This Privacy Policy explains how CaliGlassCo ("we," "us," "our") collects, uses, discloses, and protects personal information when you visit caliglassco.com, make a purchase, contact us, or otherwise interact with us (collectively, the "Services").

By using the Services, you acknowledge this Policy. If you do not agree, please do not use the Services.

Our store is hosted on Shopify, which provides the ecommerce platform through which we sell to you. Your data is stored through Shopify's data storage, databases, and application on secure servers behind a firewall.

Information you give us:

Information collected automatically: device and browser information (IP address, browser type and version, operating system, device identifiers, time zone, language), usage information (pages and products viewed, referring URL, on-site searches, add-to-cart events, session duration), and data from cookies, pixels, and similar technologies.

Information from third parties: order and fraud-screening data from Shopify and our payment processors; age-verification results from verification vendors; delivery and signature status from carriers; engagement data from email, SMS, and advertising platforms.

Sensitive personal information. We do not ask for and do not knowingly collect Social Security numbers, precise geolocation, biometric data, health information, or information about your race, religion, or union membership. Where we must verify identity for a regulated sale, we collect the minimum the law requires and retain it only as long as required. We do not ask about, infer, record, or profile your use of any controlled substance, and you should not send us that information.

• Process, fulfill, insure, ship, and track your orders, and handle returns, damage claims, and refunds
• Verify that you are 21 or older and that we may lawfully sell and deliver to your address
• Comply with federal, state, and local law governing the sale and delivery of the products we sell, including age-verification recordkeeping and tax obligations
• Communicate with you about orders, shipping, and customer service
• Detect, prevent, and investigate fraud, chargebacks, and unauthorized transactions
• Send marketing communications you have opted into, and measure their effectiveness
• Personalize your experience, including product recommendations
• Analyze and improve our site, merchandising, inventory, and customer experience
• Enforce our Terms of Service and protect our rights, property, and safety, and those of our customers

We use cookies and similar technologies to operate the store, remember your cart and preferences, gate age verification, measure traffic, and — where permitted — deliver relevant advertising.

Categories:

• Strictly necessary — cart, checkout, login, age gate, security, fraud prevention. Cannot be disabled.
• Functional — preferences, language, recently viewed items.
• Analytics — how visitors find and use the site.
• Advertising and retargeting — where enabled. Note that major ad platforms restrict advertising in our product category, so our use of these technologies may be limited.

Your choices: manage cookies through our cookie banner (where displayed), your browser settings, or the "Do Not Sell or Share My Personal Information" link on our site. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/sharing. Blocking strictly necessary cookies will break checkout and the age gate.

You may also opt out of interest-based advertising at optout.aboutads.info and optout.networkadvertising.org.

We disclose personal information to these categories of recipients for the business purposes above:

• Ecommerce platform: Shopify
• Payment processors: the processors and wallets offered at checkout. Their own privacy policies govern their handling of your payment data.
• Shipping and logistics: USPS, UPS, FedEx, and shipping-insurance and tracking providers
• Age and identity verification vendors
• Marketing and communications: email and SMS platforms, review platforms
• Analytics and advertising providers
• Fraud prevention providers
• Professional advisors: accountants, attorneys, auditors
• Government agencies and regulators, as described in Section 6
• Law enforcement or courts, where required by law, subpoena, or valid legal process, or where necessary to protect our rights or the safety of others
• Business transfers: an acquirer, successor, or assignee in a merger, acquisition, financing, or sale of assets

We require service providers to use personal information only to perform services for us.

We have never sold or shared the personal information of anyone we know to be under 16.

Because of the products we sell, we are required to confirm that every customer is 21 or older, and to be able to demonstrate that we did so.

• We retain a record of your age attestation, the result of any third-party age check, and the adult-signature confirmation captured by the carrier at delivery.
• We do not retain images or scans of government-issued identification. Where ID is checked — at delivery by the carrier, or at in-store pickup — it is inspected visually and not copied, photographed, or stored.
• These records are retained for as long as applicable law requires and are used only to demonstrate compliance. A deletion request cannot remove records we are legally required to keep.

We do not sell cigarettes, smokeless tobacco, roll-your-own tobacco, or electronic nicotine delivery systems, and we are therefore not a "delivery seller" subject to the registration and monthly state shipment-reporting obligations that apply to sellers of those products. We do not report your purchases to any state tax authority.

If a law, subpoena, or valid legal process requires us to disclose information to a government agency, we disclose only what is required, only to the agency named, and we will notify you where we are legally permitted to do so.

Email: If you subscribe or purchase, we may send promotional email. Unsubscribe via the link in any message or by emailing us. You will still receive transactional order messages.

SMS: If you opt in, you consent to recurring automated marketing texts at the number provided. Consent is not a condition of purchase. Message and data rates may apply. Reply STOP to cancel or HELP for help.

• Order and transaction records: at least 7 years (tax and accounting)
• Age verification records: as long as applicable law requires
• Account information: while active, plus a reasonable period after
• Marketing data: until you unsubscribe, plus a short suppression period so we can honor your opt-out
• Analytics and advertising data: per each provider's retention settings

We then delete or de-identify it.

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including TLS encryption in transit, PCI-DSS-compliant payment processing, access controls, and limiting staff access to what is necessary. No method of transmission or storage is 100% secure and we cannot guarantee absolute security. Use a strong, unique password and tell us immediately about any unauthorized account access.

Depending on where you live, you may have the right to:

• Know / access the categories and specific pieces of personal information we collected, the sources, our purposes, and the categories of recipients
• Delete personal information we collected from you, subject to legal exceptions — we must retain transaction, tax, and age-verification records
• Correct inaccurate personal information
• Opt out of sale or sharing of personal information and of targeted advertising
• Limit use of sensitive personal information
• Portability — a copy in a portable format
• Non-discrimination — we will not deny service, charge different prices, or degrade service because you exercised your rights
• Appeal a denial, where your state provides that right

California residents hold these rights under the CCPA as amended by the CPRA. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have substantially similar rights under their own statutes.

How to exercise them: email support@caliglassco.com with subject line Privacy Request, or use the privacy request form on our site. We verify identity by matching information you provide against our records, typically your email address and order details. We respond within 45 days and may extend once by 45 days with notice.

Authorized agents may submit on your behalf with written, signed permission; we may still verify your identity directly.

Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information about disclosures of personal information to third parties for direct marketing purposes.

Our Services are for adults 21 and older. We do not knowingly collect personal information from minors and we do not market to them. If you believe a minor has provided us information or placed an order, contact us immediately and we will cancel the order and delete the information.

We may link to third-party sites, artist pages, or social platforms. We are not responsible for their privacy practices. Review their policies before providing information.

We operate in the United States and ship only within the U.S. If you access the site from elsewhere, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your jurisdiction.

There is no uniform industry standard for responding to browser "Do Not Track" signals, so we do not respond to them. We do honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing.

We may update this Policy to reflect changes in our practices or the law. We will revise the "Last updated" date and, for material changes, give more prominent notice. Continued use after changes take effect means you accept the updated Policy.

CaliGlassCo
Attn: Privacy
9150 Alcosta Blvd, Ste E, San Ramon, CA 94583
Email: support@caliglassco.com
Phone: (925) 587-8178

If you have a complaint we have not resolved, California residents may contact the California Privacy Protection Agency or the California Attorney General's office.