Your CCPA rights, spelled out.

This California Privacy Notice applies to residents of California and is provided in addition to our general Privacy Policy. Capitalized terms have the meanings given in the CCPA/CPRA.

In the last 12 months we have collected the following categories of personal information from customers and site visitors:

• —Identifiers: name, email address, postal address, IP address, and order or account identifiers.
• —Customer records: billing/shipping details and payment confirmation (we do not store full card numbers).
• —Commercial information: products reserved or purchased and subscription preferences.
• —Internet activity: pages viewed, referring pages, and interactions with the site.
• —Geolocation: approximate, city-level location derived from IP address.
• —Inferences & sensitive information: any health interests or goals you choose to share (treated as sensitive — see below).

We collect this information from you directly, automatically as you use the site, and from service providers (such as our payment and shipping partners).

We use these categories for the business purposes described in our Privacy Policy: fulfilling reservations and orders, managing subscriptions, providing support, securing and improving the site, measuring aggregate marketing, and meeting legal obligations. We disclose personal information to service providers only to perform these functions on our behalf.

Hericea does not sell your personal information, and does not “share” it for cross-context behavioral advertisingas those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding 12 months, including the personal information of anyone under 16. If this ever changes, we will update this notice and provide a “Do Not Sell or Share My Personal Information” mechanism. We honor Global Privacy Control (GPC) browser signals as a valid opt-out request.

If you volunteer health-related interests (for example, that you’re navigating perimenopause), we treat that as Sensitive Personal Information and use it only to respond to you and tailor what you asked for — never to infer characteristics about you for advertising. Under the CPRA you may direct us to limit the use of your sensitive information; because we already limit it to these permitted purposes, no further action is required, but you may contact us to confirm.

• —Right to know: the categories and specific pieces of personal information we collected about you, the sources, purposes, and any disclosures.
• —Right to delete: request deletion of personal information we collected, subject to legal exceptions.
• —Right to correct: request correction of inaccurate personal information.
• —Right to opt out of any sale or sharing (not currently applicable, as we do neither).
• —Right to limit use of sensitive personal information.
• —Right to non-discrimination for exercising any of these rights.

Submit a request by emailing privacy@hericea.com with “California Privacy Request” in the subject line. We will verify your identity (typically by confirming control of the email associated with your reservation or order) before acting, and we’ll respond within 45 days, extendable once when reasonably necessary. We do not charge a fee for a verifiable request.

You may use an authorized agent to submit a request; we may ask the agent for proof of your permission and may still verify your identity directly. We will never deny you goods or services, charge a different price, or provide a different quality of service because you exercised a privacy right. Questions about this notice? Email privacy@hericea.com.