The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and its implementing regulations (“CCPA”) provides California residents with specific rights regarding their personal information. The below describes such rights and how you may exercise such rights, and our information practices, including the categories of personal information we collect, use, retain, disclose, sell or share, and how and why we collect, disclose, sell or share such information.
CCPA Rights
Right to Know
You have the right to request that the Company disclose what personal information we collect, use, disclose, sell or share. Specifically, you may request that we disclose to you the following: (1) the categories of your personal information we have collected about you; (2) the categories of sources from which your personal information was collected; (3) the business or commercial purpose for collecting, selling, or sharing your personal information; and (4) the categories of third parties with whom we disclose your personal information. You may also request that we disclose to you: (1) the categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each third party to whom the personal information was sold or shared; and (2) the categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
You further have the right to request access to the specific pieces of personal information we have collected about you.
Right to Delete
You have the right to request that we delete personal information that we collected from you and retained, subject to certain exceptions. If we determine that we will not delete your personal information when you request us to do so, we will inform you and tell you why we are not deleting it.
Right to Opt-Out of Sale or Sharing of Personal Information
You have the right to direct a business that sells or shares personal information about you to third parties not to sell or share your personal information. We do not sell your personal information for monetary consideration. However, we do use tracking technologies like cookies and web beacons/pixels for analytics purposes. The collection of data through certain tracking technologies may be considered a “sale” under the CCPA. To opt-out of having your information sold and shared with third-party website analytics service providers for this purpose, visit our “
Do Not Sell or Share My Personal Information” web page.
We do not have actual knowledge that we sell or share personal information about minors under the age of 16.
Right to Correct Inaccurate Personal Information
You have the right to request a business that maintains inaccurate personal information about you to correct that inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
Right to Limit Use and Disclosure of Sensitive Personal Information
You have the right to direct a business that collects sensitive personal information about you to limit its use of your sensitive personal information (1) to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services; (2) for certain business purposes; and (3) as authorized by the implementing regulations of the CCPA. We do not use or disclose your sensitive personal information for purposes other than as permitted under the CCPA, and we will not sell or share such information.
No Discrimination
You have the right not to be discriminated against because you exercised any of your aforementioned rights.
How to Submit a Request
In order to process your request to know, delete or correct, you must first verify you are the person about whom we collected personal information. If your request relates to non-sensitive information, we can verify your identity by matching at least two data points provided by you with two data points already maintained by us or the third-party retailer with whom we contract with to provide services to you.
However, if your request involves sensitive personal information, we must first verify your identity by matching at least three pieces of personal information provided by you with personal information maintained by us that we have determined to be reliable.
You may designate an authorized agent to make a request on your behalf by providing the agent with signed written permission to do so.
If we cannot verify your identity or authority to make the request, we will not be able to comply with your request. We will inform you if we cannot verify your identity or authority. We will only use personal information provided in a verifiable request to verify the requestor’s identity or authority to make the request.
Request Processing, Timing, and Appeals
We endeavor to respond to a verifiable consumer request within forty-five (45) days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response will also explain the reasons we cannot comply with a request, if applicable, such as if an exception to the CCPA applies.
Any disclosures provided in response to data access or portability requests will provide the information in a readily usable format that allows you to transmit it to another entity. We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
If we deny your request in whole or in part, you have the right to appeal our decision. Instructions for submitting an appeal will be provided in our response. If your appeal is denied, you may contact the California Privacy Protection Agency to submit a complaint.
How We Collect, Use, Disclose, Sell and Share Personal Information
We have collected the following categories of personal information and used, disclosed, sold or shared such information in the twelve (12) months prior to the effective date of this Privacy Policy:
-
Identifiers, such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
-
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, address, telephone number, bank account number, credit card number, debit card number, or any other financial information.
-
Characteristics of protected classifications, such as gender and age.
-
Commercial information, such as records of products purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
-
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with the Site, email or advertisement.
- Geolocation data.
-
Sensitive personal information, such as personal information collected and analyzed concerning your health.
Each of the above categories are disclosed for a business or commercial purpose as described above in the section entitled “what do we use your information for?” to the third parties listed in the section entitled “do we disclose any information to outside parties?”.
The following categories of personal information were sold or shared in the twelve (12) months prior to the effective date of this Privacy Policy:
-
Identifiers, such as unique personal identifier, online identifier, Internet Protocol address, or other similar identifiers.
-
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with the Site, email or advertisement.
- Geolocation data.
Such information is sold to or shared with our third-party website analytics and digital advertising service providers.
We share or sell such information:
- To provide the Site to you
- To personalize your experience (your information helps us to better respond to your individual needs)
- To personalize our advertising, marketing communications, shopping experiences and promotional offers and to deliver promotions and offers to you that we think may be of interest to you
- To improve the Site
- If you sign up for our email list or to receive promotional text messages, to send you emails or text messages about products or offers that we think might be of interest to you
- For security, to detect fraud or illegal activities, and for archival and backup purposes in connection with the provision of the Site
- To improve and market our products or services
- For our other business purposes, such as data analytics, audits, developing new products and services, identifying Site usage trends, and determining the effectiveness of our promotional campaigns
- As we believe to be necessary or appropriate: (i) under applicable law; (ii) to comply with legal process; (iii) to respond to requests from public and government authorities; (iv) to enforce this Privacy Policy and our Terms and Conditions; (v) to protect our operations; (vi) to protect our rights, privacy, safety or property, and/or that of you or others; and (vii) to allow us to pursue available remedies or limit the damages that we may sustain.
We collect the personal information described above from or through the following categories of sources set forth in the sections above entitled “data collection disclosure” and “what types of information do we collect?”.
The Company will retain the personal information described above for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable laws or regulation.
Financial Incentive
We may offer various financial incentives, such as discounts and other benefits for customers who sign up to receive our marketing emails (“Financial Incentives”). When you participate in a Financial Incentive, we collect personal information from you, such as identifiers (like your name and email address) and commercial information (like your purchase history). You may opt-in to the Financial Incentive at any time and the terms and conditions of the Financial Incentive will be provided to you when you sign up. You may revoke your decision to opt-in to the Financial Incentive at any time by contacting us at info@boppy.com.
We value your personal information as the value of the offer or discount provided to you, and the value of your personal information is reasonably related to the value of the offer or discount presented to you.