Skip to main content

California Data Privacy Rights

V1 – Last edited September 11th, 2020

Introduction

The California Consumer Privacy Act of 2018 (CCPA), grants California residents new rights with respect to the collection and sale of their personal information. The CCPA went into effect on January 1, 2020. The CCPA offers the following rights to California residents:

  1. The right to receive notice of data practices;
  2. The right to request that a business disclose the categories of personal information collected;
  3. The right to opt-out from the sale of personal information about the consumer from the business to third parties;
  4. The right to request deletion of collected personal information; and
  5. The right to equal services and prices should any other CCPA rights be exercised.

Do Not Sell My Personal Information

Under Sections 1798.120 and 1798.135 of the CCPA, California residents have the right to direct a business not to sell the consumer’s personal information, referred to as the right to opt-out. The business is permitted to verify the identity of the requestor before responding to the request. If directed, this opt-out decision will remain in place for 12 months. After this 12-month period, a request will be made to the consumer to authorize the sale of their personal information. Verified requests will be fulfilled by the business within 45 days of receiving the request; a one-time extension of an additional 45 days may be utilized when reasonably necessary, in which instance the consumer will be provided notice of the extension during the initial 45-day period.

*Gearfire LLC does not sell personal information. This language is specifically required by statute.

Right of Disclosure

Under Sections 1798.100 and 1798.110 of the CCPA, California residents have the right to request that a business disclose: the categories and the specific pieces of personal information that the business has collected on them, the business purpose for collecting or selling personal information, the categories of sources from which personal information is collected, and the categories of third parties with whom the business shares information. The business is permitted to verify the identity of the requestor before responding to the request. This request must be only accommodated up to two times in a 12-month period, though additional requests may be fulfilled at the discretion of the business. This information will be delivered by mail or electronically. If delivered electronically it will be portable, technically feasible, and readily usable format. Verified requests will be fulfilled by the business within 45 days of receiving the request; a one-time extension of an additional 45 days may be utilized when reasonably necessary, in which instance the consumer will be provided notice of the extension during the initial 45-day period.

Right of Deletion

Under Sections 1798.105 of the CCPA, California residents have the right to request that a business delete any personal information that the business has collected on them, pursuant to the exceptions defined in Section 1798.105(d) of the CCPA. The business is permitted to verify the identity of the requestor before responding to the request. Verified requests will be fulfilled by the business within 45 days of receiving the request; a one-time extension of an additional 45 days may be utilized when reasonably necessary, in which instance the consumer will be provided notice of the extension during the initial 45-day period.

Contact Us

To learn more about our privacy practices or this Policy, you may contact us at privacy@gearfire.com or at:

Gearfire, LLC
7500 N Dobson Road, Suite 220
Scottsdale, AZ 85256