California Privacy Notice (CCPA)
Introduction and Scope
Creditlumera provides this notice to California residents under the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"). It describes how we collect, use, and disclose personal information about California consumers and what rights you have with respect to that information. This notice supplements — and should be read together with — our general Privacy Policy.
Categories of Personal Information Collected
The categories of personal information that Creditlumera has collected from California consumers during the past twelve months are: (a) identifiers such as IP addresses and email addresses; (b) personal-records information you submit voluntarily (name and message text in our forms); (c) commercial information (newsletter subscription history); (d) internet or other network activity information (browsing on our site, referring URL); (e) geolocation data of coarse precision; and (f) inferences drawn from the foregoing for the purpose of audience analytics. We do not knowingly collect biometric information, sensory data, professional or employment information, or education information.
Sources of Personal Information
Creditlumera gathers personal information from three sources only: directly from you (forms you complete on the site); automatically through your device interactions (page requests and cookie state); and indirectly from the service providers we use to operate the website (each of which we contract with under a data-protection agreement). We do not buy or rent personal information from outside parties.
Business and Commercial Purposes
The personal information described in this notice is used by Creditlumera to operate, secure, and improve the service; to provide the editorial newsletter to subscribers; to answer messages submitted via our forms; to detect and prevent abuse; to produce aggregate audience reports; and to satisfy our legal obligations. We do not use personal information for any purpose materially different from those for which it was originally collected without notifying you.
Disclosure to Service Providers and Third Parties
We disclose personal information to service providers under written contract for the business purposes outlined above. These currently include: our cloud hosting provider; our content-delivery network and edge security provider; our email-delivery vendor (for newsletter distribution); our web-analytics provider; and our advertising network (where ads are displayed). Each service provider is contractually prohibited from retaining, using, or disclosing the personal information for any purpose other than the specific services it provides to us.
Sale and Sharing of Personal Information
Creditlumera does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.
Sensitive Personal Information
We do not collect or process sensitive personal information as defined by the CCPA for the purpose of inferring characteristics about you. To the extent any sensitive personal information is incidentally collected (for example, if you voluntarily disclose it in a message), we use that information only for the business purpose for which it was provided and not for any additional uses requiring further consent under the CCPA.
Your California Privacy Rights
The CCPA grants California consumers a defined set of rights with respect to their personal information. You have the right to know what we collect, to request a copy of the specific pieces we hold, to correct inaccurate data, to request deletion, to opt out of any sale or sharing (we do not engage in either), to limit the use and disclosure of sensitive personal information, and to receive equal service and pricing regardless of whether you exercise any of these rights.
How to Exercise Your Rights
Verifiable consumer requests under the CCPA can be submitted to Creditlumera through our Contact form or to the email address shown on the Contact page. To prevent fraudulent access requests, we will verify your identity using reasonable means tied to the data we hold — typically by confirming control of the email address tied to a subscription or by matching identifiers you provide against information already in our records. We respond to verified requests within the 45-day window required by the statute, with one 45-day extension where reasonably necessary.
California consumers may use an authorized agent to exercise their CCPA rights. To process a request submitted by an agent, Creditlumera requires the agent to provide signed written permission from the consumer or a power of attorney, plus reasonable verification of the consumer's identity. We may also contact the consumer to confirm that they have indeed authorized the agent to make the request.
Consumers Under 16 Years of Age
Creditlumera does not sell or share personal information about consumers under the age of 16 and does not have actual knowledge of collecting personal information of children under 13. If we ever decided to sell or share personal information about consumers between the ages of 13 and 16, we would do so only with the affirmative authorization of the consumer (opt-in) as required by the CCPA. Parents and guardians may submit deletion requests on behalf of their children via the Contact form.
Right to Non-Discrimination
Creditlumera will not discriminate against you for exercising any of your CCPA rights. We will not deny you our service, charge you a different price, provide a different level or quality of service, or retaliate against you in any other way because you submitted a request under the CCPA. Because the service is free and the same for all visitors, there is no financial incentive or differential pricing structure for you to opt into or out of.
Retention of Personal Information
Creditlumera follows a proportional retention policy. Newsletter records remain only while the subscription is active, with a minimal suppression entry kept post-unsubscribe to prevent accidental re-add. Contact-form records are retained for up to 24 months for follow-up and recordkeeping. Server logs are kept no longer than 90 days. Any aggregated analytics dataset that contains no identifiers is retained for long-term editorial planning.
Changes to This Notice and How to Reach Us
We may update this California Privacy Notice from time to time to reflect changes in our practices or in applicable law. The current version is always the one published on this page, with the "Last updated" date indicating when it became effective. For questions about this notice, or to exercise any of your CCPA rights, please contact Creditlumera through the Contact form linked in the site footer — that is the canonical privacy-correspondence channel for California consumers.