CALIFORNIA CONSUMER PRIVACY ACT
If you are a California resident, you have certain rights with respect to your personal information. Those rights and how you may exercise them are described below. The fact that you have elected to exercise these rights will have no adverse effect on the price and quality of our products.
RIGHT TO REQUEST INFORMATION ABOUT DISCLOSURE TO THIRD PARTIES FOR THEIR DIRECT MARKETING PURPOSES.
You may request information about our disclosure of personal information to third parties or affiliated companies for their direct marketing purposes. To make requests, please email us at firstname.lastname@example.org. Please allow up to 30 days for us to process your request. You may submit such a request once per year.
RIGHT TO KNOW
You may request that we provide you for the last 12 months a list of the categories of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting or “selling” the information, and the categories of “third parties” to whom we disclosed or “sold” that information. You may also request that we provide you in machine readable format a copy of the specific pieces of personal information we have collected about you in the past 12 months. You may make a request to know up to two times in a 12-month period, subject to limitations described in the law.
RIGHT TO DELETE
You may request that we delete any personal information that we have collected from you. However, the law exempts certain information from deletion. For example, we may keep information necessary for security and fraud detection. We also may keep information needed to provide you goods or services. For example, if you ask us to delete your data but retain your loyalty account, we will keep the information we need to continue providing you loyalty benefits. When we respond to your request to delete, we will explain what (if any) information we have kept and why. Please note that the law does not consider anonymized or pseudonymized information to be “personal information,” and we may “delete” your information by anonymizing or pseudonymizing it.
You have the right to be free from discrimination for using these rights. We will not deny you goods or services, charge you different rates, or give you different discounts because you used one of these rights.
HOW TO MAKE A REQUEST
You may make a request to know or delete by emailing email@example.com. When you make a request, we will take steps to verify your identity before responding. This is to protect your information. We will ask you to provide us your email and physical address. If you maintain an account with us, these must match the addresses connected to your account. We will then send you a physical letter to this address with a one-time code. You must email us this code from the email address you provided. Once you do, we will respond to your request.
You may also designate an authorized representative to make data subject rights requests on your behalf. We will require verification that you did in fact authorize the representative. Unless the law requires otherwise, your authorized representative must provide contact details for you. We will contact you to confirm that you authorized the representative. Once you confirm, we will promptly respond to the rights request.
RIGHT TO OPT OUT OF “SALE” OF PERSONAL INFORMATION
If you are a California resident, you have the right to opt out of the “sale” of your personal information to “third parties.”
Sale is defined very broadly. The law defines “sale” more broadly than you might think. It doesn’t just include the exchange of data for money. Instead, it covers any transfer of personal information to a “third party” in exchange for “other valuable consideration.”
We do not transfer your information to third parties in exchange for money and we will not do so. However, we do transfer personal information to certain third parties in order to operate our business (for example, to market our products and services). It is possible that someone could claim that this transfer was in exchange for “other valuable consideration.” We want to be careful with and respectful of your information. Therefore, if you opt out, we will not transfer your information to any “third party” except as explained below (and allowed by law).
Opting out may have impacts you don’t expect. Any transfer of data to a “third party” may be considered a “sale” of data. The law considers any other business a “third party” unless that business agrees to specific contractual provisions. We try to get all of the businesses to whom we send information to add this special language to their contracts with us. But not everyone will or can agree to those terms.
As a result, if you opt out of the “sale” of data, we will not be able to send data to some of our business partners. That may mean that, after you opt out, you may not receive all of the marketing and other information you are accustomed to receiving from us. In the extreme, if one of our critical partners cannot agree to the special contract language, and is considered a “third party”, it is possible that some features of our web site or other services may not work for you after you opt out.
In addition, California law prevents us from asking you to “opt in” for a year after you “opt out.” We are allowed to tell you, however, if a specific transaction requires a transfer of data to a third party. We may alert you if a transaction requires a transfer to a third party so that you can opt in if you would like to continue with the transaction.