Template — review with counsel before publishing. These documents are a starting point that covers common SaaS / commerce requirements (Stripe Connect platform, GDPR/CCPA basics). Have a lawyer tailor them to your entity, jurisdiction, and product before going live.

Do Not Sell or Share My Personal Information

Effective 2026-05-17

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the right to opt out of the “sale” or “sharing” of their Personal Information.

We do not sell or share personal information

Preview Coffee Co. does not sell Personal Information for monetary consideration and does not share Personal Information for cross-context behavioral advertising. There is no opt-out to exercise because there is no selling or sharing taking place.

We do disclose Personal Information to the service providers and subprocessors listed in our Data Processing Agreement and Subprocessor list. Those disclosures are bound by contract to the limited purposes described in our Privacy Policy and are not “sales” or “sharing” under CCPA / CPRA definitions.

Other California rights you can exercise

  • Right to know. Request a list of the categories of Personal Information we have collected, the sources, the purposes, and the categories of third parties we disclose to.
  • Right to access. Request a portable copy of the specific Personal Information we hold about you. Self-service for storefront shoppers at /account/privacy; otherwise email below.
  • Right to delete. Request deletion of your Personal Information, subject to legal retention exceptions (tax, fraud, audit). Self-service at /account/delete.
  • Right to correct. Update inaccurate Personal Information via /account/profile or by emailing us.
  • Right to limit use of sensitive Personal Information. We do not use Sensitive Personal Information for purposes beyond those listed in the Privacy Policy.
  • Right to non-discrimination. We will not deny service, charge different prices, or provide a lesser quality of service in response to any of the above requests.

How to submit a request

Use the self-service controls linked above where available. For anything else, email privacy@example.com with “CCPA request” in the subject line and enough detail to identify the records (e.g., the email on your account).

We respond within 45 days. We may extend by 45 additional days with notice, as the statute permits. We will not disclose Personal Information in response to a request unless we can reasonably verify the requester's identity.

Authorized agents

You may use an authorized agent to submit requests on your behalf. We require written proof of the agent's authorization and may ask you to verify your identity directly before we act on the request.

Global Privacy Control

Our storefronts honor the Global Privacy Control signal as an opt-out preference signal where applicable. When your browser sends GPC, we treat it as a request to limit the use of Personal Information consistent with CPRA § 1798.135(b).