California Consumer Privacy Act (hereafter, “CCPA”) is a California privacy law that will be effective as of January 1, 2020.
Under CCPA, California consumers have several added rights and privileges that serves to protect their personal information being used in a way that the consumer does not agree with. This notice is in place to comply with the California Consumer Privacy Act (CCPA) of 2018) that goes into effect as of January 1, 2020.
The consumer has the right to request and know what categories of information, what personal information we collect, how we collect it, and for what purpose.
CONSUMER’S RIGHT TO DEMAND DISCLOSURE
You have the right to demand that we disclose what categories of information we have or are collecting on you, and what personal information we have collected or are collecting on you.
In an effort for full compliance, we are disclosing the categories of information we are generally collecting on and/or about consumers.
As a consumer, you are free to request disclosure of your information at no extra charge to you if you make such requests no more than twice (2) during a 12-month period.
GENERAL INFORMATION WE COLLECT
We generally collect personal information, as listed under CCPA, in the form of:
- first name
- last name
- email address
- IP address
- products purchased
- address (for charging the credit card or bank account)
- payment method (whether paid via PayPal or Stripe) [note, I don’t retain actual credit card information-all of that is done via third-party providers like PayPal or Stripe]
- IP Address through Google Analytics
- Referral sources
- Facebook Pixel also collects data on social profiles
We collect the information on consumer stated above through
- Opt-in forms by offering free resources
- Opt-in forms by asking people to join my email list
- purchase/order forms when purchasing a product
- Google Analytics
- Facebook Pixel
You have the right to request disclosure of your collected personal information from us by contacting me at email@example.com
CONSUMER’S RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION
Under CCPA, a consumer has the right to contact the business that collected personal information on consumer and request deletion of that information.
There are certain limited circumstances when the business does not have comply and delete the information.
- To provide and complete the transaction for which purpose the information was collected in the first place (example: selling and delivering goods and services);
- In compliance with a legal obligation;
- To carry out and be compliant with another legal requirement;
- To keep it for internal use that is reasonable to the consumer.
CONSUMER’S RIGHT TO DEMAND DISCLOSURE IN CASE OF SALE
As a consumer, you have the right to request full disclosure if the business sells or transfers your personal information for a business purpose. You have the right to know what information specifically has been sold or transferred, to whom, and for what business purpose.
We do not directly sell (for profit) personal information we collect from consumers. However, the collected data goes through Google Analytics, Facebook Pixel, and our Email Service Provider. These are entities that must have access to these data as they are the data processors.
However, in the event we do so within the next 12 months, you will be given the option to opt-out of that if you don’t wish for your personal information to be sold.
The consumer has the right to request that we disclose what category of information we sold, the specific pieces of information we sold, to whom we sold it, and for what business purpose.
Consumer can make this request by contacting me at firstname.lastname@example.org
CONSUMER’S RIGHT TO REQUEST BUSINESS NOT SELL INFORMATION
Under CCPA, consumer has the right to request that a business that collected personal information on consumer does not sell that information to anyone.
In our efforts to comply with the California Consumer Privacy Act, you can find a “Do Not Sell My Personal Information” link of our website.
If there is a field asking for email address, please be sure to include the same email you opted in with.
If and when you select “Do Not Sell My Personal Information” you will be marked as opt-out. Therefore, you can be sure that your personal information and in general data collected on you will never be sold.
BUSINESS WILL NOT DISCRIMINATE AGAINST CONSUMER
If you choose to exercise your right and request that we never sell your information, in accordance to CCPA, we will not and cannot discriminate against you for choosing to exercise your right.
You will have access to the same services, at the same prices as everyone else. The quality and conditions of products and services you receive will be the same as everyone else, regardless if exercised your CCPA right to forbid selling your information.
SECURING YOUR PERSONAL INFORMATION
Under CCPA, a business that collects or receives personal information about the consumer must implement and maintain reasonable security procedures and practices.
If a business experiences a data breach, then it will be held liable if it did not implement and maintain reasonable security procedures and practices.
We do our due diligence and maintain reasonable security procedures and practices to make sure that the consumer data and private information we collected is safe and secure.
Here are the security practices we have in place to protect consumer data:
- All the systems containing the consumer information (such as the email service provider) are password protected.
- The passwords are considered strong and are not easy to figure out.
- Only I know the passwords.
- Our computers are protected from third-party access by having an additional password layer before they can start working on the computer.
- Aside from what’s stated above, we take reasonable precautions on a daily basis to protect consumers and their information from unauthorized use, modification, destruction, and disclosure.
If you wish to exercise your rights under CCPA and make requests for disclosure, deletion or disclosure about sale of information, you can contact me directly and make such requests. You can also contact me at anytime if you’re not happy about the way I am handling your data.
I will respond as quickly as reasonably possible. Please have in mind that I don’t have to comply with requests if you make them more than twice during a 12-month period.
Make your requests by contacting me at email@example.com
EFFECTIVE AS OF JANUARY 1, 2020