CCPA Privacy Policy

CCPA – Privacy Notice

 

This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the main Privacy Policy and Messaging Service Privacy Policy of Harmless Harvest, Inc. and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice. If you are located elsewhere, please see our main Privacy Policy here and our Messaging Service Privacy Policy here.

 

Personal Information We May Collect

The following chart shows the categories of personal information that we have collected during the past twelve (12) months, the sources of such information, and the business or commercial purposes for which we may use such information. For all categories of personal information collected, we disclose data to our service providers and other third parties to help us accomplish the business purposes described below, as described in more detail in our main Privacy Policy here and our Messaging Service Privacy Policy here.

 

Please note that the categories and examples provided in the list below are those defined in the CCPA. This does not mean that all examples of that category of personal information were in fact collected by Us, but reflects our good faith belief to the best of our knowledge that some of that information from the applicable category may be and may have been collected. For example, certain categories of personal information would only be collected if You provided such personal information directly to Us.

 

●          Category A: Identifiers.

 

Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number, passport number, or other similar identifiers.

 

Collected: Yes.

 

●          Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

 

Examples: A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

 

Collected: Yes.

 

●          Category C: Protected classification characteristics under California or federal law.

 

Examples: Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

 

Collected: No.

 

●          Category D: Commercial information.

 

Examples: Records and history of products or services purchased or considered.

 

Collected: Yes.

 

●          Category E: Biometric information.

 

Examples: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

 

Collected: No.

 

●          Category F: Internet or other similar network activity.

 

Examples: Interaction with our Service or advertisement.

 

Collected: Yes.

 

●          Category G: Geolocation data.

 

Examples: Approximate physical location.

 

Collected: No.

 

●          Category H: Sensory data.

 

Examples: Audio, electronic, visual, thermal, olfactory, or similar information.

Collected: No.

 

●          Category I: Professional or employment-related information.

 

Examples: Current or past job history or performance evaluations.

 

Collected: Yes*.

 

* When you apply for employment with us or work with us. We use this information solely to process your application and, if you are hired, to manage your employment with us.

 

●          Category J: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

 

Examples: Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

 

Collected: No.

 

●          Category K: Inferences drawn from other personal information.

 

Examples: Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

 

Collected: No.

 

The categories of sources from which We collect personal information and Our business and commercial purposes for using personal information are as set forth in our main Privacy Policy here and our Messaging Service Privacy Policy here.

 

Your Rights and Choices

The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

 

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
• sales, identifying the personal information categories that each category of recipient purchased; and
• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

 Note that we do not “sell” personal information.

 

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

 

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by our contacting our customer service team at shop@harmlessharvest.com.

 

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

 

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

 

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

 

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time.

 

Contacting Us:

For privacy or security questions or for any questions regarding this privacy notice you may contact us using the information below.

 

Harmless Harvest
1814 Franklin Street, Suite 1000
Oakland, CA 94612
shop@harmlessharvest.com

 

This notice was last modified on May 13, 2025. Copyright 2025 Harmless Harvest, Inc. All Rights Reserved.