Last Updated: August 18, 2026
Vibetrail CCPA Consumer Rights Notice
This California Consumer Privacy Act (CCPA) Consumer Rights Notice supplements the information in the Vibetrail Privacy Policy and applies solely to residents of the State of California (‘consumers’ under CCPA).
1. Overview of Your CCPA Rights
As a California resident, you have the following rights under the CCPA:
- Right to Know (Categories and Specific Pieces): the right to request, up to twice in a 12-month period, that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting or selling it, the categories of third parties with whom we share it, and a list of disclosures of personal information made for a business purpose in the 12 months prior.
- Right to Delete: the right to request deletion of personal information we have collected from you (subject to exceptions).
- Right to Opt-Out of Sale/Sharing: the right to direct us to opt you out of the ‘sale’ or ‘sharing’ (as those terms are broadly defined under CCPA) of your personal information.
- Right to Correct: the right to request correction of inaccurate personal information we maintain about you.
- Right to Limit Use of Sensitive Personal Information: the right, where applicable, to limit the use or disclosure of sensitive personal information only to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer requesting them.
- Right to Non-Discrimination: the right not to receive discriminatory treatment by us for the exercise of any CCPA rights.
2. Personal Information We Collect, Use, and Disclose
The categories of personal information we may have collected about California consumers in the preceding 12 months are described below, along with sources, business/commercial purposes, and categories of third parties with whom it is shared or sold.
- Identifiers: name, alias, email address, postal address, account name, IP address, telephone number, device identifiers, order number.
Sources: directly from you; your device/browser; service providers.
Purposes: processing orders, customer support, account authentication, security, fraud prevention, marketing (with consent).
Shared/sold: shared with payment processors, shipping carriers, hosting providers, email marketing providers, analytics providers, ad partners. Not sold for monetary value outside these relationships. - Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): signature, credit/debit card number (via PCI-certified payment processor, not stored on our servers), purchase history.
Purposes: order processing, accounting, tax, returns and refunds.
Shared: payment processors, order management systems, accounting software. - Protected classification characteristics under California or federal law: we do not intentionally collect these except as voluntarily provided in customer support tickets (e.g., accessibility preferences), and we do not use them for profiling or discriminatory purposes.
- Commercial information: records of products purchased, shopping cart, wishlist, returns, exchanges, warranty claims, contact history.
Purposes: order fulfillment, product recommendations, fraud prevention, customer service.
Shared: CRM providers, customer support platforms, analytics tools. - Internet or other electronic network activity information: browsing history, search history, interactions with our website, mobile, email campaigns, social media pixels.
Sources: cookies, pixels, server logs, SDKs.
Purposes: analytics, measurement, attribution, personalization, ad targeting, site optimization.
Shared/sold: shared with Google Analytics, Meta, Pinterest, TikTok, Google Ads and similar ad partners for interest-based advertising and performance measurement. Under CCPA’s broad definition, this sharing for cross-context behavioral advertising may be considered a ‘share’ or ‘sale’, and you have the right to opt out. - Geolocation data: approximate location inferred from IP address (at city/region level); precise GPS location is not collected.
Purposes: sales tax calculation, shipping rate calculation, fraud detection, region-based content.
Shared: hosting providers, fraud prevention vendors. - Audio, electronic, visual or similar information: if you call or video-chat our support team, the call may be recorded for training and quality purposes; any such recordings are retained for no more than 6 months.
- Professional or employment-related information: not typically collected unless you apply for a job through a separate careers site; nothing collected here is used for consumer-facing purposes.
- Inferences drawn from any of the above: profile segments such as product interests, lifetime value tiers, high-intent advertising audiences, and preferred communication channels.
Purposes: personalization, marketing, and customer service.
3. Disclosure and Sale/Sharing in the Preceding 12 Months
We disclose personal information described above for business purposes to the following categories of third parties: payment processors; shipping carriers; hosting, CDN, CDN and cloud-service providers; e-commerce platform providers; email delivery and marketing automation providers; analytics platforms; ad networks; fraud prevention, chargeback dispute and identity verification providers; customer support tools; review management platforms; accounting, tax and legal professionals, and our successors (if any). We do not knowingly ‘sell’ personal information in exchange for money. However, some of the sharing for cross-context behavioral advertising described above may constitute a ‘sale’ or ‘sharing’ under CCPA, and we treat it as such for the purposes of your opt-out right.
4. Retention
We retain each category of personal information as described in our full Privacy Policy. Briefly: accounts (lifetime of account + up to 3 years); orders/taxes (7 years); support correspondence (up to 3 years); marketing contacts (as long as opted-in, plus 1 month); fraud logs (up to 7 years).
5. How to Exercise Your Rights
You, or an authorized agent acting on your behalf, may submit requests to Know, Delete, Correct, or Limit Sensitive Personal Information, or request opt-out of sale/share, via any of the following channels:
- Email: [email protected] (please include ‘CCPA Request’ in the subject line and specify the right(s) you are requesting to exercise).
- Website Opt-Out of Sale/Sharing: We also provide an opt-out preference signal on our website using industry-standard Global Privacy Control (GPC) when supported by your browser, and an opt-out link on our cookie banner where applicable.
We need to verify your identity before we can fulfill a request to Know, Delete, Correct, or Limit. Identity verification is generally done by matching at least two identifying pieces of information you provide against records we maintain in good faith. Authorized agents may make requests on your behalf by providing written proof of authorization together with a copy of your government-issued photo ID, and we may still require you to directly confirm with us that you authorized the agent.
6. Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of its receipt. If we require more time (up to an additional forty-five (45) calendar days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.
7. No Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not deny you goods or services, charge you different prices or rates for goods or services, provide you a different level or quality of goods or services, or suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services. Providing financial incentives in connection with the collection, retention, or sale of personal information is permitted by the CCPA and, where used, will be disclosed clearly and tied to a reasonable value. We do not currently operate a tiered or loyalty-style financial-incentive program in connection with personal information.
8. Appeals
If we decline to take action on your request, you may appeal the decision by emailing us again within forty-five (45) days after you receive notice of our decision, and we will re-review your request. If your appeal is denied, we will provide you with written notice explaining the reasons for the denial and how to further dispute the decision.
9. California ‘Do Not Track’ Disclosures
We generally treat Do Not Track signals that are supported by your browser as valid opt-out signals for analytics and sale/sharing for advertising purposes, to the extent we are able to detect them.
10. Minors Under 16
https://vibetrail.shop is not directed to minors under 16, and we do not knowingly sell or share the personal information of consumers under 16 years of age. If we learn that we have inadvertently collected personal information from a consumer under 16, we will take steps to delete such information promptly upon receipt of a parent or guardian’s request by email to [email protected].
11. Contact
For questions about this CCPA Notice or to exercise any of your California consumer rights, please contact [email protected].