1.   Protecting Your Privacy. This privacy policy (this “Privacy Policy”) is provided by Arizona Mountain Vineyards  (“Company”, “us”, “we”, “our”, or words of like meaning). This Privacy Policy explains how we collect, use, process, and share personal information. We appreciate the trust you (“you”, “your”, “yourself”, and words of like meaning) place in us when you choose to access, visit, and use this website or the websites of our third-party trading partners and service providers (each, a “Third-Party Provider”), and we take that responsibility seriously. Please read this Privacy Policy carefully so that you understand how we collect, use, process, share, and protect your personal information. If you do not agree to our collection, use, processing, or sharing of your personal information or if you do not agree to the terms of this Privacy Policy, you may not provide us with any of your personal information. You may revoke your consent to our collection, use, processing, and sharing of your personal information at any time by notifying us of your revoked consent via email using the email form below.
  2. Changes to this Privacy Policy. Company reserves the right to change this Privacy Policy at any time and from time to time. You should review this Privacy Policy from time to time to ensure that you are aware of and accept any changes made. To obtain a current copy of this Privacy Policy, you may contact us via email at using the email form below.
  3. Personal Information and Privacy Law. In general, “personal information” is information about an identifiable individual, subject to more particular definitions or interpretations under applicable laws, including but not limited to The United States of America State and Federal, Québec, and Canadian privacy laws, including the Act Respecting the Protection of Personal Information in the Private Sector and the Personal Information Protection and Electronic Documents Act (“Privacy Law”), the Laws of the United States of America, and specifically the State of Arizona. Privacy Law gives consumers the right to limit the sharing of personal information. Privacy Law requires us to tell you how we collect, use, process, share, and protect your personal information. This Privacy Policy does not apply to any information that is not personal information as defined under Privacy Law.
  4. Your Consent. Company is often a marketer for third parties, including Third-Party Providers, seeking customers who may want more information on their products or services. In such cases, we forward your personal information to those third parties who can offer the product or services in which you expressed an interest, or we may send you marketing materials for other products or services where you control the decision in which to express interest in the product offered by choosing to submit your information, always in compliance with applicable Privacy Law. We collect, use, process, and share your personal information with your consent or as permitted or required by applicable Privacy Law. Your consent may be express or implied, depending on the circumstances and the sensitivity of the personal information in question. In most cases, your consent to the collection, use, processing, and sharing of your personal information may be implied by the fact that you have provided the information to access or use this website or the websites of Third-Party Providers or related products and services or where the collection, use, processing, and sharing of personal information is necessary for, or directly relates to, the provision of products and services by us or Third-Party Providers. If we ask for your personal information for a secondary reason (e.g., newsletter subscription or marketing messages), we will ask you directly for your expressed consent and provide you with an opportunity to withdraw your consent and unsubscribe. If you provide personal information about another person to us, we assume you have the consent of that individual to enable us to collect, use, process, or share their information as described in this Privacy Policy. If you choose to provide personal information to us, we assume that you consent to the collection, use, processing, and sharing of your personal information as outlined in this Privacy Policy. By accessing and using this website or by clicking on any of the links on this website or by accessing or using any of the websites of Third-Party Providers or by providing us or Third-Party Providers with personal information for any reason, including to complete a transaction or to verify your credit card, you consent to all such collection, use, processing, and sharing of your personal information by us and Third-Party Providers.
  5. Revoking Consent. If you do not consent to our collection, use, and disclosure of your personal information, please do not provide your personal information. If you change your mind about your consent and wish to revoke your consent, subject to applicable Privacy Law, you may revoke your consent at any time by notifying us of your revoked consent via email sent to withdraw consent by using the email form embedded herein. 
  6. We honor and respect all such notices. If you revoke your consent to certain uses of your personal information, we and Third-Party Providers may no longer be able to provide you with products and services. 
  7. Collection of Personal Information. We collect, use, process, share, and protect personal information in accordance with applicable Privacy Law as necessary to, or to enable Third-Party Providers to, offer and provide consumers with products, services, and information and generally to fulfill our responsibilities with respect to our business. When you are no longer our customer, we may continue to share your personal information as described in this Privacy Policy and subject to applicable Privacy Law. We collect personal information directly from you or through our interaction with you, including by way of this website. We may also obtain personal information about you from other sources such as: payment processors, fraud detection partners, third-party analytics tools. Subject to applicable Privacy Law, the types of personal information we collect from you and third parties may include:
    1. identifying information, such as your name, address, mailing address, postal or ZIP code, email address, telephone numbers, contact details and other information required to verify your identity and prevent fraud;
    2. certain demographic information, including age, date of birth, gender, employment status, employment information, income, and other similar information about you;
    3. billing and financial information, including credit and account information, payment method and payment information (such as debit or credit card number and related information), billing and shipping address, billing information, contact information (such as for receipts or order updates), credit reports, credit history, and credit scores;
    4. profile and account information, including contact, purchase, and preference information, information about any purchased or subscribed for products or services, any products or services in your online shopping cart or saved for future purchase, product or service review information, promotional information, and other information about any profile or account you may have with us or any Third-Party Providers;
    5. preference information, such as your contact and marketing preferences and product and services interests as well as purchase or order information, such as products or services you purchase or use;
    6. incidental information about you relating to your interaction with us or Third-Party Providers or your purchase of products or services, including returns, refunds, comments, opinions, evaluations, ratings, disputes, and other information we may collect in the course of providing products or services to you;
    7. information you share with us or destined to Third Party Providers you requested; 
    8. location information of your device that you use with this website or the websites of Third-Party Providers, if your device settings allow for the collection of location information; 
    9. device and browsing information including IP addresses, information about your phone, tablet, computer, or device, online browsing activity, unique device identifiers, cookie identifiers, device and browser settings and information, Internet service provider (ISP) information, information about when and how you access and use this website or the websites of Third-Party providers (such as the date and time of your visit or use), the websites you visit before coming and after leaving this website or the websites of Third-Party Providers, how you navigate and what you search for using this website or the websites of Third-Party Providers, the web pages and items and products and services you view using this website or the websites of Third-Party Providers, and the products and services you purchase;
    10. to the extent that you enter information into a web form located on this website, please note that we may utilize third party service providers, including ActiveProspect, and Jornaya, who record consumer activity and interaction on the Site, such as pages viewed and buttons clicked. Such third parties may use such data for advertising and marketing purposes. In addition, such tracking technologies track any entry of information into the website’s web form, including key strokes and click stream data, for the purpose of tracking website activity, and documenting and retaining a record of consumer consent. Through your decision to enter information, you consent to our use of such tracking technologies; and
    11. any other information that we or Third-Party Providers may collect with your consent or as permitted or required by Privacy Law.
  8. Cookies.
    1. We understand that your privacy is important to you and we are committed to being transparent about the technologies we use. When you visit this website, our systems track the pages you visit, the pages you download, the websites you came from and your browser type and software. It also notes your IP address. We use cookies, web beacons, pixels, clear gifs, and other similar tracking technologies (“Cookies”), which may be stored on or accessed from your device when you use or visit this website or any website or app that posts a link to this website. A Cookie is a small text file that can be stored on and accessed from your device when you visit this website. It takes up very little room on your system, enables us to collect information about how you use this website, and helps us estimate the number of persons who use our website and which areas of the website are most popular. The use of Cookies enables us to create a more customized experience for you. It allows this website to recognize your device as distinct from those of other users. Login Cookies eliminate the need for you to re-enter your username and password each time you return to our website. By continuing to access and use this website, you agree that Company can store and access Cookies.
    2. We use Cookies to, among other things, identify you and your interests, to remember your preferences, to enhance your user experience, for marketing purposes (including targeted ads), to track your use of this website, for analytical purposes. In addition, we may use Cookies to control access to certain content on this website, to protect this website, to prevent spam and fraud, for compliance purposes, and to process any requests that you make from us or third parties. We may use persistent Cookies to improve your experience of using this website. This includes recording your acceptance of our Cookie policy to remove the Cookie message which first appears when you use this website. Session Cookies are temporary and deleted from your machine when your web browser closes. We use session Cookies to help us track Internet usage. 
    3. To administer this website and for research purposes, we may also contract with third parties to track and analyze statistical usage and volume information from the users of this website. These third parties may use Cookies to help us improve the user experience on this website, manage associated content, and analyze how users navigate and utilize this website. We may contract with third parties to send emails to users who have provided us or such third parties with their contact information. To help measure and improve the effectiveness of such email communications, or to determine whether messages have been opened and links clicked on, such third parties may place Cookies on the devices of these users. 
    4. You may refuse to accept Cookies by activating or adjusting the appropriate setting of your Internet browser to reject the setting of all or some Cookies or alert you when a Cookie is placed on your device. However, if you refuse to accept Cookies or use your browser settings to block all Cookies, you may be unable to access or use this website or the websites of Third-Party Providers or related functionalities (in whole or part). If you want to remove previously stored Cookies, you can manually delete these Cookies at any time. However, this will not prevent this website or the websites of Third-Party Providers from placing further Cookies on your device unless you adjust your Internet browser setting so that it will refuse Cookies. Unless you have adjusted your browser setting so that it will refuse Cookies, our website and the websites of Third-Party Providers will issue Cookies when you direct your browser to them. 
    5. If you have any questions regarding this Cookie policy, please contact us via email using the email contact form below.
  9. Use and Sharing of Personal Information. We and Third-Party Providers use your personal information for our everyday business purposes, such as to process transactions you request, protect against fraud, or to respond to court orders or legal investigations, for our marketing purposes in order to offer products and services to you, for joint marketing with Third-Party Providers, to process the transaction that you are requesting, and for us and Third-Party Providers to market to you. Without limiting the generality of the foregoing, the following is a list of some of the ways we use, process, and share your personal information:
    1. to provide and improve this website and the websites of Third-Party Providers you requested, including the content and the products and services offered to you;
    2. to fulfill your orders, selections, and instructions, process your payments;
    3. to process, maintain, administer, and service any user account you may have with us or any Third-Party Provider;
    4. to verify the information you provide to ensure it is valid, and notify you of products and services that we or Third-Party Providers think you may like;
    5. to communicate with you regarding products and services you request and respond to your requests and enquiries;
    6. to administer billing databases and issue and collect accounts;
    7. to provide you with material and information regarding products and services and to inform you of offers and promotions;
    8. to personalize your experiences with us and Third-Party Providers, including remembering your interests and preferences, customizing product and service offerings, facilitating your interactions with third parties, tracking and categorizing your activity and interests (including by identifying the different devices you use), and enriching your experience on this website and the websites of Third-Party Providers;
    9. to develop and use knowledge management systems that contain personal information about you;
    10. to market and advertise to you, including sending you marketing and advertising communications and customizing the marketing and advertising that we show you;
    11. to understand how you use this website and the websites of Third-Party Providers and how to improve them;
    12. to manage and administer the business of Company and Third-Party Providers, including to protect you against error, operate and improve lawful business activities, maintain programs, accounts, and records, conduct research, determine your satisfaction with products and services, and detect and prevent fraud or misuse of any of the foregoing; 
    13. to defend or protect us, you, and third parties (including other Third-Party Providers) from harm or in legal proceedings, protect our and Third-Party Provider rights, protect our and Third-Party Provider security and property, respond to court orders, lawsuits, subpoenas, and government requests, address legal and regulatory compliance, and notify you of product or service or safety issues; 
    14. to compile and aggregate information collected by way of this website; and
    15. to take such actions and do such things as permitted or required by applicable law, including Privacy Law, or for purposes for which you otherwise provide your consent. 
  10. Sharing of Personal Information. Company and Third-Party Providers collect your personal information and may share the personal information collected about you to third parties in the following cases: where we are required or authorized to do so by applicable law or by order of a court of competent jurisdiction, where it is necessary to collect fees, for instance, to a financial institution or collection agent, to regulatory or governmental authorities, where you have instructed us to disclose your personal information to a third party for a designated purpose, where you provide your consent, or where permitted or required by applicable law. Where applicable, we will take steps to require that such third parties treat your personal information in accordance with this Privacy Policy and use, process, and share it only for the purposes for which it was collected or otherwise in accordance with Privacy Law. There are instances where we may collect, use, process, or share your personal information without your consent, including to comply with a subpoena or court order or to comply with the rules of court regarding the production of records.
  11. Transfer Outside the United States of America or Québec. In operating our business, we may need to transfer personal information outside of your country. If so, we ensure that all our contractors are up to at least the same standards as set out in applicable Privacy Law. In these circumstances, the governments, courts, law enforcement agencies or regulatory bodies of that jurisdiction may have access to your personal information under the laws of the foreign country. However, when we deal with a Third-Party Provider, we require that their privacy and security standards comply with (this Policy and) applicable United States of America State and Federal, Quebec, and Canadian privacy legislation.
  12. Security and Fraud. Company takes the security of your personal information seriously. Following industry standards, we take reasonable steps to help protect the confidentiality and security of personal information you share with us. We have implemented reasonable physical, organizational, and technological security measures to safeguard the personal information in our custody or control. These include safeguards to protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification, including computer safeguards (such are firewalls and secured files) and secured buildings. However, given that electronically submitted data is not one hundred percent (100%) secure, we make no warranties as to the security of any such personal information that you submit by way of the Internet, including by email, which you do at your own risk. We encourage you to take steps to help protect the confidentiality and security of your personal information, including the following:
    1. if you have a user account, reviewing your account periodically and immediately reporting any unexpected activity or unrecognized information;
    2. installing the latest security updates and anti-virus software on your computer to help prevent malware and viruses;
    3. using strong and complex passwords (i.e., with a minimum of seven alphanumeric case-sensitive characters);
    4. not using the same password on more than one website;
    5. not sharing your password with others;
    6. password-protecting your computer and mobile device; and
    7. signing out or logging off of website sessions so that your session is closed, especially when using a public computer.
  13. Links and Third-Party Provider Websites. For your convenience, Company and this website offer links from and to third-party websites. When you click on these links, they will direct you away from this website. Once you leave this website or are redirected to a third-party website, you are no longer governed by this Privacy Policy. YOU ACKNOWLEDGE AND AGREE THAT COMPANY WILL NOT BE RESPONSIBLE FOR AND EXPRESSLY DISCLAIMS ANY AND ALL LIABILITY FOR THE PERSONAL INFORMATION COLLECTION, USE, AND DISCLOSURE PRACTICES OF THIRD-PARTY SITES, INCLUDING THOSE OF THIRD-PARTY PROVIDERS, AND WE ENCOURAGE YOU TO READ THEIR PRIVACY STATEMENTS AND POLICIES BEFORE PROVIDING ANY PERSONAL INFORMATION ON THIRD-PARTY SITES.
  14. Third-Party Providers. Company or this website may transfer your personal information to Third-Party Providers that we work with to administer or provide products, services, or information to you. In general, Third-Party Providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to provide you with products and services you requested. We use reasonable measures to require such Third-Party Providers to use your personal information only to provide the products and services you request or to market to you. Third-Party Providers have their own privacy policies governing the personal information we are required to provide to them for your purchase-related transactions or for marketing purposes. For such Third-Party Providers, we recommend that you read their privacy policies so you understand the manner in which your personal information will be handled by them. In particular, please note that certain Third-Party Providers may be located in or have facilities that are located in a jurisdiction outside Canada or the United States of America. As a result, your personal information may be transferred, stored, or processed outside Canada or the United States of America in connection with the purposes described in this Privacy Policy. If you elect to proceed with a transaction that involves a Third-Party Provider, your personal information may become subject to the laws of the jurisdiction in which that Third-Party Provider or its facilities are located, and contractual or other measures we may use to protect your personal information will be subject to the legal requirements of the foreign jurisdictions where your personal information may be transferred, stored, or processed, including lawful requirements to disclose information to government authorities in those countries. For example, if you are located in Canada and your personal information is shared with a Third-Party Provider located in the United States, your personal information may be subject to disclosure under United States legislation, including the Patriot Act. 
  15. Your rights. Your principal rights under applicable Privacy Law may include the following:
    1. The right to access;
    2. The right to rectification;
    3. The right to erasure;
    4. The right to object to processing;
    5. The right to data portability;
    6. The right to complain to a supervisory authority; and
    7. The right to withdraw consent.

You have the right to confirmation as to whether or not we process your personal information and, where we do, access to the personal information, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal information concerned and the recipients of the personal information. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal information. The first copy will be provided at cost, but additional copies may be subject to a reasonable fee.

In some circumstances you have the right to the deletion of your personal information without undue delay. Those circumstances include: the personal information is no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable Privacy Law; the processing is for direct marketing purposes; and the personal information has been unlawfully processed. However, there are exclusions of the right to deletion. The general exclusions include where processing is necessary:

  1. For exercising the right of freedom of expression and information;
  2. For compliance with a legal obligation; or
  3. For the establishment, exercise or defense of legal claims.
  4. Accessing and correcting your information. It is important that the personal information Company holds about you is accurate and current. Please keep us informed if your personal information changes. If you want to review, verify, correct, or withdraw consent to the use of your personal information you may also send us using the email form below to request access to, correct, or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We may charge you a fee to access your personal information, however, we will notify you of any fee in advance. We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions. We will provide access to your personal information, subject to exceptions set out in applicable Privacy Law. Examples of such exceptions include:
    1. Information protected by solicitor-client privilege.
    2. Information that is part of a formal dispute resolution process.
    3. Information that is about another individual that would reveal their personal data or confidential commercial information.
    4. Information that is prohibitively expensive to provide.
  1. Contacting Us. If you have any questions about this Privacy Notice, or to revoke your consent to our collection, use, processing, and sharing of your personal information, you may notify us at any time of your revoked consent via email using our following form located on the home page.

Additional information for certain jurisdictions

Information for California residents

This policy is specific and applies to you If you are a California resident, under the meaning of Section 17014 of Title 18 of the Cal. Code of Regulations.

Under the California Consumer Privacy Act of 2018 (“CCPA”) (Cal. Civ. Code § 1798.100 et seq.), a consumer has the following rights:

(A) Notice at Collection: at or before the point of collection, the right to receive notice of our practices, including the categories of personal information and any sensitive personal information to be collected; the purposes for which such information is collected or used; whether such information is sold or shared; and the length of time that such information is retained. This information is found within this section.

(B) Right to Know What Personal Information is Collected & Right to Access Personal Information: The right to know what personal information the business has collected about the consumer, including the categories of personal information, categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer;

(C) Right to Delete: The right to request that a business delete personal information that the business has collected from the consumer, subject to certain exceptions;

(D) Right to Correct: The right to correct inaccurate personal information that a business maintains about a consumer;

(E) Right to Opt-Out of the Sale or Sharing of Personal Information: if the business sells or shares personal information, the right to opt-out of the sale or sharing of personal information by the business; 

(F) Right to Limit the Use or Disclosure of Sensitive Personal Information: if the business uses or discloses sensitive personal information for reasons other than those in § 7027(m), the right to limit the use or disclosure of such sensitive personal information; and 

(G) Right to No Discrimination: The right not to receive discriminatory treatment by the business for the exercise of CCPA privacy rights. 

Information regarding our collection, disclosure, and sale/sharing practices are detailed below, in addition to instructions on how to exercise your CCPA rights.

What Personal Information Do We Collect?

We have collected personal information about consumers within the preceding twelve (12) months in the following categories: 

Categories of (PI)Categories of Sources from which the Personal Information is collected from?Business Purpose Length of RetentionHow long do you retain such PI, or what is the criteria to determine how long the PI will be retained?
Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers), or information that identifies, relates to, describes, or is capable of being associated with, a particular individual

☐ not applicable (not collected)☒ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Characteristics of protected classifications under California or federal law.
Example:Gender		☐ not applicable (not collected)☐ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)
Examples:– Products or services purchased, obtained, considered, or other purchasing or consuming histories– Personal and online interests– Car Make, Model, Year, Mileage – Other information you volunteer to the website or through other means of communication, such as responses, registrations, surveys, reviews, comments, confirmations, emails, postings, messages, telephone calls, written correspondence or other electronic submissions and communications sent by you to the website		☐ not applicable (not collected)☒ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Biometric information
Examples:– Iris or retina image;– Fingerprint;– Face image;– Voice recordings;– Sleep, health, or exercise data that contains identifying info		☒ not applicable (not collected)☐ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement)
Examples:– Domain server– Mobile and/or operating device identifier– Clickstream data;– Computer operating system;– Source URL– Referring website;– Exit page;– Web browser type and version;– Browsing history;– Search history;– Pages viewed;– Internet service provider (ISP);– Date and time stamp;– Mobile carrier– Time spent on Site– Behavioral data (opens, clicks)– User-specific and aggregate information on areas of the website used		☐ not applicable (not collected)☒ Consumer directly;☒ Advertising networks;☐ ISPs;☒ Data analytics providers;☐ Gov’t entities;☒ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Geolocation data
Examples:– Geographic region based on web browser type– Time zone;– Area code and zip code associated with web server		☐ not applicable (not collected)☒ Consumer directly;☐ Advertising networks;☒ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Audio, electronic, visual, thermal, olfactory, or similar information (sensory data)☒ not applicable (not collected)☐ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Professional or employment-related information
Examples:– Occupation– Industry– Salary range– Employment status– Employment history		☐ not applicable (not collected)☒ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Education information
Example:– Education level		☒ not applicable (not collected)☐ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Inferences drawn from any of the information identified above to create a profile about a consumer reflecting their preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes
Example:– Inference about an individual’s propensity to respond to a particular email advertisement		☐ not applicable (not collected)☐ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Sensitive personal information 
Examples:– SSN– Driver’s license no.;– State id card;– Passport no.;– Consumer’s login, financial account, debit card, or credit card number in combination with any required security or access code;– Consumer’s precise geolocation;– Consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership;– Genetic data;– Biometric data for the purpose of uniquely identifying a consumer;– Data re sex life or sexual orientation		☐ not applicable (not collected)☒ Consumer directly;☐ Advertising networks;☐ ISPs;☐ Data analytics providers;☐ Gov’t entities;☐ Operating systems and platforms;☐ Social networks;☐ Data brokers;☐ Other third parties? (detail who those are…)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 

What Personal Information Do We Disclose?

We have disclosed the following categories of personal information for a business purpose to the following categories of third parties in the preceding twelve (12) months:

Categories of Personal Information (PI)Categories of Third Parties to Whom Such PI is Sold or Shared(Check applicable boxes)Specific Business or Commercial Purpose for Sale or Sharing(Check applicable boxes)
Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers), or information that identifies, relates to, describes, or is capable of being associated with, a particular individual☐ not applicable (not sold or shared)☒ direct lead buyers;☒ email marketers/email marketing partners;☒ email service providers;☐ offline marketing partners;☒ advertising networks;☒ payment processors;☐ data hygiene companies;☐ ISPs;☒ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Characteristics of protected classifications under California or federal law.☐ not applicable (not sold or shared)☒ direct lead buyers;☒ email marketers/email marketing partners;☒ email service providers;☐ offline marketing partners;☒ advertising networks;☒ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)☐ not applicable (not sold or shared)☒ direct lead buyers;☒ email marketers/email marketing partners;☒ email service providers;☐ offline marketing partners;☒ advertising networks;☒ payment processors;☐ data hygiene companies;☐ ISPs;☒ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Biometric information☒ not applicable (not sold or shared)☐ direct lead buyers;☐ email marketers/email marketing partners;☐ email service providers;☐ offline marketing partners;☐ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement)☐ not applicable (not sold or shared)☒ direct lead buyers;☒ email marketers/email marketing partners;☒ email service providers;☐ offline marketing partners;☒ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☒ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Geolocation data☐ not applicable (not sold or shared)☒ direct lead buyers;☒ email marketers/email marketing partners;☒ email service providers;☐ offline marketing partners;☒ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☒ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Audio, electronic, visual, thermal, olfactory, or similar information☒ not applicable (not sold or shared)☐ direct lead buyers;☐ email marketers/email marketing partners;☐ email service providers;☐ offline marketing partners;☐ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Professional or employment-related information☐ not applicable (not sold or shared)☐ direct lead buyers;☐ email marketers/email marketing partners;☐ email service providers;☐ offline marketing partners;☐ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Education information☐ not applicable (not sold or shared)☐ direct lead buyers;☐ email marketers/email marketing partners;☐ email service providers;☐ offline marketing partners;☐ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Inferences drawn from any of the above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, behavior, etc.☐ not applicable (not sold or shared)☐ direct lead buyers;☐ email marketers/email marketing partners;☐ email service providers;☐ offline marketing partners;☐ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☐Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☐ Helping to ensure security and integrity;
☐ Debugging to identify and repair errors that impair existing intended functionality.
☐ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☐ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☐ Undertaking internal research for technological development and demonstration.☐ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 
Sensitive personal information
Examples:– SSN– Driver’s license no.;– State id card;– Passport no.;– Consumer’s login, financial account, debit card, or credit card number in combination with any required security or access code;– Consumer’s precise geolocation;– Consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership;– Genetic data;– Biometric data for the purpose of uniquely identifying a consumer;– Data re sex life or sexual orientation		☐ not applicable (not sold or shared)☒ direct lead buyers;☐ email marketers/email marketing partners;☐ email service providers;☐ offline marketing partners;☐ advertising networks;☐ payment processors;☐ data hygiene companies;☐ ISPs;☐ data analytics providers;☐ gov’t entities;☐ operating systems and platforms;☐ social networks;☐ data brokers; ☐ acquirer of assets;☐ others? (detail)☒Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards
☒ Helping to ensure security and integrity;
☒ Debugging to identify and repair errors that impair existing intended functionality.
☒ Short-term, transient use, provided that the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including, but not limited to, the contextual customization of ads shown as part of the same interaction.☒ Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider.☒ Undertaking internal research for technological development and demonstration.☒ Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. 

What Personal Information Do We Sell or Share 

We have not sold or shared any personal information for a business purpose in the preceding 12 months. 

We do not have any actual knowledge of the sale or sharing of personal information of consumers under 16 years of age. 

Notice of Right to Limit Use and Disclosure of Sensitive Personal Information 

You have the right to limit our use and disclosure of your sensitive personal information. You may submit a request by emailing us using the email form embedded herein. To the extent that you have opted-out and then initiate a transaction or attempt to use our products or services requiring the sale or sharing of your personal information, we may inform you that the transaction, product, or service requires the sale of our personal information and provide instructions on how you can consent to the sale or sharing of your personal information.

How to Submit a Request Under the CCPA

To submit a request to know, request to delete, and/or request to correct, you may email us using the email form embedded herein. To process your request, we may require that you submit the following information in conjunction with your request: your first name, last name, a California address, email address, and phone number. The information which you provide will be used to verify your request and to attempt to identify you within our data records. The information which you submit in conjunction with your request to know will be used for the express purposes of verification and providing you with responsive information to your request, if required. Please note that we utilize a two-step process for requests to delete, whereby you first submit your request to delete, and second, you separately confirm that you want your personal information deleted. The CCPA permits requests to know regarding collection and sale or sharing from the same consumer no more than twice in a twelve (12) month period. 

How an Authorized Agent Can Make a Request Under the CCPA

If you elect to use an authorized agent to exercise your right to submit a request to know, request to delete, and/or request to correct, before processing the request, we require the purported authorized agent to provide proof of your signed permission to submit the request (unless there is a power of attorney in place pursuant to Probate Code §§ 4121-4130). We also require that you directly verify your own identity with us, and directly confirm with us that you provided the authorized agent permission to submit the request on your behalf. The information submitted will not be used for any purposes other than to verify the request, fulfill the request, and fraud prevention.

Updates

We may revise this section from time to time as implementing regulations further develop and come into effect and we are able to provide you with better information on your CCPA rights and how to exercise them.

Notice concerning Do Not Track

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our websites for third-party purposes, and that is why we provide the variety of opt-out mechanisms listed above, and in our Privacy Policy. Some web browsers offer users a “Do Not Track” privacy preference setting in the web browser. We do not currently recognize or respond to browser-initiated Do Not Track signals. 

California “Shine the Light” disclosure

Under the “Shine the Light Law” (Cal. Civ. Code § 1798.83), California residents can exercise their cost-free option to opt-out of our sharing of their information with third parties for third parties’ direct marketing purposes. To do so, you may contact us via email us using the email form embedded herein.

If you have any questions or concerns regarding your California privacy rights, or our general privacy policy or practices, you may contact us via the email form embedded herein or by postal mail at Arizona Mountain Vineyards,  .  Further, if you have a disability which interferes with your ability to access this policy, we can make accommodations to present the policy in an alternative format, to assist you.  If you would like to receive this information in another format that is accessible to your needs (for example: audio, large print, etc.) please contact us.

Information for Connecticut residents

Pursuant to the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), the above identified categories of personal data are processed, for the above identified purposes. The categories of personal data that are shared with third parties are also noted above, as are the categories of such third parties. 

CT residents have the following rights under the CTDPA:

– Right to confirmation and access: Confirm whether or not a controller is processing the consumer’s personal data and access such data (unless confirmation or access would require the controller to reveal a trade secret);

– Right to correct: may correct inaccuracies in the consumer’s personal data;

– Right to delete: may delete personal data provided by, or obtained about, the consumer;

– Right to data portability: may obtain a copy in a portable and, to the extent technically feasible, readily usable format that allows consumer to transmit data to another controller without hindrance, where processing is carried out by automated means, provided that controller shall not be required to reveal any trade secret; and

– Right to opt-out of certain data processing.

Connecticut residents that wish to exercise any of the above rights under the Act Concerning Personal Data Privacy and Online Monitoring may submit a request that specifies the right(s) they wish to invoke by contacting us using the email form embedded herein You are permitted to designate an authorized agent. Information provided in response to a consumer request shall be provided free of charge, once per consumer during any twelve-month period. To the extent that we decline to act upon your request, you may appeal by contacting us using the email form embedded herein.

Information for Nevada residents

Under Nevada law, certain Nevada consumers may opt out of the sale of “personally identifiable information” for “monetary consideration” (as such terms are defined under Nevada law) to a person for that person to license or sell such information to others. If you are a Nevada resident who has purchased goods or services from our Fulfillment Partners, you may submit a request to opt out of any future sales under Nevada law by contacting the 3rd party Fulfillment Partner you purchased the goods from.  Please note they may take reasonable steps to verify your identity and the authenticity of the request.

Texas Residents Privacy Notice

Effective as of July 1, 2024: Pursuant to the Texas Data Privacy and Security Act (Texas Bus. & Com. Code § 541.001 et seq.), the above identified categories of personal data are processed, for the above identified purposes. The categories of personal data that are shared with third parties are also noted above, as are the categories of such third parties. 

Texas residents have the following rights under the Texas Data Privacy and Security Act:

– Right to access: may request confirmation on whether we process the consumer’s personal data and obtain access such personal data;

– Right to correct: may correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data and the purposes of the processing of the consumer’s personal data;

– Right to delete: may delete personal data;

– Right to data portability: if the data is available in a digital format, may obtain a copy in a portable and, to the extent technically feasible, readily usable format; and

– Right to opt-out of certain data processing: may opt-out of the processing of personal data for targeted advertising, sale of personal data, or profiling.

Texas residents that wish to exercise any of the above rights under the Texas Data Privacy and Security Act may submit a request that specifies the right(s) they wish to invoke by contacting us at using the email form embedded herein. You are permitted to designate an authorized agent. Please note that we are not required to act on an opt-out request from an authorized agent unless we are able to verify, with commercially reasonable effort, the identity of the consumer and the authorized agent’s authority to act on the consumer’s behalf. Information provided in response to a consumer request shall be provided free of charge, twice per consumer on an annual basis. To the extent that we decline to act upon your request, you may appeal by contacting us consent via email using the email contact form embedded herein. 


Contacting Us. If you have any questions about this Privacy Notice or this website, please email our Privacy Officer to revoke your consent to our collection, use, processing, and sharing of your personal information you may have submitted. You may notify us at any time of your revoked consent via email using the form on the home page or by postal mail to: Arizona Mountain Vineyards, P.O. Box 31274, Mesa AZ, 85275-1274