This Privacy
Policy Disclosure for California Residents (this “CCPA Disclosure”)
supplements the information contained in Kingmakers Cigars, LLC’s (“KMC”
or “we”, “our” or “us”) Privacy Policy located at https://kingmakerscigars.com/privacy-policy
and applies solely to all visitors, users and others who reside in the State of
California (“you” or “your”).
We adopt this CCPA Disclosure to comply with the California Consumer
Privacy Act of 2018, as amended (the “CCPA”) and any terms defined in
the CCPA have the same meaning when used in this CCPA Disclosure. Any terms defined in our Privacy Policy have
the same meaning when used in this CCPA Disclosure.
Information We Collect
Our
Website collects information that identifies, relates to, describes,
references, is reasonably capable of being associated with, or could be linked,
directly or indirectly, with a particular consumer, house or device. The types
of Personal Information collected depends on your relationship with us. Similarly, depending on your relationship with
us, we may disclose your Personal Information for the purposes described in the
Privacy Policy to one or more of the categories of recipients set forth in the
chart below. The chart below details which categories of Personal Information
we disclose to third parties for our operational business and commercial
purposes, including within the twelve (12) months preceding the date that this
CCPA Disclosure was last updated.
The
chart also details the categories of Personal Information that we “sell” or
“share” for the following purposes:
Account creation and management: To process your registration with our Website or manage your account, we may collect your legal name, postal address, date of birth, phone number or email address.
Communication and transactions: When we interact with you, provide the services or information you seek, respond to your inquiries, comments, and requests, serve you relevant content and/or advertisements, and send you notifications, we may gather: your legal name, postal address, date of birth, phone number, email address or your social media contact information.
Marketing sales and analytics: For marketing and other purposes, we may collect information related to your purchasing history, product preferences, geolocation (based on internet protocol address or precise geolocation if enabled), social media contacts, demographics, account details, and military or veteran status.
Online experience: to enhance user interactions, customize content, and improve services based on individual preferences and behaviors.
Debugging: To fix any technical issues that arise when accessing or using our Website.
Legal Obligations: To comply with legal obligations, including, without limitation, data privacy regulations, reporting requirements and fulfillment of legal requests.
Defending and protecting rights: To detect, prevent, and investigate fraud, security breaches, or other illegal activities, to establish, exercise, or defend legal claims, to comply with legal obligations, to comply with a court order, subpoena, or warrant, to comply with a governmental investigation or regulatory inquiry, to exercise a right provided by law, or to support audit, compliance, and corporate governance functions.
Promotions: To provide personalized offers and discounts to customers, to target advertising to specific customer demographics or interests, to improve the effectiveness of marketing campaigns, to develop new products or services that better meet customer needs, or to provide customers with information about products or services that may be of interest to them.
For
context, the CCPA defines “sharing” for cross-context behavioral advertising”
as the disclosure of Personal Information for retargeting or other
interest-based advertising, whether or not for monetary or other valuable
consideration. The CCPA defines a “sale” broadly as any disclosure of Personal
Information for payment or other valuable consideration, including certain
types of targeted advertising.
Under the CCPA, as amended by
California Resident Privacy Act (the “CPRA”), “Personal Information”
is information that identifies, relates to, describes, references, or is
capable of being associated with, or could reasonably be linked, directly or
indirectly, with a particular California resident or device located in the
state of California. The CCPA, as amended by the CPRA, however, does not apply
to certain information, such as information subject to certain federal privacy
laws, such as the Gramm-Leach-Bliley Act (“GLBA”) and the Health
Insurance Portability and Accountability Act (“HIPAA”).
Category |
Examples |
Source |
Purpose for Collection
|
Shared or Sold |
A. Identifiers |
Legal name, alias,
postal address, unique personal identifier, online identifier, internet
protocol address, email address, account name, Social Security Number,
driver’s license number or passport number. |
Directly from you From third parties Automatically from your devices |
Account creation and management Communications and transactions Marketing sales and analytics Online experience Debugging Loyalty program Legal obligations Defending and protecting rights Promotions |
Shared with: Business customers Affiliates External agencies External auditors Regulatory authorities Service providers Social media networks Sold to: Not sold |
B. Any Personal Information
described in subdivision (e) of Section 1798.80 of the California Civil Code |
Name, signature, Social Security
Number, physical characteristics or description, address, telephone number,
passport number, driver’s license or state identification card number,
insurance policy number, education, employment, employment history, bank account
number, credit card number, debit card number, or any other financial
information, medical information, or health insurance information. |
Directly from you From third parties |
Account creation and management Communications and transactions Marketing sales and analytics Online experience Debugging Loyalty program Legal obligations Defending and protecting rights Promotions |
Shared with: Business customers Affiliates External agencies External auditors Regulatory authorities Service providers Social media networks Sold to: Not sold |
C. Characteristics of protected
classifications under California or federal law |
Age (40 years or
older), race, color, ancestry, national origin, citizenship, religion or
creed, marital status, medical condition, physical or mental disability, sex
(including gender, gender identity, gender expression, pregnancy or
childbirth and related medical conditions), sexual orientation, veteran or
military status, or genetic information (including familial genetic
information). |
Directly from you From third parties |
Account creation and management Marketing sales and analytics Loyalty program Legal obligations Defending and protecting rights |
Shared with: Business customers Affiliates Regulatory authorities Service providers Social media networks Sold to: Not sold |
D. Commercial information |
Records of products or services
purchased, obtained, or considered, or other purchasing or consuming
histories, tendencies and preferences. |
Directly from you From third parties |
Account creation and management Marketing sales and analytics Loyalty program Legal obligations Defending & protecting rights |
Shared with: Business customers Affiliates Regulatory authorities Service providers Social media networks Sold to: Not sold |
E. Biometric information |
Genetic, psychological, behavioral
and biological characteristics, or activity patterns used to extract a
template or other identifier or identifying information, such as,
fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke,
gait, or other physical patterns, and sleep, health or exercise data. |
Not collected |
Not collected |
Not collected |
F. Internet or other electronic
network activity information |
Internet protocol addresses,
browsing history, search history, information on a consumer's interaction
with our Website, application logs, device data and registration, social
media account information or advertisement. |
Automatically from your devices |
Account creation and management Marketing sales and analytics Online experience Debugging Loyalty program |
Shared with: Affiliates Regulatory authorities Service providers Sold to: Not sold |
G. Non-precise geolocation data |
Any information that can be used to
identify the physical location of a device or the approximate location based
on internet protocol address. |
Automatically from your devices |
Account creation and management Marketing sales and analytics Online experience Debugging Loyalty program |
Shared with: Affiliates Regulatory authorities Service providers Sold to: Not sold |
H. Audio, visual or other sensory
information |
Audio, electronic, visual, thermal,
olfactory or similar information. |
Directly from you |
Customer service Loyalty program |
Shared with: Affiliates Service providers Sold to: Not sold |
I. Professional or
employment-related information |
Current or past job
history or performance evaluations. |
Not collected |
Not collected |
Not Collected |
J. Non-public education information
as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec.
1232g, 34 C.F.R. Part 99) |
Education records directly related
to a student maintained by an educational institution or party acting on its
behalf, such as grades, transcripts, record of attendance, disciplinary
records, or other information relating to your secondary and post-secondary
education. |
Not collected |
Not collected |
Not collected |
K. Inferences drawn from any other
Personal Information |
Profile reflecting
a person’s preferences, characteristics, psychological trends,
predispositions, behavior, attitudes, intelligence, abilities and aptitudes. |
Automatically from your devices |
Marketing analytics and sales Interest-based advertising Loyalty program |
Shared with: Affiliates External agencies Service providers Sold to: Affiliates |
L. Sensitive Personal Information as
defined in Sec. 1798.140(ae) of the California Privacy Rights Act |
Identifiers listed in the preceding
categories B and C, and precise geolocation, racial and ethnic origin, or the
contents of communications where we are not an intended recipient. |
Directly from you From third parties Automatically from your devices |
Marketing analytics and sales Communications and transactions |
Shared with: Affiliates Service providers Sold to: Not sold |
Our Website
obtains the categories of Personal Information listed above from the following
categories of sources:
- Directly from you: from forms you complete, products purchased, registration on our Website, subscription to notifications, participation in promotional activities or communications with customer service.
- Automatically from your devices: from observing your actions on our Website, information collected from cookies, web beacons, embedded script, and device registration activities.
- Third parties: such as companies that help us maintain the accuracy and completeness of data and help enhance our records.
Use of Personal Information
We
may share or sell your Personal Information with our business customers, subsidiaries,
affiliates, and service providers to help us with the following business and
commercial purposes:
- Providing the information, products or services requested or reasonably expected by you given the context in which the Personal Information was collected, including, maintaining or servicing accounts, providing customer service, processing, fulfilling orders and transactions, verifying customer information, processing payments or providing similar services;
- Responding to your inquiries and fulfilling your requests;
- Conduct marketing and advertising activities;
- Undertaking market research and data analytics;
- Carrying out user experience surveys;
- Ensuring security and integrity to the extent the use of the Personal Information is reasonably necessary and proportionate to the use;
- Enhancing and improving our products and services;
- Managing our recruitment processes and career opportunities;
- Complying with legal, reporting, and similar requirements;
- Investigating and responding to claims against KMC, its personnel and its customers;
- Protecting our, your, our customers’ and other third party’s safety, property or rights;
- Detecting, preventing and responding to security incidents and protecting against malicious, deceptive, fraudulent or illegal activity;
- Safeguarding against, identifying and preventing fraud and unlawful activities; or
- Executing information technology and administrative support functions.
We may share
or sell Personal Information within the framework of our advertising technology
programs, which includes mechanisms like cookies, designed for cross-context
behavioral advertising, or other marketing and advertising services we employ
on our Website. We do not possess actual knowledge that we share or sell
Personal Information of consumers below the age of 16. We do not employ or
disclose sensitive Personal Information for purposes that fall under the right
to limit use and disclosure, as provided in the CCPA.
The length of time we retain
your Personal Information depends on the type of information and the reason we
collected it. We may retain your Personal Information for as long as necessary
to: (i) provide you with our products and services; (ii) communicate with you
about your account; (iii) comply with legal requirements; (iv) establish,
exercise or defend our legal rights; (v) to assist with an investigation of
suspected or actual illegal activity; or (vi) sell or transfer all or a portion
of our business or assets (including in the event or a reorganization,
dissolution or liquidation).
We
will also retain your Personal Information for as long as necessary to allow us
to exercise our legitimate business interests, such as improving our products
and services, preventing fraud and enforcing our terms of service.
In
some cases, we may anonymize your Personal Information so that it can no longer
be associated with you. In this case, we may retain the anonymized information
indefinitely. We reserve
the right to use anonymized, de-identified or aggregated information for any
purpose permitted by law.
Your California Consumer Privacy Rights
The CCPA
provides California residents with specific rights regarding their Personal
Information. This section describes your CCPA rights and explains how to
exercise those rights.
The Right to Know
You have the right to request that we disclose to you the following items about your Personal Information:
- The categories and specific items of Personal Information we have collected about you.
- The categories of sources from which your Personal Information was collected.
- Whether we have shared or sold your Personal Information.
- The business or commercial purpose for collecting, sharing or selling your Personal Information.
- The categories of third parties with whom we have disclosed your Personal Information to.
Right of Correction
You have the right to request that we correct any inaccurate Personal Information that we have
collected about you. We may require you to provide documentation to support
your request. If you request that we
correct your Personal
Information, we may delete it instead, if deletion does not negatively impact you
or you consent to the deletion. We will not correct your Personal Information if it is necessary or
permissible for us not to correct it under the CCPA or other applicable law.
Right of Deletion
You
have the right to request that we delete Personal Information we have collected about you, subject to our legal rights
or obligations to retain such information.
Right to Opt-Out
You have the
right to choose to not to have your Personal Information sold or shared for
advertising purposes. You can also set
your web browser settings to disable certain tracking technologies. However,
disabling certain tracking technologies may affect the functionality of some
features on our Website.
Right to
Non-Discrimination for Exercise of Privacy Rights
If you choose to exercise your privacy rights, we will not discriminate
against you. We will not deny our products or services to you, charge you
different prices for such products or services or provide a different level or
quality of products or services unless the difference is related to the value
of your Personal
Information. We will not retaliate against you
for exercising your privacy rights under the CCPA.
How to
Exercise Your Rights
You can
exercise the rights list above or contact us with questions or concerns about our
privacy notices and practices, by emailing us at [email protected].
To verify your identity and fulfill your CCPA request, we will ask you
to provide some information, such as your legal name, postal address, date of
birth, phone number and email address. We may also call you to request
additional information, such as your Social Security Number, to further verify
your identity. We will not store or use this information for any other purpose.
We cannot
respond to your request or provide you with Personal Information if we cannot
verify your identity or authority to make the request and confirm the Personal
Information relates to you.
If you want to designate someone else to submit a CCPA request on your
behalf, you will need to give them written permission and verify your own
identity. We will also need the
authorized agent to submit proof that you have authorized them to act on your
behalf.
CCPA request forms are available at https://kingmakerscigars.com/ccpa-consumer-rights-request.
Limiting or Declining Your CCPA Request
We may limit or decline to
respond to your CCPA request if:
- Providing the information would
be impossible or require a disproportionate amount of effort, such as if
you are requesting information that we collected more than twelve (12) months
ago.
- We cannot verify your identity or
confirm that the Personal Information we have relates to you.
- We cannot verify that you have
the authority to make a request on behalf of another individual.
- There is an exception that
applies, such as if disclosing the information would harm the rights of
another individual.
- The Personal Information we have
collected about you is not subject to the CCPA’s right to know and/or
deletion right.