California Resident Privacy Rights

This statement of California Privacy Rights supplements our Privacy Policy and applies solely to residents of the State of California.  As a California resident, you have additional privacy rights related to your personal information under California law, including the California Consumer Privacy Act (“CCPA”), as described below.  Personal information under the CCPA is any information that can identify you or your household, either directly or indirectly, such as your name, address, telephone number, and email address (“Personal Information”).  Any terms defined in the CCPA and not defined here have the same meaning when used here.

Shine the Light law

California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.  To make such a request, please contact us using the information in the “How to contact us” section below.

What Personal Information we collect

We have collected Personal Information in the following categories marked by an “X” in the last 12 months:

X Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers;

___ Financial or health information: (examples: physical characteristics or description, address, telephone number, bank account number, credit card number, debit card number, financial information, medical information, health insurance information);

___ Characteristics of protected classifications under California or federal law;

___ Commercial information, including records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies;

___ Biometric information;

___ Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement;

___ Geolocation data (information that can be used to track an electronic device’s location);

___ Audio, electronic, visual, thermal, olfactory, or similar information;

___ Professional or employment-related information;

___ Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99).

___ Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We collect your Personal Information from both you and through our partners and other publicly and commercially available sources as well as through the use of cookies.  You can read more about our use of cookies in our Privacy Policy and our Cookie Policy.  Our store is hosted on third-party e-commerce platform Shopify.    

How we use your Personal Information

We use your Personal Information for the following business purposes if marked by an “X”:

___ Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.

___ Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.

___ Debugging to identify and repair errors that impair existing intended functionality.

___ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.

X Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.

X Undertaking internal research for technological development and demonstration.

___ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

For all categories of Personal Information collected, we disclose such information to our service providers and other third parties to help us accomplish the business purposes described above and as further outlined in our Privacy Policy.

Personal Information Requests

As a California resident, you have the right to request certain information regarding our use of your Personal Information, including the following:

  • The different categories of Personal Information we have collected about you during the last 12 months and the categories of sources from which that information was collected;
  • The business or commercial purpose for collecting or selling your Personal Information;
  • The categories of third parties with whom we shared your Personal Information;
  • Whether we have disclosed or sold your Personal Information to a third party for a business or commercial purpose during the last 12 months and the categories of the Personal Information disclosed or sold; and
  • The specific pieces of Personal Information we have collected about you.

To submit a request for Personal Information, you must submit a Verifiable Consumer Request following the procedures described in the Verifiable Consumer Request Procedures section below. You may submit a Personal Information request up to twice during a 12-month period.

Selling or sharing of personal information

As a California resident, you have the right to request that we not sell your Personal Information.  Please note that we do not, and will not, sell your Personal Information to third parties. 

Right to request deletion of personal information

As a California resident, you have a limited right to request that we and all of our service providers delete your Personal Information.  You must do so by submitting a Verifiable Consumer Request to delete your Personal Information following the procedures described in the Verifiable Consumer Request Procedures section below.  Upon receipt and confirmation of the Verifiable Consumer Request, we will delete your Personal Information from our systems and direct our service providers to do the same at no cost to you.  There are exceptions to this right.  We may retain your Personal Information for any of the following reasons:

  • To provide goods or services to you as a consumer;
  • To detect and resolve issues related to security or functionality;
  • To comply with legal obligations;
  • To conduct public interest research;
  • In the exercise of free speech or the free speech of others; and
  • For use in internal work processes and purposes that you would reasonably expect based on your relationship with us.

If we determine that we will not delete your Personal Information when you request us to do so, we will inform you and tell you why we are not deleting it.

Non-discrimination

We will not discriminate against you for the exercise of your rights under the CCPA.  We will not deny you goods or services, charge a different rate or price to you, or supply a different level or quality of goods to you.  We may, however, offer different prices, levels of service or quality to those who share their Personal Information based on the value of the Personal Information provided as permitted by law.  To the extent certain of our services require your Personal Information and you choose not to provide the necessary Personal Information, you may not be able to use those services.

Personal information of minors

Minors may only use our site with the involvement of a parent or guardian.  Our site is not intended for or designed to attract children under the age of 13, and we will not knowingly solicit or collect Personal Information from children we actually know are under 13.  For children between the ages of 13 and 16, we may collect and maintain Personal Information in the same manner we do for adults.  Just as with other users of our site, we do not, and will not, sell Personal Information of children between the ages of 13 and 16.

Verifiable consumer request procedures

In order to submit a Verifiable Consumer Request, please submit your name, customer or account email address, and a description of your request with sufficient detail that allows us to properly understand, evaluate, and respond to it, via email at dataprotection@core10.io, via phone at 615-601-1655, or via mail at: 660 Bakers Bridge Ave #100, Franklin, TN 37067.

If you maintain an online account with us, we may verify your identity for a request through the normal account authentication process, meaning you will need to sign on with your username and password.

You may assign a designated agent to make a request on your behalf.  If you wish to do so, you will need to appoint the designated agent in writing and we may require a copy of that writing before allowing any request submitted by your designated agent.

If we are unable to confirm your identity or authority to make the request, we may contact you for additional information or deny your request.  We will inform you if we cannot verify your identity or authority.  We will only use Personal Information provided in a Verifiable Consumer Request to verify your identity or authority to make the request.

We will respond to the request within 45 days of its receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.  The information may be delivered through your account, or, if you do not maintain an account with us, by mail or electronically at your option, and if provided electronically, the information will be in a portable and, to the extent technically feasible, readily useable format that allows you to transmit the information to another entity without hindrance. 

We are not required to respond to requests to provide Personal Information to you more than twice in any 12-month period.  Any disclosures we provide will only cover the 12-month period preceding the receipt of the request.  The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

In responding to your request, we are not permitted to disclose or provide you with your Social Security Number, Driver’s License Number, or other government issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers.

Do not track

We currently do not respond to any Do Not Track signals or similar signals. 

Additional rights

The rights set forth here are in addition to the rights contained in our Privacy Policy.  In the event the rights here conflict with those contained in our Privacy Policy, the portion that provides you with the most protection with regard to your Personal Information will prevail.

How to contact us

If you have any questions or concerns, please contact us via email at dataprotection@core10.io, via phone at 615-601-1655, or via mail at: 660 Bakers Bridge Ave #100, Franklin, TN 37067.