CPRA Notice for California Residents
About this document
The California Consumer Privacy Act of 2018, as substantially amended by the California Privacy Rights Act of 2020, gives residents of California specific rights with respect to how businesses handle their personal information. The rights are independent, layered, and in some cases technical. This Notice describes them.
We have prepared this Notice as a supplement to our overall Privacy Policy rather than embedding California-specific disclosures within the Privacy Policy itself. The reason is straightforward: California residents deserve a document that addresses California rights at the depth those rights warrant, without forcing the reader to scroll past disclosures relevant only to other jurisdictions. Residents of other U.S. states with comparable privacy laws will find that the rights and procedures described here also serve them; we treat such requests under the protections most favorable to the requester.
The structure of this Notice follows the structure of the law. We begin with scope, then describe what personal information we collect and what we do with it, then disclose what we have actually done over the past twelve months, then map the rights themselves, then provide depth on the most operationally significant rights, and conclude with the procedural mechanisms by which any right may be exercised. A final section addresses financial incentive programs that we may introduce in the future. If at any point you would prefer to speak with a person rather than read further, our Privacy Team at privacy@sincelovejewelry.com or +1 (307) 263-8735 is available to assist.
This Notice supplements our Privacy Policy with disclosures specific to the rights of California residents under the California Consumer Privacy Act of 2018, as substantially amended by the California Privacy Rights Act of 2020 and as enforced by the California Privacy Protection Agency (collectively, the "CCPA"). Where this Notice addresses a topic that is also addressed in the Privacy Policy, the Privacy Policy provides the general framework and this Notice provides the California-specific detail. Where the two documents differ in their treatment of a particular topic for California residents, this Notice controls.
Who This Notice Applies To
This Notice applies to natural persons who reside in California and whose personal information is collected, used, or disclosed by Since Love Jewelry. The Notice applies regardless of whether the California resident interacts with us through our website, our mobile interface, our boutique in Beverly Hills, our virtual consultation service, our private-channel sales conducted via WhatsApp or WeChat, or any other channel through which we may collect personal information. Residents of other U.S. states with comparable privacy laws may also use the procedures described in this Notice; we treat such requests under the protections most favorable to the requester, as described further in our Do Not Sell or Share My Personal Information page.
Who This Notice Does Not Apply To
The CCPA exempts certain categories of personal information from its scope, and this Notice does not address those categories. Exempted information includes personal information collected in the context of an employment relationship between Since Love Jewelry and our employees, contractors, job applicants, owners, directors, and officers, where that information is used solely for employment-related purposes; personal information collected in business-to-business contexts where the relationship is between Since Love Jewelry and the employees of another company acting in their employment capacity; medical information regulated by the California Confidentiality of Medical Information Act; consumer credit reporting information regulated by the federal Fair Credit Reporting Act; and personal information regulated by certain other federal or state statutes that the CCPA expressly exempts. Where these exemptions apply, the relevant statute provides the operative privacy framework rather than the CCPA.
The CCPA requires that we identify the categories of personal information we collect about California residents, describe the sources from which we collect each category, the business or commercial purposes for which we use each category, the categories of recipients to whom we disclose each category, and the retention period applicable to each category. The table below provides this disclosure across the eleven statutory categories of personal information enumerated by California Civil Code §1798.140(o)(1). Categories that we do not collect are noted as such; categories that we collect are described in the four-column format required by the statute.
| Category | Sources | Business Purposes | Recipients & Retention |
|---|---|---|---|
|
— Category A
Identifiers
|
Directly from you (account creation, checkout, customer service); from your device (cookies, IP address); from your social-login provider where you choose to use one; from referral partners; from publicly available sources. | Account creation and authentication; order processing and fulfillment; customer service; fraud prevention; marketing communications; advertising and analytics; legal compliance. | Recipients: Service providers (payment processors, shipping carriers, email platform, customer service tools); advertising partners (Meta, Google, TikTok, Pinterest); professional advisors. Retention: Active account life plus seven years post-deactivation. |
|
— Category B
Customer Records
|
Directly from you when you place an order, register for an account, or interact with customer service; from financing partners where you elect financing. | Order processing and fulfillment; payment processing; shipping; customer service; financing and warranty service; legal and tax compliance; defense of legal claims. | Recipients: Payment processors; shipping carriers; financing providers; tax authorities; professional advisors. Retention: Seven years post-transaction for tax compliance; warranty claim records retained for the lifetime warranty period. |
|
— Category C
Protected Classifications
|
Directly from you, voluntarily, only where applicable to a specific purpose (e.g., birthdate for anniversary reminders). | Personalized communications based on voluntarily-provided information; demographic analytics in aggregate; legal compliance. | Recipients: Email platform; analytics providers (in aggregate, de-identified). Retention: Active account life plus seven years. |
|
— Category D
Commercial Information
|
Directly from you (purchases, browsing activity); from your device interactions with our Services. | Order processing; service personalization; analytics and performance measurement; advertising attribution; business operations. | Recipients: Service providers; advertising partners (Meta, Google, TikTok, Pinterest, Shopify); analytics providers. Retention: Active account life plus seven years. |
|
— Category E
Biometric Information
|
Not collected at present. | Not applicable. Should we introduce features that collect biometric information (e.g., a future virtual try-on feature), this Notice will be updated and a separate consent process implemented. | Not applicable. |
|
— Category F
Internet or Network Activity
|
From your device when you interact with our Services (cookies, pixels, server logs, tags, SDKs). | Service operation and security; analytics; advertising and conversion tracking; fraud prevention; product improvement. | Recipients: Hosting providers; analytics partners (Google Analytics 4); advertising partners (Meta, Google, TikTok, Pinterest, Shopify marketing). Retention: Cookie-specific durations are inventoried in our Cookie Policy; server log files are retained for thirteen months. |
|
— Category G
Geolocation Data
|
From your device IP address (approximate, country and region level only); from precise location only with your express opt-in consent for specific features. | Approximate geolocation: regional service delivery, currency selection, sales tax determination, fraud prevention, advertising optimization. Precise geolocation: only as expressly requested by you for features such as nearest-boutique discovery. | Recipients: Hosting providers; advertising partners (approximate only). Retention: Approximate location: thirteen months in server logs. Precise location: not retained beyond the session in which it was used. |
|
— Category H
Sensory Data
|
Recorded boutique appointments, recorded virtual consultations (only with your prior consent at the start of the session). | Quality assurance; training; client service follow-up; defense of legal claims. | Recipients: Internal Since Love staff only; not shared with third parties. Retention: Twelve months from session date, unless related to an active service issue. |
|
— Category I
Professional Information
|
Directly from you, voluntarily, in connection with corporate account inquiries or professional partnership applications. | Evaluation of corporate gifting account requests; partnership application review; corporate communications. | Recipients: Internal Since Love business development staff. Retention: Active relationship plus three years. |
|
— Category J
Education Information
|
Not collected outside of employment-context applications, which are exempt from this Notice as described in Section 1. | Not applicable to non-employment contexts. | Not applicable. |
|
— Category K
Inferences
|
Derived from your interactions with our Services (browsing history, products viewed, items saved, content engaged with). | Personalized product recommendations; tailored content; advertising audience definition; customer service personalization. | Recipients: Email platform; advertising partners (in audience-segment form, not as raw inferences). Retention: Active account life plus three years. |
The CCPA requires that we disclose, for each category of personal information enumerated in Section 2, the categories that we have actually collected, sold, shared, or disclosed for a business purpose during the preceding twelve months. The disclosure below covers the period from May 5, 2025 through May 4, 2026, which is the twelve-month period ending on the day before the Effective Date of this Notice.
Personal Information Collection, Sale, Sharing, and Disclosure
Categories of Recipients in Past Twelve Months
During the lookback period, we disclosed personal information to the following categories of recipients: payment processors, shipping carriers, manufacturing and quality-assurance partners (including our atelier in Shenzhen and our Beverly Hills boutique operations), customer service technology providers, email and SMS marketing platforms, hosting and security providers, advertising and analytics partners (Meta, Google, TikTok, Pinterest, Shopify marketing integrations, and other vendors specified in our Cookie Policy), professional advisors (legal, accounting, tax), regulatory and tax authorities as required by law, and parties to whom you have specifically directed disclosure. The Privacy Policy Section 5 provides the complete description of recipient categories.
The CCPA establishes six categories of rights for California residents with respect to their personal information. Each right is independent of the others; you may exercise any one without exercising any of the others. The summary cards below provide an at-a-glance map of the rights, the corresponding statutory section, and the route to exercise each. Detailed exercise procedures are in Section 8; opt-out specifically is addressed at greater length in Section 5; the right to limit sensitive personal information is addressed at greater length in Section 6.
The CPRA distinguishes among three closely related but legally distinct opt-out rights. The distinctions matter because the underlying business activities differ and because the opt-out mechanism may behave differently for each. This Section explains the three rights, our current practice with respect to each, and the operational mechanism by which you may exercise each.
The Three Independent Rights
- Right to Opt Out of Sale. Direct us not to sell your personal information for monetary or other valuable consideration. "Sale" under CCPA §1798.140(t) requires the exchange of personal information for consideration. Our current practice: we do not sell personal information for monetary consideration. See Section 3 Lookback Disclosure.
- Right to Opt Out of Sharing for Cross-Context Behavioral Advertising. Direct us not to share your personal information for cross-context behavioral advertising as defined in CCPA §1798.140(ah), which is broader than "sale" because it captures advertising-related sharing regardless of whether monetary consideration is exchanged. Our current practice: we do engage in sharing for cross-context behavioral advertising through advertising partnerships with Meta, Google, TikTok, Pinterest, and Shopify marketing integrations. See Cookie Policy for the inventory of advertising cookies and pixels.
- Right to Opt Out of Targeted Advertising. A separately-defined right under several state privacy laws (Colorado, Connecticut, Virginia, and others), capturing advertising that is targeted to a consumer based on personal information obtained from the consumer's activities across non-affiliated websites or applications. The substantive scope substantially overlaps with "sharing" under CPRA but has independent statutory basis under each state's law. Our current practice: we do engage in targeted advertising for the same reasons described under the Sharing right above.
All three opt-outs are exercised through one direct mechanism.
The Do Not Sell or Share My Personal Information page provides a single embedded form through which California residents may exercise all three opt-out rights. Once your request is processed, we will remove your information from advertising-partner Custom Audiences within thirty days and apply your preferences to future processing indefinitely until you affirmatively opt back in. Submitted requests reach our Privacy Team at dnsmpi@sincelovejewelry.com.
Global Privacy Control
The California Attorney General has formally recognized the Global Privacy Control (GPC) as a valid technical mechanism for exercising opt-out rights under the CCPA. We honor the GPC signal automatically on every page of our Services, including the Do Not Sell or Share My Personal Information page. If your browser transmits the GPC signal, your visit is treated as an active opt-out request and the protections of all three rights described in this Section are automatically applied without any further action on your part. The GPC signal is honored in addition to, not in place of, any preferences you have submitted via form.
Twelve-Month Re-Authorization Restriction
Once we receive an opt-out request, we will not ask you to re-authorize sale or sharing for at least twelve months, as required by CCPA §1798.135(c)(4). After twelve months, we may at our discretion present a renewed opportunity to authorize sale or sharing, but only if the renewed authorization meets the standards of CCPA §1798.135. Until you affirmatively opt back in, your opt-out preference remains in effect indefinitely.
Authorized Agent
You may designate an authorized agent — a family member, attorney, advocacy organization, or other party — to submit opt-out requests on your behalf. The agent must provide written authorization and we may also contact you directly to verify the request. The Authorized Agent process is built into the form on the Do Not Sell or Share My Personal Information page.
The Right to Limit Use of Sensitive Personal Information is a separate right introduced by the California Privacy Rights Act, distinct from the right to opt out of sale or sharing. It applies specifically to enumerated categories of personal information that California considers sensitive, and it allows you to direct a business to use those categories only as necessary to provide the goods and services you have specifically requested.
Sensitive Categories We Collect and Use
Under California law, "sensitive personal information" includes the following enumerated categories. The cards below indicate which categories Since Love Jewelry collects and the necessary purposes for which we use them. Categories we do not collect are not included in the cards but are noted at the end of this section for completeness.
Account Log-In Credentials
Government Identification
Precise Geolocation
Contents of Communications
Sensitive Categories We Do Not Collect
The following sensitive categories enumerated by California law are not collected by Since Love Jewelry: racial or ethnic origin, religious or philosophical beliefs, trade union membership, genetic information, biometric information for unique identification of a natural person, sexual orientation, and information concerning the natural person's health. The Right to Limit therefore does not apply to these categories because we do not hold them.
The CCPA establishes special protections for the personal information of minors. The default protection level for any individual under sixteen years of age is opt-out: Since Love Jewelry will not sell or share the personal information of any consumer we know to be under sixteen years of age without affirmative opt-in consent. The protections operate automatically, without requiring any request from the minor or their guardian.
Minors Under Thirteen
For consumers under thirteen years of age, the federal Children's Online Privacy Protection Act ("COPPA") and CCPA §1798.120(c) require affirmative opt-in consent from the consumer's parent or legal guardian before we may sell or share the consumer's personal information. We do not knowingly collect personal information from individuals under thirteen years of age, and our Services are not directed to children. If we learn that we have inadvertently collected personal information from a person under thirteen, we will delete the information within thirty days unless we receive verifiable parental consent. To request deletion of any personal information we may have inadvertently collected from a minor under thirteen, contact our Privacy Team at privacy@sincelovejewelry.com.
Minors Thirteen to Fifteen
For consumers between thirteen and fifteen years of age, CCPA §1798.120(c) requires affirmative opt-in consent from the consumer themselves before we may sell or share their personal information. The default state is opt-out, and the consumer must take an affirmative action to grant permission. We do not actively market to minors and do not request affirmative opt-in consent from this age group; the practical effect is that personal information we may inadvertently hold for any consumer in this age range is automatically subject to opt-out protection.
The procedures for exercising your CPRA rights are designed to be straightforward, accessible through multiple channels, and responsive within timeframes faster than the legal maximum. The descriptions below cover the submission channels, identity verification, response timeline, Authorized Agent process, denial and appeal procedures, and your right to lodge a regulatory complaint.
Submission Channels
You may exercise any of the rights described in this Notice through any of the following channels: the embedded form on our Do Not Sell or Share My Personal Information page (for opt-out requests including the three opt-out rights and the Right to Limit Sensitive PI); email to privacy@sincelovejewelry.com with a clear statement of which right you are exercising and the scope of your request (for the Right to Know, Right to Delete, Right to Correct, and Right to Non-Discrimination disputes); telephone to +1 (307) 263-8735 during boutique business hours (Tuesday through Saturday, 11:00 to 19:00 PT); written request to SoarNet LLC, Attn: Privacy Team, 30 North Gould Street, Suite 6362, Sheridan, Wyoming 82801; or in-person request at our Beverly Hills boutique by appointment.
Identity Verification
To protect your personal information, we will verify your identity before processing requests under the Right to Know, Right to Delete, or Right to Correct. The verification standard is calibrated to the sensitivity of the request and the nature of the information involved. For most requests, verification is satisfied by matching the email address from which the request is submitted to the email address associated with the account or transaction history; for requests involving particularly sensitive information, we may require additional verification such as confirmation of recent transaction details. We will not request information beyond what is reasonably necessary for verification, and we will not use information provided for verification for any other purpose.
Response Timeline
We commit to the following response standards. Acknowledgment within two business days of receipt. Substantive response within ten business days for opt-out requests; within forty-five calendar days for Right to Know, Right to Delete, and Right to Correct requests, with a single optional extension of forty-five additional calendar days where the request is particularly complex. The CCPA legal maximum for the latter category is forty-five days plus a single forty-five-day extension; our standard service level is to complete most requests within fifteen business days of acknowledgment, well within the legal envelope.
Authorized Agent Submissions
An authorized agent may submit a request on behalf of a California resident upon providing written authorization. The Authorized Agent option is built into the form on our Do Not Sell or Share My Personal Information page; for other rights, the Authorized Agent should follow the submission channels above and include written authorization documentation as part of the initial submission. We may also contact the underlying consumer directly to verify the agent's authority. The verification standard for Authorized Agent submissions is the same as for direct consumer submissions; the additional step is verification of the agent's authority itself.
Denial and Appeal
In limited circumstances we may be unable to fully comply with a request — for example, where an applicable law requires us to retain certain information notwithstanding a deletion request, where we are unable to verify your identity, where the request would prejudice another consumer's rights, or where a statutory exception applies. In such cases, we will explain in writing the reasons for the denial or partial denial and inform you of your right to appeal. Appeals may be submitted by replying to our denial response or by writing to privacy@sincelovejewelry.com with the subject line Appeal — [Reference Number]. Appeals are reviewed by our Privacy Lead and an external advisor independent of the original processing team, and we will respond to appeals within fifteen business days.
Non-Discrimination Guarantee
Exercising any right described in this Notice will not result in discriminatory treatment. We will not deny you goods or services, charge you a different price (other than as expressly permitted by CCPA §1798.125(b) for opt-in incentives, see Section 9), provide a different quality of service, or threaten any of these consequences because you exercised any privacy right. If you believe you have experienced discriminatory treatment in connection with the exercise of any privacy right, please contact our Privacy Lead directly at privacy@sincelovejewelry.com.
CCPA §1798.125(b) requires that businesses operating financial incentive programs that involve the collection or use of personal information provide consumers with a notice describing the program. The Notice below covers programs we currently operate or may operate in the future. As of the Effective Date of this Notice, Since Love Jewelry does not operate any active financial incentive program; this Section is provided for completeness and to establish the framework that would apply should we introduce such a program.
Programs That May Be Introduced
The following categories of programs would, if introduced, constitute "financial incentives" under CCPA §1798.125(b) and would be governed by the framework described in this Section. Newsletter signup discount, in which subscribers to our editorial newsletter receive a one-time discount code in connection with the subscription. Anniversary reminder service, in which clients who provide their anniversary or partner anniversary date receive courtesy reminders and invitations to relevant new collections. Referral program, in which existing clients may refer friends or family in exchange for credit or other consideration. Loyalty program, in which clients accumulate credit or benefits based on cumulative purchases over time. Sweepstakes or contest, in which participants may submit entries with the opportunity to win a prize.
Material Terms If Introduced
Any financial incentive program operated by Since Love Jewelry will provide the following material terms in writing at the point of program enrollment, in compliance with CCPA §1798.125(b)(2). The categories of personal information collected and the purposes of collection. The value of the consumer's data to Since Love Jewelry, calculated based on a good-faith estimate considering revenue we may generate, expenses incurred to operate the program, and any other relevant economic factors. The terms of the financial incentive offered, including the dollar value or other consideration provided to the consumer. The right to withdraw from the program at any time without penalty, and the procedure for withdrawal. The right to lodge a complaint with the California Privacy Protection Agency or the Office of the California Attorney General if the consumer believes the program does not comply with CCPA requirements.
Notification of Program Introduction
Should we introduce any financial incentive program, we will update this Notice to reflect the program details, increment the version number of this Notice, and notify clients with active accounts by email at least thirty days in advance of program launch. The Effective Date of the updated Notice will be the launch date of the new program.