change of control or in the event the Site changes ownership, in whole or in part, or in the event of a bankruptcy, receivership or a similar transaction, we may disclose Personal Information to the subsequent owner(s).
Other. We may disclose Personal Information to third parties when explicitly requested by or consented to by you, or for the purposes for which you disclosed the Personal Information to us as indicated at the time and point of the disclosure (or as was obvious at the time and point of disclosure).
5. Children's Information
The Services is not directed at children under 18 years of age. We do not knowingly collect, sell, use, or share Personal Information from children under 18. If we obtain actual knowledge that any Personal Information has been provided by a child under the age of 18, we will promptly delete that information. If a parent or legal guardian learns that their child provided us with Personal Information without his or her consent, please contact us and we will make commercially reasonable attempts to delete such Personal Information.
6. Data Security
We use commercially reasonable technical and organizational measures to help secure Personal Information against loss, misuse, and alteration appropriate to the type of Personal Information processed. You understand that no data transmission over the internet can be guaranteed to be 100% secure. While we strive to protect Personal Information, we do not guarantee the security of Personal Information and you provide Personal Information at your own risk.
7. Access from Outside the United States
If you access the Site from outside the United States, please be aware that Personal Information may be transferred to, stored in, and processed in the United States, which may have different data protection laws than other countries.
8. Third-Party Websites
The Site may link to, or be linked from, websites not controlled by us. We are not responsible for third parties’ privacy policies or practices. This Policy does not apply to any third-party websites or to any data that you provide to third parties. You should read the privacy policy for each website that you visit.
9. Contact Us
If you have questions or concerns regarding this Policy, contact us at:
Address: 1151 E. Laraway Rd Suite 100 Joliet, IL 60433
Phone: 1.888.959.3789
Email: customer.service@napkins.com
NOTICE TO CALIFORNIA CONSUMERS
Last Updated Date: July 8, 2025
This Section provides additional terms that apply to California Consumers. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for California Consumers. In this Section only, any capitalized terms not defined in this Policy have the meanings set forth in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act, and including its implementing regulations (the “CCPA”).
The Collection, Source, Purpose and Sharing of Your Personal Information.
Categories of Personal Information. In the last twelve (12) months, we have collected the following categories of Personal Information:
- Identifiers consisting of: real name, postal address, internet protocol address (“IP Address”), email address, and other similar identifiers.
- Personal Information described in subdivision (e) of Section 1798.80 including: name, address, and phone number.
- Commercial information consisting of: products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Internet Activity consisting of: browsing history, search history, and information regarding a consumer’s interaction with an internet website, or advertisement.
- Sensitive Personal Information: consisting of your account log-in, financial account, debit/credit, card number in combination with security or access code, password, or credentials, allowing access to your account.
Categories of Sources from Which Personal Information is Collected. The categories of sources from which your Personal Information is collected are described in Section 1 (Information We Collect).
Purposes for Collecting Personal Information. We use the categories of Personal Information listed above for our business purposes set forth in Section 2, along with the following:
· Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
· Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes.
· Debugging to identify and repair errors that impair existing intended functionality.
· Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us.
· Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, or providing similar services on our behalf.
· Providing advertising and marketing services to you that do not constitute cross-context behavioral advertising.
· Undertaking internal research for technological development and demonstration.
· Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us.
· Other purposes as expressly authorized by the implementing regulations of the CCPA.
Categories of Service Providers or Contractors with Whom Personal Information is Disclosed for a Business Purpose. In the last 12 months we have disclosed all the categories of Personal Information listed above for our business purposes. The categories of Service Providers or Contractors with whom we disclose Personal Information in the last 12 months are described above in Section 4 (Disclosure of Personal Information).
Categories of Personal Information Sold or Shared.
In the last 12 months we have not Sold or Shared Personal Information.
We do not have any actual knowledge that we have Sold or Shared Personal Information of any individual under the age of 16 for monetary compensation or for cross-context behavioral advertising.
You have the right to make the following requests:
· Right to Know and Access. You have the right to request that we disclose the following information to you regarding our collection and use of your Personal Information over the past 12 months:
o The categories of Personal Information we have collected about you;
o The categories of sources from which we collect the Personal Information about you;
o The business or commercial purpose(s) for which the Personal Information was collected, sold, or shared;
o The categories of Service Providers or Contractors with whom we disclose that Personal Information for a business purpose;
o The specific pieces of Personal Information we collected about you in a format easily understandable to the average Consumer; and
o The categories of Personal Information that we sold or shared, and the categories of third-party recipients and to whom it was sold or shared.
· Right to Delete. You have the right to request that we delete any of your Personal Information that we collected from you and retained.
· Right to Opt-out of “Sale” and Certain “Sharing” Practices. You have the right to opt-out of the “sale” and “sharing” of your Personal Information with third parties, as those terms are defined under CCPA. We do not sell or share Personal Information.
· Right to Correct. You have the right to request that we correct inaccurate Personal Information that we maintain about you that you can prove is inaccurate.
· Right to Limit Use and Disclosure of Sensitive Personal Information. In certain circumstances, you have the right to limit the use and disclosure of Sensitive Personal Information.
· Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights under the CCPA.
How to Exercise Your California Privacy Rights. To exercise your California privacy rights, you may submit your request to us by contacting us at any of the following:
Via Toll-Free Phone: (888) 959-3789
Via Webform:
Verifiable Consumer Request. In order to verify your request, we may require additional information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request. This information may vary depending on the Personal Information we already have. If we are unable to verify your identity as required by applicable laws and regulations, we will decline to comply with your request, and let you know why. We may reject or deny your request as permitted or as required by law. We may charge a fee as permitted by the CCPA, such as to process or respond to your request if it is excessive, repetitive, manifestly unfounded, or if we believe the request is fraudulent or submitted for purposes other than exercising applicable privacy rights.
Authorized Agents. You may only make a request to exercise your rights on behalf of yourself, or a parent or legal guardian may make a request on behalf of their minor child. You also have a right to submit requests to exercise your rights under the CCPA through an authorized agent. If an authorized agent contacts us to exercise the above rights, we will need to verify their identity as well as your identity. We will also require proof of your written authorization to the agent to be your agent and to make the specific request submitted, unless the agent is subject to a Power of Attorney under California probate laws. If the agent is a Power of Attorney under California probate laws, we may require evidence of that status.
NOTICE TO NEBRASKA AND TEXAS CONSUMERS
This Section provides additional terms that apply to Consumers of Nebraska and Texas. In the event of a conflict between this Section and the remainder of this Policy, this Section shall take precedence for Nebraska and Texas Consumers. In this Section only, any capitalized terms not defined in this Policy have the meanings set forth in the Nebraska Data Privacy Act (the “NDPA”) or the Texas Data Privacy and Security Act (the “TDPSA”).
Nebraska Data Rights.
You have the right to make the following requests:
- Right to Request Access. You have the right to request confirmation whether or not we are processing your Personal Data and to access such Personal Data.
- Right to Data Portability. You have the right to request a copy of Personal Data that you have provided that is available in a digital format where processing is completed by automated means in a portable and, to the extent technically feasible, readily useable format.
- Request to Delete. The right to request deletion of certain of your Personal Data that we have collected.
- Right to Correction. The right to request that we correct inaccuracies in your Personal Data.
- Right to Opt Out. You have the right to opt out of the processing of Personal Data for purposes of: (a) targeted advertising, (b) the sale of Personal Data, or (c) profiling in furtherance of a decision that produces a legal or similarly significant effect.
- Right to Appeal. You have the right to appeal our decision to act on your request to exercise your rights under the NDPA.
- Right to Non-Discrimination. You have the right not to be discriminated against for exercising your Nebraska privacy rights outlined above.
Texas Data Rights.
You have the right to make the following requests with regard to their Personal Data:
- Right to Request Access. You have the right to request confirmation whether or not we are processing your Personal Data and to access such Personal Data.
- Right to Data Portability. You have the right to request a copy of the specific pieces of Personal Data that we have collected about you and to have this delivered, free of charge, once per year either (a) by mail, or (b) electronically in a portable and, to the extent technically feasible, readily useable format.
- Request to Delete. The right to request deletion of certain of your Personal Data that we have collected.
- Right to Correction. The right to request that we correct inaccuracies in your Personal Data.
- Right to Opt Out. You have the right to opt out of the processing of Personal Data for purposes of: (a) targeted advertising, (b) the sale of Personal Data, or (c) profiling in furtherance of a decision that produces a legal or similarly significant effect.
- Right to Appeal. You have the right to appeal our decision to act on your request to exercise your rights under the TDPSA.
- Right to Non-Discrimination. You have the right not to be discriminated against for exercising your Texas privacy rights outlined above.
How to Exercise Your Rights. To exercise your Nebraska or Texas privacy rights described in this Section, you may submit your request to us by contacting us at any of the following:
Via Toll-Free Phone: (888) 959-3789
Via Webform:
Authentication of Your Request. Once we receive your request, we will contact you to confirm receipt of your request. We will require sufficient information to verify your identity and the authenticity of your request. If you do not provide us with sufficient information, we may request additional information to verify your request. Certain types of requests may require additional verification, as we may be subject to higher standards of authentication for such requests. We may reject or deny your request as permitted or as required by law.
Appeal. If we reject or deny your request, you may appeal our decision within a reasonable amount of time after receiving our denial by contacting us at the following:
Via Toll-Free Phone: (888) 959-3789
Via Webform:
