California Consumer Privacy Act (CCPA) Policy
California Consumer Privacy Act (hereafter, “CCPA”) is a California privacy law that is effective as of January 1, 2020.
Under CCPA, California consumers have several added rights and privileges that serve to protect their personal information being used in a way that the consumer does not agree with. This notice is in place to comply with the California Consumer Privacy Act (CCPA) of 2018) that goes into effect as of January 1, 2020.
Consumer has the right to request and know what categories of information, what personal information we collect, how we collect it, and for what purpose.
CONSUMER’S RIGHT TO DEMAND DISCLOSURE
You have the right to demand that we disclose what categories of information we have or are collecting on you, and what personal information we have collected or are collecting on you.
In an effort for full compliance, we are disclosing the categories of information we are generally collecting on and/or about consumers.
As a consumer, you are free to request disclosure of your information at no extra charge to you if you make such requests no more than twice (2) during a 12-month period.
General Information We Collect
We generally collect personal information, as listed under CCPA, in the form of
- First name
- Last name
- Email address
- IP address
- Products purchased
- Payment method (paid via PayPal) [note, I don’t retain actual credit card information-all of that is done via third-party providers like PayPal]
- IP Address through Google Analytics
- Referral sources
- Facebook Pixel also collects data on social profiles
We collect the information on consumer stated above through
- Opt-in forms by offering free resources
- Opt-in forms by asking people to join my email list
- Purchase/order forms when purchasing a product
- Google Analytics
- Facebook Pixel
You have the right to request disclosure of your collected personal information from us by contacting us at firstname.lastname@example.org
CONSUMER’S RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION
Under CCPA, a consumer has the right to contact the business that collected personal information on consumer and request deletion of that information.
There are certain limited circumstances when the business does not have to comply and delete the information.
- To provide and complete the transaction for which purpose the information was collected in the first place (example: selling and delivering goods and services);
- In compliance with a legal obligation;
- To carry out and be compliant with another legal requirement;
- To keep it for internal use that is reasonable to the consumer.
CONSUMER’S RIGHT TO DEMAND DISCLOSURE IN CASE OF SALE
As a consumer, you have the right to request full disclosure if the business sells or transfers your personal information for a business purpose. You have the right to know what information specifically has been sold or transferred, to whom, and for what business purpose.
We do not directly sell (for profit) personal information we collect from consumers. However, the collected data goes through Google Analytics, Facebook Pixel, and our Email Service Provider. These are entities that must have access to these data as they are the data processors.
However, in the event we do so within the next 12 months, you will be given the option to opt-out of that if you don’t wish for your personal information to be sold.
The consumer has the right to request that we disclose what category of information we sold, the specific pieces of information we sold, to whom we sold it, and for what business purpose. Consumer can make this request by contacting us at email@example.com.
CONSUMER’S RIGHT TO REQUEST BUSINESS NOT SELL INFORMATION
Under CCPA, consumer has the right to request that a business that collected personal information on consumer does not sell that information to anyone.
In our efforts to comply with the California Consumer Privacy Act, you can find a “Do Not Sell My Personal Information” link in the footer of our website. If there is a field asking for an email address, please be sure to include the same email you opted in with.
If and when you select “Do Not Sell My Personal Information” you will be marked as opt-out. Therefore, you can be sure that your personal information and in general data collected on you will never be sold.
BUSINESS WILL NOT DISCRIMINATE AGAINST CONSUMER
If you choose to exercise your right and request that we never sell your information, in accordance with CCPA, we will not and cannot discriminate against you for choosing to exercise your right.
You will have access to the same services, at the same prices as everyone else. The quality and conditions of products and services you receive will be the same as everyone else, regardless if exercised your CCPA right to forbid selling your information.
SECURING YOUR PERSONAL INFORMATION
Under CCPA, a business that collects or receives personal information about the consumer must implement and maintain reasonable security procedures and practices.
If a business experiences a data breach, then it will be held liable if it did not implement and maintain reasonable security procedures and practices.
We do our due diligence and maintain reasonable security procedures and practices to make sure that the consumer data and private information we collected is safe and secure.
Here are the security practices we have in place to protect consumer data:
- All the systems containing the consumer information (such as the email service provider) are password protected.
- The passwords are considered strong and are not easy to figure out.
- Only one person knows the password.
- Our computers are protected from third-party access by having an additional password layer before they can start working on the computer.
- Aside from what’s stated above, we take reasonable precautions on a daily basis to protect consumers and their information from unauthorized use, modification, destruction, and disclosure.
If you wish to exercise your rights under CCPA and make requests for disclosure, deletion or disclosure about sale of information, you can contact us directly and make such requests. You can also contact us at any time if you’re not happy about the way we’re handling your data.
We will respond as quickly as reasonably possible. Please have in mind that we don’t have to comply with requests if you make them more than twice during a 12-month period.
Make your requests by contacting us at firstname.lastname@example.org
EFFECTIVE AS OF JANUARY 1ST 2020