California Consumer Privacy Act
“Shine the Light” Law
California Consumer Privacy Act
Consumer Rights under CCPA
Right to Request Disclosure of Personal Information Collected. A consumer shall have the right to request that a business that collects a consumer’s personal information disclose to that consumer the categories and specific pieces of personal information the business has collected.
(CCPA 1798.100(a), 1798.110(c)(5) and 1798.130(a)(5)(A))
Right to Request Deletion. A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer.
(CCPA 1798.105(a))
Right to Request Disclosure of Personal Information Collected, Sources, Purposes for Collection or Sale and Third Parties with whom Shared. A consumer shall have the right to request that a business that collects personal information about the consumer disclose to the consumer the following:
- The categories of personal information it has collected about that consumer in the preceding 12 months.
- The categories of sources from which the personal information is collected.
- The business or commercial purpose for collecting or selling personal information.
- The categories of third parties with whom the business shares personal information.
-
The specific pieces of personal information it has collected about that consumer.
(CCPA 1798.110(a)-(b) and 1798.130(a)(3))
Right of Non-Discrimination. A business shall not discriminate against a consumer because the consumer exercised any of the consumer’s rights under this title, including, but not limited to, by:
- Denying goods or services to the consumer.
- Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
- Providing a different level or quality of goods or services to the consumer.
-
Suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.
(CCPA 1798.125(a))
Focus Pocus Coworking Club’s Disclosures under CCPA
The categories of personal information Focus Pocus Coworking Club has collected about consumers in the preceding 12 months are as follows:
- Identifiers such as name, address, date of birth, telephone number and email address
- Categories of personal information described in subdivision (e) of Section 1798.80
- Commercial information, including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies
- Internet and other electronic network activity information such as your interaction with our website and applications
- Geolocation data
-
Inferences drawn from the information identified above reflecting the consumer’s preferences
(CCPA 1798.110(c) and 1798.130(a)(5)(B))
- Consumers themselves
- For gift recipients, from gift senders
- Third party platforms through which consumers choose to login
- Public records
- Fraud detection service providers
-
Information vendors
(CCPA 1798.110(c) and 1798.130(a)(5)(B))
- Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance applicable legal standards.
- Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity. Debugging to identify and repair errors that impair existing intended functionality.
- Performing services, including maintaining or servicing accounts, providing customer service, facilitating orders and transactions, verifying customer information, Advertising and marketing and analytics.
- Undertaking internal research for technological development and demonstration.
- Undertaking activities to verify or maintain the quality and safety of the service, and to improve, upgrade, or enhance the service.
Focus Pocus Coworking Club has not sold consumers’ personal information in the preceding 12 months. (CCPA 1798.110(c) and 1798.130(a)(5)(B))
Focus Pocus Coworking Club has not shared personal information with third parties in the preceding 12 months. (CCPA 1798.110(c) and 1798.130(a)(5)(B))
Focus Pocus Coworking Club has not sold consumers’ personal information in the preceding 12 months. (CCPA 1798.115(c)(1) and 1798.130(a)(5)(C)(i))
The category or categories of consumers’ personal information Focus Pocus Coworking Club has disclosed for a business purpose in the preceding 12 months are as follows:
- Identifiers such as name, address, telephone number and email address.
- Categories of personal information described in subdivision (e) of Section 1798.80.
- Commercial information, including records of products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies.
- Internet and other electronic network activity information such as your interaction with our website and applications.
- Geolocation data.
-
Inferences drawn from the information identified above reflecting the consumer’s preferences.
(CCPA 1798.115(c)(2) and 1798.130(a)(5)(C)(ii))