California Privacy Notice (CCPA)
Introduction and Scope
California residents have a defined set of rights with respect to their personal information under the California Consumer Privacy Act and the California Privacy Rights Act (together, the "CCPA"). This notice from Credoragrid tells you what we collect, how we use it, with whom we share it, and how to exercise each of those rights. It is a California-specific supplement to our broader Privacy Policy.
Categories of Personal Information Collected
The categories of personal information that Credoragrid has collected from California consumers during the past twelve months are: (a) identifiers such as IP addresses and email addresses; (b) personal-records information you submit voluntarily (name and message text in our forms); (c) commercial information (newsletter subscription history); (d) internet or other network activity information (browsing on our site, referring URL); (e) geolocation data of coarse precision; and (f) inferences drawn from the foregoing for the purpose of audience analytics. We do not knowingly collect biometric information, sensory data, professional or employment information, or education information.
Sources of Personal Information
We obtain the personal information described above directly from you (when you fill in a form or interact with the site), automatically from your device (when your browser requests pages and sends standard HTTP headers), and from a limited set of service providers that operate Credoragrid on our behalf (such as our hosting provider, edge security provider, and email-delivery vendor). We do not buy personal information from data brokers.
Business and Commercial Purposes
We use the personal information identified above for the following business or commercial purposes, in each case as described to you at the point of collection: providing the editorial product (rendering pages, sending newsletters you have opted into); responding to your messages and inquiries; operating, maintaining, securing, and improving the site; producing aggregated readership analytics; serving advertising in a non-personalized form by default and, where applicable, with your consent; detecting and responding to security incidents; and complying with our legal obligations.
Disclosure to Service Providers and Third Parties
We disclose personal information to service providers under written contract for the business purposes outlined above. These currently include: our cloud hosting provider; our content-delivery network and edge security provider; our email-delivery vendor (for newsletter distribution); our web-analytics provider; and our advertising network (where ads are displayed). Each service provider is contractually prohibited from retaining, using, or disclosing the personal information for any purpose other than the specific services it provides to us.
Sale and Sharing of Personal Information
Credoragrid does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA. In the preceding twelve (12) months we have not sold or shared the personal information of any California consumer, including any California consumer under the age of 16, and we have no actual knowledge of any such sale or sharing.
Sensitive Personal Information
Under the CCPA, certain categories of personal information are designated as "sensitive" — including precise geolocation, government IDs, financial account numbers, racial or ethnic origin, religious beliefs, and similar attributes. Credoragrid does not knowingly collect or process such categories for inferring characteristics about California consumers. Any voluntary submission of sensitive information through our forms is used solely for the workflow you initiated.
Your California Privacy Rights
California consumers have, under the CCPA, the following rights with respect to personal information held by Credoragrid: a right to know (categories collected, sources, purposes, categories of recipients); a right to access specific pieces; a right to correction; a right to deletion; a right to opt out of sale and sharing; a right to limit the use of sensitive personal information; and a right not to be retaliated against for exercising any of these rights.
How to Exercise Your Rights
Requests to exercise CCPA rights should be sent to Credoragrid via the Contact form or the email address listed on the Contact page. Because we hold only a limited amount of personal information about each consumer, verification is usually straightforward (we typically confirm access to a registered email). We aim to acknowledge requests within ten days and to substantively respond within the 45-day statutory deadline; a single 45-day extension is available when reasonably necessary and we will tell you if we need to use it.
California consumers may use an authorized agent to exercise their CCPA rights. To process a request submitted by an agent, Credoragrid requires the agent to provide signed written permission from the consumer or a power of attorney, plus reasonable verification of the consumer's identity. We may also contact the consumer to confirm that they have indeed authorized the agent to make the request.
Consumers Under 16 Years of Age
Credoragrid does not sell or share personal information about consumers under the age of 16 and does not have actual knowledge of collecting personal information of children under 13. If we ever decided to sell or share personal information about consumers between the ages of 13 and 16, we would do so only with the affirmative authorization of the consumer (opt-in) as required by the CCPA. Parents and guardians may submit deletion requests on behalf of their children via the Contact form.
Right to Non-Discrimination
Exercising your rights under the CCPA will not result in any adverse treatment by Credoragrid. We will not deny you the service, charge a different price, reduce the quality of the service, or otherwise penalize you for submitting a verifiable consumer request. The free editorial content we publish is available on the same terms to all visitors regardless of whether or how they exercise their CCPA rights.
Retention of Personal Information
We retain each category of personal information only for as long as needed to fulfill the purpose for which it was collected, plus any retention required by applicable law. Specifically: newsletter subscribers' email addresses are retained until you unsubscribe (and then moved to a minimal suppression list); contact-form messages are retained for up to 24 months; server access logs are retained for up to 90 days; aggregated analytics data is retained indefinitely in non-identifying form.
Changes to This Notice and How to Reach Us
We may update this California Privacy Notice from time to time to reflect changes in our practices or in applicable law. The current version is always the one published on this page, with the "Last updated" date indicating when it became effective. For questions about this notice, or to exercise any of your CCPA rights, please contact Credoragrid through the Contact form linked in the site footer — that is the canonical privacy-correspondence channel for California consumers.