This Privacy Policy Disclosure for California Residents (this “CCPA Disclosure”) supplements the information contained in Kingmakers Cigars, LLC’s (“KMC” or “we”, “our” or “us”) Privacy Policy located at https://kingmakerscigars.com/privacy-policy and applies solely to all visitors, users and others who reside in the State of California (“you” or “your”).  We adopt this CCPA Disclosure to comply with the California Consumer Privacy Act of 2018, as amended (the “CCPA”) and any terms defined in the CCPA have the same meaning when used in this CCPA Disclosure.  Any terms defined in our Privacy Policy have the same meaning when used in this CCPA Disclosure.

 

Information We Collect

Our Website collects information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could be linked, directly or indirectly, with a particular consumer, house or device. The types of Personal Information collected depends on your relationship with us.  Similarly, depending on your relationship with us, we may disclose your Personal Information for the purposes described in the Privacy Policy to one or more of the categories of recipients set forth in the chart below. The chart below details which categories of Personal Information we disclose to third parties for our operational business and commercial purposes, including within the twelve (12) months preceding the date that this CCPA Disclosure was last updated. 

The chart also details the categories of Personal Information that we “sell” or “share” for the following purposes:

Account creation and management: To process your registration with our Website or manage your account, we may collect your legal name, postal address, date of birth, phone number or email address.

Communication and transactions: When we interact with you, provide the services or information you seek, respond to your inquiries, comments, and requests, serve you relevant content and/or advertisements, and send you notifications, we may gather: your legal name, postal address, date of birth, phone number, email address or your social media contact information.

Marketing sales and analytics: For marketing and other purposes, we may collect information related to your purchasing history, product preferences, geolocation (based on internet protocol address or precise geolocation if enabled), social media contacts, demographics, account details, and military or veteran status.

Online experience: to enhance user interactions, customize content, and improve services based on individual preferences and behaviors.

Debugging: To fix any technical issues that arise when accessing or using our Website.

Legal Obligations: To comply with legal obligations, including, without limitation, data     privacy regulations, reporting requirements and fulfillment of legal requests.

Defending and protecting rights: To detect, prevent, and investigate fraud, security breaches, or other illegal activities, to establish, exercise, or defend legal claims, to comply with legal obligations, to comply with a court order, subpoena, or warrant, to comply with a governmental investigation or regulatory inquiry, to exercise a right provided by law, or to support audit, compliance, and corporate governance functions.

Promotions: To provide personalized offers and discounts to customers, to target advertising to specific customer demographics or interests, to improve the effectiveness of marketing campaigns, to develop new products or services that better meet customer needs, or to provide customers with information about products or services that may be of interest to them.

For context, the CCPA defines “sharing” for cross-context behavioral advertising” as the disclosure of Personal Information for retargeting or other interest-based advertising, whether or not for monetary or other valuable consideration. The CCPA defines a “sale” broadly as any disclosure of Personal Information for payment or other valuable consideration, including certain types of targeted advertising. 

Under the CCPA, as amended by California Resident Privacy Act (the “CPRA”), “Personal Information” is information that identifies, relates to, describes, references, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or device located in the state of California. The CCPA, as amended by the CPRA, however, does not apply to certain information, such as information subject to certain federal privacy laws, such as the Gramm-Leach-Bliley Act (“GLBA”) and the Health Insurance Portability and Accountability Act (“HIPAA”).


 

Category

Examples

Source

Purpose for Collection

 

Shared or Sold

A. Identifiers

Legal name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, Social Security Number, driver’s license number or passport number.

Directly from you

From third parties

Automatically from your devices

Account creation and management

Communications and transactions

Marketing sales and analytics

Online experience

Debugging

Loyalty program

Legal obligations

Defending and protecting rights

Promotions

 

Shared with:

Business customers

Affiliates

External agencies

External auditors

Regulatory authorities

Service providers

Social media networks

Sold to:

Not sold

B. Any Personal Information described in subdivision (e) of Section 1798.80 of the California Civil Code

Name, signature, Social Security Number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.

 

Directly from you

From third parties

 

Account creation and management

Communications and transactions

Marketing sales and analytics

Online experience

Debugging

Loyalty program

Legal obligations

Defending and protecting rights

Promotions

Shared with:

Business customers

Affiliates

External agencies

External auditors

Regulatory authorities

Service providers

Social media networks

Sold to:

Not sold

C. Characteristics of protected classifications under California or federal law

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, or genetic information (including familial genetic information).

 

Directly from you

From third parties

 

Account creation and management

Marketing sales and analytics

Loyalty program

Legal obligations

Defending and protecting rights

 

Shared with:

Business customers

Affiliates

Regulatory authorities

Service providers

Social media networks

Sold to:

Not sold

D. Commercial information

Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories, tendencies and preferences.

Directly from you

From third parties

 

Account creation and management

Marketing sales and analytics

Loyalty program

Legal obligations

Defending & protecting rights

 

Shared with:

Business customers

Affiliates

Regulatory authorities

Service providers

Social media networks

Sold to:

Not sold

 

E. Biometric information

Genetic, psychological, behavioral and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health or exercise data.

 

Not collected

Not collected

Not collected

F. Internet or other electronic network activity information

Internet protocol addresses, browsing history, search history, information on a consumer's interaction with our Website, application logs, device data and registration, social media account information or advertisement.

 

Automatically from your devices

Account creation and management

Marketing sales and analytics

Online experience

Debugging

Loyalty program

 

Shared with:

Affiliates

Regulatory authorities

Service providers

Sold to:

Not sold

G. Non-precise geolocation data

Any information that can be used to identify the physical location of a device or the approximate location based on internet protocol address.

Automatically from your devices

Account creation and management

Marketing sales and analytics

Online experience

Debugging

Loyalty program

 

Shared with:

Affiliates

Regulatory authorities

Service providers

Sold to:

Not sold

H. Audio, visual or other sensory information

Audio, electronic, visual, thermal, olfactory or similar information.

Directly from you

Customer service

Loyalty program

Shared with:

Affiliates

Service providers

Sold to:

Not sold

 

I. Professional or employment-related information

 

Current or past job history or performance evaluations.

Not collected

Not collected

Not Collected

J. Non-public education information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g, 34 C.F.R. Part 99)

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, record of attendance, disciplinary records, or other information relating to your secondary and post-secondary education.

 

Not collected

Not collected

Not collected

K. Inferences drawn from any other Personal Information

Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.

Automatically from your devices

Marketing analytics and sales

Interest-based advertising

Loyalty program

Shared with:

Affiliates

External agencies

Service providers

Sold to:

Affiliates

 

L. Sensitive Personal Information as defined in Sec. 1798.140(ae) of the California Privacy Rights Act

Identifiers listed in the preceding categories B and C, and precise geolocation, racial and ethnic origin, or the contents of communications where we are not an intended recipient.

Directly from you

From third parties

Automatically from your devices

Marketing analytics and sales

Communications and transactions

 

Shared with:

Affiliates

Service providers

Sold to:

Not sold

 

 


Our Website obtains the categories of Personal Information listed above from the following categories of sources:

  • Directly from you: from forms you complete, products purchased, registration on our Website, subscription to notifications, participation in promotional activities or communications with customer service.
  • Automatically from your devices: from observing your actions on our Website, information collected from cookies, web beacons, embedded script, and device registration activities.
  • Third parties: such as companies that help us maintain the accuracy and completeness of data and help enhance our records.

Use of Personal Information

 

We may share or sell your Personal Information with our business customers, subsidiaries, affiliates, and service providers to help us with the following business and commercial purposes:

  • Providing the information, products or services requested or reasonably expected by you given the context in which the Personal Information was collected, including, maintaining or servicing accounts, providing customer service, processing, fulfilling orders and transactions, verifying customer information, processing payments or providing similar services;
  • Responding to your inquiries and fulfilling your requests;
  • Conduct marketing and advertising activities;
  • Undertaking market research and data analytics;
  • Carrying out user experience surveys;
  • Ensuring security and integrity to the extent the use of the Personal Information is reasonably necessary and proportionate to the use;
  • Enhancing and improving our products and services;
  • Managing our recruitment processes and career opportunities;
  • Complying with legal, reporting, and similar requirements;
  • Investigating and responding to claims against KMC, its personnel and its customers;
  • Protecting our, your, our customers’ and other third party’s safety, property or rights;
  • Detecting, preventing and responding to security incidents and protecting against malicious, deceptive, fraudulent or illegal activity;
  • Safeguarding against, identifying and preventing fraud and unlawful activities; or
  • Executing information technology and administrative support functions.

 

We may share or sell Personal Information within the framework of our advertising technology programs, which includes mechanisms like cookies, designed for cross-context behavioral advertising, or other marketing and advertising services we employ on our Website. We do not possess actual knowledge that we share or sell Personal Information of consumers below the age of 16. We do not employ or disclose sensitive Personal Information for purposes that fall under the right to limit use and disclosure, as provided in the CCPA.

 

The length of time we retain your Personal Information depends on the type of information and the reason we collected it. We may retain your Personal Information for as long as necessary to: (i) provide you with our products and services; (ii) communicate with you about your account; (iii) comply with legal requirements; (iv) establish, exercise or defend our legal rights; (v) to assist with an investigation of suspected or actual illegal activity; or (vi) sell or transfer all or a portion of our business or assets (including in the event or a reorganization, dissolution or liquidation).

We will also retain your Personal Information for as long as necessary to allow us to exercise our legitimate business interests, such as improving our products and services, preventing fraud and enforcing our terms of service.

In some cases, we may anonymize your Personal Information so that it can no longer be associated with you. In this case, we may retain the anonymized information indefinitely. We reserve the right to use anonymized, de-identified or aggregated information for any purpose permitted by law.

Your California Consumer Privacy Rights

The CCPA provides California residents with specific rights regarding their Personal Information. This section describes your CCPA rights and explains how to exercise those rights.

The Right to Know

You have the right to request that we disclose to you the following items about your Personal Information:

  • The categories and specific items of Personal Information we have collected about you.
  • The categories of sources from which your Personal Information was collected.
  • Whether we have shared or sold your Personal Information.
  • The business or commercial purpose for collecting, sharing or selling your Personal Information.
  • The categories of third parties with whom we have disclosed your Personal Information to.

Right of Correction

You have the right to request that we correct any inaccurate Personal Information that we have collected about you. We may require you to provide documentation to support your request.  If you request that we correct your Personal Information, we may delete it instead, if deletion does not negatively impact you or you consent to the deletion. We will not correct your Personal Information if it is necessary or permissible for us not to correct it under the CCPA or other applicable law.

Right of Deletion

You have the right to request that we delete Personal Information we have collected about you, subject to our legal rights or obligations to retain such information.

Right to Opt-Out

You have the right to choose to not to have your Personal Information sold or shared for advertising purposes.  You can also set your web browser settings to disable certain tracking technologies. However, disabling certain tracking technologies may affect the functionality of some features on our Website.

Right to Non-Discrimination for Exercise of Privacy Rights

If you choose to exercise your privacy rights, we will not discriminate against you. We will not deny our products or services to you, charge you different prices for such products or services or provide a different level or quality of products or services unless the difference is related to the value of your Personal Information. We will not retaliate against you for exercising your privacy rights under the CCPA.

How to Exercise Your Rights

You can exercise the rights list above or contact us with questions or concerns about our privacy notices and practices, by emailing us at [email protected].

To verify your identity and fulfill your CCPA request, we will ask you to provide some information, such as your legal name, postal address, date of birth, phone number and email address. We may also call you to request additional information, such as your Social Security Number, to further verify your identity. We will not store or use this information for any other purpose.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

 

If you want to designate someone else to submit a CCPA request on your behalf, you will need to give them written permission and verify your own identity.  We will also need the authorized agent to submit proof that you have authorized them to act on your behalf.

CCPA request forms are available at https://kingmakerscigars.com/ccpa-consumer-rights-request.

Limiting or Declining Your CCPA Request

We may limit or decline to respond to your CCPA request if:

  • Providing the information would be impossible or require a disproportionate amount of effort, such as if you are requesting information that we collected more than twelve (12) months ago.
  • We cannot verify your identity or confirm that the Personal Information we have relates to you.
  • We cannot verify that you have the authority to make a request on behalf of another individual.
  • There is an exception that applies, such as if disclosing the information would harm the rights of another individual.
  • The Personal Information we have collected about you is not subject to the CCPA’s right to know and/or deletion right.